Communication method integrated with trustworthiness measurement and apparatus
A communication method integrated with trustworthiness measurement, including: a first network element sends a first data packet, where the first data packet includes first request information, and the first request information is used to request to verify whether a second network element is trusted. The first network element receives a second data packet, where the second data packet includes first response information, and the first response information is used to verify whether the second network element is trusted.
1 . A method comprising:
sending a first data packet, wherein the first data packet comprises first request information used to request to verify whether a second network element is trusted; and
receiving a second data packet, wherein the second data packet comprises first response information used for verifying whether the second network element is trusted, the first response information comprises attestation information including both a quote and a measurement log related to trustworthiness measurement of the second network element, and the quote includes a digest of the measurement log.
2 . The method according to claim 1 , wherein the first request information comprises a first field, the first field is a first flag used to trigger generation of the first response information.
3 . The method according to claim 2 , wherein the first flag is used to identify that the first request information comprises a first challenge value used to generate the first response information.
4 . The method according to claim 3 , wherein the first request information comprises a second field and the second field comprises the first challenge value.
5 . The method according to claim 4 , wherein the first challenge value a timestamp comprising clock information generated by a clock endorsed by an endorser, wherein the clock is trusted by both a first network element and the second network element.
6 . A method comprising:
receiving a first data packet, wherein the first data packet comprises first request information used to request to verify whether a second network element is trusted; and
sending second data packet, wherein the second data packet comprises first response information used for verifying whether the second network element is trusted, the first response information comprises attestation information including both a quote and a measurement log related to trustworthiness measurement of the second network element, and the quote includes a digest of the measurement log.
7 . The method according to claim 6 , wherein the first request information comprises a first field, the first field is a first flag used to trigger generation of the first response information.
8 . The method according to claim 7 , wherein the first flag is used to identify that the first request information comprises a first challenge value used to generate the first response information.
9 . The method according to claim 8 , wherein the first request information comprises a second field and the second field comprises the first challenge value.
10 . The method according to claim 8 , wherein the first challenge value is a timestamp comprising clock information generated by a clock endorsed by an endorser, wherein the clock is trusted by both a first network element and the second network element.
11 . A communication apparatus, comprising:
a processor, coupling to a memory storing computer instructions, which when executed by the processor, cause the communication apparatus to:
send a first data packet, wherein the first data packet comprises first request information used to request to verify whether a second network element is trusted; and
receive a second data packet, wherein the second data packet comprises first response information used for verifying whether the second network element is trusted, the first response information comprises attestation information including both a quote and a measurement log related to trustworthiness measurement of the second network element, and the quote includes a digest of the measurement log.
12 . The communication apparatus according to claim 11 , wherein the first request information comprises a first field, the first field is a first flag used to trigger generation of the first response information.
13 . The communication apparatus according to claim 12 , wherein the first flag is used to identify that the first request information comprises a first challenge value used to generate the first response information.
14 . The communication apparatus according to claim 13 , wherein the first request information comprises a second field and the second field comprises the first challenge value.
15 . The communication apparatus according to claim 14 , wherein the first challenge value is a timestamp comprising clock information generated by a clock endorsed by an endorser, wherein the clock is trusted by both a first network element and the second network element.
16 . A communication apparatus, comprising:
a processor coupled to a memory storing computer instructions, which when executed by the processor, cause the communication apparatus to:
receive a first data packet, wherein the first data packet comprises first request information used to request to verify whether the communication apparatus is trusted; and
send second data packet, wherein the second data packet comprises first response information used for verifying whether the second network element is trusted, the first response information comprises attestation information including both a quote and a measurement log related to trustworthiness measurement of the second network element, and the quote includes a digest of the measurement log.
17 . The communication apparatus according to claim 16 , wherein the first request information comprises a first field, the first field is a first flag used to trigger generation of the first response information.
18 . The communication apparatus according to claim 17 , wherein the first flag is used to identify that the first request information comprises a first challenge value used to generate the first response information.
19 . The communication apparatus according to claim 18 , wherein the first request information comprises a second field and the second field comprises the first challenge value.
20 . The communication apparatus according to claim 18 , wherein the first challenge value is a timestamp comprising clock information generated by a clock endorsed by an endorser, wherein the clock is trusted by both a first network element and the second network element.