Method, apparatus, electronic device and storage medium of remote attestation

A method of remote attestation, applied to a first trusted execution environment, the method comprising:

• obtaining a first file for a first application, the first file being used to deploy the first application in the first trusted execution environment, and the first file comprising a read-only target file system;
• obtaining a first metric value for the target file system;
• loading the first file, and writing the first metric value into a command line for booting a kernel, and booting a kernel in the first file based on the command line, to deploy the first application in the first trusted execution environment, wherein booting, based on the command line, the kernel in the first file comprises:
• verifying the first metric value by the kernel;
• and
• measuring the kernel in accordance with the first metric value being correct;
• and
• measuring the kernel and other components to obtain a second metric value, and performing remote attestation on the first application based on the second metric value, wherein verifying the first metric value by the kernel comprises:
• during a process of booting the kernel in the first file, measuring the target file system in the first file to obtain a third metric value;
• determining whether the third metric value is the same as the first metric value;
• and
• determining that the first metric value is correct in accordance with the third metric value being the same as the first metric value.

A method of remote attestation, applied to a first trusted execution environment, the method comprising:

• obtaining a first file for a first application, the first file being used to deploy the first application in the first trusted execution environment, and the first file comprising a read-only target file system;
• obtaining a first metric value for the target file system;
• loading the first file, and writing the first metric value into a command line for booting a kernel, and booting a kernel in the first file based on the command line, to deploy the first application in the first trusted execution environment;
• and
• measuring the kernel and other components to obtain a second metric value, and performing remote attestation on the first application based on the second metric value;
• obtaining an encryption block file;
• interacting with a provider of the encryption block file by using an encryption storage service in the target file system to obtain a decryption key of the encryption block file;
• decrypting the encryption block file based on the decryption key to obtain a decryption block file;
• and
• mounting the decryption block file in a system of the first trusted execution environment, and responding to a write request for the first application based on the decryption block file.