Processing method of remote attestation report, database service end and database client end
View Patent ↗The present disclosure provides a processing method of a remote attestation report, a database service end and a database client end. The method includes: acquiring a request statement related to a remote attestation report from a database client end; executing a preset function corresponding to the request statement to call an interface of a first TEE remote attestation SDK to obtain a processing result related to the remote attestation report; sending the processing result to the database client end. Embodiments of the present disclosure can reduce the difficulty in the development and application of a remote attestation function.
1 . A processing method of a remote attestation report, applied to a database service end, comprising:
acquiring a request statement related to a remote attestation report from a database client end;
executing a preset function corresponding to the request statement to call an interface of a first (trusted execution environment (TEE) remote attestation software development kit (SDK) to obtain a processing result related to the remote attestation report; and
sending the processing result to the database client end;
wherein in the case that the request statement comprises a report generation statement for acquiring a remote attestation report; the executing a preset function corresponding to the request statement to call an interface of a first TEE remote attestation SDK to obtain a processing result related to the remote attestation report comprises:
executing a remote attestation generation function corresponding to the report generation statement to call the interface of the first TEE remote attestation SDK to obtain a remote attestation report returned by the interface; wherein the first TEE remote attestation SDK is configured to generate the remote attestation report based on an execution environment of a database engine in the database service end.
2 . The method according to claim 1 , wherein a data type of the remote attestation report is a ByteArray or a binary data block.
3 . The method according to claim 1 , wherein in the case that the request statement comprises a report verification statement for requesting verification of a remote attestation report; the executing a preset function corresponding to the request statement to call an interface of a first TEE remote attestation SDK to obtain a processing result related to the remote attestation report comprises:
executing a remote attestation verification function corresponding to the report verification statement to call the interface of the first TEE remote attestation SDK to obtain a verification result for the remote attestation report returned by the interface; wherein the first TEE remote attestation SDK is configured to verify the remote attestation report.
4 . The method according to claim 1 , wherein the request statement is an SQL statement and the preset function is an SQL user-defined function.
5 . A non-transitory computer-readable storage medium on which storing a computer program which, when executed by a processor, implements the method according to claim 1 .
6 . The method according to claim 1 , wherein the request statement is an structured query language (SQL) statement and the preset function is an SQL user-defined function.
7 . The method according to claim 2 , wherein the request statement is an SQL statement and the preset function is an SQL user-defined function.
8 . The method according to claim 3 , wherein the request statement is an SQL statement and the preset function is an SQL user-defined function.
9 . A database service end, comprising a memory, a processor and a computer program stored in the memory, wherein the processor, when executing the non-transitory computer program, implements the following operations:
acquiring a request statement related to a remote attestation report from a database client end;
executing a preset function corresponding to the request statement to call an interface of a first TEE remote attestation SDK to obtain a processing result related to the remote attestation report; and
sending the processing result to the database client end;
wherein in the case that the request statement comprises a report generation statement for acquiring a remote attestation report; the processor, when executing the non-transitory computer program, further implements the following operations:
executing a remote attestation generation function corresponding to the report generation statement to call the interface of the first TEE remote attestation SDK to obtain a remote attestation report returned by the interface; wherein the first TEE remote attestation SDK is configured to generate the remote attestation report based on an execution environment of a database engine in the database service end.
10 . The database service end according to claim 9 , wherein in the case that the request statement comprises a report verification statement for requesting verification of a remote attestation report; the processor, when executing the computer program, further implements the following operations:
executing a remote attestation verification function corresponding to the report verification statement to call the interface of the first TEE remote attestation SDK to obtain a verification result for the remote attestation report returned by the interface; wherein the first TEE remote attestation SDK is configured to verify the remote attestation report.