Data collection method and device
In a data collection method for a remote attestation process, a remote attestation server delivers a subscription configuration to a network device, where the subscription configuration for subscribing to information related to remote attestation performed by the network device. The remote attestation server receives the subscription information returned by the network device based on the subscription configuration.
1 . A data collection method for a remote attestation process, comprising:
delivering without using a polling challenge-response mechanism, by a remote attestation (RA) server in a trusted computing system, a subscription configuration to a device acting as an RA client in the trusted computing system, wherein the subscription configuration is for subscribing to information related to remote attestation to be performed by the RA server to prove whether the device is trusted,
wherein the subscription configuration comprises a data stream subscription configuration specifying multiple types of subscribed information to be sent from the device, the multiple types of subscribed information comprising at least two of:
integrity information of software at each layer of a trust chain, wherein the integrity information of software at each layer of the trust chain is recorded when the device is booted up;
dynamic integrity information of an operating system that is recorded when the device runs;
dynamic integrity information of software that is recorded when the device runs;
an identity certificate related to the device; or
a remote attestation certificate related to the device,
wherein the subscription configuration further comprises a subscription mode configuration that specifies, for each of the multiple types of subscribed information to be sent from the device, a corresponding subscription mode selected from:
a periodic feedback based subscription mode, in which subscribed information is pushed to a subscriber after a specified time period expires; and
an event-triggered feedback based subscription mode, in which subscribed information is pushed to the subscriber when the subscribed information changes; and
receiving, by the remote attestation server, each of the multiple types subscribed information sent by the device in the corresponding subscription mode determined by the device based on the data stream subscription configuration and the subscription mode configuration included in the subscription configuration,
wherein the subscription mode configuration specifies that at least a first type of the multiple types of subscribed information is to be sent in the periodic feedback-based subscription mode, and that at least a different second type of the multiple types of subscribed information is to be sent in the event-triggered feedback-based subscription mode.
2 . The method according to claim 1 , wherein the subscription configuration further comprises an event subscription configuration.
3 . The method according to claim 2 , wherein the subscribed information comprises information related to one or more of triggered events including: device boot, device upgrade, a specific mode attack event, master/slave switchover, board insertion/removal/switchover, or a certificate life cycle event.
4 . The method according to claim 1 , wherein the subscription configuration further comprises a filter configuration, and the subscribed information comprises information obtained after filtering is performed based on the filter configuration.
5 . The method according to claim 1 , further comprising: delivering a data processing parameter to the device, wherein the subscribed information comprises information obtained after processing is performed based on the data processing parameter.
6 . The method according to claim 1 , further comprising:
establishing a network configuration protocol session with the device; and
delivering the subscription configuration to the device based on the network configuration protocol session.
7 . The method according to claim 6 , time validity of the subscription configuration is bound to time validity of the network configuration protocol session.
8 . The method according to claim 1 , wherein the subscription mode for sending the subscribed information is determined by the device based on a type of the subscribed information.
9 . The method according to claim 1 , wherein subscribed information to be transmitted by the device in the event-triggered feedback based subscription mode has a higher level of security than subscribed information to be transmitted by the device in the periodic feedback based subscription mode.
10 . A data collection method for a remote attestation process, comprising:
receiving without using a polling challenge-response mechanism, by a device, a subscription configuration delivered by a remote attestation (RA) server in a trusted computing system, wherein the subscription configuration is used to subscribe to information related to remote attestation that to be performed by the RA server to prove whether the device is trusted,
wherein the subscription configuration comprises a data stream subscription configuration specifying multiple types of subscribed information to be sent from the device, the multiple types of subscribed information comprising at least two of:
integrity information of software at each layer of a trust chain, wherein the integrity information of software at each layer of the trust chain is recorded when the device is booted up;
dynamic integrity information of an operating system that is recorded when the device runs;
dynamic integrity information of software that is recorded when the device runs;
an identity certificate related to the device; or
a remote attestation certificate related to the device,
wherein the subscription configuration further comprises a subscription mode configuration that specifies, for each of the multiple types of subscribed information to be sent from the device, a corresponding subscription mode selected from:
a periodic feedback based subscription mode, in which subscribed information is pushed to a subscriber after a specified time period expires; and
an event-triggered feedback based subscription mode, in which subscribed information is pushed to the subscriber when the subscribed information changes;
determining, by the device, the corresponding subscription mode for each of the multiple types of subscribed information based on the data stream subscription configuration and the subscription mode configuration included in the subscription configuration; and
sending, by the device, each of the multiple types of subscribed information to the remote attestation server in the corresponding subscription mode, wherein the device is configured to act as a RA client in the trusted computing system,
wherein the subscription mode configuration specifies that at least a first type of the multiple types of subscribed information is to be sent in the periodic feedback-based subscription mode, and that at least a different second type of the multiple types of subscribed information is to be sent in the event-triggered feedback-based subscription mode.
11 . The method according to claim 10 , wherein the subscription configuration further comprises an event subscription configuration.
12 . The method according to claim 11 , wherein the sending of subscribed information comprises:
sending, to the remote attestation server based on one or more of the event subscription configuration, a device boot event, a device upgrade event, a specific mode attack event, a master/slave switchover event, a board insertion/removal/switchover event, or a certificate life cycle event.
13 . The method according to claim 10 , wherein the subscription configuration further comprises a filter configuration, and the subscribed information comprises information obtained after filtering is performed based on the filter configuration.
14 . The method according to claim 10 , further comprising:
receiving a data processing parameter delivered by the remote attestation server, wherein the subscribed information comprises information obtained after processing is performed based on the data processing parameter.
15 . The method according to claim 10 , further comprising:
establishing a network configuration protocol session with the remote attestation server, and
receiving, based on the network configuration protocol session, the subscription configuration delivered by the remote attestation server.
16 . A remote attestation (RA) server in a trusted computing system, the RA server comprises:
a memory storing executable instructions; and
a processor configured to execute the executable instructions to perform operations comprising:
delivering without using a polling challenge-response mechanism, a subscription configuration to a device acting as an RA client in the trusted computing system, wherein the subscription configuration is for subscribing to information related to remote attestation that to be performed by the RA server to prove whether the device is trusted,
wherein the subscription configuration comprises a data stream subscription configuration specifying multiple types of subscribed information to be sent from the device, the multiple types of subscribed information comprising at least two of:
integrity information of software at each layer of a trust chain, wherein the integrity information of software at each layer of the trust chain is recorded when the device is booted up;
dynamic integrity information of an operating system that is recorded when the device runs;
dynamic integrity information of software that is recorded when the device runs;
an identity certificate related to the device; or
a remote attestation certificate related to the device,
wherein the subscription configuration further comprises a subscription mode configuration that specifies, for each of the multiple types of subscribed information to be sent from the device, a corresponding subscription mode selected from:
a periodic feedback based subscription mode, in which subscribed information is pushed to a subscriber after a specified time period expires; and
an event-triggered feedback based subscription mode, in which subscribed information is pushed to the subscriber when the subscribed information changes; and
receiving each of the multiple types of subscribed information sent by the device in the corresponding subscription mode determined by the device based on the data stream subscription configuration and the subscription mode configuration included in the subscription configuration,
wherein the subscription mode configuration specifies that at least a first type of the multiple types of subscribed information is to be sent in the periodic feedback-based subscription mode, and that at least a different second type of the multiple types of subscribed information is to be sent in the event-triggered feedback-based subscription mode.
17 . A device acting as a remote attestation (RA) client in a trusted computing system, the device comprises:
a memory storing executable instructions; and
a processor configured to execute the executable instructions to perform operations comprising:
receiving without using a polling challenge-response mechanism, a subscription configuration delivered by a remote attestation (RA) server in the trusted computing system, wherein the subscription configuration is for subscribing to information related to remote attestation that to be performed by the RA server to prove whether the device is trusted,
wherein the subscription configuration comprises a data stream subscription configuration specifying multiple types of subscribed information to be sent from the device, the multiple types of subscribed information comprising at least two of:
integrity information of software at each layer of a trust chain, wherein the integrity information of software at each layer of the trust chain is recorded when the device is booted up;
dynamic integrity information of an operating system that is recorded when the device runs;
dynamic integrity information of software that is recorded when the device runs;
an identity certificate related to the device; or
a remote attestation certificate related to the device,
wherein the subscription configuration further comprises a subscription mode configuration that specifies, for each of the multiple types of subscribed information to be sent from the device, a corresponding subscription mode selected from:
a periodic feedback based subscription mode, in which subscribed information is pushed to a subscriber after a specified time period expires; and
an event-triggered feedback based subscription mode, in which subscribed information is pushed to the subscriber when the subscribed information changes;
determining the corresponding subscription mode for each of the multiple types of subscribed information based on the data stream subscription configuration and the subscription mode configuration included in the subscription configuration; and
sending each of the multiple types of subscribed information to the remote attestation server in the corresponding subscription mode,
wherein the subscription mode configuration specifies that at least a first type of the multiple types of subscribed information is to be sent in the periodic feedback-based subscription mode, and that at least a different second type of the multiple types of subscribed information is to be sent in the event-triggered feedback-based subscription mode.