Methods and systems for activating measurement based on a trusted card
AssigneeAlibaba Group Holding Limited
InventorsYingfang Fu, Peng Xiao
Life of this patent
Estimating the term…
Abstract
Methods and systems for activating measurement based on a trusted card are provided. The method includes loading, by a security chip, a trusted metric root for a metric object to a host processor, wherein the trusted metric root is an encrypted metric root; receiving, by the security chip, a processing result after the host processor performs asymmetric encryption and decryption processing on the trusted metric root, wherein the processing result includes metric object data encrypted by a public key; decrypting, by the security chip, the metric object data encrypted by the public key; and determining, by the security chip, integrity of the metric object by performing a comparison on decrypted metric object data.
Claims20
A method comprising:
- loading, by a security chip, a trusted metric root for a metric object to a host processor, wherein the trusted metric root is an encrypted metric root;
- receiving, by the security chip, a processing result after the host processor performs asymmetric encryption and decryption processing on the trusted metric root, wherein the processing result includes metric object data encrypted by a public key;
- decrypting, by the security chip, the metric object data encrypted by the public key;
- and
- determining, by the security chip, integrity of the metric object by performing a comparison on decrypted metric object data.
A method comprising:
- receiving, by a host processor, a trusted metric root of a metric object loaded by a security chip, wherein the trusted metric root is an encrypted metric root;
- performing, by the host processor, asymmetric decryption processing on the trusted metric root to obtain a processing result, wherein the processing result includes metric object data encrypted by a public key;
- and
- transmitting, by the host processor, the processing result to the security chip to decrypt the metric object data encrypted by a public key and determine integrity of the metric object by comparing decrypted metric object data to a metric reference value.
A system comprising:
- a security chip configured to store a trusted metric root of a metric object, wherein the trusted metric root is an encrypted metric root;
- and
- a host processor configured to
- receive the trusted metric root of the metric object loaded by the security chip;
- and
- perform an asymmetric encryption and decryption process on the trusted metric root to obtain a processing result, wherein the processing result includes metric object data encrypted by a public key,
- wherein the security chip is further configured to
- decrypt the metric object data encrypted using the public key;
- and
- determine integrity of the metric object by performing a comparison on decrypted metric object data.
A computer-readable storage medium storing computer-readable instructions executable by one or more processors, that when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- loading, by a security chip, a trusted metric root for a metric object to the host processor, wherein the trusted metric root is an encrypted metric root;
- receiving, by the security chip, a processing result after the host processor performs asymmetric encryption and decryption processing on the trusted metric root, wherein the processing result includes metric object data encrypted by a public key;
- decrypting, by the security chip, the metric object data encrypted by the public key;
- and
- determining, by the security chip, integrity of the metric object by performing a comparison on decrypted metric object data.
Dependencies are inferred from the claim text.