Remote attestation method and related device

An apparatus, comprising at least one processor, wherein the at least one processor is coupled to a memory, and the memory is configured to store a program or instructions;

• and
• the at least one processor is configured to execute the program or instructions to enable the apparatus to:
• sending, by a second apparatus, request information, wherein the request information is for requesting a remote attestation report, and the remote attestation report is for remote attestation of a first apparatus;
• and
• receiving, by the second apparatus, second information, wherein the second information indicates a verification result of the remote attestation report, the verification result is obtained by performing verification based on verification information, and the verification information is obtained by processing the remote attestation report based on a symmetric key of a subscriber identity module SIM in the first apparatus.

A non-transitory computer-readable storage medium, wherein the medium stores instructions;

• and
• when the instructions are executed by a computer, the computer is caused to:
• receiving, by a first apparatus, request information, wherein the request information is for requesting a remote attestation report, and the remote attestation report is for remote attestation of the first apparatus;
• and
• sending, by the first apparatus, first information, wherein the first information comprises the remote attestation report and verification information, the verification information is for verifying the remote attestation report, and the verification information is obtained by processing the remote attestation report based on a symmetric key of a subscriber identity module (SIM) in the first apparatus;
• or
• sending, by a second apparatus, request information, wherein the request information is for requesting a remote attestation report, and the remote attestation report is for remote attestation of a first apparatus;
• and
• receiving, by the second apparatus, second information, wherein the second information indicates a verification result of the remote attestation report, the verification result is obtained by performing verification based on verification information, and the verification information is obtained by processing the remote attestation report based on a symmetric key of a subscriber identity module SIM in the first apparatus;
• or
• sending, by a second apparatus, request information, wherein the request information is for requesting a remote attestation report, and the remote attestation report is for remote attestation of a first apparatus;
• receiving, by the second apparatus, first information, wherein the first information comprises the remote attestation report and verification information, and the verification information is obtained by processing the remote attestation report based on a symmetric key of a subscriber identity module SIM in the first apparatus;
• and
• verifying, by the second apparatus, the verification information to obtain a verification result of the remote attestation report;
• or
• receiving, by a third apparatus, first information, wherein the first information comprises the remote attestation report and verification information, the verification information is for verifying the remote attestation report, and the verification information is obtained by processing the remote attestation report based on a symmetric key of a subscriber identity module SIM in the first apparatus;
• and
• sending, by the third apparatus, second information, wherein the second information indicates a verification result of the remote attestation report, and the verification result is obtained by performing verification based on the verification information;
• or
• receiving, by a fourth apparatus, third information;
• and
• sending, by the fourth apparatus, fourth information, wherein
• the third information is for requesting a symmetric key of a subscriber identity module SIM, the fourth information indicates the symmetric key of the SIM, the symmetric key of the SIM is for processing a remote attestation report to obtain verification information, and the verification information is for verifying the remote attestation report;
• or
• the third information is for requesting a first key, the fourth information indicates the first key, the third information comprises a random number, the first key is generated based on a symmetric key of a SIM and the random number, the first key is for processing a remote attestation report to obtain verification information, and the verification information is for verifying the remote attestation report.