WO2022105703A1 - 一种完整性校验方法及相关设备 - Google Patents

一种完整性校验方法及相关设备 Download PDF

Info

Publication number
WO2022105703A1
WO2022105703A1 PCT/CN2021/130551 CN2021130551W WO2022105703A1 WO 2022105703 A1 WO2022105703 A1 WO 2022105703A1 CN 2021130551 W CN2021130551 W CN 2021130551W WO 2022105703 A1 WO2022105703 A1 WO 2022105703A1
Authority
WO
WIPO (PCT)
Prior art keywords
data
integrity
integrity metric
verification server
value
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2021/130551
Other languages
English (en)
French (fr)
Inventor
吴迪
曹斌
潘伟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to EP21893850.4A priority Critical patent/EP4239948A4/en
Publication of WO2022105703A1 publication Critical patent/WO2022105703A1/zh
Anticipated expiration legal-status Critical
Priority to US18/321,232 priority patent/US12530503B2/en
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/101—Access control lists [ACL]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/12—Applying verification of the received information
    • H04L63/123—Applying verification of the received information received data contents, e.g. message integrity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/0643—Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/12—Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3297—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving time stamps, e.g. generation of time stamps
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/10—Integrity
    • H04W12/106—Packet or message integrity

Definitions

  • the present application relates to the field of communication technologies, and in particular, to an integrity check method and related equipment.
  • the data exchanged between devices is required to be consistent between the sending end and the receiving end, which requires the sending end and the receiving end.
  • the data stored on the terminal is verified.
  • the control and management device will send some data to the terminal device. These data guide the terminal device to complete the processing of the message. It should be consistent with the data sent by the control and management device. If it is inconsistent, it means that the data on the terminal device that guides packet processing may be unreliable. The corresponding data on the control management device is verified.
  • the terminal device will report the full amount of data received from the control and management device to the control and management device, and the control and management device will check the received data and the locally stored data. If they are consistent, it means that the data used to instruct the message processing in the terminal device is accurate; if they are inconsistent, it means that the data used to instruct the packet processing in the terminal device is inaccurate.
  • the verification of the data on the terminal device and the control and management device requires a large amount of information to be exchanged between the two, and requires a large amount of network resources. The verification results are not safe and accurate enough.
  • the embodiment of the present application provides an integrity verification method and related equipment.
  • the data sender and the receiver respectively send the integrity measurement value and the integrity measurement baseline value of the data to a trusted verification server, and the verification server
  • the integrity of the data is verified to ensure that the integrity verification of the data on the sender and the receiver is completed efficiently and reliably, thus providing a guarantee for the normal operation of the business.
  • an embodiment of the present application provides an integrity verification method, the method may include: after the first device sends the first data to the second device, the first device sends the verification server the integrity corresponding to the first data The second device sends the integrity measurement value corresponding to the first data to the verification server; in this way, the verification server can perform integrity check on the first data according to the integrity measurement value and the integrity measurement baseline value. In this way, the integrity check is performed on the integrity metric value and the integrity metric baseline value corresponding to the same first data sent by the first device and the second device by the trusted verification server, and only the first data needs to be exchanged.
  • the corresponding integrity measurement value and integrity measurement baseline value do not need to interact with the full amount of first data, which effectively reduces the amount of data required for verification and greatly saves the resources occupied by the verification process.
  • the verification server performs an integrity check on the integrity metric value and the integrity metric baseline value, instead of directly comparing the first data by the first device, which can ensure that the verification process is more secure and safe. It is reliable, thereby providing a guarantee for the normal operation of the service on the second device.
  • the first device may be a control and management device, and the second device may be a terminal device.
  • the first device may be a terminal device, and the second device may be a control and management device.
  • both the first device and the second device may be terminal devices.
  • the first data may include at least one of the following: segment routing traffic engineering (English: Segment Routing Traffic Engineering, SR TE for short) configuration information, segment routing traffic engineering policy (English: Segment Routing Traffic Engineering policy) , referred to as: SR TE-policy) configuration information, access control list (English: Access Control Lists, referred to as: ACL) configuration information or flow rule (English: Flow Specification, referred to as: FlowSpec) configuration information.
  • segment routing traffic engineering English: Segment Routing Traffic Engineering, SR TE for short
  • segment routing traffic engineering policy English: Segment Routing Traffic Engineering policy
  • ACL Access Control Lists
  • flow rule English: Flow Specification, referred to as: FlowSpec
  • the integrity measurement baseline value may be a hash value obtained through hash calculation, then, the integrity measurement value is a hash value obtained through hash calculation.
  • the integrity metric baseline value can also be a digital signature, then the integrity metric value is a digital signature.
  • the integrity metric baseline value may also be an encrypted value obtained through encryption processing. Then, the integrity metric value may be an encrypted value obtained through encryption processing.
  • the first device and the second device may keep their clocks synchronized, or the first data may carry a sending time stamp. It is ensured that the first data to be checked for integrity are the same data.
  • the data to be checked by the first device are data a and data b
  • the data to be checked by the second device are also data a and data b.
  • the first device may also calculate the integrity measurement baseline value corresponding to the first data; Before the verification server sends the integrity metric value of the first data, the second device may also calculate the integrity metric value corresponding to the first data.
  • the first device calculating the integrity metric baseline value corresponding to the first data may include: the first device determines the integrity metric baseline value according to the entire content of the first data; then, the second device calculates the first data
  • the corresponding integrity metric value may include: the second device determines the integrity metric value according to the entire content of the first data.
  • the first device and the second device store the first data in the same order, which can ensure that the check values calculated according to the entire contents of the first data are corresponding, and provide a guarantee for the accurate execution of the integrity check.
  • the first device calculates the integrity metric baseline value corresponding to the first data
  • it may include: the first device determines the integrity metric baseline value according to the partial content of the first data; then, the second device calculates the first
  • the integrity metric value corresponding to the data may include: the second device determines the integrity metric value according to the partial content of the first data.
  • the first device and the second device have the same rules for obtaining part of the first data, which can ensure that the check value calculated according to the part of the first data is corresponding, which provides the accurate execution of the integrity check.
  • calculating the integrity metric baseline value corresponding to the first data by the first device may include: the first device determines the integrity metric baseline value according to the first operation log corresponding to sending the first data; then, the second The device calculating the integrity metric value corresponding to the first data may include: the second device determining the integrity metric value according to the second operation log corresponding to receiving the first data.
  • the rules for generating operation logs for receiving and sending data on the first device and the second device may be the same, which can ensure that the check values obtained according to the first operation log and the second operation log corresponding to the first data are corresponding, which is Accurate execution of integrity checks provides assurance.
  • the second device sends the integrity metric value corresponding to the first data to the verification server, which may be triggered based on the received first indication, or may be triggered after a local preset condition is satisfied.
  • the second device may also receive a first indication, where the first indication is used to instruct the second device to perform integrity checks on the first data check.
  • the first indication may be sent by the first device to the second device, or the first indication may also be sent by the verification server to the second device.
  • the second device may also generate the integrity metric value when it is determined that a preset condition is satisfied.
  • the preset conditions include at least one of the following: Condition 1, the total length of the received first data reaches a preset length threshold; Condition 2, the number of entries included in the received first data reaches a preset number threshold ; Condition 3: The cumulative duration of receiving the first data reaches a preset duration; or, Condition 4: The first data is incremental data.
  • the second device can be triggered to calculate the integrity metric value corresponding to the first data and send the integrity metric value to the verification server, so that the verification server verifies the integrity of the first data.
  • an embodiment of the present application further provides an integrity verification method, which is applied to a first device.
  • the method may include: after the first device sends the first data to the second device, the first device sends the first data to the second device.
  • the verification server sends an integrity metric baseline value corresponding to the first data, where the integrity metric baseline value is used to perform an integrity check on the first data.
  • the first device may be a control and management device, and the second device may be a terminal device.
  • the first device may be a terminal device, and the second device may be a control and management device.
  • both the first device and the second device may be terminal devices.
  • the first data may include at least one of the following: SR TE configuration information, SR TE-policy configuration information, ACL configuration information or FlowSpec configuration information.
  • the integrity measurement baseline value may be a hash value obtained through hash calculation, or the integrity measurement baseline value may also be a digital signature, or the integrity measurement baseline value may also be an encrypted value obtained through encryption processing. .
  • the first device and the second device may keep their clocks synchronized, or the first data may carry a sending time stamp. It is guaranteed that the first data for integrity check is the same data.
  • the first device may further calculate the integrity metric baseline value corresponding to the first data.
  • calculating the integrity metric baseline value corresponding to the first data by the first device may include: the first device determines the integrity metric baseline value according to the entire content of the first data.
  • when the first device calculates the integrity metric baseline value corresponding to the first data it may include: the first device determines the integrity metric baseline value according to partial content of the first data.
  • calculating the integrity metric baseline value corresponding to the first data by the first device may include: the first device determining the integrity metric baseline value according to the first operation log corresponding to sending the first data.
  • the first device may send a first indication to the second device, where the first indication is used to instruct the second device to perform an integrity check on the first data.
  • the first indication may be directly sent by the first device to the second device, or the first indication may also be sent by the first device to the second device through a verification server.
  • the first device may be the first device in the method provided in the first aspect. Therefore, for the specific implementation manner of the method provided in the second aspect and the effect achieved, please refer to Section 1. on the one hand.
  • an embodiment of the present application further provides an integrity check method, and the method is applied to a second device.
  • the method may include: after the second device receives the first data sent by the first device, the second device The device sends an integrity metric value corresponding to the first data to the verification server, where the integrity metric value is used to perform an integrity check on the first data.
  • the first device may be a control and management device, and the second device may be a terminal device.
  • the first device may be a terminal device, and the second device may be a control and management device.
  • both the first device and the second device may be terminal devices.
  • the first data may include at least one of the following: SR TE configuration information, SR TE-policy configuration information, ACL configuration information or FlowSpec configuration information.
  • the integrity metric value may be a hash value obtained through hash calculation, or the integrity metric value may also be a digital signature, or the integrity metric value may also be an encrypted value obtained through encryption processing.
  • the first device and the second device may keep their clocks synchronized, or the first data may carry a sending time stamp. It is guaranteed that the first data for integrity check is the same data.
  • the second device may further calculate the integrity metric value corresponding to the first data.
  • calculating the integrity metric value corresponding to the first data by the second device may include: the second device determines the integrity metric value according to the entire content of the first data.
  • calculating the integrity metric value corresponding to the first data by the second device may include: the second device determines the integrity metric value according to the partial content of the first data.
  • calculating the integrity metric value corresponding to the first data by the second device may include: the second device determining the integrity metric value according to receiving a second operation log corresponding to the first data.
  • the second device sends the integrity metric value corresponding to the first data to the verification server, which may be triggered based on the received first indication, or may be triggered after a local preset condition is satisfied.
  • the second device may also receive a first indication, where the first indication is used to instruct the second device to perform integrity checks on the first data check.
  • the first indication may be sent by the first device to the second device, or the first indication may also be sent by the verification server to the second device.
  • the second device may also generate the integrity metric value when it is determined that a preset condition is satisfied.
  • the preset conditions include at least one of the following: Condition 1, the total length of the received first data reaches a preset length threshold; Condition 2, the number of entries included in the received first data reaches a preset number threshold ; Condition 3: The cumulative duration of receiving the first data reaches a preset duration; or, Condition 4: The first data is incremental data.
  • the second device can be triggered to calculate the integrity metric value corresponding to the first data and send the integrity metric value to the verification server, so that the verification server verifies the integrity of the first data.
  • the second device may be the second device in the method provided in the first aspect. Therefore, for the specific implementation manner and effect of the method provided in the third aspect, please refer to Section 1. on the one hand.
  • an embodiment of the present application further provides an integrity verification method, which is applied to a verification server.
  • the method may include: the verification server receives an integrity metric baseline value corresponding to the first data sent by the first device. The integrity metric value corresponding to the first data sent by the second device, the first data is sent by the first device to the second device, then, the verification server, according to the integrity metric baseline value and the integrity metric value, Data integrity check.
  • the first device may be a control and management device, and the second device may be a terminal device.
  • the first device may be a terminal device, and the second device may be a control and management device.
  • both the first device and the second device may be terminal devices.
  • the first data may include at least one of the following: SR TE configuration information, SR TE-policy configuration information, ACL configuration information or FlowSpec configuration information.
  • the integrity measurement baseline value may be a hash value obtained through hash calculation, then, the integrity measurement value is a hash value obtained through hash calculation.
  • the integrity metric baseline value can also be a digital signature, then the integrity metric value is a digital signature.
  • the integrity metric baseline value may also be an encrypted value obtained through encryption processing. Then, the integrity metric value may be an encrypted value obtained through encryption processing.
  • the first device and the second device may keep their clocks synchronized, or the first data may carry a sending time stamp. It is guaranteed that the first data for integrity check is the same data.
  • the second device sends the integrity metric value corresponding to the first data to the verification server, which may be triggered based on the received indication.
  • the verification server may receive a first indication sent by the first device, where the first indication is used to instruct the verification server to perform an integrity check on the first data. Then, in response to the first indication, the verification server may further send a second indication to the second device, where the second indication is used to instruct to perform integrity verification on the first data. In this way, the second device can calculate and send the integrity metric value corresponding to the first data to the verification server based on the second indication.
  • the verification server performs an integrity check on the first data according to the integrity metric baseline value and the integrity metric value, which may include: the verification server determining that the integrity metric value and the integrity metric baseline value match, Therefore, the verification server determines that the integrity check of the first data is passed.
  • the integrity metric baseline value of the first data is the first hash calculated by the first hash algorithm of the entire content (or part of the content, or the first operation log corresponding to the sent first data) of the first data.
  • the integrity metric value of the first data is the second hash value calculated by the first hash algorithm of the entire content (or part of the content, or receiving the second operation log corresponding to the first data) of the first data .
  • the verification server can determine whether the first hash value and the second hash value are consistent, and if they are consistent, determine that the integrity check of the first data is passed, otherwise, determine that the integrity check of the first data is passed. Did not pass.
  • the integrity measurement baseline value of the first data is the entire content (or part of the content, or the first operation log corresponding to the first data is sent) of the first data, and the first hash value is paired with the first private key.
  • the first signature obtained by performing the signature operation, the integrity metric value of the first data is the entire content (or part of the content, or the second operation log corresponding to the first data received) of the first data through the second private key.
  • the second signature obtained by performing the signature operation on the hash value then, in one case, the verification server can first determine whether the first public key corresponding to the first private key and the second public key corresponding to the second private key are the same, if they are the same , and then judge whether the first signature and the second signature are consistent.
  • the verification server can first use the first public key corresponding to the first private key to process the first signature to obtain the first hash value, and use the second public key corresponding to the second private key to process the second signature to obtain the second Hash value, and then determine whether the first hash value and the second hash value are consistent, if they are consistent, it is determined that the integrity check of the first data is passed, otherwise, it is determined that the integrity check of the first data is not pass.
  • the first public key may be the public key corresponding to the first private key corresponding to the control and management device, and the public key may be pre-stored locally on the verification server, or may be the integrity metric of the first data sent by the control and management device to the verification server Sent to the validation server when the baseline value is used.
  • the second public key may be the public key corresponding to the second private key corresponding to the terminal device, and the public key may be pre-stored locally in the verification server, or may be the integrity metric value of the first data sent by the terminal device to the verification server. sent to the authentication server.
  • the baseline value of the integrity metric of the first data is the first encryption obtained by calculating the entire content (or part of the content, or sending the first operation log corresponding to the first data) of the first data through the first encryption algorithm value
  • the integrity metric value of the first data is the second encrypted value calculated by the first encryption algorithm of the entire content (or part of the content, or the second operation log corresponding to the received first data) of the first data
  • the verification server can determine whether the first encrypted value and the second encrypted value are consistent, and if they are consistent, determine that the integrity check of the first data has passed, otherwise, determine that the integrity check of the first data has passed.
  • the verification server can also use the first decryption algorithm corresponding to the first encryption algorithm to decrypt the first encrypted value to obtain the first decrypted value, and use the first decryption algorithm corresponding to the first encryption algorithm to decrypt the first encrypted value. Decrypt the second encrypted value to obtain the second decrypted value, and then judge whether the first decrypted value and the second decrypted value are consistent. If they are consistent, it is determined that the integrity check of the first data has passed; Integrity check failed.
  • the verification server may send an alarm message to the control and management device, It is used to notify that the first data on the terminal device is abnormal.
  • the control and management device may re-send the first data to the terminal device, instructing the terminal device to replace the locally stored first data with the newly received first data, or, Instruct the terminal device to save the newly received first data and add an aging mark to the previously saved first data.
  • the first data with the aging mark can no longer guide the terminal device to process the message, but use the newly received first data. Instruct the terminal device to process packets.
  • the verification server may be the verification server in the method provided in the first aspect. Therefore, for the specific implementation manner of the method provided in the fourth aspect and the effect achieved, please refer to the first aspect related instructions.
  • the integrity check may be performed periodically; for data sent incrementally, the integrity check of the incremental data may be performed immediately.
  • the present application further provides a network system, including a first device, a second device and an authentication server.
  • the first device is configured to execute the method provided by the second aspect or any possible implementation manner of the second aspect, or perform the first aspect or the method provided by any possible implementation manner of the first aspect.
  • the operation performed by the device; the second device is configured to execute the method provided by the third aspect or any possible implementation manner of the third aspect, or execute the method provided by the first aspect or any possible implementation manner of the first aspect
  • the operation performed by the second device in the method; the verification server is configured to perform the method provided by the fourth aspect or any possible implementation manner of the fourth aspect, or, perform the first aspect and any possible implementation of the first aspect
  • the method provided by the method verifies the operation performed by the server.
  • an embodiment of the present application further provides a first device, including a transceiver unit and a processing unit.
  • the transceiver unit is configured to perform the transceiver performed by the first device in the method provided in the first aspect, any possible implementation manner of the first aspect, the second aspect, or any possible implementation manner of the second aspect Operation;
  • the processing unit is configured to execute the above-mentioned first aspect, any possible implementation manner of the first aspect, the second aspect, or any possible implementation manner of the second aspect. Operations other than sending and receiving operations.
  • the transceiver unit is configured to send the first data to the second device, and send the integrity metric corresponding to the first data to the verification server a baseline value; the processing unit is configured to determine the integrity metric baseline value according to the entire content of the first data.
  • an embodiment of the present application further provides a second device, including a transceiver unit and a processing unit.
  • the transceiver unit is configured to perform the transceiver performed by the second device in the method provided in the first aspect, any possible implementation manner of the first aspect, the third aspect, or any possible implementation manner of the third aspect Operation;
  • the processing unit is configured to execute the method provided by the first aspect, any possible implementation manner of the first aspect, the third aspect, or any possible implementation manner of the third aspect, except that executed by the second device Operations other than sending and receiving operations.
  • the transceiver unit is configured to receive the first data sent by the first device, and send the integrity corresponding to the first data to the verification server a metric value; the processing unit is configured to determine the integrity metric value according to the entire content of the first data.
  • an embodiment of the present application further provides a verification server, including a transceiver unit and a processing unit.
  • the transceiving unit is configured to perform the transceiving operation performed by the verification server in the method provided in the first aspect, any possible implementation manner of the first aspect, the fourth aspect, or any possible implementation manner of the fourth aspect ;
  • the processing unit is configured to execute the above-mentioned first aspect, any possible implementation manner of the first aspect, the fourth aspect or any one possible implementation manner of the fourth aspect.
  • the verification server performs in addition to sending and receiving operations other operations.
  • the transceiver unit is configured to receive the integrity metric baseline value corresponding to the first data sent by the first device, and receive the data sent by the second device.
  • the integrity metric value corresponding to the first data the processing unit is configured to perform an integrity check on the first data according to the integrity metric baseline value and the integrity metric value.
  • an embodiment of the present application further provides a first device, including a first communication interface and a processor.
  • the first communication interface is used to execute the method performed by the first device in the foregoing first aspect, any possible implementation manner of the first aspect, the second aspect, or any possible implementation manner of the second aspect.
  • a sending operation a processor configured to execute the first device in the method provided by the first aspect, any possible implementation manner of the first aspect, the second aspect, or any possible implementation manner of the second aspect Perform operations other than the receive and send operations described.
  • the first device may further include a second communication interface, and the second communication interface is used to perform the receiving operation of the aforementioned first device.
  • an embodiment of the present application further provides a second device, including a first communication interface and a second communication interface.
  • the first communication interface is used to execute the method performed by the second device in the foregoing first aspect, any possible implementation manner of the first aspect, the third aspect, or any possible implementation manner of the third aspect.
  • the sending operation the second communication interface is used to execute the second device in the method provided in the first aspect, any possible implementation manner of the first aspect, the third aspect, or any possible implementation manner of the third aspect
  • the second device may further include a processor configured to execute the method provided in the foregoing first aspect, any possible implementation manner of the first aspect, the third aspect, or any possible implementation manner of the third aspect other operations performed by the second device other than the receiving and sending operations.
  • an embodiment of the present application further provides an authentication server, including a first communication interface and a processor.
  • the first communication interface is used to execute the verification server in the method provided in the first aspect, any possible implementation manner of the first aspect, the fourth aspect, or any possible implementation manner of the fourth aspect.
  • the verification server may further include a second communication interface for performing the sending operation of the aforementioned first device.
  • an embodiment of the present application further provides a first device, where the first device includes a memory and a processor.
  • the memory includes computer-readable instructions; a processor in communication with the memory is configured to execute the computer-readable instructions, so that the first device is configured to execute the above first aspect and any possible implementation manner of the first aspect , the second aspect or the part corresponding to the first device in the method provided by any possible implementation manner of the second aspect.
  • an embodiment of the present application further provides a second device, where the second device includes a memory and a processor.
  • the memory includes computer-readable instructions; a processor in communication with the memory is configured to execute the computer-readable instructions, so that the second device is configured to execute the first aspect and any possible implementation manner of the first aspect , the third aspect or the part corresponding to the second device in the method provided in any possible implementation manner of the third aspect.
  • an embodiment of the present application further provides a verification server, where the verification server includes a memory and a processor.
  • the memory includes computer-readable instructions; a processor in communication with the memory is configured to execute the computer-readable instructions, so that the verification server is configured to execute the above first aspect, any possible implementation manner of the first aspect, The part corresponding to the verification server in the method provided by the fourth aspect or any possible implementation manner of the fourth aspect.
  • an embodiment of the present application further provides a communication system, the communication system comprising: the first device provided in the sixth aspect, the ninth aspect or the twelfth aspect, the seventh aspect, the tenth aspect or the The second device provided in the thirteenth aspect, and the authentication server provided in the eighth aspect, the eleventh aspect or the fourteenth aspect.
  • an embodiment of the present application further provides a computer-readable storage medium, where instructions are stored in the computer-readable storage medium, and when the computer-readable storage medium is run on a computer, the computer is made to execute the above first aspect, the first Any possible implementation of the one aspect, the second aspect, any possible implementation of the second aspect, the third aspect, any possible implementation of the third aspect, the fourth aspect, or any one of the fourth aspect Methods provided by possible implementations.
  • the embodiments of the present application further provide a computer program product, including a computer program or computer-readable instructions, when the computer program or the computer-readable instructions are run on a computer, the computer is made to execute the foregoing first aspect , any possible implementation of the first aspect, the second aspect, any possible implementation of the second aspect, the third aspect, any possible implementation of the third aspect, the fourth aspect or any of the fourth aspect A possible implementation provides the method.
  • the first device, the second device, and the verification server in the above embodiments may be network devices used to execute the above method, or may refer to a single board, line card, chip, etc. used to execute the above method .
  • FIG. 1 is a schematic structural diagram of a network 10 to which this embodiment of the application is applied;
  • FIG. 2 is a schematic flowchart of an integrity check method 100 in an embodiment of the present application
  • FIG. 3 is a schematic flowchart of an integrity verification method 200 in an embodiment of the present application.
  • FIG. 4 is a schematic flowchart of an integrity verification method 300 in an embodiment of the present application.
  • FIG. 5 is a schematic flowchart of an integrity check method 400 in an embodiment of the present application.
  • FIG. 6 is a schematic flowchart of an integrity check method 500 in an embodiment of the present application.
  • FIG. 7 is a schematic structural diagram of a first device 300 in an embodiment of the present application.
  • FIG. 8 is a schematic structural diagram of a second device 400 in an embodiment of the present application.
  • FIG. 9 is a schematic structural diagram of a verification server 500 in an embodiment of the present application.
  • FIG. 10 is a schematic structural diagram of a first device 600 in an embodiment of the application.
  • FIG. 11 is a schematic structural diagram of a second device 700 in an embodiment of the application.
  • FIG. 12 is a schematic structural diagram of a verification server 800 in an embodiment of the present application.
  • FIG. 13 is a schematic structural diagram of a first device 900 in an embodiment of the application.
  • FIG. 14 is a schematic structural diagram of a second device 1000 in an embodiment of the present application.
  • FIG. 15 is a schematic structural diagram of a verification server 1100 in an embodiment of the present application.
  • FIG. 16 is a schematic structural diagram of a communication system 1200 in an embodiment of the present application.
  • ordinal numbers such as “1”, “2”, “3”, “first”, “second” and “third” are used to distinguish multiple objects, and are not used to limit the order of multiple objects .
  • a and/or B mentioned in this application should be understood to include the following situations: only A, only B, or both A and B are included.
  • the first device can send data to the second device, and the data can be used as a basis for the second device to process data waiting for the packet to be transmitted.
  • the data received by the second device from the first device and the data sent by the first device to the second device that is, the data stored on the second device and the first device need to be guaranteed.
  • Data is checked.
  • the first device and the second device can be any devices that need to keep data consistent.
  • the first device can be a control and management device, and the second device can be a terminal device; for another example, the first device can be a terminal device, and the second device can be It may be a control and management device; for another example, both the first device and the second device may be terminal devices.
  • the first device is used as a control and management device
  • the second device is used as a terminal device as an example for description.
  • the processing of the data to be transmitted by the terminal equipment can be based on some data sent by the control and management equipment.
  • these data can include segment routing traffic engineering (English: Segment Routing Traffic Engineering, referred to as: SR TE) configuration information, segment routing traffic Engineering policy (English: Segment Routing Traffic Engineering policy, referred to as: SR TE-policy) configuration information, access control list (English: Access Control Lists, referred to as: ACL) configuration information or flow rules (English: Flow Specification, referred to as: FlowSpec) ) configuration information, etc.
  • the terminal device After the terminal device receives the data sent by the control and management device, if the data is erroneous or tampered with during storage and use, the data guiding the processing of the message will be inconsistent with the data sent by the control and management device. The processing is not reliable enough, which affects the normal operation of the business. Based on this, in order to ensure the normal operation of the service, it is necessary to ensure that the data received by the terminal device from the control and management device to instruct the processing of the message is consistent with the data sent by the control and management device to the terminal device.
  • the reconciliation method may mean that the terminal device periodically sends the data guiding the processing of the message to the control and management device, and the control and management device compares the received data with the corresponding data sent to the terminal device by itself to determine the period Whether the data guiding the packet processing on the internal terminal device is still reliable.
  • the network 10 may at least include: a control management device 100 , a terminal device 200 and a terminal device 300 .
  • each terminal device has at least the ability to process messages; the control and management device 100 may be able to perform data interaction with each terminal device, for example, send data for guiding message processing to the terminal device 200 and the terminal device 300 respectively, so as to realize the Management and control of terminal equipment 200 and terminal equipment 300 .
  • the number of terminal devices included in the network 10 is not specifically limited in this embodiment of the present application, for example, there may be more than two terminal devices, that is, in addition to the above-mentioned terminal device 200 and terminal device 300, other or, the number of terminal devices included in the network 10 may also be less than 2.
  • the control and management device 100 sends the data 1 to the terminal device 200, and the terminal device 200 may store the data 1 and instruct the processing of the message based on the locally stored data 1.
  • the terminal device 200 stores the locally stored data 1' (if the data on the terminal device 200 has not been tampered or an error has occurred, the data 1' and the data 1 is the same) sent to the control and management device 100, and the control and management device 100 compares the locally stored data 1 and data 1', if the comparison result indicates that the data 1 and the data 1' are consistent, then it is determined that the terminal device within the period 200 has neither tampered nor made an error with the data 1 received from the control and management device 100, and the terminal device 200 is reliable in this period, that is, the terminal equipment 200 can process packets based on the data 1' in this period to ensure service availability.
  • the terminal device 200 processing packets based on the data 1' in this period cannot guarantee the normal operation of the service.
  • the above-mentioned method of reconciliation by the control and management device realizes the verification of the data on the terminal device and the data on the control and management device.
  • each interaction involves a large amount of data and frequent interaction, which takes up a lot of resources; on the other hand, the verification result is not safe and reliable enough by comparing the full amount of data for verification.
  • an embodiment of the present application provides an integrity verification method, which introduces a trusted verification server to perform remote integrity verification on data sent by a control and management device to a terminal device.
  • the process may include, for example: the control and management device sends a After the device sends the first data, the control and management device generates and sends the integrity measurement baseline value corresponding to the first data to the verification server; the terminal device that receives the first data can also generate and send to the verification server the corresponding baseline value of the first data. Integrity measurement value; the trusted verification server can perform integrity verification on the first data with respect to the integrity measurement value from the terminal device and the integrity measurement baseline value from the control and management device.
  • the integrity check of the first data When the integrity check of the first data passes, it indicates that the first data saved on the terminal device is consistent with the first data saved on the control management device; otherwise, when the integrity check of the first data fails , indicating that the first data saved on the terminal device is inconsistent with the first data saved on the control and management device.
  • the integrity check is performed on the integrity metric value and the integrity metric baseline value corresponding to the same first data sent by the terminal device and the control management device by the credible verification server, and only the first data corresponding to the need to be interacted is checked. Integrity measurement value and integrity measurement baseline value, do not need to exchange the full amount of first data, effectively reduce the amount of data to be exchanged for verification, and greatly save the resources occupied by the verification process.
  • a trusted verification server the verification server performs integrity verification on the integrity measurement value and the integrity measurement baseline value, rather than directly comparing the first data by the control and management device, which can ensure that the verification process is more secure and reliable. , thus providing a guarantee for the normal operation of the service on the terminal device.
  • the network 10 may further include an authentication server 400, and the authentication server 400 can perform data interaction with the control and management device 100 and each terminal device, and is used for the control and management device 100 and each terminal device.
  • the process of performing the integrity check provided by the embodiment of the present application by the terminal device may include, for example: S11, the control and management device 100 sends the data a to the terminal device 200; S12, the control and management device 100 generates the signature 1 corresponding to the data a according to the private key 1 , and send the signature 1 as the integrity measurement baseline value corresponding to the data a to the verification server 400; S13, the terminal device 200 generates the signature 2 corresponding to the data a according to the private key 2, and uses it as the integrity measurement value corresponding to the data a.
  • the signature 2 is sent to the verification server 400; S14, the verification server 400 processes the received signature 1 according to the public key 1 to obtain a digest 1, and processes the received signature 2 according to the public key 2 to obtain a digest 2, wherein the public key 1 corresponds to the private key 1, and the public key 2 corresponds to the private key 2; S15, the verification server 400 judges whether the digest 1 and the digest 2 are consistent, if they are consistent, it means that the integrity check of the data a has passed; if they are inconsistent, then Indicates that the integrity check of the data a fails.
  • the verification server 400 determines that the integrity check of the data a fails, it can also send an alarm message to the control and management device 100 to inform the terminal device 200 that the data a is abnormal, so that the control and management device 100 can According to the indication of the alarm message, the data a is re-sent to the terminal device 200; thus, the terminal device 200 can replace the locally stored data a with the newly received data a to provide a more reliable message processing function.
  • a terminal device refers to any device capable of processing data to be transmitted, for example, a network device such as a switch and a router, or a user device such as a mobile phone and a computer.
  • Control and management equipment refers to any equipment that has management and/or control functions for terminal equipment, for example, it can be a network cloud engine (English: Network Cloud Engine, NCE for short), server, network management or router, etc.; or, control
  • the management entity can also be a functional entity integrated in any device.
  • the functional entity can be embodied in the form of hardware or software. For example, it can also be a Telnet (an application layer protocol) console or a secure shell in the device.
  • the verification server can be a trusted remote certification server, and the verification server can be co-located with the control and management device in the same physical device as two functional units in the physical device; or, the verification server can also be an independent, trusted
  • the third-party entity device for example, may be a certificate authority (English: Certificate Authority, referred to as: CA) server. It should be noted that various devices in the embodiments of the present application are not specifically limited in the embodiments of the present application.
  • FIG. 2 is a schematic flowchart of an integrity verification method 100 in an embodiment of the present application.
  • the method 100 is described by the interaction among the terminal device, the control management device and the verification server, wherein the terminal device may be the terminal device 200 or the terminal device 300 in FIG. 1 , and the control management device may be the control device in FIG. 1 .
  • the authentication server may be the authentication server 400 in FIG. 1 .
  • the method 100 may include, for example, the following S101 to S106:
  • control and management device sends first data to a terminal device.
  • the first data may be any data sent by the control and management device to the terminal device.
  • the first data may be directly or indirectly used by the terminal device to instruct the processing of the message.
  • the first data may include at least one of the following types of data: SR TE configuration information, SR TE-policy configuration information, ACL configuration information or FlowSpec configuration information.
  • S101 may be, for example: the control and management device sends a Path Computation Element Communication Protocol (English: Path Computation Element Communication Protocol, PCEP for short) message to the terminal device, the PCEP
  • the SR TE configuration information carried in the message may include the corresponding SR label.
  • S101 may be, for example: the control and management device sends a network configuration protocol (English: Network Configuration Protocol, NETCONF for short) message or a YANG model message to the terminal device, in which the NETCONF message or the YANG model message
  • the carried SR TE configuration information may include a corresponding SR label.
  • the corresponding SR label in the first data is similar to the MPLS label in the Multi-Protocol Label Switching (English: Multi-Protocol Label Switching, MPLS for short) TE scenario, and details are not described in this embodiment of the present application.
  • S101 may be, for example: the control and management device statically delivers a command line to the terminal device, and the command line carries the SR TE-policy configuration information; in another case , S101 may be, for example: the control and management device sends a Border Gateway Protocol (English: Border Gateway Protocol, BGP for short) message to the terminal device, and the BGP message may carry SR TE-policy configuration information.
  • Border Gateway Protocol English: Border Gateway Protocol, BGP for short
  • the SR TE-policy configuration information may include: a triplet identifier, at least one candidate path (English: Candidate Path), the priority (English: Preference) attribute of each candidate path, and at least one weight under each candidate path (English: Weight) and the segment identification list (English: Segment Identification List, referred to as: SID List) corresponding to the weight, the triple identification is used to uniquely identify the SR TE-policy configuration information, for example, the triple identification may include: head end ( English: Headend), used to indicate the node generated or implemented by SR TE-policy; Color (English: Color), used to distinguish multiple SR TE-policy between the same head end and tail end; end end (English: Endpoint ), used to indicate the end of the SR Policy, which can be an Internet Protocol version 4 (English: Internet Protocol version 4, referred to as: IPv4) address or the sixth version of the Internet Protocol (English: Internet Protocol version 6, referred to as: IPv6) address.
  • IPv4 Internet Protocol version 4
  • IPv6 sixth
  • the candidate path (English: Candidate Path) can be uniquely identified by the originating protocol (English: protocol-origin), the initiator identifier (originator) and the discriminator (English: discriminator).
  • the specific form of the SR TE-policy configuration information can be as follows:
  • Preference 200//The priority attribute of the candidate path corresponding to CP 1 is 200
  • Preference 100//The priority attribute of the candidate path corresponding to CP 2 is 100
  • each SID List may include a plurality of corresponding SIDs, and each SID may be an SR label corresponding to a node.
  • S101 may be, for example: S101 may be, for example, the control and management device statically delivers a command line to the terminal device, and the command line carries the ACL configuration information. In another case, S101 may be, for example: the control and management device sends a NETCONF message or a YANG model message to the terminal device, where the NETCONF message or the YANG model message carries the ACL configuration information.
  • S101 may be, for example: the control and management device sends a BGP packet to the terminal device, where the BGP packet may carry the FlowSpec configuration information.
  • first data in this embodiment of the present application may also be other table items or configuration information, which is not specifically limited.
  • the first data may be saved after S101.
  • the terminal device after S101, not only can an entry for instructing packet processing be generated based on the first data, but also the first data can be saved.
  • the table entry on the terminal device for instructing packet processing may match the first data stored locally.
  • the sequence of the first data stored on the control management device may be consistent with the sequence of the first data stored on the terminal device, so as to ensure that the integrity of the first data will not be affected by the sequence of the stored data when verifying the integrity of the first data.
  • the test results for example, can be sorted and saved according to the lexicographical order, or, for example, can also be sorted and saved according to the timestamps corresponding to the data.
  • the verification objects on the terminal device and the control management device are required to be the same, that is, the data participating in the verification on the terminal device and the data participating in the verification on the control management device are the same. of.
  • the terminal device and the control and management device keep the clocks synchronized, the requirement for the consistency of the verification objects can be satisfied.
  • the first data in S101 may also carry a sending time stamp, so that the data with the same sending time stamp can be used as the data participating in the verification , and the verification is performed according to the integrity verification method provided in the embodiment of the present application, which can also satisfy the requirement that the verification objects are consistent.
  • the control and management device generates an integrity metric baseline value corresponding to the first data, where the integrity metric baseline value is used to perform an integrity check on the first data.
  • control and management device sends the integrity measurement baseline value corresponding to the first data to the verification server.
  • the integrity metric baseline value corresponding to the first data can be used as a reference value for the integrity verification of the first data by the verification server, and the integrity metric value corresponding to the first data is matched with the integrity metric baseline value, If it matches the integrity metric baseline value, it is determined that the integrity check of the first data passes, otherwise, it is determined that the integrity check of the first data fails.
  • the integrity metric baseline value corresponding to the first data may be, for example, a hash value obtained through hash calculation, a digital signature, or an encrypted value obtained through encryption processing.
  • S102 may be that the control and management device generates, according to the first data, an integrity metric baseline value corresponding to the first data.
  • the control and management device may determine the integrity metric baseline value corresponding to the first data according to the entire content of the first data. For example, the control and management device may obtain a hash value obtained by hashing the entire content of the locally stored first data, and use the obtained hash value as the integrity measurement baseline value corresponding to the first data; for another example, control the The management device may also perform a digital signature operation on the entire content of the locally stored first data to obtain a signature, and use the obtained signature as the integrity measurement baseline value corresponding to the first data; for another example, the control and management device may store the locally stored data. An encrypted value obtained by encrypting the entire content of the first data, and the obtained encrypted value is used as the integrity metric baseline value corresponding to the first data.
  • the control and management device may determine the integrity metric baseline value corresponding to the first data according to the partial content of the first data.
  • the partial content of the first data may be the data involved in the verification in the first data
  • S102 may include, for example: the control and management device determines the partial content of the first data from the first data based on a preset rule, thereby , determine the integrity measurement baseline value corresponding to the first data according to the determined partial content of the first data
  • the preset rules can be flexibly set according to actual needs, for example, can be set for each content in the first data corresponding weight and set the weight threshold, then the preset rules may include: selecting the content whose weight is not less than the weight threshold, and sorting the selected content according to the order of local storage (or the order of the weight) to obtain the first Part of the content of the data; for another example, the preset rule may include: selecting content in some preset positions, and sorting the selected content according to the order of local storage (or the order of weights) to obtain part
  • the implementation of S102 may include, but is not limited to: Mode 1, the control and management device may obtain a hash value obtained by hashing the partial content of the first data stored locally, and use the obtained hash value as the hash value.
  • the integrity measurement baseline value corresponding to the first data in mode 2, the control and management device may also perform a digital signature operation on part of the locally stored first data to obtain a signature, and use the obtained signature as the integrity corresponding to the first data Measure the baseline value; for another example, the control and management device may encrypt an encrypted value obtained by encrypting part of the locally stored first data, and use the obtained encrypted value as the integrity metric baseline value corresponding to the first data.
  • S102 may be that the control and management device generates an integrity metric baseline value corresponding to the first data according to the first operation log corresponding to the first data sent. It should be noted that, in order to record the operations performed by the control and management device, the control and management device may record the behavior of sending data to the terminal device each time in the first operation log as a content of the first operation log. If the first data is only an act of sending data to the terminal device once performed by the control and management device, the control and management device may determine the integrity of the first data according to a piece of content in the first operation log corresponding to the sending of the first data Measure the baseline value.
  • the control and management device may determine, according to all of the multiple pieces of content corresponding to the first data sent in the first operation log, the data corresponding to the first data. Integrity metric baseline value; or, the control and management device may also determine the integrity metric baseline value corresponding to the first data according to the part of the first operation log that transmits the multiple pieces of content corresponding to the first data, wherein, among the multiple pieces of content
  • the part may be the content corresponding to a certain operation type in the multiple pieces of content, and the operation type may include addition, deletion, modification, etc., or, for example, the part in the multiple pieces of content may also be the generation time interval in the multiple pieces of content.
  • the integrity measurement baseline value may be, for example, a hash value obtained through hash calculation, a signature obtained through a digital signature operation, or an encrypted value obtained through encryption processing.
  • the control and management device executes the method 100 to complete the integrity of the first data sent in batches.
  • the control and management device executes the method 100 to perform integrity verification on the incrementally sent first data test.
  • the data sent in batches can also be called basic data, which is the data necessary for the operation of the terminal device; the data sent in increments can refer to the data sent in batches after the data sent in batches is completed, and it exceeds a preset time period (for example, 1 minute). data sent.
  • the control and management device sends incremental data to the terminal device, for example, the routing information of the remote device of the terminal device may change.
  • the operation type and operation data may be stored in the first operation log. If the first data is data sent in batches, either the integrity metric baseline value corresponding to the first data can be generated according to all or part of the first data, or the first data can be generated according to the first operation log corresponding to the first data sent. A baseline value of the integrity metric corresponding to the data. If the first data is incremental data, the integrity metric baseline value corresponding to the first data may preferably be generated according to the first operation log corresponding to the sending of the first data.
  • the control and management device may also directly or indirectly send a first indication to the terminal device, where the first indication is used to instruct the terminal device to perform an integrity check on the first data, and the first indication may As a possible trigger condition for the execution of the following S104.
  • the control and management device may indirectly send the first indication to the terminal device, for example, the control and management device may send the first indication to the terminal device through the verification server.
  • the control and management device may carry the first indication in any message and send it to the terminal device, as long as the message is of a message type that the terminal device can recognize and process.
  • the control and management device may carry the integrity metric baseline value corresponding to the first data in any message and send it to the verification server.
  • the control and management device may carry the integrity metric baseline value corresponding to the first data in the BGP message The text is sent to the verification server.
  • the control and management device may carry the integrity metric baseline value corresponding to the first data in a PCEP packet and send it to the verification server.
  • the embodiment of the present application does not specifically limit the type of the message carrying the baseline value of the integrity measurement of the first data, as long as it is a message that the verification server can identify and process.
  • control and management device may further carry the integrity measurement baseline value of the first data in the certificate, and send the certificate to the verification server.
  • S101 to S103 can be independently implemented as a complete embodiment of the control and management device.
  • the method 100 is only for the convenience of description, and is performed from the interaction of the terminal device, the control and management device and the verification server as a whole. illustrate.
  • S104 The terminal device generates an integrity metric value corresponding to the first data, where the integrity metric value is used to perform an integrity check on the first data.
  • the terminal device sends the integrity metric value corresponding to the first data to the verification server.
  • the integrity metric value corresponding to the first data can be used as a value to be verified for participating in the integrity check, and the integrity metric value corresponding to the first data is compared with the integrity metric baseline value corresponding to the first data. Matching, if it matches the integrity metric baseline value, then it is determined that the integrity metric value of the first data has passed the integrity check, that is, the integrity check of the first data has passed, otherwise, it is determined that the first data has passed the integrity check.
  • the integrity metric value fails the integrity check, that is, the integrity check of the first data fails.
  • the integrity metric value corresponding to the first data may be, for example, a hash value obtained through hash calculation, a digital signature, or an encrypted value obtained through encryption processing.
  • the terminal device may generate the integrity metric corresponding to the first data according to the first data sex measure.
  • S104 may also be that the terminal device determines the corresponding integrity metric value of the first data according to the entire content of the first data.
  • Integrity measure For example, the terminal device may use the hash value obtained by hashing the entire content of the locally stored first data, and use the obtained hash value as the integrity metric value corresponding to the first data; for another example, the terminal device may also The entire content of the locally stored first data may be digitally signed to obtain a signature, and the obtained signature may be used as the integrity metric value corresponding to the first data; for another example, the terminal device may store all the locally stored first data. An encrypted value obtained by encrypting the content, and the obtained encrypted value is used as the integrity metric value corresponding to the first data.
  • S104 may also be that the terminal device determines the first data according to the partial content of the first data The corresponding integrity measure.
  • the partial content of the first data may be the data involved in the verification in the first data
  • S104 may include, for example: the terminal device determines the partial content of the first data from the first data based on a preset rule, thereby: The integrity metric value corresponding to the first data is determined according to the determined partial content of the first data, and the preset rule may be consistent with the preset rule followed for selecting the partial content of the first data in S102.
  • the implementation of S104 may include, but is not limited to: Mode 1, the terminal device may obtain a hash value obtained by hashing the partial content of the first data stored locally, and use the obtained hash value as the first hash value. 1. The integrity metric value corresponding to the data; in mode 2, the terminal device may also perform a digital signature operation on part of the locally stored first data to obtain a signature, and use the obtained signature as the integrity metric value corresponding to the first data; For another example, the terminal device may obtain an encrypted value obtained by encrypting a partial content of the first data stored locally, and use the obtained encrypted value as an integrity metric value corresponding to the first data.
  • the control and management device may generate the integrity measurement baseline value corresponding to the first data according to the first operation log corresponding to the first data sent, then in S104, the terminal device may generate the integrity measurement baseline value corresponding to the first data according to the received first data.
  • a second operation log corresponding to a piece of data generates an integrity metric value corresponding to the first data. It should be noted that, in order to record the operations performed by the terminal device, the behavior of receiving data from the control and management device each time may be recorded in the second operation log as a content of the second operation log.
  • the terminal device may determine the integrity metric corresponding to the first data according to a piece of content in the second operation log corresponding to the received first data value. If the first data includes the behavior of the terminal device receiving data multiple times from the control and management device, the terminal device may determine the completeness corresponding to the first data according to sending all the multiple pieces of content corresponding to the first data in the second operation log.
  • the terminal device may also determine the integrity metric value corresponding to the first data according to the part of the second operation log that sends the multiple pieces of content corresponding to the first data, wherein the selection rule for the parts of the multiple pieces of content It may be consistent with the selection rule for the control and management device to select a part from the plurality of contents of the first operation log.
  • the integrity metric value may be, for example, a hash value obtained through hash calculation, a signature obtained through a digital signature operation, or an encrypted value obtained through encryption processing.
  • the operation type and operation data may be stored in the second operation log. If the first data is data sent in batches, the integrity metric value corresponding to the first data may be generated according to all or part of the first data, or the first data may be generated according to the second operation log corresponding to the received first data. The integrity measure for the data. If the first data is incremental data, the integrity metric value corresponding to the first data may preferably be generated according to the second operation log corresponding to the received first data.
  • the method of generating the integrity metric value in S104 needs to correspond to the method of generating the integrity metric baseline value in S102.
  • the control and management device obtains the entire content of the locally saved first data through hash calculation. value, and the obtained hash value is used as the integrity measurement baseline value corresponding to the first data, then, in S104, the terminal device calculates the hash value obtained by hashing the entire content of the locally stored first data, and The obtained hash value is used as the integrity metric value corresponding to the first data. In this way, it is possible for the subsequent verification server to accurately complete the integrity check based on the corresponding method.
  • the terminal device If the terminal device generates an integrity metric value of The manner does not correspond to the manner in which the control and management device generates the integrity metric baseline value. For example, in S102, the control and management device calculates the hash value obtained by hashing the entire content of the locally stored first data, and calculates the hash value obtained by the hash value. The value is used as the integrity measurement baseline value corresponding to the first data, and in S104, the terminal device will receive the second operation log corresponding to the first data to obtain a signature through a digital signature operation, and use the obtained signature as the integrity corresponding to the first data. metric value, the verification server is likely to fail to complete the integrity check on the first data.
  • the terminal device when the terminal device receives the first instruction for instructing the integrity check to be performed on the first data, the terminal device may be triggered to execute S104, wherein the first instruction It may be directly sent by the control and management device to the terminal device, or the first instruction may also be sent by the control and management device to the terminal device indirectly through the verification server, or the first instruction may be received by the verification server and sent by the control and management device. It is generated and sent to the terminal device when the verification request or the integrity measurement baseline value corresponding to the first data is performed. In another case, when the terminal device determines that the preset condition is met, the terminal device may be triggered to execute S104, where the preset condition may be that the control management device and the terminal device agree to execute the method 100 to perform integrity check conditions of.
  • the preset condition may be, for example, that the total length of the received first data reaches a preset length threshold, for example, the terminal device starts from receiving the first data sent by the control and management device (or from a certain moment) , record the total length of the data received from the control and management device, if the total length is equal to the preset length threshold, it is determined that the preset condition is met, and the execution of S104 is triggered; similarly, for the control and management device, from the first data sent to the terminal device Starting from a data (or starting from a certain moment), record the total length of the data sent to the terminal device.
  • a preset length threshold for example, the terminal device starts from receiving the first data sent by the control and management device (or from a certain moment) , record the total length of the data received from the control and management device, if the total length is equal to the preset length threshold, it is determined that the preset condition is met, and the execution of S104 is triggered; similarly, for the control and management device, from the first data sent to
  • the total length of the first data may be a preset length threshold.
  • the preset condition may also be, for example: the number of entries included in the received first data reaches a preset number threshold, for example, the terminal device starts from receiving the first data sent by the control and management device (or from a certain starting from the first time), record the total number of entries including the data received from the control and management device, if the total number is equal to the preset number threshold, it is determined that the preset condition is met, and the execution of S104 is triggered; similarly, for the control and management device, From the first data sent to the terminal device (or from a certain moment), record the total number of entries in the data sent to the terminal device.
  • the preset condition may also be, for example: the accumulated duration of the received first data reaches the preset duration, for example, the terminal device starts from receiving the first data sent by the control and management device (or starts from a certain moment).
  • the accumulated duration of the data received from the control and management device if the accumulated duration is equal to the preset duration, then it is determined that the preset condition is met, and the execution of S104 is triggered; similarly, for the control and management device, from the first data sent to the terminal device
  • the accumulated duration of the data sent to the terminal device is recorded. If the accumulated duration is equal to the preset duration, it is determined that the preset condition is met, and the execution of S102 is triggered; in this case, the first One data can be all data sent by the control and management device to the terminal device within a preset time period.
  • the preset condition may also be, for example: the received first data whose attribute is incremental data, for example, the data sent by the control and management device is not received within a preset time period before starting to receive the first data, Then, it is considered that the first data is incremental data, then it is determined that the preset condition is met, and the execution of S104 is triggered; similarly, for the control and management device, the first data whose attribute is incremental data is sent, as described in the start of sending If no data is sent to the terminal device within a preset time period before the first data, the first data is considered to be incremental data, then it is determined that the preset condition is met, and the execution of S102 is triggered.
  • the terminal device may carry the integrity metric value corresponding to the first data in any message and send it to the verification server.
  • the terminal device may carry the integrity metric value corresponding to the first data in a BGP message and send it to the verification server.
  • the verification server for example, the terminal device may carry the integrity metric value corresponding to the first data in the PCEP message and send it to the verification server.
  • This embodiment of the present application does not specifically limit the type of the message carrying the integrity metric value of the first data, as long as it is a message that the verification server can identify and process.
  • the terminal device may also carry the integrity metric value of the first data in the certificate, and send the certificate to the verification server.
  • the verification server performs an integrity check on the first data according to the integrity metric value and the integrity metric baseline value.
  • S106 may, for example, include: the verification server determines that the integrity metric value matches the integrity metric baseline value, then the verification server determines that the integrity check on the first data passes; otherwise, the verification server determines the integrity metric value does not match the integrity metric baseline value; then, the verification server determines that the integrity check on the first data fails.
  • the integrity metric baseline value of the first data is the first hash value calculated by the first hash algorithm of the entire content (or part of the content, or the first operation log corresponding to the first data sent) of the first data.
  • the integrity metric value of the first data is the second hash value calculated by the first hash algorithm of the entire content (or part of the content, or the second operation log corresponding to the received first data) of the first data, then , S106 may be, for example, the verification server determines whether the first hash value and the second hash value are consistent, if they are consistent, then determine that the integrity check of the first data is passed, otherwise, determine that the integrity check of the first data is passed. Test failed.
  • the integrity measurement baseline value of the first data is the entire content (or part of the content, or the first operation log corresponding to the first data is sent) of the first data, and the first hash value is signed through the first private key.
  • the first signature obtained by the operation, the integrity metric value of the first data is the entire content (or part of the content, or the second operation log corresponding to the received first data) of the first data after the second private key to the second hash.
  • the verification server can first determine whether the first public key corresponding to the first private key and the second public key corresponding to the second private key are the same, if they are the same , and then judge whether the first signature and the second signature are consistent.
  • the verification server may first use the first public key corresponding to the first private key to process the first signature to obtain the first hash value, and use the second public key corresponding to the second private key to process the second signature to obtain The second hash value, and then determine whether the first hash value and the second hash value are consistent. If they are consistent, it is determined that the integrity check of the first data is passed, otherwise, it is determined that the integrity check of the first data is passed. Test failed.
  • the first public key may be the public key corresponding to the first private key corresponding to the control and management device, and the public key may be pre-stored locally on the verification server, or may be the integrity metric of the first data sent by the control and management device to the verification server Sent to the validation server when the baseline value is used.
  • the second public key may be the public key corresponding to the second private key corresponding to the terminal device, and the public key may be pre-stored locally in the verification server, or may be the integrity metric value of the first data sent by the terminal device to the verification server. sent to the authentication server.
  • the integrity metric baseline value of the first data is the first encrypted value calculated by the first encryption algorithm of the entire content (or part of the content, or the first operation log corresponding to the sent first data) of the first data
  • the integrity metric value of the first data is the second encrypted value calculated by the first encryption algorithm of the entire content (or part of the content, or the second operation log corresponding to the received first data) of the first data.
  • S106 may be, for example, the verification server judging whether the first encrypted value and the second encrypted value are consistent, and if they are consistent, it is determined that the integrity check of the first data is passed, otherwise, it is determined that the integrity check of the first data is passed.
  • S106 may be, for example, that the verification server first uses the first decryption algorithm corresponding to the first encryption algorithm to decrypt the first encrypted value to obtain the first decrypted value, and uses the first decryption algorithm corresponding to the first encryption algorithm.
  • the decryption algorithm decrypts the second encrypted value to obtain the second decrypted value, and then judges whether the first decrypted value and the second decrypted value are consistent. A data integrity check failed.
  • the verification server may send an alarm message to the control and management device, It is used to notify that the first data on the terminal device is abnormal.
  • the control and management device may re-send the first data to the terminal device, instructing the terminal device to replace the locally stored first data with the newly received first data, or, Instruct the terminal device to save the newly received first data and add an aging mark to the previously saved first data.
  • the first data with the aging mark can no longer guide the terminal device to process the message, but use the newly received first data. Instruct the terminal device to process packets.
  • the integrity check may be performed periodically; for data sent incrementally, the integrity check of the incremental data may be performed immediately.
  • the verification server corresponding to the above S103 receives the integrity measurement baseline value of the first data sent by the control management device
  • the verification server corresponding to S105 receives the integrity measurement value of the first data sent by the terminal device
  • this S106 can be
  • the method 100 is only a complete embodiment executed as an authentication server for convenience of description, and is described from the interaction of the terminal device, the control management device and the authentication server as a whole.
  • the integrity check is performed on the integrity metric value and the integrity metric baseline value corresponding to the first data respectively sent by the terminal device and the control and management device by the trusted verification server, which requires Only the integrity metric value and the integrity metric baseline value corresponding to the first data are interacted, and there is no need to interact with the full amount of the first data, which effectively reduces the amount of data that needs to be exchanged for verification, and greatly saves the time occupied by the verification process.
  • the verification server can complete the integrity check of the first data according to the integrity measurement value and the integrity measurement baseline value corresponding to the first data, instead of being managed by the control
  • the device directly compares the full amount of data of the first data, which can ensure that the verification process is more secure and reliable, thereby providing a guarantee for the normal operation of the service on the terminal device.
  • the above method 100 is described by taking the integrity verification of the first data sent by the control management device to the terminal device by a trusted verification server as an example.
  • the process of the integrity check may refer to the relevant description in the above method 100 .
  • This embodiment of the present application provides an integrity check method 200.
  • the method 200 describes the integrity check of the first data in an interactive manner.
  • the method 200 may include, for example:
  • a first device sends first data to a second device.
  • the first device sends the integrity metric baseline value corresponding to the first data to the verification server.
  • the second device sends the integrity metric value corresponding to the first data to the verification server.
  • the verification server performs an integrity check on the first data according to the integrity metric value and the integrity metric baseline value.
  • the first device may be a control and management device, and the second device may be a terminal device.
  • the first device may be a terminal device, and the second device may be a control and management device.
  • both the first device and the second device may be terminal devices.
  • the first device in the method 200 may be the control and management device in the above-mentioned method 100.
  • the related description of S201 can refer to S101 in the method 100
  • the related description of S202 can refer to S103 in the method 100
  • the related description of S203 can refer to S105 in the method 100
  • the related description of S204 can refer to the related description of the method 100.
  • the first data may be the first data in the method 100
  • the integrity metric value corresponding to the first data may be the integrity metric value corresponding to the first data in the method 100
  • the integrity metric baseline value corresponding to the first data It may be the integrity metric baseline value corresponding to the first data in the method 100 .
  • the first data may include at least one of the following: SR TE configuration information, SR TE-policy configuration information, ACL configuration information or FlowSpec configuration information.
  • the integrity measurement baseline value may be a hash value obtained through hash calculation, then, the integrity measurement value is a hash value obtained through hash calculation.
  • the integrity metric baseline value can also be a digital signature, then the integrity metric value is a digital signature.
  • the integrity metric baseline value may also be an encrypted value obtained through encryption processing. Then, the integrity metric value may be an encrypted value obtained through encryption processing.
  • the first device and the second device may keep their clocks synchronized, or the first data may carry a sending time stamp. It is ensured that the first data to be checked for integrity are the same data.
  • the data to be checked by the first device are data a and data b
  • the data to be checked by the second device are also data a and data b.
  • the first device may also calculate the integrity measurement baseline value corresponding to the first data; Before the verification server sends the integrity metric value of the first data, the second device may also calculate the integrity metric value corresponding to the first data.
  • the first device to calculate the integrity measurement baseline value corresponding to the first data can refer to the relevant description of S102 in the method 100,
  • the second device For calculating the integrity metric value corresponding to the first data by the second device, reference may be made to the relevant description of S104 in the method 100 .
  • the first device calculating the integrity metric baseline value corresponding to the first data may include: the first device determines the integrity metric baseline value according to the entire content of the first data; then, the second device calculates the first data
  • the corresponding integrity metric value may include: the second device determines the integrity metric value according to the entire content of the first data.
  • the first device and the second device store the first data in the same order, which can ensure that the check values calculated according to the entire contents of the first data are corresponding, and provide a guarantee for the accurate execution of the integrity check.
  • the first device when it calculates the integrity metric baseline value corresponding to the first data, it may include: the first device determines the integrity metric baseline value according to the partial content of the first data; then, the second device calculates the first
  • the integrity metric value corresponding to the data may include: the second device determines the integrity metric value according to the partial content of the first data.
  • the first device and the second device have the same rules for obtaining part of the first data, which can ensure that the check value calculated according to the part of the first data is corresponding, which provides the accurate execution of the integrity check. Assure.
  • calculating the integrity metric baseline value corresponding to the first data by the first device may include: the first device determines the integrity metric baseline value according to the first operation log corresponding to sending the first data; then, the second The device calculating the integrity metric value corresponding to the first data may include: the second device determining the integrity metric value according to the second operation log corresponding to receiving the first data.
  • the rules for generating operation logs for receiving and sending data on the first device and the second device may be the same, which can ensure that the check values obtained according to the first operation log and the second operation log corresponding to the first data are corresponding, which is Accurate execution of integrity checks provides assurance.
  • the second device sends the integrity metric value corresponding to the first data to the verification server, which may be triggered based on the received first indication, or may be triggered after a local preset condition is satisfied.
  • the second device may also receive a first indication, where the first indication is used to instruct the second device to perform integrity checks on the first data check.
  • the first indication may be sent by the first device to the second device, or the first indication may also be sent by the verification server to the second device.
  • the second device may also generate the integrity metric value when it is determined that a preset condition is satisfied.
  • the preset conditions include at least one of the following: Condition 1, the total length of the received first data reaches a preset length threshold; Condition 2, the number of entries included in the received first data reaches a preset number threshold ; Condition 3: The cumulative duration of receiving the first data reaches a preset duration; or, Condition 4: The first data is incremental data.
  • the second device can be triggered to calculate the integrity metric value corresponding to the first data and send the integrity metric value to the verification server, so that the verification server verifies the integrity of the first data.
  • the related description of the first device and the effect achieved can refer to the related operations performed by the control and management device in the method 100 and the corresponding effect description
  • the related description of the second device and the effect achieved can refer to
  • the related description of the verification server and the effect achieved may refer to the related operations performed by the verification server in the method 100 and the corresponding effect description.
  • This embodiment of the present application further provides an integrity verification method 300, referring to FIG. 4, the method 300 is applied to the first device, and the method 300 may include, for example:
  • the first device sends first data to the second device.
  • the first device sends an integrity metric baseline value corresponding to the first data to the verification server, where the integrity metric baseline value is used to perform integrity verification on the first data.
  • the first device may be a control and management device, and the second device may be a terminal device.
  • the first device may be a terminal device, and the second device may be a control and management device.
  • both the first device and the second device may be terminal devices.
  • the first device in the method 300 may be the control and management device in the above-mentioned method 100, and the related operations can refer to the method Operations performed by the management device are controlled in 100 .
  • the related description of S301 may refer to S101 in the method 100
  • the related description of S302 may refer to S103 of the method 100 .
  • the first data may be the first data in the method 100
  • the integrity metric baseline value corresponding to the first data may be the integrity metric baseline value corresponding to the first data in the method 100 .
  • the first data may include at least one of the following: SR TE configuration information, SR TE-policy configuration information, ACL configuration information or FlowSpec configuration information.
  • the integrity measurement baseline value may be a hash value obtained through hash calculation, or the integrity measurement baseline value may also be a digital signature, or the integrity measurement baseline value may also be an encrypted value obtained through encryption processing. .
  • the first device and the second device may keep their clocks synchronized, or the first data may carry a sending time stamp. It is guaranteed that the first data for integrity check is the same data.
  • the first device may further calculate the integrity metric baseline value corresponding to the first data.
  • the first device in the method 300 as a control and management device and the second device as a terminal device as an example, for the first device to calculate the integrity metric baseline value corresponding to the first data, please refer to the relevant description of S102 in the method 100.
  • calculating the integrity metric baseline value corresponding to the first data by the first device may include: the first device determines the integrity metric baseline value according to the entire content of the first data.
  • the first device when the first device calculates the integrity metric baseline value corresponding to the first data, it may include: the first device determines the integrity metric baseline value according to partial content of the first data.
  • calculating the integrity metric baseline value corresponding to the first data by the first device may include: the first device determining the integrity metric baseline value according to the first operation log corresponding to sending the first data.
  • the first device may send a first indication to the second device, where the first indication is used to instruct the second device to perform an integrity check on the first data.
  • the first indication may be directly sent by the first device to the second device, or the first indication may also be sent by the first device to the second device through a verification server.
  • This embodiment of the present application also provides an integrity check method 400, referring to FIG. 5, the method 400 is applied to the second device, and the method 400 may include, for example:
  • the second device receives the first data sent by the first device.
  • the second device sends an integrity metric value corresponding to the first data to the verification server, where the integrity metric value is used to perform an integrity check on the first data.
  • the first device may be a control and management device, and the second device may be a terminal device.
  • the first device may be a terminal device, and the second device may be a control and management device.
  • both the first device and the second device may be terminal devices.
  • the second device in the method 400 may be the terminal device in the above-mentioned method 100, and the relevant operations can refer to the method 100 for details.
  • S401 refer to S101 in the method 100
  • S402 refer to S105 in the method 100.
  • the first data may be the first data in the method 100
  • the integrity metric value corresponding to the first data may be the integrity metric value corresponding to the first data in the method 100
  • the integrity metric baseline value corresponding to the first data It may be the integrity metric baseline value corresponding to the first data in the method 100 .
  • the first data may include at least one of the following: SR TE configuration information, SR TE-policy configuration information, ACL configuration information or FlowSpec configuration information.
  • the integrity metric value may be a hash value obtained through hash calculation, or the integrity metric value may also be a digital signature, or the integrity metric value may also be an encrypted value obtained through encryption processing.
  • the first device and the second device may keep their clocks synchronized, or the first data may carry a sending time stamp. It is guaranteed that the first data for integrity check is the same data.
  • the second device may further calculate the integrity metric value corresponding to the first data.
  • calculating the integrity metric value corresponding to the first data by the second device may include: the second device determines the integrity metric value according to the entire content of the first data.
  • calculating the integrity metric value corresponding to the first data by the second device may include: the second device determines the integrity metric value according to the partial content of the first data.
  • calculating the integrity metric value corresponding to the first data by the second device may include: the second device determining the integrity metric value according to receiving a second operation log corresponding to the first data.
  • the second device sends the integrity metric value corresponding to the first data to the verification server, which may be triggered based on the received first indication, or may be triggered after a local preset condition is satisfied.
  • the second device may also receive a first indication, where the first indication is used to instruct the second device to perform integrity checks on the first data check.
  • the first indication may be sent by the first device to the second device, or the first indication may also be sent by the verification server to the second device.
  • the second device may also generate the integrity metric value when it is determined that a preset condition is satisfied.
  • the preset conditions include at least one of the following: Condition 1, the total length of the received first data reaches a preset length threshold; Condition 2, the number of entries included in the received first data reaches a preset number threshold ; Condition 3: The cumulative duration of receiving the first data reaches a preset duration; or, Condition 4: The first data is incremental data.
  • the second device can be triggered to calculate the integrity metric value corresponding to the first data and send the integrity metric value to the verification server, so that the verification server verifies the integrity of the first data.
  • the embodiment of the present application also provides an integrity verification method 500, referring to FIG. 6, the method 500 is applied to a verification server, and the method 500 may include, for example:
  • the verification server receives the integrity measurement baseline value corresponding to the first data sent by the first device, and the first data is sent by the first device to the second device.
  • the verification server receives the integrity metric value corresponding to the first data sent by the second device.
  • the verification server performs an integrity check on the first data according to the integrity metric baseline value and the integrity metric value.
  • the first device may be a control and management device, and the second device may be a terminal device.
  • the first device may be a terminal device, and the second device may be a control and management device.
  • both the first device and the second device may be terminal devices.
  • the verification server in the method 500 may be the verification server in the above-mentioned method 100, and the relevant operations can be referred to in the method 100 for details. Verify what the server is doing. Specifically, for the related description of S501, refer to S103 in the method 100, for the related description of S502, refer to S105 in the method 100, and for the related description of S503, refer to S106 in the method 100.
  • the first data may be the first data in the method 100
  • the integrity metric value corresponding to the first data may be the integrity metric value corresponding to the first data in the method 100
  • the integrity metric baseline value corresponding to the first data It may be the integrity metric baseline value corresponding to the first data in the method 100 .
  • the first data may include at least one of the following: SR TE configuration information, SR TE-policy configuration information, ACL configuration information or FlowSpec configuration information.
  • the integrity measurement baseline value may be a hash value obtained through hash calculation, then, the integrity measurement value is a hash value obtained through hash calculation.
  • the integrity metric baseline value can also be a digital signature, then the integrity metric value is a digital signature.
  • the integrity metric baseline value may also be an encrypted value obtained through encryption processing. Then, the integrity metric value may be an encrypted value obtained through encryption processing.
  • the first device and the second device may keep their clocks synchronized, or the first data may carry a sending time stamp. It is guaranteed that the first data for integrity check is the same data.
  • the second device sends the integrity metric value corresponding to the first data to the verification server, which may be triggered based on the received indication.
  • the verification server may receive a first indication sent by the first device, where the first indication is used to instruct the verification server to perform an integrity check on the first data. Then, in response to the first indication, the verification server may further send a second indication to the second device, where the second indication is used to instruct to perform integrity verification on the first data. In this way, the second device can calculate and send the integrity metric value corresponding to the first data to the verification server based on the second indication.
  • the verification server performs an integrity check on the first data according to the integrity metric baseline value and the integrity metric value, which may include: the verification server determining that the integrity metric value and the integrity metric baseline value match, Therefore, the verification server determines that the integrity check of the first data is passed.
  • the integrity metric baseline value of the first data is the first hash calculated by the first hash algorithm of the entire content (or part of the content, or the first operation log corresponding to the sent first data) of the first data.
  • the integrity metric value of the first data is the second hash value calculated by the first hash algorithm of the entire content (or part of the content, or receiving the second operation log corresponding to the first data) of the first data .
  • the verification server can determine whether the first hash value and the second hash value are consistent, and if they are consistent, determine that the integrity check of the first data is passed, otherwise, determine that the integrity check of the first data is passed. Did not pass.
  • the integrity measurement baseline value of the first data is the entire content (or part of the content, or the first operation log corresponding to the first data is sent) of the first data, and the first hash value is paired with the first private key.
  • the first signature obtained by performing the signature operation, the integrity metric value of the first data is the entire content (or part of the content, or the second operation log corresponding to the first data received) of the first data through the second private key.
  • the second signature obtained by performing the signature operation on the hash value then, in one case, the verification server can first determine whether the first public key corresponding to the first private key and the second public key corresponding to the second private key are the same, if they are the same , and then judge whether the first signature and the second signature are consistent.
  • the verification server can first use the first public key corresponding to the first private key to process the first signature to obtain the first hash value, and use the second public key corresponding to the second private key to process the second signature to obtain the second Hash value, and then determine whether the first hash value and the second hash value are consistent, if they are consistent, it is determined that the integrity check of the first data is passed, otherwise, it is determined that the integrity check of the first data is not pass.
  • the first public key may be the public key corresponding to the first private key corresponding to the control and management device, and the public key may be pre-stored locally on the verification server, or may be the integrity metric of the first data sent by the control and management device to the verification server Sent to the validation server when the baseline value is used.
  • the second public key may be the public key corresponding to the second private key corresponding to the terminal device, and the public key may be pre-stored locally in the verification server, or may be the integrity metric value of the first data sent by the terminal device to the verification server. sent to the authentication server.
  • the baseline value of the integrity metric of the first data is the first encryption obtained by calculating the entire content (or part of the content, or sending the first operation log corresponding to the first data) of the first data through the first encryption algorithm value
  • the integrity metric value of the first data is the second encrypted value calculated by the first encryption algorithm of the entire content (or part of the content, or the second operation log corresponding to the received first data) of the first data
  • the verification server can determine whether the first encrypted value and the second encrypted value are consistent, and if they are consistent, determine that the integrity check of the first data has passed, otherwise, determine that the integrity check of the first data has passed.
  • the verification server can also use the first decryption algorithm corresponding to the first encryption algorithm to decrypt the first encrypted value to obtain the first decrypted value, and use the first decryption algorithm corresponding to the first encryption algorithm to decrypt the first encrypted value. Decrypt the second encrypted value to obtain the second decrypted value, and then judge whether the first decrypted value and the second decrypted value are consistent. If they are consistent, it is determined that the integrity check of the first data has passed; Integrity check failed.
  • the verification server may send an alarm message to the control and management device, It is used to notify that the first data on the terminal device is abnormal.
  • the control and management device may re-send the first data to the terminal device, instructing the terminal device to replace the locally stored first data with the newly received first data, or, Instruct the terminal device to save the newly received first data and add an aging mark to the previously saved first data.
  • the first data with the aging mark can no longer guide the terminal device to process the message, but use the newly received first data. Instruct the terminal device to process packets.
  • an embodiment of the present application further provides a first device 300, as shown in FIG. 7 .
  • the first device 300 includes a processing unit 301 and a sending unit 302 .
  • the processing unit 301 is configured to perform the processing operations performed by the control management device in the embodiment shown in FIG. 2 and the processing operations performed by the control management device 100 in the embodiment shown in FIG. 1 ;
  • the sending unit 302 is configured to perform the aforementioned processing operations in FIG. 2
  • the processing unit 301 may perform the operation in the embodiment in FIG. 2 : generate the integrity metric baseline value corresponding to the first data.
  • the sending unit 302 may perform the operations in the embodiment in FIG. 2: send the first data to the terminal device, and send the integrity metric baseline value to the verification server.
  • an embodiment of the present application further provides a second device 400, as shown in FIG. 8 .
  • the second device 400 includes a receiving unit 401 , a sending unit 402 and a processing unit 403 .
  • the receiving unit 401 is configured to perform the receiving operation performed by the terminal device in the embodiment shown in FIG. 2 and the receiving operation performed by the terminal device 200 in the embodiment shown in FIG. 1 ;
  • the sending unit 402 is configured to perform the above-mentioned receiving operation shown in FIG. 2 .
  • the sending operation performed by the terminal device in the embodiment and the sending operation performed by the terminal device 200 in the embodiment shown in FIG. 1; the processing unit 403 is configured to perform the processing operation performed by the terminal device in the above-mentioned embodiment shown in FIG.
  • the receiving unit 401 may perform the operation in the embodiment in FIG. 2: receive the first data sent by the control and management device; the sending unit 402 may perform the operation in the embodiment in FIG. 2: send the complete data corresponding to the first data to the verification server The processing unit 403 may perform the operation in the embodiment in FIG. 2: generate the integrity metric value corresponding to the first data.
  • an embodiment of the present application further provides a verification server 500, as shown in FIG. 9 .
  • the verification server 500 includes a receiving unit 501 and a processing unit 502 .
  • the receiving unit 501 is configured to perform the receiving operation performed by the verification server in the embodiment shown in FIG. 2 and the receiving operation performed by the verification server 400 in the embodiment shown in FIG. 1 ;
  • the processing unit 502 is configured to perform the above-mentioned receiving operation shown in FIG. 2
  • the processing operations performed by the verification server in the embodiment, and the processing operations performed by the verification server 400 in the embodiment shown in FIG. 1 may perform the operations in the embodiment in FIG.
  • the unit 502 may perform the operation in the embodiment in FIG. 2 : perform an integrity check on the first data according to the integrity metric baseline value and the integrity metric value.
  • an embodiment of the present application further provides a first device 600, as shown in FIG. 10 .
  • the first device 600 includes a first communication interface 601 and a processor 603 .
  • the first communication interface 601 is used for executing the aforementioned sending operation for executing the control management device in the embodiment shown in FIG. 2 and the control management device 100 in the embodiment shown in FIG. 1 ;
  • the processor 603 is used for executing the above-mentioned sending operation
  • the first communication interface 601 may perform the operations in the embodiment in FIG.
  • the first device 600 may also include a second communication interface 602 .
  • the second communication interface 602 is configured to perform the aforementioned receiving operations performed by the control management device in the embodiment shown in FIG. 2 and the control management device 100 in the embodiment shown in FIG. 1 .
  • an embodiment of the present application further provides a second device 700, as shown in FIG. 11 .
  • the second device 700 includes a first communication interface 701 and a second communication interface 702 .
  • the first communication interface 701 is used to execute the aforementioned sending operation performed by the terminal device in the embodiment shown in FIG. 2 and the terminal device 200 in the embodiment shown in FIG. 1 ;
  • the second communication interface 702 is used to execute the aforementioned sending operation. It is used to perform the receiving operation performed by the terminal device in the embodiment shown in FIG. 2 and the terminal device 200 in the embodiment shown in FIG. 1 .
  • the first communication interface 701 may perform the operation in the embodiment in FIG.
  • the second device 700 may further include a processor 703 .
  • the processor 703 is configured to perform the aforementioned operations other than the receiving operation and the sending operation performed by the terminal device in the embodiment shown in FIG. 2 and the terminal device 200 in the embodiment shown in FIG. 1 .
  • an embodiment of the present application further provides a verification server 800, as shown in FIG. 12 .
  • the verification server 800 includes a first communication interface 801 and a processor 803 .
  • the first communication interface 801 is used to execute the aforementioned receiving operation for executing the verification server in the embodiment shown in FIG. 2 and the verification server 400 in the embodiment shown in FIG. 1 ; the processor 803 is used for executing the above-mentioned FIG.
  • the authentication server in the illustrated embodiment, and the authentication server 400 in the embodiment shown in FIG. 1 perform other operations except the receiving operation and the sending operation.
  • the first communication interface 801 may perform the operations in the embodiment in FIG.
  • the authentication server 800 may further include a second communication interface 802 .
  • the second communication interface 802 is used to execute the aforementioned sending operation for executing the authentication server in the embodiment shown in FIG. 2 and the authentication server 400 in the embodiment shown in FIG. 1 .
  • an embodiment of the present application further provides a first device 900, as shown in FIG. 13 .
  • the first device 900 includes a memory 901 and a processor 902 in communication with the memory 901 .
  • the memory 901 includes computer-readable instructions; the processor 902 is configured to execute the computer-readable instructions, so that the first device 900 executes the method executed by the control and management device side in the embodiment shown in FIG. The method performed by the control management device 100 in the exemplary embodiment.
  • an embodiment of the present application further provides a second device 1000, as shown in FIG. 14 .
  • the second device 1000 includes a memory 1001 and a processor 1002 in communication with the memory 1001 .
  • the memory 1001 includes computer-readable instructions; the processor 1002 is configured to execute the computer-readable instructions, so that the second device 1000 executes the method performed on the terminal device side in the embodiment shown in FIG. 2 , and the method shown in FIG. 1 The method performed by the terminal device 200 in the embodiment.
  • an embodiment of the present application further provides a verification server 1100, as shown in FIG. 15 .
  • the authentication server 1100 includes a memory 1101 and a processor 1102 in communication with the memory 1101 .
  • the memory 1101 includes computer-readable instructions; the processor 1102 is configured to execute the computer-readable instructions, so that the verification server 1100 executes the method performed on the verification server side in the embodiment shown in FIG. 2 and the implementation shown in FIG. 1 . In this example, the method performed by the authentication server 400.
  • the processor may be a central processing unit (English: central processing unit, abbreviation: CPU), a network processor (English: network processor, abbreviation: NP) or a combination of CPU and NP.
  • the processor may also be an application-specific integrated circuit (English: application-specific integrated circuit, abbreviation: ASIC), a programmable logic device (English: programmable logic device, abbreviation: PLD) or a combination thereof.
  • the above-mentioned PLD can be a complex programmable logic device (English: complex programmable logic device, abbreviation: CPLD), a field programmable logic gate array (English: field-programmable gate array, abbreviation: FPGA), a general-purpose array logic (English: generic array logic, abbreviation: GAL) or any combination thereof.
  • the processor may refer to one processor, or may include multiple processors.
  • the memory may include volatile memory (English: volatile memory), such as random-access memory (English: random-access memory, abbreviation: RAM); the memory may also include non-volatile memory (English: non-volatile memory), For example, read-only memory (English: read-only memory, abbreviation: ROM), flash memory (English: flash memory), hard disk (English: hard disk drive, abbreviation: HDD) or solid-state hard disk (English: solid-state drive, Abbreviation: SSD); the memory may also comprise a combination of the above-mentioned kinds of memory.
  • the memory may refer to one memory, or may include multiple memories.
  • computer-readable instructions are stored in the memory, and the computer-readable instructions include a plurality of software modules, such as a sending module, a processing module and a receiving module. After executing each software module, the processor can perform corresponding operations according to the instructions of each software module. In this embodiment, the operation performed by a software module actually refers to the operation performed by the processor according to the instruction of the software module. After the processor executes the computer-readable instructions in the memory, it can perform all operations that can be performed by each device or server in the integrity check according to the instructions of the computer-readable instructions.
  • the first communication interface 601 of the first device 600 can be specifically used as the sending unit 302 in the first device 300 to realize the communication between the first device and the second device or the authentication server.
  • Data communication; the processor 603 of the first device 600 can be specifically used as the processing unit 301 in the first device 300, for example, can be used to determine the integrity metric baseline value according to the entire content of the first data.
  • the first communication interface 701 of the second device 700 can be specifically used as the sending unit 402 in the second device 400 to implement data communication between the second device and the verification server; the second communication interface 702 of the second device 700 , which can be specifically used as the receiving unit 401 in the second device 400 to implement data communication between the first device and the second device.
  • the first communication interface 801 of the verification server 800 can be specifically used as the receiving unit 501 in the verification server 500 to realize data communication between the first device or the second device to the verification server; the processor 803 of the verification server 800, Specifically, it can be used as the processing unit 502 in the verification server 500, for example, it can be used to perform an integrity check on the first data according to the integrity metric baseline value and the integrity metric value.
  • an embodiment of the present application further provides a communication system 1200, as shown in FIG. 16 .
  • the communication system 1200 includes a first device 1201, a second device 1202 and a verification server 1203, wherein the first device 1201 may specifically be the first device 300, the first device 600 or the first device 900, and the second device 1202 may specifically be It is the second device 400, the second device 700 or the second device 1000, and the verification server 1203 may be the verification server 500, the verification server 800 or the verification server 1100.
  • each device or server in the foregoing embodiments may be a network device for executing the foregoing method, or may refer to a single board, line card, chip, etc. for executing the foregoing method.
  • an embodiment of the present application also provides a computer-readable storage medium, where instructions are stored in the computer-readable storage medium, and when the computer-readable storage medium runs on a computer, the computer is made to execute the implementation shown in FIG. 1 or FIG. 2 above.
  • the integrity check method in the example is also provided.
  • the embodiments of the present application also provide a computer program product, including a computer program or computer-readable instructions, when the computer program or the computer-readable instructions are run on a computer, the computer is made to execute the above-mentioned FIG. 1 or FIG. 2 .
  • the integrity check method in the exemplary embodiment is provided.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computing Systems (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • Power Engineering (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本申请实施例公开了一种完整性校验方法及相关设备，包括：第一设备向第二设备发送第一数据，第一设备向验证服务器发送该第一数据对应的完整性度量基线值，第二设备向验证服务器发送第一数据对应的完整性度量值；验证服务器即可根据完整性度量值和完整性度量基线值对第一数据进行完整性校验。如此，需要交互的仅是第一数据对应的完整性度量值和完整性度量基线值，无需交互全量的第一数据，减少了校验所需交互的数据量，节约了校验过程所占用的资源，而且，由可信的验证服务器进行完整性校验，而不是由第一设备直接对第一数据进行比对，确保该校验过程更加安全和可靠，从而为第二设备上业务的正常运行提供了保障。

Description

一种完整性校验方法及相关设备
本申请要求于2020年11月20日提交中国国家知识产权局、申请号为202011313900.3、申请名称为“一种完整性校验方法及相关设备”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及通信技术领域，尤其涉及一种完整性校验方法及相关设备。
背景技术
通常，设备之间会交互一些数据，指导接收端对待传输数据的处理，为了保证业务的正常运行，要求设备之间交互的数据在发送端和接收端保持一致，这就需要对发送端和接收端上保存的数据进行校验，例如，控制管理设备会向终端设备发送一些数据，这些数据指导该终端设备完成对报文的处理，要求终端设备上指导报文处理的数据来自控制管理设备且与控制管理设备下发的数据保持一致，一旦不一致，说明该终端设备上指导报文处理所依据的数据可能是不可靠的，基于此，需要对终端设备上用于指导报文处理的数据和控制管理设备上对应的数据进行校验。
目前，以控制管理设备向终端设备发送的数据的校验为例，终端设备会将从控制管理设备接收的数据全量上报给控制管理设备，由控制管理设备对所接收的数据和本地保存的数据进行比对，如果一致，则表示该终端设备中用于指导报文处理的数据准确，如果不一致，则表示该终端设备中用于指导报文处理的数据不准确。但是，该实现方式中，对终端设备和控制管理设备上数据的校验，需要两者之间交互的信息量较大，需要占用的网络资源较多，而且，通过全量数据的交互和对比进行校验，校验结果也不够安全和准确。
发明内容
本申请实施例提供了一种完整性校验方法及相关设备，数据的发送端和接收端分别将数据的完整性度量值和完整性度量基线值发送给可信的验证服务器，由该验证服务器对该数据的完整性进行校验，确保高效、可靠的完成对发送端和接收端上数据的完整性校验，从而为业务的正常运行提供了保障。
第一方面，本申请实施例提供了一种完整性校验方法，该方法可以包括：第一设备向第二设备发送第一数据之后，第一设备向验证服务器发送该第一数据对应的完整性度量基线值，第二设备向验证服务器发送第一数据对应的完整性度量值；这样，验证服务器即可根据完整性度量值和完整性度量基线值对第一数据进行完整性校验。如此，由可信的验证服务器对第一设备和第二设备分别发送的相同的第一数据对应的完整性度量值和完整性度量基线值进行完整性校验，需要交互的仅是第一数据对应的完整性度量值和完整性度量基线值，无需交互全量的第一数据，有效的减少了校验所需交互的数据量，大大的节约了校验过程所占用的资源，而且，通过引入可信的验证服务器，由验证服务器对完整性度量值和完整性度量基线值进行完整性校验，而不是由第一设备直接对第一数据进行比对，能够 确保该校验过程更加安全和可靠，从而为第二设备上业务的正常运行提供了保障。
其中，第一设备可以是控制管理设备，第二设备可以是终端设备。或者，第一设备可以是终端设备，第二设备可以是控制管理设备。又或者，第一设备和第二设备均可以是终端设备。
作为一个示例，第一数据可以包括下述至少一个：分段路由流量工程(英文：Segment Routing Traffic Engineering，简称：SR TE)配置信息、分段路由流量工程的策略(英文：Segment Routing Traffic Engineering policy，简称：SR TE-policy)配置信息、访问控制列表(英文：Access Control Lists，简称：ACL)配置信息或流规则(英文：Flow Specification，简称：FlowSpec)配置信息。
其中，完整性度量基线值可以为经过哈希计算得到的哈希值，那么，完整性度量值为经过哈希计算得到的哈希值。或者，完整性度量基线值也可以为数字签名，那么，完整性度量值为数字签名。又或者，完整性度量基线值还可以为经过加密处理得到的加密值，那么，完整性度量值为经过加密处理得到的加密值。
需要说明的是，为了确保第一设备和第二设备对相同的对象进行完整性校验，第一设备和第二设备可以保持时钟同步，或者，在第一数据携带发送时间戳，这样，可以保障进行完整性校验的第一数据是相同的数据，例如，第一设备待校验的数据为数据a和数据b，第二设备待检验的数据也为数据a和数据b。
在一种可能的实现方式中，在第一设备向验证服务器发送第一数据的完整性度量基线值之前，第一设备还可以计算第一数据对应的完整性度量基线值；在第二设备向验证服务器发送第一数据的完整性度量值之前，第二设备还可以计算第一数据对应的完整性度量值。作为一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据第一数据的全部内容确定所述完整性度量基线值；那么，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据所述第一数据的全部内容确定完整性度量值。其中，第一设备和第二设备上对第一数据按照相同的顺序保存，可以确保根据第一数据的全部内容计算的校验值是对应的，为完整性校验的准确执行提供了保障。作为另一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据第一数据的部分内容确定所述完整性度量基线值；那么，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据所述第一数据的部分内容确定完整性度量值。其中，第一设备和第二设备上获取该第一数据的部分内容的规则相同，可以确保根据第一数据的部分内容计算的校验值是对应的，为完整性校验的准确执行提供了保障。作为又一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据发送第一数据对应的第一操作日志确定所述完整性度量基线值；那么，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据接收所述第一数据对应的第二操作日志确定所述完整性度量值。其中，第一设备和第二设备上对接收和发送数据生成操作日志的规则可以相同，可以确保根据第一数据对应的第一操作日志和第二操作日志得到的校验值是对应的，为完整性校验的准确执行提供了保障。
在一种可能的实现方式中，第二设备向验证服务器发送第一数据对应的完整性度量值， 可以是基于所接收的第一指示触发的，也可以是满足本地预设条件后触发的。作为一个示例，在第二设备向验证服务器发送第一数据对应的完整性度量值之前，第二设备还可以接收第一指示，该第一指示用于指示第二设备对第一数据进行完整性校验。其中，第一指示可以由第一设备发送给第二设备，或者，该第一指示也可以由验证服务器发送给第二设备。作为另一个示例，第二设备向验证服务器发送第一数据对应的完整性度量值之前，第二设备还可以在确定满足预设条件时，生成所述完整性度量值。其中，预设条件包括下述至少一种：条件一、接收到的第一数据的总长度达到预设长度阈值；条件二、接收到的第一数据包含的表项的数量达到预设数量阈值；条件三、接收第一数据的累计时长达到预设时长；或者，条件四、第一数据为增量数据。如此，第二设备可以被触发计算第一数据对应的完整性度量值并向验证服务器发送该完整性度量值，以便验证服务器对第一数据的完整性进行校验。
第二方面，本申请实施例还提供了一种完整性校验方法，该方法应用于第一设备，该方法例如可以包括：第一设备向第二设备发送第一数据后，第一设备向验证服务器发送第一数据对应的完整性度量基线值，该完整性度量基线值用于对第一数据的进行完整性校验。
其中，第一设备可以是控制管理设备，第二设备可以是终端设备。或者，第一设备可以是终端设备，第二设备可以是控制管理设备。又或者，第一设备和第二设备均可以是终端设备。
作为一个示例，第一数据可以包括下述至少一个：SR TE配置信息、SR TE-policy配置信息、ACL配置信息或FlowSpec配置信息。
其中，完整性度量基线值可以为经过哈希计算得到的哈希值，或者，完整性度量基线值也可以为数字签名，又或者，完整性度量基线值还可以为经过加密处理得到的加密值。
需要说明的是，为了确保第一设备和第二设备对相同的对象进行完整性校验，第一设备和第二设备可以保持时钟同步，或者，在第一数据携带发送时间戳，这样，可以保障进行完整性校验的第一数据是相同的数据。
在一种可能的实现方式中，在第一设备向验证服务器发送第一数据的完整性度量基线值之前，第一设备还可以计算第一数据对应的完整性度量基线值。作为一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据第一数据的全部内容确定所述完整性度量基线值。作为另一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据第一数据的部分内容确定所述完整性度量基线值。作为又一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据发送第一数据对应的第一操作日志确定所述完整性度量基线值。
在一种可能的实现方式中，第一设备可以向第二设备发送第一指示，该第一指示用于指示第二设备对第一数据进行完整性校验。其中，第一指示可以是第一设备直接发送给第二设备的，或者，该第一指示也可以是第一设备经过验证服务器发送给第二设备的。
需要说明的是，第二方面提供的方法中，第一设备可以是第一方面提供的方法中的第一设备，所以，第二方面提供的方法的具体实现方式以及达到的效果，可以参见第一方面的相关说明。
第三方面，本申请实施例还提供了一种完整性校验方法，该方法应用于第二设备，该方法例如可以包括：第二设备接收第一设备发送的第一数据后，该第二设备向验证服务器发送所述第一数据对应的完整性度量值，该完整性度量值用于对第一数据的进行完整性校验。
其中，第一设备可以是控制管理设备，第二设备可以是终端设备。或者，第一设备可以是终端设备，第二设备可以是控制管理设备。又或者，第一设备和第二设备均可以是终端设备。
作为一个示例，第一数据可以包括下述至少一个：SR TE配置信息、SR TE-policy配置信息、ACL配置信息或FlowSpec配置信息。
其中，完整性度量值可以为经过哈希计算得到的哈希值，或者，完整性度量值也可以为数字签名，又或者，完整性度量值还可以为经过加密处理得到的加密值。
需要说明的是，为了确保第一设备和第二设备对相同的对象进行完整性校验，第一设备和第二设备可以保持时钟同步，或者，在第一数据携带发送时间戳，这样，可以保障进行完整性校验的第一数据是相同的数据。
在一种可能的实现方式中，在第二设备向验证服务器发送第一数据的完整性度量值之前，第二设备还可以计算第一数据对应的完整性度量值。作为一个示例，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据所述第一数据的全部内容确定完整性度量值。作为另一个示例，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据所述第一数据的部分内容确定完整性度量值。作为又一个示例，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据接收所述第一数据对应的第二操作日志确定所述完整性度量值。
在一种可能的实现方式中，第二设备向验证服务器发送第一数据对应的完整性度量值，可以是基于所接收的第一指示触发的，也可以是满足本地预设条件后触发的。作为一个示例，在第二设备向验证服务器发送第一数据对应的完整性度量值之前，第二设备还可以接收第一指示，该第一指示用于指示第二设备对第一数据进行完整性校验。其中，第一指示可以由第一设备发送给第二设备，或者，该第一指示也可以由验证服务器发送给第二设备。作为另一个示例，第二设备向验证服务器发送第一数据对应的完整性度量值之前，第二设备还可以在确定满足预设条件时，生成所述完整性度量值。其中，预设条件包括下述至少一种：条件一、接收到的第一数据的总长度达到预设长度阈值；条件二、接收到的第一数据包含的表项的数量达到预设数量阈值；条件三、接收第一数据的累计时长达到预设时长；或者，条件四、第一数据为增量数据。如此，第二设备可以被触发计算第一数据对应的完整性度量值并向验证服务器发送该完整性度量值，以便验证服务器对第一数据的完整性进行校验。
需要说明的是，第三方面提供的方法中，第二设备可以是第一方面提供的方法中的第二设备，所以，第三方面提供的方法的具体实现方式以及达到的效果，可以参见第一方面的相关说明。
第四方面，本申请实施例还提供了一种完整性校验方法，该方法应用于验证服务器， 该方法例如可以包括：验证服务器接收第一设备发送的第一数据对应的完整性度量基线值和第二设备发送的第一数据对应的完整性度量值，该第一数据由第一设备发送给第二设备，那么，验证服务器根据完整性度量基线值和完整性度量值，对该第一数据的进行完整性校验。
其中，第一设备可以是控制管理设备，第二设备可以是终端设备。或者，第一设备可以是终端设备，第二设备可以是控制管理设备。又或者，第一设备和第二设备均可以是终端设备。
作为一个示例，第一数据可以包括下述至少一个：SR TE配置信息、SR TE-policy配置信息、ACL配置信息或FlowSpec配置信息。
其中，完整性度量基线值可以为经过哈希计算得到的哈希值，那么，完整性度量值为经过哈希计算得到的哈希值。或者，完整性度量基线值也可以为数字签名，那么，完整性度量值为数字签名。又或者，完整性度量基线值还可以为经过加密处理得到的加密值，那么，完整性度量值为经过加密处理得到的加密值。
需要说明的是，为了确保第一设备和第二设备对相同的对象进行完整性校验，第一设备和第二设备可以保持时钟同步，或者，在第一数据携带发送时间戳，这样，可以保障进行完整性校验的第一数据是相同的数据。
在一种可能的实现方式中，第二设备向验证服务器发送第一数据对应的完整性度量值，可以是基于所接收的指示触发的。作为一个示例，验证服务器可以接收第一设备发送的第一指示，该第一指示用于指示验证服务器对第一数据进行完整性校验。那么，响应于所述第一指示，验证服务器还可以向第二设备发送第二指示，该第二指示用于指示对第一数据进行完整性验证。这样，第二设备即可基于第二指示计算并向验证服务器发送第一数据对应的完整性度量值。
在一些可能的实现方式中，验证服务器根据完整性度量基线值和完整性度量值对第一数据的进行完整性校验，可以包括：验证服务器确定完整性度量值和完整性度量基线值匹配，从而，验证服务器确定对第一数据的完整性校验通过。
作为一个示例，第一数据的完整性度量基线值为第一数据的全部内容(或部分内容，又或者发送第一数据对应的第一操作日志)经过第一哈希算法计算得到的第一哈希值，第一数据的完整性度量值为第一数据的全部内容(或部分内容，又或者接收第一数据对应的第二操作日志)经过第一哈希算法计算得到的第二哈希值，那么，验证服务器可以判断第一哈希值和第二哈希值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过。
作为又一个示例，第一数据的完整性度量基线值为第一数据的全部内容(或部分内容，又或者发送第一数据对应的第一操作日志)经过第一私钥对第一哈希值进行签名操作得到的第一签名，第一数据的完整性度量值为第一数据的全部内容(或部分内容，又或者接收第一数据对应的第二操作日志)经过第二私钥对第二哈希值进行签名操作得到的第二签名，那么，一种情况下，验证服务器可以先判断第一私钥对应的第一公钥和第二私钥对应的第二公钥是否相同，如果相同，再判断第一签名和第二签名是否一致，如果一致，则，确定 对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过；另一种情况下，验证服务器可以先采用第一私钥对应的第一公钥对第一签名进行处理得到第一还哈希值，采用第二私钥对应的第二公钥对第二签名进行处理得到第二哈希值，再判断第一哈希值和第二哈希值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过。其中，第一公钥可以是控制管理设备对应的第一私钥对应的公钥，该公钥可以预先保存在验证服务器本地，也可以是控制管理设备向验证服务器发送第一数据的完整性度量基线值时发送给验证服务器的。同理，第二公钥可以是终端设备对应的第二私钥对应的公钥，该公钥可以预先保存在验证服务器本地，也可以是终端设备向验证服务器发送第一数据的完整性度量值时发送给验证服务器的。
作为再一个示例，第一数据的完整性度量基线值为第一数据的全部内容(或部分内容，又或者发送第一数据对应的第一操作日志)经过第一加密算法计算得到的第一加密值，第一数据的完整性度量值为第一数据的全部内容(或部分内容，又或者接收第一数据对应的第二操作日志)经过第一加密算法计算得到的第二加密值，那么，一种情况下，验证服务器可以判断第一加密值和第二加密值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过；另一种情况下，验证服务器也可以先采用第一加密算法对应的第一解密算法对第一加密值进行解密得到第一解密值，采用第一加密算法对应的第一解密算法对第二加密值进行解密得到第二解密值再判断第一解密值和第二解密值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过。
当对第一数据的完整性校验未通过时，为了让控制管理设备感知到该控制管理设备和终端设备之间关于第一数据的一致性问题，验证服务器可以向控制管理设备发送告警消息，用于告知该终端设备上的第一数据存在异常。当控制管理设备接收到告警消息后，为了确保终端设备能够继续正常运行，还可以重新向终端设备发送第一数据，指示终端设备用新接收的第一数据替换本地保存的第一数据，或者，指示终端设备保存新接收的第一数据并将之前保存的第一数据添加老化标记，添加老化标记的第一数据不能再指导该终端设备对报文的处理，而是以新接收的第一数据指导该终端设备对报文进行处理。
需要说明的是，第四方面提供的方法中，验证服务器可以是第一方面提供的方法中的验证服务器，所以，第四方面提供的方法的具体实现方式以及达到的效果，可以参见第一方面的相关说明。
需要说明的是，对于批量发送的数据，为了确保安全和准确的校验，可以是周期性执行完整性校验；对于增量发送的数据，可以即时对增量数据进行完整性校验。
第五方面，本申请还提供了网络系统，包括第一设备、第二设备和验证服务器。其中，第一设备用于执行上述第二方面或第二方面任意一种可能的实现方式提供的方法，或者，执行第一方面、第一方面任意一种可能的实现方式提供的方法中第一设备所执行的操作；第二设备用于执行上述第三方面或第三方面任意一种可能的实现方式提供的方法，或者，执行第一方面、第一方面任意一种可能的实现方式提供的方法中第二设备所执行的操作；验证服务器用于执行上述第四方面或第四方面任意一种可能的实现方式提供的方法，或者， 执行第一方面、第一方面任意一种可能的实现方式提供的方法中验证服务器所执行的操作。
第六方面，本申请实施例还提供了一种第一设备，包括收发单元和处理单元。其中，收发单元用于执行上述第一方面、第一方面任意一种可能的实现方式、第二方面或第二方面任意一种可能的实现方式提供的方法中所述第一设备所执行的收发操作；处理单元用于执行上述第一方面、第一方面任意一种可能的实现方式、第二方面或第二方面任意一种可能的实现方式提供的方法中所述第一设备所执行的除了收发操作以外的其他操作。例如：当所述第一设备执行所述第二方面所述的方法时，所述收发单元用于向第二设备发送第一数据，以及向验证服务器发送所述第一数据对应的完整性度量基线值；所述处理单元用于根据所述第一数据的全部内容确定所述完整性度量基线值。
第七方面，本申请实施例还提供了一种第二设备，包括收发单元和处理单元。其中，收发单元用于执行上述第一方面、第一方面任意一种可能的实现方式、第三方面或第三方面任意一种可能的实现方式提供的方法中所述第二设备所执行的收发操作；处理单元用于执行上述第一方面、第一方面任意一种可能的实现方式、第三方面或第三方面任意一种可能的实现方式提供的方法中所述第二设备所执行的除了收发操作以外的其他操作。例如：当所述第二设备执行所述第三方面所述的方法时，所述收发单元用于接收第一设备发送的第一数据，以及向验证服务器发送所述第一数据对应的完整性度量值；所述处理单元用于根据所述第一数据的全部内容确定所述完整性度量值。
第八方面，本申请实施例还提供了一种验证服务器，包括收发单元和处理单元。其中，收发单元用于执行上述第一方面、第一方面任意一种可能的实现方式、第四方面或第四方面任意一种可能的实现方式提供的方法中所述验证服务器所执行的收发操作；处理单元用于执行上述第一方面、第一方面任意一种可能的实现方式、第四方面或第四方面任意一种可能的实现方式提供的方法中所述验证服务器所执行的除了收发操作以外的其他操作。例如：当所述验证服务器执行所述第四方面所述的方法时，所述收发单元用于接收第一设备发送的第一数据对应的完整性度量基线值，以及接收所述第二设备发送的所述第一数据对应的完整性度量值；所述处理单元用于根据所述完整性度量基线值和所述完整性度量值，对所述第一数据的进行完整性校验。
第九方面，本申请实施例还提供了一种第一设备，包括第一通信接口和处理器。其中，第一通信接口用于执行前述第一方面、第一方面任意一种可能的实现方式、第二方面或第二方面任意一种可能的实现方式提供的方法中所述第一设备所执行的发送操作；处理器，用于执行前述第一方面、第一方面任意一种可能的实现方式、第二方面或第二方面任意一种可能的实现方式提供的方法中所述第一设备所执行的除所述接收和发送操作以外的其他操作。该第一设备还可以包括第二通信接口，第二通信接口用于执行前述第一设备的接收操作。
第十方面，本申请实施例还提供了一种第二设备，包括第一通信接口和第二通信接口。其中，第一通信接口用于执行前述第一方面、第一方面任意一种可能的实现方式、第三方面或第三方面任意一种可能的实现方式提供的方法中所述第二设备所执行的发送操作，第二通信接口用于执行前述第一方面、第一方面任意一种可能的实现方式、第三方面或第三 方面任意一种可能的实现方式提供的方法中所述第二设备所执行的接收操作。此外，该第二设备还可以包括处理器，用于执行前述第一方面、第一方面任意一种可能的实现方式、第三方面或第三方面任意一种可能的实现方式提供的方法中所述第二设备所执行的除所述接收和发送操作以外的其他操作。
第十一方面，本申请实施例还提供了一种验证服务器，包括第一通信接口和处理器。其中，第一通信接口用于执行前述第一方面、第一方面任意一种可能的实现方式、第四方面或第四方面任意一种可能的实现方式提供的方法中所述验证服务器所执行的接收操作；处理器，用于执行前述第一方面、第一方面任意一种可能的实现方式、第四方面或第四方面任意一种可能的实现方式提供的方法中所述验证服务器所执行的除所述接收和发送操作以外的其他操作。该验证服务器还可以包括第二通信接口，第二通信接口用于执行前述第一设备的发送操作。
第十二方面，本申请实施例还提供了一种第一设备，该第一设备包括存储器和处理器。其中，该存储器包括计算机可读指令；与该存储器通信的处理器用于执行所述计算机可读指令，使得所述第一设备用于执行以上第一方面、第一方面任意一种可能的实现方式、第二方面或第二方面任意一种可能的实现方式提供的方法中所述第一设备对应的部分。
第十三方面，本申请实施例还提供了一种第二设备，该第二设备包括存储器和处理器。其中，该存储器包括计算机可读指令；与该存储器通信的处理器用于执行所述计算机可读指令，使得所述第二设备用于执行以上第一方面、第一方面任意一种可能的实现方式、第三方面或第三方面任意一种可能的实现方式提供的方法中所述第二设备对应的部分。
第十四方面，本申请实施例还提供了一种验证服务器，该验证服务器包括存储器和处理器。其中，该存储器包括计算机可读指令；与该存储器通信的处理器用于执行所述计算机可读指令，使得所述验证服务器用于执行以上第一方面、第一方面任意一种可能的实现方式、第四方面或第四方面任意一种可能的实现方式提供的方法中所述验证服务器对应的部分。
第十五方面，本申请实施例还提供了一种通信系统，该通信系统包括：第六方面、第九方面或第十二方面提供的所述第一设备，第七方面、第十方面或第十三方面提供的所述第二设备，以及第八方面、第十一方面或第十四方面提供的验证服务器。
第十六方面，本申请实施例还提供了一种计算机可读存储介质，该计算机可读存储介质中存储有指令，当其在计算机上运行时，使得所述计算机执行以上第一方面、第一方面任意一种可能的实现方式、第二方面、第二方面任意一种可能的实现方式、第三方面、第三方面任意一种可能的实现方式、第四方面或第四方面任意一种可能的实现方式提供的方法。
第十七方面，本申请实施例还提供了计算机程序产品，包括计算机程序或计算机可读指令，当所述计算机程序或所述计算机可读指令在计算机上运行时，使得计算机执行前述第一方面、第一方面任意一种可能的实现方式、第二方面、第二方面任意一种可能的实现方式、第三方面、第三方面任意一种可能的实现方式、第四方面或第四方面任意一种可能的实现方式提供的方法。
需要说明的是，上述实施例中的第一设备、第二设备以及验证服务器，可以是用于执行上述方法的网络设备，也可以是指用于执行上述方法的单板、线卡、芯片等。
附图说明
图1为本申请实施例所适用的网络10的结构示意图；
图2为本申请实施例中一种完整性校验方法100的流程示意图；
图3为本申请实施例中一种完整性校验方法200的流程示意图；
图4为本申请实施例中一种完整性校验方法300的流程示意图；
图5为本申请实施例中一种完整性校验方法400的流程示意图；
图6为本申请实施例中一种完整性校验方法500的流程示意图；
图7为本申请实施例中一种第一设备300的结构示意图；
图8为本申请实施例中一种第二设备400的结构示意图；
图9为本申请实施例中一种验证服务器500的结构示意图；
图10为本申请实施例中一种第一设备600的结构示意图；
图11为本申请实施例中一种第二设备700的结构示意图；
图12为本申请实施例中一种验证服务器800的结构示意图；
图13为本申请实施例中一种第一设备900的结构示意图；
图14为本申请实施例中一种第二设备1000的结构示意图；
图15为本申请实施例中一种验证服务器1100的结构示意图；
图16为本申请实施例中一种通信系统1200的结构示意图。
具体实施方式
下面将结合附图，对本申请实施例中的技术方案进行描述。本申请实施例描述的网络架构以及业务场景是为了更加清楚的说明本申请实施例的技术方案，并不构成对于本申请实施例提供的技术方案的限定，本领域普通技术人员可知，随着网络架构的演变和新业务场景的出现，本申请实施例提供的技术方案对于类似的技术问题，同样适用。
本申请中的“1”、“2”、“3”、“第一”、“第二”以及“第三”等序数词用于对多个对象进行区分，不用于限定多个对象的顺序。
本申请中提及的“A和/或B”，应该理解为包括以下情形：仅包括A，仅包括B，或者同时包括A和B。
第一设备可以向第二设备发送数据，这些数据可以作为第二设备对报文等待传输数据的处理依据。为了确保第二设备上业务的正常运行，需要保证第二设备从第一设备接收到的数据和第一设备发送给第二设备的数据，即，需要对第二设备和第一设备上保存的数据进行校验。第一设备和第二设备可以是任意需要保持数据一致的设备，例如，第一设备可以是控制管理设备，第二设备可以是终端设备；又例如，第一设备可以是终端设备，第二设备可以是控制管理设备；再例如，第一设备和第二设备均可以是终端设备。本申请实施例中以第一设备为控制管理设备，第二设备为终端设备为例进行说明。
终端设备对待传输数据的处理，可以以控制管理设备发送的一些数据作为依据，这些数据例如可以包括分段路由流量工程(英文：Segment Routing Traffic Engineering，简称：SR TE)配置信息、分段路由流量工程的策略(英文：Segment Routing Traffic Engineering policy，简称：SR TE-policy)配置信息、访问控制列表(英文：Access Control Lists，简称：ACL)配置信息或流规则(英文：Flow Specification，简称：FlowSpec)配置信息等。终端设备接收控制管理设备发送的数据之后，如果这些数据在存储、使用等过程中发生错误或被篡改，会使得指导报文处理的数据与控制管理设备发送的数据不一致，导致终端设备对报文的处理不够可靠，影响业务的正常运行。基于此，为了保证业务的正常运行，需要确保终端设备从控制管理设备上接收的、指导报文处理的数据与控制管理设备向该终端设备发送的数据是一致的。
目前，通常由控制管理设备对账的方式对终端设备上的数据和控制管理设备上的数据的一致性进行校验。对账方式，可以是指终端设备定期将指导报文处理的数据发送给控制管理设备，由控制管理设备对所接收的数据和自身发送给该终端设备的对应数据进行比对，以确定该周期内终端设备上指导报文处理的数据是否还是可靠的。
举例来说，以图1所示的网络10为例，假设该网络10中至少可以包括：控制管理设备100和终端设备200和终端设备300。其中，各终端设备至少具有报文的处理能力；控制管理设备100可以能够和各个终端设备进行数据交互，例如，向终端设备200和终端设备300分别发送用于指导报文处理的数据，实现对终端设备200和终端设备300的管控。需要说明的是，该网络10中包括的终端设备的数量在本申请实施例中不作具体限定，例如终端设备可以多于2个，即，除了上述终端设备200和终端设备300以外，还包括其他的终端设备；或者，网络10中包括的终端设备数量也可以小于2。
作为一个示例，控制管理设备100向终端设备200发送数据1，终端设备200可以保存该数据1，并基于本地保存的数据1指导对报文的处理。假设预设的对账周期为1小时，那么，每隔1小时，终端设备200将本地保存的数据1’(如果终端设备200上的数据未被篡改或未发生错误，则数据1’与数据1相同)发送给控制管理设备100，由控制管理设备100对本地保存的数据1和数据1’进行比对，如果比对结果表示数据1和数据1’一致，则，确定该周期内终端设备200对从控制管理设备100接收的数据1没有进行篡改也没有发生错误，终端设备200在该周期内可靠，即，终端设备200在该周期内基于数据1’进行报文的处理能够确保业务的正常运行；反之，如果比对结果表示数据1和数据1’不一致，则，确定该周期内终端设备200对从控制管理设备100接收的数据1进行了篡改或发生了错误，此时，终端设备200在该周期内基于数据1’进行报文的处理无法保证业务的正常运行。
但是，上述由控制管理设备对账的方式实现终端设备上的数据和控制管理设备上的数据的校验，一方面，终端设备需要每个周期均将本地保存的、来自控制管理设备的全量数据上报给控制管理设备，每次交互的数据量大且交互频繁，占用了较多的资源；另一方面，通过全量数据的对比进行校验，校验结果不够安全和可靠。
基于此，本申请实施例提供了一种完整性校验方法，引入可信的验证服务器对控制管 理设备向终端设备发送的数据进行远程完整性校验，过程例如可以包括：控制管理设备向终端设备发送第一数据后，该控制管理设备生成并向验证服务器发送该第一数据对应的完整性度量基线值；接收第一数据的终端设备也可以生成并向该验证服务器发送第一数据对应的完整性度量值；该可信的验证服务器即可对来自终端设备的完整性度量值和来自控制管理设备的完整性度量基线值，对该第一数据进行完整性校验。当对第一数据的完整性校验通过时，表明该终端设备上保存的第一数据和控制管理设备上保存的第一数据一致；否则，当对第一数据的完整性校验不通过时，表明该终端设备上保存的第一数据和控制管理设备上保存的第一数据不一致。如此，由可信的验证服务器对终端设备和控制管理设备分别发送的相同的第一数据对应的完整性度量值和完整性度量基线值进行完整性校验，需要交互的仅是第一数据对应的完整性度量值和完整性度量基线值，无需交互全量的第一数据，有效的减少了校验所需交互的数据量，大大的节约了校验过程所占用的资源，而且，通过引入可信的验证服务器，由验证服务器对完整性度量值和完整性度量基线值进行完整性校验，而不是由控制管理设备直接对第一数据进行比对，能够确保该校验过程更加安全和可靠，从而为终端设备上业务的正常运行提供了保障。
仍然以图1所示的网络10为例，该网络10还可以包括验证服务器400，该验证服务器400能够和控制管理设备100以及各终端设备进行数据交互，且用于对控制管理设备100和各终端设备进行本申请实施例提供的完整性校验的过程例如可以包括：S11，控制管理设备100向终端设备200发送数据a；S12，控制管理设备100根据私钥1生成数据a对应的签名1，并将作为数据a对应的完整性度量基线值的签名1向验证服务器400发送；S13，终端设备200根据私钥2生成数据a对应的签名2，并将作为数据a对应的完整性度量值的签名2向验证服务器400发送；S14，验证服务器400根据公钥1对接收的签名1进行处理，得到摘要1，根据公钥2对接收的签名2进行处理，得到摘要2，其中，公钥1与私钥1对应，公钥2与私钥2对应；S15，验证服务器400判断摘要1和摘要2是否一致，如果一致，则表示对该数据a的完整性校验通过；如果不一致，则表示对该数据a的完整性校验未通过。如果验证服务器400确定该数据a的完整性校验未通过，则，还可以向控制管理设备100发送告警消息，用于告知终端设备200上的数据a存在异常，以便控制管理设备100可以基于稿告警消息的指示，重新向终端设备200发送该数据a；从而，终端设备200可以用新接收到的数据a替换本地保存的数据a，以提供更加可靠的报文处理功能。
可以理解的是，上述场景仅是本申请实施例提供的一个场景示例，本申请实施例并不限于此场景。
本申请实施例中，终端设备，是指能够实现对待传输数据处理功能的任意设备，例如，可以是交换机、路由器等网络设备，又例如，也可以手机、电脑等用户设备。控制管理设备，是指对终端设备具有管理和/或控制功能的任意设备，例如，可以是网络云化引擎(英文：Network Cloud Engine，简称：NCE)、服务器、网管或者路由器等；或者，控制管理实体也可以是任意一个设备内集成的功能实体，该功能实体可以通过硬件形式体现也可以通过软件形式体现，例如，也可以是设备内的Telnet(一种应用层协议)控制台或安全外壳协议(英文：Secure Shell Protocol，简称：SSH)控制台，其中，Telnet控制台可以使用 于互联网及局域网中，使用虚拟终端的形式提供双向、以文字字符串为主的命令行接口交互功能；SSH控制台是一种建立在应用层和传输层基于上的安全协议。验证服务器可以是可信的远程证明服务器，该验证服务器可以和控制管理设备合设于同一实体设备，作为该实体设备中两个功能单元；或者，该验证服务器也可以是一个独立的、可信的第三方实体设备，例如可以是证书授权(英文：Certificate Authority，简称：CA)服务器。需要说明的是，本申请实施例中的各种设备，在本申请实施例中不作具体限定。
下面结合附图，通过实施例来详细说明本申请实施例中一种完整性校验方法的具体实现方式。
图2为本申请实施例中一种完整性校验方法100的流程示意图。该方法100以终端设备、控制管理设备和验证服务器三者之间的交互进行说明，其中，终端设备可以是图1中的终端设备200或终端设备300，控制管理设备可以是图1中的控制管理设备100，验证服务器可以是图1中的验证服务器400。参见图2，该方法100例如可以包括下述S101～S106：
S101，控制管理设备向终端设备发送第一数据。
第一数据可以为控制管理设备向终端设备发送的任何数据。该第一数据可以被终端设备直接或间接的用于指导报文的处理。例如，第一数据可以包括下述类型的数据中至少一种：SR TE配置信息、SR TE-policy配置信息、ACL配置信息或FlowSpec配置信息。
如果第一数据包括SR TE配置信息，一种情况下，S101例如可以是：控制管理设备向终端设备发送路径计算单元通信协议(英文：Path Computation Element Communication Protocol，简称：PCEP)报文，该PCEP报文中携带SR TE配置信息可以包括对应的SR标签。另一种情况下，S101例如可以是：控制管理设备向终端设备发送网络配置协议(英文：Network Configuration Protocol，简称：NETCONF)报文或YANG模型报文，该NETCONF报文或YANG模型报文中携带的SR TE配置信息可以包括对应的SR标签。该场景中，第一数据中对应的SR标签，与多协议标签交换(英文：Multi-Protocol Label Switching，简称：MPLS)TE场景中的MPLS标签类似，本申请实施例不再赘述。
如果第一数据包括SR TE-policy配置信息，一种情况下，S101例如可以是：控制管理设备向终端设备静态下发命令行，命令行中携带SR TE-policy配置信息；另一种情况下，S101例如可以是：控制管理设备向终端设备发送边界网关协议(英文：Border Gateway Protocol，简称：BGP)报文，该BGP报文中可以携带SR TE-policy配置信息。其中，SR TE-policy配置信息可以包括：三元组标识、至少一条候选路径(英文：Candidate Path)、各候选路径的优先级(英文：Preference)属性、各候选路径下至少一个权重(英文：Weight)和该权重对应的段标识列表(英文：Segment Identification List，简称：SID List)，三元组标识用于唯一标识SR TE-policy配置信息，例如，三元组标识可以包括：头端(英文：Headend)，用于指示SR TE-policy生成或实现的节点；颜色(英文：Color)，用于区分同一头端和尾端之间的多条SR TE-policy；尾端(英文：Endpoint)，用于指示SR Policy的尾端，可以是一个第四版互联网协议(英文：Internet Protocol version 4，简称：IPv4)地址或第六版互联网协议(英文：Internet Protocol version 6，简称：IPv6)地址。候选路径(英文：Candidate Path)可以由发起协议(英文：protocol-origin)，发起者标识(originator)以及鉴 别器(英文：discriminator)唯一标识。例如，SR TE-policy配置信息具体形式可以如下：
SR policy POL1<headend,color,endpoint>//POL1的SR policy的名称和标识
Candidate-path CP1<protocol-origin,originator,discriminator>//该SR policy的候选路径CP1
Preference 200//CP 1对应的候选路径的优先级属性为200
weight W1,SID-List1<SID11...SID1i>//权重为W1的SID List
weight W2,SID-List2<SID21...SID2j>//权重为W2的SID List
Candidate-path CP2<protocol-origin,originator,discriminator>//该SR policy的候选路径CP2
Preference 100//CP 2对应的候选路径的优先级属性为100
weight W3,SID-List3<SID31...SID3i>//权重为W3的SID List
weight W4,SID-List4<SID41...SID4j>//权重为W4的SID List
其中，每个SID List中均可以包括对应的多个SID，每个SID可以为一个节点对应的SR标签。
如果第一数据包括ACL配置信息，一种情况下，S101例如可以是：S101例如可以是：控制管理设备向终端设备静态下发命令行，命令行中携带ACL配置信息。另一种情况下，S101例如可以是：控制管理设备向终端设备发送NETCONF报文或YANG模型报文，该NETCONF报文或YANG模型报文中携带ACL配置信息。
如果第一数据包括FlowSpec配置信息，那么，S101例如可以是：控制管理设备向终端设备发送BGP报文，该BGP报文中可以携带FlowSpec配置信息。
需要说明的是，上述四种可能的数据类型仅是举例说明，本申请实施例中的第一数据还可以是其他的表项或配置信息，不作具体限定。
对于控制管理设备，S101之后可以保存该第一数据。对于终端设备，S101之后不仅可以基于第一数据生成用于指导报文处理的表项，而且可以保存该第一数据。终端设备上用于指导报文处理的表项可以和本地保存的第一数据匹配。而且，控制管理设备上保存的第一数据的顺序可以和终端设备上保存的第一数据的顺序一致，以保证对第一数据的完整性进行校验时不会因为保存数据的顺序而影响校验结果，例如，可以均按照字典序排序和保存，又例如，也可以均按照数据对应的时间戳排序和保存。
需要说明的是，在完整性校验时，要求终端设备和控制管理设备上的校验对象是相同的，即，终端设备上参与校验的数据和控制管理设备上参与校验的数据是相同的。作为一个示例，如果终端设备和控制管理设备保持时钟同步，则可以满足校验对象一致的要求。作为另一个示例，如果终端设备和控制管理设备未设置时钟同步的功能，那么，S101中的第一数据还可以携带发送时间戳，这样，可以将发送时间戳相同的数据作为参与校验的数据，按照本申请实施例提供的完整性校验方法进行校验，也可以满足校验对象一致的要求。
S102，控制管理设备生成第一数据对应的完整性度量基线值，该完整性度量基线值用于对第一数据的进行完整性校验。
S103，控制管理设备向验证服务器发送该第一数据对应的完整性度量基线值。
其中，第一数据对应的完整性度量基线值，可以作为验证服务器对该第一数据的完整性验证的基准值，将第一数据对应的完整性度量值与该完整性度量基线值进行匹配，如果与该完整性度量基线值匹配，则，确定该第一数据的完整性校验通过，否则，确定该第一数据的完整性校验不通过。该第一数据对应的完整性度量基线值例如可以为：经过哈希计算得到的哈希值、数字签名或经过加密处理得到的加密值。
在一些可能的实现方式中，S102可以是控制管理设备根据第一数据生成该第一数据对应的完整性度量基线值。
作为一个示例，控制管理设备可以根据第一数据的全部内容确定第一数据对应的完整性度量基线值。例如，控制管理设备可以将本地保存的第一数据的全部内容经过哈希计算得到的哈希值，并将所得的该哈希值作为第一数据对应的完整性度量基线值；又例如，控制管理设备也可以将本地保存的第一数据的全部内容进行数字签名操作得到签名，并将所得的该签名作为第一数据对应的完整性度量基线值；再例如，控制管理设备可以将本地保存的第一数据的全部内容经过加密处理得到的加密值，并将所得的该加密值作为第一数据对应的完整性度量基线值。
作为另一个示例，控制管理设备可以根据第一数据的部分内容确定该第一数据对应的完整性度量基线值。其中，所述第一数据的部分内容可以是第一数据中参与校验的数据，S102例如可以包括：控制管理设备基于预设规则从第一数据中确定所述第一数据的部分内容，从而，根据所确定的所述第一数据的部分内容确定该第一数据对应的完整性度量基线值，预设规则可以根据实际需求进行灵活设置，例如，可以为第一数据中的每个内容设置对应的权重并设置权重阈值，那么，预设规则可以包括：选择权重不小于所述权重阈值的内容，并将选中内容按照本地保存的顺序(或权重的大小顺序)排序后得到所述第一数据的部分内容；又例如，预设规则可以包括：选择某些预设位置的内容，并将选中内容按照本地保存的顺序(或权重的大小顺序)排序后得到所述第一数据的部分内容。该示例下，S102的实现方式可以包括但不限于：方式一，控制管理设备可以将本地保存的第一数据的部分内容经过哈希计算得到的哈希值，并将所得的该哈希值作为第一数据对应的完整性度量基线值；方式二，控制管理设备也可以将本地保存的第一数据的部分内容进行数字签名操作得到签名，并将所得的该签名作为第一数据对应的完整性度量基线值；再例如，控制管理设备可以将本地保存的第一数据的部分内容经过加密处理得到的加密值，并将所得的该加密值作为第一数据对应的完整性度量基线值。
在一些可能的实现方式中，S102可以是控制管理设备根据发送第一数据对应的第一操作日志生成该第一数据对应的完整性度量基线值。需要说明的是，控制管理设备为了记录自身执行的操作，控制管理设备可以将每次向终端设备发送数据的行为记录在第一操作日志中，作为该第一操作日志的一条内容。如果第一数据仅是控制管理设备向终端设备执行的一次发送数据的行为，则，控制管理设备可以根据第一操作日志中与发送该第一数据对应的一条内容确定第一数据对应的完整性度量基线值。如果第一数据包括控制管理设备向终端设备执行的多次发送数据的行为，则，控制管理设备可以根据第一操作日志中发送该第一数据对应的多条内容的全部确定第一数据对应的完整性度量基线值；或者，控制管理 设备也可以根据第一操作日志中发送该第一数据对应的多条内容的部分确定第一数据对应的完整性度量基线值，其中，多条内容中的部分例如可以是所述多条内容中某种操作类型对应的内容，操作类型可以包括增加、删除和修改等，或者，多条内容中的部分例如也可以是所述多条内容中生成时间相隔预设时长对应的内容。其中，该完整性度量基线值，例如可以是经过哈希计算得到的哈希值、经过数字签名操作得到签名或者经过加密处理得到的加密值。
具体实现时，对于S102执行的时机，一种情况下，可以是在网络部署初期，控制管理设备批量向终端设备发送数据时，控制管理设备执行该方法100对批量发送的第一数据进行完整性校验；另一种情况下，可以终端设备运行的过程中，控制管理设备在有需求时向终端设备发送数据时，控制管理设备执行该方法100对增量发送的第一数据进行完整性校验。其中，批量发送的数据也可以称为基本数据，是终端设备运行必备的数据；增量发送的数据，可以是指在批量发送的数据发送完成之后，超过预设时长(如1分钟)又发送的数据。需要说明的是，控制管理设备向终端设备发送增量数据，例如可以是该终端设备的远端设备的路由信息发生变化。
该实现方式中，第一操作日志中可以保存操作类型和操作数据。如果第一数据是批量发送的数据，则，既可以根据第一数据的全部或部分内容生成第一数据对应的完整性度量基线值，也可以根据发送第一数据对应的第一操作日志生成第一数据对应的完整性度量基线值。如果第一数据是增量数据，则，可以优选根据发送第一数据对应的第一操作日志生成第一数据对应的完整性度量基线值。
在S102之后或S102执行的同时，控制管理设备还可以直接或间接的向终端设备发送第一指示，该第一指示用于指示终端设备对第一数据进行完整性校验，该第一指示可以作为下述S104执行的一种可能的触发条件。其中，控制管理设备可以间接的向终端设备发送第一指示，例如可以是：控制管理设备通过验证服务器向终端设备发送所述第一指示。控制管理设备可以将第一指示携带在任何报文中向终端设备发送，只要该报文为终端设备可以识别并处理的报文类型即可。
对于S103，控制管理设备可以将第一数据对应的完整性度量基线值携带在任何报文中向验证服务器发送，例如，控制管理设备可以将第一数据对应的完整性度量基线值携带在BGP报文中发送给验证服务器，又例如，控制管理设备可以将第一数据对应的完整性度量基线值携带在PCEP报文中发送给验证服务器。本申请实施例对携带第一数据的完整性度量基线值的报文类型不作具体限定，只要是验证服务器能够识别并处理的报文即可。
作为一个示例，为了更加安全和可信的完成该完整性校验，控制管理设备还可以将该第一数据的完整性度量基线值携带在证书中，并将该证书发送给验证服务器。
需要说明的是，经过上述S102～S103，为后续验证服务器对第一数据的完整性校验提供了校验的标准，使得完成可靠、安全和准确的完整性校验成为了可能。
需要说明的是，上述S101～S103，可以单独作为控制管理设备执行的一个完整的实施例，该方法100只是为了方便描述，从终端设备、控制管理设备和验证服务器三者的交互作为一个整体进行说明。
S104，终端设备生成第一数据对应的完整性度量值，该完整性度量值用于对第一数据的进行完整性校验。
S105，终端设备向验证服务器发送第一数据对应的完整性度量值。
其中，第一数据对应的完整性度量值，可以作为参与完整性校验的一个待校验值，将该第一数据对应的完整性度量值与该第一数据对应的完整性度量基线值进行匹配，如果与完整性度量基线值匹配，则，确定该第一数据的完整性度量值通过了完整性校验，即，第一数据的完整性校验通过，否则，确定该第一数据的完整性度量值未通过完整性校验，即，第一数据的完整性校验未通过。该第一数据对应的完整性度量值例如可以为：经过哈希计算得到的哈希值、数字签名或经过加密处理得到的加密值。
在一些可能的实现方式中，如果S102中是控制管理设备根据第一数据生成第一数据对应的完整性度量基线值，那么，S104可以是终端设备根据第一数据生成该第一数据对应的完整性度量值。
作为一个示例，如果S102是控制管理设备根据第一数据的全部内容确定第一数据对应的完整性度量基线值，那么，S104也可以是终端设备根据第一数据的全部内容确定第一数据对应的完整性度量值。例如，终端设备可以将本地保存的第一数据的全部内容经过哈希计算得到的哈希值，并将所得的该哈希值作为第一数据对应的完整性度量值；又例如，终端设备也可以将本地保存的第一数据的全部内容进行数字签名操作得到签名，并将所得的该签名作为第一数据对应的完整性度量值；再例如，终端设备可以将本地保存的第一数据的全部内容经过加密处理得到的加密值，并将所得的该加密值作为第一数据对应的完整性度量值。
作为另一个示例，如果S102是控制管理设备根据第一数据的部分内容确定该第一数据对应的完整性度量基线值，那么，S104也可以是终端设备根据第一数据的部分内容确定第一数据对应的完整性度量值。其中，所述第一数据的部分内容可以是第一数据中参与校验的数据，S104例如可以包括：终端设备基于预设规则从第一数据中确定所述第一数据的部分内容，从而，根据所确定的所述第一数据的部分内容确定该第一数据对应的完整性度量值，该预设规则可以与S102中选择第一数据的部分内容所遵循的预设规则一致。该示例下，S104的实现方式可以包括但不限于：方式一，终端设备可以将本地保存的第一数据的部分内容经过哈希计算得到的哈希值，并将所得的该哈希值作为第一数据对应的完整性度量值；方式二，终端设备也可以将本地保存的第一数据的部分内容进行数字签名操作得到签名，并将所得的该签名作为第一数据对应的完整性度量值；再例如，终端设备可以将本地保存的第一数据的部分内容经过加密处理得到的加密值，并将所得的该加密值作为第一数据对应的完整性度量值。
在一些可能的实现方式中，如果S102中是控制管理设备根据发送第一数据对应的第一操作日志生成该第一数据对应的完整性度量基线值，那么，S104中可以是终端设备根据接收第一数据对应的第二操作日志生成该第一数据对应的完整性度量值。需要说明的是，终端设备为了记录自身执行的操作，可以将每次从控制管理设备接收数据的行为记录在第二操作日志中，作为该第二操作日志的一条内容。如果第一数据仅是终端设备从控制管理设 备执行的一次接收数据的行为，则，终端设备可以根据第二操作日志中与接收该第一数据对应的一条内容确定第一数据对应的完整性度量值。如果第一数据包括终端设备从控制管理设备执行的多次接收数据的行为，则，终端设备可以根据第二操作日志中发送该第一数据对应的多条内容的全部确定第一数据对应的完整性度量值；或者，终端设备也可以根据第二操作日志中发送该第一数据对应的多条内容的部分确定第一数据对应的完整性度量值，其中，多条内容中的部分的选择规则可以与控制管理设备从第一操作日志的多条内容中选择部分的选择规则一致。其中，该完整性度量值，例如可以是经过哈希计算得到的哈希值、经过数字签名操作得到签名或者经过加密处理得到的加密值。
该实现方式中，第二操作日志中可以保存操作类型和操作数据。如果第一数据是批量发送的数据，则，既可以根据第一数据的全部或部分内容生成第一数据对应的完整性度量值，也可以根据接收第一数据对应的第二操作日志生成第一数据对应的完整性度量值。如果第一数据是增量数据，则，可以优选根据接收第一数据对应的第二操作日志生成第一数据对应的完整性度量值。
需要说明的是，S104生成完整性度量值的方式需要与S102生成完整性度量基线值的方式对应，例如，S102中控制管理设备将本地保存的第一数据的全部内容经过哈希计算得到的哈希值，并将所得的该哈希值作为第一数据对应的完整性度量基线值，那么，S104中终端设备将本地保存的第一数据的全部内容经过哈希计算得到的哈希值，并将所得的该哈希值作为第一数据对应的完整性度量值，这样，为后续验证服务器基于该对应的方式，准确的完成完整性校验提供了可能，如果终端设备生成完整性度量值的方式和控制管理设备生成完整性度量基线值的方式不对应，例如，S102中控制管理设备将本地保存的第一数据的全部内容经过哈希计算得到的哈希值，并将所得的该哈希值作为第一数据对应的完整性度量基线值，而S104中终端设备将接收第一数据对应的第二操作日志经过数字签名操作得到签名，并将所得的该签名作为第一数据对应的完整性度量值，则，验证服务器很可能无法完成对第一数据的完整性校验。
具体实现时，对于S104执行的时机，一种情况下，可以在终端设备接收到用于指示对第一数据进行完整性校验的第一指示时，触发终端设备执行S104，其中，第一指示可以是控制管理设备直接向终端设备发送的，或者，第一指示也可以是控制管理设备通过验证服务器间接的向终端设备发送的，或者，第一指示也可以是验证服务器接收到控制管理设备发送的校验请求或第一数据对应的完整性度量基线值时，生成并向终端设备发送的。另一种情况下，也可以在终端设备确定满足预设条件时，触发终端设备执行S104，其中，预设条件可以是控制管理设备和终端设备约定好的执行该方法100以进行完整性校验的条件。
其中，预设条件例如可以是：接收到的所述第一数据的总长度达到预设长度阈值，如，终端设备从接收控制管理设备发送的第一个数据开始(或从某个时刻开始)，记录从控制管理设备接收的数据的总长度，如果该总长度等于预设长度阈值，则，确定满足预设条件，触发执行S104；同理，对于控制管理设备，从向终端设备发送的第一个数据开始(或从某个时刻开始)，记录向终端设备发送的数据的总长度，如果该总长度等于预设长度阈值，则，确定满足预设条件，触发执行S102；该情况下，第一数据的总长度可以为预设长度阈值。 或者，预设条件例如也可以是：接收到的所述第一数据包含的表项的数量达到预设数量阈值，如，终端设备从接收控制管理设备发送的第一个数据开始(或从某个时刻开始)，记录从控制管理设备接收的数据包含表项的总数量，如果该总数量等于预设数量阈值，则，确定满足预设条件，触发执行S104；同理，对于控制管理设备，从向终端设备发送的第一个数据开始(或从某个时刻开始)，记录向终端设备发送的数据包含表项的总数量，如果该总数量等于预设数量阈值，则，确定满足预设条件，触发执行S102；该情况下，第一数据包含的表项的总数量可以为预设数量阈值。又或者，预设条件例如也可以是：接收到的所述第一数据的累计时长达到预设时长，如，终端设备从接收控制管理设备发送的第一个数据开始(或从某个时刻开始)，记录从控制管理设备接收的数据的累计时长，如果该累计时长等于预设时长，则，确定满足预设条件，触发执行S104；同理，对于控制管理设备，从向终端设备发送的第一个数据开始(或从某个时刻开始)，记录向终端设备发送的数据的累计时长，如果该累计时长等于预设时长，则，确定满足预设条件，触发执行S102；该情况下，第一数据可以为预设时长内控制管理设备向终端设备发送的所有数据。再或者，预设条件例如也可以是：接收到的属性为增量数据的第一数据，如，在开始接收所述第一数据之前的预设时长内没有接收到控制管理设备发送的数据，那么，认为该第一数据为增量数据，则，确定满足预设条件，触发执行S104；同理，对于控制管理设备，发送属性为增量数据的第一数据，如，在开始发送所述第一数据之前的预设时长内没有向终端设备发送数据，那么，认为该第一数据为增量数据，则，确定满足预设条件，触发执行S102。
对于S105，终端设备可以将第一数据对应的完整性度量值携带在任何报文中向验证服务器发送，例如，终端设备可以将第一数据对应的完整性度量值携带在BGP报文中发送给验证服务器，又例如，终端设备可以将第一数据对应的完整性度量值携带在PCEP报文中发送给验证服务器。本申请实施例对携带第一数据的完整性度量值的报文类型不作具体限定，只要是验证服务器能够识别并处理的报文即可。
作为一个示例，为了更加安全和可信的完成该完整性校验，终端设备还可以将该第一数据的完整性度量值携带在证书中，并将该证书发送给验证服务器。
需要说明的是，经过上述S104～S105，为后续验证服务器对第一数据的完整性校验提供了校验的对象，使得完成可靠、安全和准确的完整性校验成为了可能。
需要说明的是，上述S101、S104～S105，可以单独作为终端设备执行的一个完整的实施例，该方法100只是为了方便描述，从终端设备、控制管理设备和验证服务器三者的交互作为一个整体进行说明。
S106，验证服务器根据完整性度量值和完整性度量基线值，对第一数据进行完整性校验。
具体实现时，S106例如可以包括：验证服务器确定完整性度量值和完整性度量基线值匹配，那么，该验证服务器确定对第一数据的完整性校验通过；反之，验证服务器确定完整性度量值和完整性度量基线值不匹配；那么，该验证服务器确定对第一数据的完整性校验未通过。
例如，第一数据的完整性度量基线值为第一数据的全部内容(或部分内容，又或者发 送第一数据对应的第一操作日志)经过第一哈希算法计算得到的第一哈希值，第一数据的完整性度量值为第一数据的全部内容(或部分内容，又或者接收第一数据对应的第二操作日志)经过第一哈希算法计算得到的第二哈希值，那么，S106例如可以是验证服务器判断第一哈希值和第二哈希值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过。
又例如，第一数据的完整性度量基线值为第一数据的全部内容(或部分内容，又或者发送第一数据对应的第一操作日志)经过第一私钥对第一哈希值进行签名操作得到的第一签名，第一数据的完整性度量值为第一数据的全部内容(或部分内容，又或者接收第一数据对应的第二操作日志)经过第二私钥对第二哈希值进行签名操作得到的第二签名，那么，一种情况下，S106中验证服务器可以先判断第一私钥对应的第一公钥和第二私钥对应的第二公钥是否相同，如果相同，再判断第一签名和第二签名是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过；另一种情况下，S106中验证服务器可以先采用第一私钥对应的第一公钥对第一签名进行处理得到第一还哈希值，采用第二私钥对应的第二公钥对第二签名进行处理得到第二哈希值，再判断第一哈希值和第二哈希值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过。其中，第一公钥可以是控制管理设备对应的第一私钥对应的公钥，该公钥可以预先保存在验证服务器本地，也可以是控制管理设备向验证服务器发送第一数据的完整性度量基线值时发送给验证服务器的。同理，第二公钥可以是终端设备对应的第二私钥对应的公钥，该公钥可以预先保存在验证服务器本地，也可以是终端设备向验证服务器发送第一数据的完整性度量值时发送给验证服务器的。
再例如，第一数据的完整性度量基线值为第一数据的全部内容(或部分内容，又或者发送第一数据对应的第一操作日志)经过第一加密算法计算得到的第一加密值，第一数据的完整性度量值为第一数据的全部内容(或部分内容，又或者接收第一数据对应的第二操作日志)经过第一加密算法计算得到的第二加密值，那么，一种情况下，S106例如可以是验证服务器判断第一加密值和第二加密值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过；另一种情况下，S106例如可以是验证服务器先采用第一加密算法对应的第一解密算法对第一加密值进行解密得到第一解密值，采用第一加密算法对应的第一解密算法对第二加密值进行解密得到第二解密值再判断第一解密值和第二解密值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过。
当对第一数据的完整性校验未通过时，为了让控制管理设备感知到该控制管理设备和终端设备之间关于第一数据的一致性问题，验证服务器可以向控制管理设备发送告警消息，用于告知该终端设备上的第一数据存在异常。当控制管理设备接收到告警消息后，为了确保终端设备能够继续正常运行，还可以重新向终端设备发送第一数据，指示终端设备用新接收的第一数据替换本地保存的第一数据，或者，指示终端设备保存新接收的第一数据并将之前保存的第一数据添加老化标记，添加老化标记的第一数据不能再指导该终端设备对报文的处理，而是以新接收的第一数据指导该终端设备对报文进行处理。
需要说明的是，对于批量发送的数据，为了确保安全和准确的校验，可以是周期性执行完整性校验；对于增量发送的数据，可以即时对增量数据进行完整性校验。
需要说明的是，上述S103对应的验证服务器接收控制管理设备发送的第一数据的完整性度量基线值、S105对应的验证服务器接收终端设备发送的第一数据的完整性度量值以及该S106，可以单独作为验证服务器执行的一个完整的实施例，该方法100只是为了方便描述，从终端设备、控制管理设备和验证服务器三者的交互作为一个整体进行说明。
可见，通过本申请实施例提供的方法100，由可信的验证服务器对终端设备和控制管理设备分别发送的第一数据对应的完整性度量值和完整性度量基线值进行完整性校验，需要交互的仅是第一数据对应的完整性度量值和完整性度量基线值，无需交互全量的第一数据，有效的减少了校验所需交互的数据量，大大的节约了校验过程所占用的资源，而且，通过引入可信的验证服务器，由验证服务器根据第一数据对应的完整性度量值和完整性度量基线值即可完成对第一数据的完整性校验，而不是由控制管理设备直接对第一数据的全量数据进行比对，能够确保该校验过程更加安全和可靠，从而为终端设备上业务的正常运行提供了保障。
上述方法100以可信的验证服务器对控制管理设备向终端设备发送的第一数据的完整性校验为例进行说明，本申请实施例提供的方法还可以用于对终端设备向控制管理设备发送的第二数据的完整性校验，或者，用于对终端设备之间交互的第三数据的完整性校验，完整性校验的流程可以参见上述方法100中的相关描述。
本申请实施例提供了一种完整性校验方法200，如图3所示，该方法200以交互的方式描述对第一数据的完整性校验。该方法200例如可以包括：
S201，第一设备向第二设备发送第一数据。
S202，第一设备向验证服务器发送该第一数据对应的完整性度量基线值。
S203，第二设备向验证服务器发送第一数据对应的完整性度量值。
S204，验证服务器根据完整性度量值和完整性度量基线值对第一数据进行完整性校验。
该方法200中，第一设备可以是控制管理设备，第二设备可以是终端设备。或者，第一设备可以是终端设备，第二设备可以是控制管理设备。又或者，第一设备和第二设备均可以是终端设备。
以该方法200中的第一设备是控制管理设备且第二设备是终端设备为例，那么，该方法200中的第一设备可以是上述方法100中的控制管理设备，相关操作具体可以参见方法100中控制管理设备执行的操作；该方法200中的第二设备可以是上述方法100中的终端设备，相关操作具体可以参见方法100中终端设备执行的操作；该方法200中的验证服务器可以是上述方法100中的验证服务器，相关操作具体可以参见方法100中验证服务器执行的操作。具体而言，S201的相关描述可以参见方法100中的S101，S202的相关描述可以参见方法100中的S103，S203的相关描述可以参见方法100中的S105，S204的相关描述可以参见方法100中的S106。其中，第一数据可以是方法100中的第一数据，第一数据对应的完整性度量值可以是方法100中的第一数据对应的完整性度量值，第一数据对应的 完整性度量基线值可以是方法100中的第一数据对应的完整性度量基线值。
作为一个示例，第一数据可以包括下述至少一个：SR TE配置信息、SR TE-policy配置信息、ACL配置信息或FlowSpec配置信息。
其中，完整性度量基线值可以为经过哈希计算得到的哈希值，那么，完整性度量值为经过哈希计算得到的哈希值。或者，完整性度量基线值也可以为数字签名，那么，完整性度量值为数字签名。又或者，完整性度量基线值还可以为经过加密处理得到的加密值，那么，完整性度量值为经过加密处理得到的加密值。
需要说明的是，为了确保第一设备和第二设备对相同的对象进行完整性校验，第一设备和第二设备可以保持时钟同步，或者，在第一数据携带发送时间戳，这样，可以保障进行完整性校验的第一数据是相同的数据，例如，第一设备待校验的数据为数据a和数据b，第二设备待检验的数据也为数据a和数据b。
在一种可能的实现方式中，在第一设备向验证服务器发送第一数据的完整性度量基线值之前，第一设备还可以计算第一数据对应的完整性度量基线值；在第二设备向验证服务器发送第一数据的完整性度量值之前，第二设备还可以计算第一数据对应的完整性度量值。
其中，以该方法200中的第一设备是控制管理设备且第二设备是终端设备为例，第一设备计算第一数据对应的完整性度量基线值可以参见方法100中的S102的相关说明，第二设备计算第一数据对应的完整性度量值可以参见方法100中的S104的相关说明。
作为一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据第一数据的全部内容确定所述完整性度量基线值；那么，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据所述第一数据的全部内容确定完整性度量值。其中，第一设备和第二设备上对第一数据按照相同的顺序保存，可以确保根据第一数据的全部内容计算的校验值是对应的，为完整性校验的准确执行提供了保障。
作为另一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据第一数据的部分内容确定所述完整性度量基线值；那么，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据所述第一数据的部分内容确定完整性度量值。其中，第一设备和第二设备上获取该第一数据的部分内容的规则相同，可以确保根据第一数据的部分内容计算的校验值是对应的，为完整性校验的准确执行提供了保障。
作为又一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据发送第一数据对应的第一操作日志确定所述完整性度量基线值；那么，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据接收所述第一数据对应的第二操作日志确定所述完整性度量值。其中，第一设备和第二设备上对接收和发送数据生成操作日志的规则可以相同，可以确保根据第一数据对应的第一操作日志和第二操作日志得到的校验值是对应的，为完整性校验的准确执行提供了保障。
在一种可能的实现方式中，第二设备向验证服务器发送第一数据对应的完整性度量值，可以是基于所接收的第一指示触发的，也可以是满足本地预设条件后触发的。
作为一个示例，在第二设备向验证服务器发送第一数据对应的完整性度量值之前，第二设备还可以接收第一指示，该第一指示用于指示第二设备对第一数据进行完整性校验。 其中，第一指示可以由第一设备发送给第二设备，或者，该第一指示也可以由验证服务器发送给第二设备。
作为另一个示例，第二设备向验证服务器发送第一数据对应的完整性度量值之前，第二设备还可以在确定满足预设条件时，生成所述完整性度量值。其中，预设条件包括下述至少一种：条件一、接收到的第一数据的总长度达到预设长度阈值；条件二、接收到的第一数据包含的表项的数量达到预设数量阈值；条件三、接收第一数据的累计时长达到预设时长；或者，条件四、第一数据为增量数据。如此，第二设备可以被触发计算第一数据对应的完整性度量值并向验证服务器发送该完整性度量值，以便验证服务器对第一数据的完整性进行校验。
需要说明的是，该方法200中，第一设备的相关描述以及达到的效果可以参见方法100中控制管理设备执行的相关操作和对应的效果描述，第二设备的相关描述以及达到的效果可以参见方法100中终端设备执行的相关操作和对应的效果描述，验证服务器的相关描述以及达到的效果可以参见方法100中验证服务器执行的相关操作和对应的效果描述。
本申请实施例还提供了一种完整性校验方法300，参见图4，该方法300应用于第一设备，该方法300例如可以包括：
S301，第一设备向第二设备发送第一数据。
S302，第一设备向验证服务器发送第一数据对应的完整性度量基线值，该完整性度量基线值用于对第一数据的进行完整性校验。
该方法300中，第一设备可以是控制管理设备，第二设备可以是终端设备。或者，第一设备可以是终端设备，第二设备可以是控制管理设备。又或者，第一设备和第二设备均可以是终端设备。
以该方法300中的第一设备是控制管理设备且第二设备是终端设备为例，那么，该方法300中的第一设备可以是上述方法100中的控制管理设备，相关操作具体可以参见方法100中控制管理设备执行的操作。具体而言，S301的相关描述可以参见方法100中的S101，S302的相关描述可以参见方法100中的S103。其中，第一数据可以是方法100中的第一数据，第一数据对应的完整性度量基线值可以是方法100中的第一数据对应的完整性度量基线值。
作为一个示例，第一数据可以包括下述至少一个：SR TE配置信息、SR TE-policy配置信息、ACL配置信息或FlowSpec配置信息。
其中，完整性度量基线值可以为经过哈希计算得到的哈希值，或者，完整性度量基线值也可以为数字签名，又或者，完整性度量基线值还可以为经过加密处理得到的加密值。
需要说明的是，为了确保第一设备和第二设备对相同的对象进行完整性校验，第一设备和第二设备可以保持时钟同步，或者，在第一数据携带发送时间戳，这样，可以保障进行完整性校验的第一数据是相同的数据。
在一种可能的实现方式中，在第一设备向验证服务器发送第一数据的完整性度量基线值之前，第一设备还可以计算第一数据对应的完整性度量基线值。
其中，以该方法300中的第一设备是控制管理设备且第二设备是终端设备为例，第一 设备计算第一数据对应的完整性度量基线值可以参见方法100中的S102的相关说明。
作为一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据第一数据的全部内容确定所述完整性度量基线值。
作为另一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据第一数据的部分内容确定所述完整性度量基线值。
作为又一个示例，第一设备计算第一数据对应的完整性度量基线值，可以包括：第一设备根据发送第一数据对应的第一操作日志确定所述完整性度量基线值。
在一种可能的实现方式中，第一设备可以向第二设备发送第一指示，该第一指示用于指示第二设备对第一数据进行完整性校验。其中，第一指示可以是第一设备直接发送给第二设备的，或者，该第一指示也可以是第一设备经过验证服务器发送给第二设备的。
需要说明的是，该方法300中，第一设备的相关描述以及达到的效果可以参见方法100中控制管理设备执行的相关操作和对应的效果描述。
本申请实施例还提供了一种完整性校验方法400，参见图5，该方法400应用于第二设备，该方法400例如可以包括：
S401，第二设备接收第一设备发送的第一数据。
S402，第二设备向验证服务器发送所述第一数据对应的完整性度量值，该完整性度量值用于对第一数据的进行完整性校验。
该方法400中，第一设备可以是控制管理设备，第二设备可以是终端设备。或者，第一设备可以是终端设备，第二设备可以是控制管理设备。又或者，第一设备和第二设备均可以是终端设备。
以该方法400中的第一设备是控制管理设备且第二设备是终端设备为例，那么，该方法400中的第二设备可以是上述方法100中的终端设备，相关操作具体可以参见方法100中终端设备执行的操作。具体而言，S401的相关描述可以参见方法100中的S101，S402的相关描述可以参见方法100中的S105。其中，第一数据可以是方法100中的第一数据，第一数据对应的完整性度量值可以是方法100中的第一数据对应的完整性度量值，第一数据对应的完整性度量基线值可以是方法100中的第一数据对应的完整性度量基线值。
作为一个示例，第一数据可以包括下述至少一个：SR TE配置信息、SR TE-policy配置信息、ACL配置信息或FlowSpec配置信息。
其中，完整性度量值可以为经过哈希计算得到的哈希值，或者，完整性度量值也可以为数字签名，又或者，完整性度量值还可以为经过加密处理得到的加密值。
需要说明的是，为了确保第一设备和第二设备对相同的对象进行完整性校验，第一设备和第二设备可以保持时钟同步，或者，在第一数据携带发送时间戳，这样，可以保障进行完整性校验的第一数据是相同的数据。
在一种可能的实现方式中，在第二设备向验证服务器发送第一数据的完整性度量值之前，第二设备还可以计算第一数据对应的完整性度量值。
其中，以该方法400中的第一设备是控制管理设备且第二设备是终端设备为例，第二设备计算第一数据对应的完整性度量值可以参见方法100中的S104的相关说明。
作为一个示例，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据所述第一数据的全部内容确定完整性度量值。
作为另一个示例，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据所述第一数据的部分内容确定完整性度量值。
作为又一个示例，第二设备计算第一数据对应的完整性度量值，可以包括：第二设备根据接收所述第一数据对应的第二操作日志确定所述完整性度量值。
在一种可能的实现方式中，第二设备向验证服务器发送第一数据对应的完整性度量值，可以是基于所接收的第一指示触发的，也可以是满足本地预设条件后触发的。
作为一个示例，在第二设备向验证服务器发送第一数据对应的完整性度量值之前，第二设备还可以接收第一指示，该第一指示用于指示第二设备对第一数据进行完整性校验。其中，第一指示可以由第一设备发送给第二设备，或者，该第一指示也可以由验证服务器发送给第二设备。
作为另一个示例，第二设备向验证服务器发送第一数据对应的完整性度量值之前，第二设备还可以在确定满足预设条件时，生成所述完整性度量值。其中，预设条件包括下述至少一种：条件一、接收到的第一数据的总长度达到预设长度阈值；条件二、接收到的第一数据包含的表项的数量达到预设数量阈值；条件三、接收第一数据的累计时长达到预设时长；或者，条件四、第一数据为增量数据。如此，第二设备可以被触发计算第一数据对应的完整性度量值并向验证服务器发送该完整性度量值，以便验证服务器对第一数据的完整性进行校验。
需要说明的是，该方法400中，第二设备的相关描述以及达到的效果可以参见方法100中终端设备执行的相关操作和对应的效果描述。
本申请实施例还提供了一种完整性校验方法500，参见图6，该方法500应用于验证服务器，该方法500例如可以包括：
S501，验证服务器接收第一设备发送的第一数据对应的完整性度量基线值，该第一数据由第一设备发送给第二设备。
S502，验证服务器接收第二设备发送的第一数据对应的完整性度量值。
S503，验证服务器根据完整性度量基线值和完整性度量值，对该第一数据的进行完整性校验。
该方法500中，第一设备可以是控制管理设备，第二设备可以是终端设备。或者，第一设备可以是终端设备，第二设备可以是控制管理设备。又或者，第一设备和第二设备均可以是终端设备。
以该方法500中的第一设备是控制管理设备且第二设备是终端设备为例，那么，该方法500中的验证服务器可以是上述方法100中的验证服务器，相关操作具体可以参见方法100中验证服务器执行的操作。具体而言，S501的相关描述可以参见方法100中的S103，S502的相关描述可以参见方法100中的S105，S503的相关描述可以参见方法100中的S106。其中，第一数据可以是方法100中的第一数据，第一数据对应的完整性度量值可以是方法100中的第一数据对应的完整性度量值，第一数据对应的完整性度量基线值可以是 方法100中的第一数据对应的完整性度量基线值。
作为一个示例，第一数据可以包括下述至少一个：SR TE配置信息、SR TE-policy配置信息、ACL配置信息或FlowSpec配置信息。
其中，完整性度量基线值可以为经过哈希计算得到的哈希值，那么，完整性度量值为经过哈希计算得到的哈希值。或者，完整性度量基线值也可以为数字签名，那么，完整性度量值为数字签名。又或者，完整性度量基线值还可以为经过加密处理得到的加密值，那么，完整性度量值为经过加密处理得到的加密值。
需要说明的是，为了确保第一设备和第二设备对相同的对象进行完整性校验，第一设备和第二设备可以保持时钟同步，或者，在第一数据携带发送时间戳，这样，可以保障进行完整性校验的第一数据是相同的数据。
在一种可能的实现方式中，第二设备向验证服务器发送第一数据对应的完整性度量值，可以是基于所接收的指示触发的。作为一个示例，验证服务器可以接收第一设备发送的第一指示，该第一指示用于指示验证服务器对第一数据进行完整性校验。那么，响应于所述第一指示，验证服务器还可以向第二设备发送第二指示，该第二指示用于指示对第一数据进行完整性验证。这样，第二设备即可基于第二指示计算并向验证服务器发送第一数据对应的完整性度量值。
在一些可能的实现方式中，验证服务器根据完整性度量基线值和完整性度量值对第一数据的进行完整性校验，可以包括：验证服务器确定完整性度量值和完整性度量基线值匹配，从而，验证服务器确定对第一数据的完整性校验通过。
作为一个示例，第一数据的完整性度量基线值为第一数据的全部内容(或部分内容，又或者发送第一数据对应的第一操作日志)经过第一哈希算法计算得到的第一哈希值，第一数据的完整性度量值为第一数据的全部内容(或部分内容，又或者接收第一数据对应的第二操作日志)经过第一哈希算法计算得到的第二哈希值，那么，验证服务器可以判断第一哈希值和第二哈希值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过。
作为又一个示例，第一数据的完整性度量基线值为第一数据的全部内容(或部分内容，又或者发送第一数据对应的第一操作日志)经过第一私钥对第一哈希值进行签名操作得到的第一签名，第一数据的完整性度量值为第一数据的全部内容(或部分内容，又或者接收第一数据对应的第二操作日志)经过第二私钥对第二哈希值进行签名操作得到的第二签名，那么，一种情况下，验证服务器可以先判断第一私钥对应的第一公钥和第二私钥对应的第二公钥是否相同，如果相同，再判断第一签名和第二签名是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过；另一种情况下，验证服务器可以先采用第一私钥对应的第一公钥对第一签名进行处理得到第一还哈希值，采用第二私钥对应的第二公钥对第二签名进行处理得到第二哈希值，再判断第一哈希值和第二哈希值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过。其中，第一公钥可以是控制管理设备对应的第一私钥对应的公钥，该公钥可以预先保存在验证服务器本地，也可以是控制管理设备向验证服务 器发送第一数据的完整性度量基线值时发送给验证服务器的。同理，第二公钥可以是终端设备对应的第二私钥对应的公钥，该公钥可以预先保存在验证服务器本地，也可以是终端设备向验证服务器发送第一数据的完整性度量值时发送给验证服务器的。
作为再一个示例，第一数据的完整性度量基线值为第一数据的全部内容(或部分内容，又或者发送第一数据对应的第一操作日志)经过第一加密算法计算得到的第一加密值，第一数据的完整性度量值为第一数据的全部内容(或部分内容，又或者接收第一数据对应的第二操作日志)经过第一加密算法计算得到的第二加密值，那么，一种情况下，验证服务器可以判断第一加密值和第二加密值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过；另一种情况下，验证服务器也可以先采用第一加密算法对应的第一解密算法对第一加密值进行解密得到第一解密值，采用第一加密算法对应的第一解密算法对第二加密值进行解密得到第二解密值再判断第一解密值和第二解密值是否一致，如果一致，则，确定对第一数据的完整性校验通过，否则，确定对第一数据的完整性校验未通过。
当对第一数据的完整性校验未通过时，为了让控制管理设备感知到该控制管理设备和终端设备之间关于第一数据的一致性问题，验证服务器可以向控制管理设备发送告警消息，用于告知该终端设备上的第一数据存在异常。当控制管理设备接收到告警消息后，为了确保终端设备能够继续正常运行，还可以重新向终端设备发送第一数据，指示终端设备用新接收的第一数据替换本地保存的第一数据，或者，指示终端设备保存新接收的第一数据并将之前保存的第一数据添加老化标记，添加老化标记的第一数据不能再指导该终端设备对报文的处理，而是以新接收的第一数据指导该终端设备对报文进行处理。
需要说明的是，该方法500中，验证服务器的相关描述以及达到的效果可以参见方法100中验证服务器执行的相关操作和对应的效果描述。
此外，本申请实施例还提供了一种第一设备300，参见图7所示。该第一设备300包括处理单元301和发送单元302。其中，处理单元301用于执行上述图2所示实施例中控制管理设备执行的处理操作、以及图1所示实施例中控制管理设备100执行的处理操作；发送单元302用于执行上述图2所示实施例中控制管理设备执行的发送操作、以及图1所示实施例中控制管理设备100执行的发送操作。例如：处理单元301可以执行图2中实施例中的操作：生成第一数据对应的完整性度量基线值。例如：发送单元302可以执行图2中实施例中的操作：向终端设备发送第一数据，以及向验证服务器发送所述完整性度量基线值。
此外，本申请实施例还提供了一种第二设备400，参见图8所示。该第二设备400包括接收单元401、发送单元402和处理单元403。其中，接收单元401用于执行上述图2所示实施例中终端设备执行的接收操作、以及图1所示实施例中终端设备200执行的接收操作；发送单元402用于执行上述图2所示实施例中终端设备执行的发送操作、以及图1所示实施例中终端设备200执行的发送操作；处理单元403用于执行上述图2所示实施例中终端设备执行的处理操作、以及图1所示实施例中终端设备200执行的处理操作。例如： 接收单元401可以执行图2中实施例中的操作：接收控制管理设备发送的第一数据；发送单元402可以执行图2中实施例中的操作：向验证服务器发送第一数据对应的完整性度量值；处理单元403可以执行图2中实施例中的操作：生成第一数据对应的完整性度量值。
此外，本申请实施例还提供了一种验证服务器500，参见图9所示。该验证服务器500包括接收单元501和处理单元502。其中，接收单元501用于执行上述图2所示实施例中验证服务器执行的接收操作、以及图1所示实施例中验证服务器400执行的接收操作；处理单元502用于执行上述图2所示实施例中验证服务器执行的处理操作、以及图1所示实施例中验证服务器400执行的处理操作。例如：接收单元501可以执行图2中实施例中的操作：接收控制管理设备发送的第一数据对应的完整性度量基线值，以及接收终端设备发送的第一数据对应的完整性度量值；处理单元502可以执行图2中实施例中的操作：根据所述完整性度量基线值和所述完整性度量值，对所述第一数据的进行完整性校验。
此外，本申请实施例还提供了一种第一设备600，参见图10所示。该第一设备600包括第一通信接口601和处理器603。其中，第一通信接口601用于执行前述用于执行上述图2所示实施例中控制管理设备、以及图1所示实施例中控制管理设备100执行的发送操作；处理器603用于执行上述图2所示实施例中控制管理设备、以及图1所示实施例中控制管理设备100执行的除了接收操作和发送操作之外的其他操作。例如：第一通信接口601可以执行图2中实施例中的操作：向终端设备发送第一数据，以及向验证服务器发送所述第一数据对应的完整性度量基线值；处理器603可以执行图2中实施例中的操作：根据所述第一数据的全部内容确定所述完整性度量基线值。此外，该第一设备600还可以包括第二通信接口602。其中，第二通信接口602用于执行前述用于执行上述图2所示实施例中控制管理设备、以及图1所示实施例中控制管理设备100执行的接收操作。
此外，本申请实施例还提供了一种第二设备700，参见图11所示。该第二设备700包括第一通信接口701和第二通信接口702。其中，第一通信接口701用于执行前述用于执行上述图2所示实施例中终端设备、以及图1所示实施例中终端设备200执行的发送操作；第二通信接口702用于执行前述用于执行上述图2所示实施例中终端设备、以及图1所示实施例中终端设备200执行的接收操作。例如：第一通信接口701可以执行图2中实施例中的操作：向验证服务器发送第一数据对应的完整性度量值；第二通信接口702可以执行图2中实施例中的操作：接收控制管理设备发送的第一数据。此外，该第二设备700还可以包括处理器703。其中，处理器703用于执行前述用于执行上述图2所示实施例中终端设备、以及图1所示实施例中终端设备200执行的除了接收操作和发送操作之外的其他操作。
此外，本申请实施例还提供了一种验证服务器800，参见图12所示。该验证服务器800包括第一通信接口801和处理器803。其中，第一通信接口801用于执行前述用于执行上述图2所示实施例中验证服务器、以及图1所示实施例中验证服务器400执行的接收操作；处理器803用于执行上述图2所示实施例中验证服务器、以及图1所示实施例中验证服务器400执行的除了接收操作和发送操作之外的其他操作。例如：第一通信接口801可以执行图2中实施例中的操作：接收第一设备发送的第一数据对应的完整性度量基线值，以及 接收所述第二设备发送的所述第一数据对应的完整性度量值；处理器803可以执行图2中实施例中的操作：根据所述完整性度量基线值和所述完整性度量值，对所述第一数据的进行完整性校验。此外，该验证服务器800还可以包括第二通信接口802。其中，第二通信接口802用于执行前述用于执行上述图2所示实施例中验证服务器、以及图1所示实施例中验证服务器400执行的发送操作。
此外，本申请实施例还提供了一种第一设备900，参见图13所示。该第一设备900包括存储器901和与存储器901通信的处理器902。其中，存储器901包括计算机可读指令；处理器902用于执行所述计算机可读指令，使得该第一设备900执行以上图2所示实施例中控制管理设备侧执行的方法，以及图1所示实施例中控制管理设备100执行的方法。
此外，本申请实施例还提供了一种第二设备1000，参见图14所示。该第二设备1000包括存储器1001和与存储器1001通信的处理器1002。其中，存储器1001包括计算机可读指令；处理器1002用于执行所述计算机可读指令，使得该第二设备1000执行以上图2所示实施例中终端设备侧执行的方法，以及图1所示实施例中终端设备200执行的方法。
此外，本申请实施例还提供了一种验证服务器1100，参见图15所示。该验证服务器1100包括存储器1101和与存储器1101通信的处理器1102。其中，存储器1101包括计算机可读指令；处理器1102用于执行所述计算机可读指令，使得该验证服务器1100执行以上图2所示实施例中验证服务器侧执行的方法，以及图1所示实施例中验证服务器400执行的方法。
可以理解的是，上述实施例中，处理器可以是中央处理器(英文：central processing unit，缩写：CPU)，网络处理器(英文：network processor，缩写：NP)或者CPU和NP的组合。处理器还可以是专用集成电路(英文：application-specific integrated circuit，缩写：ASIC)，可编程逻辑器件(英文：programmable logic device，缩写：PLD)或其组合。上述PLD可以是复杂可编程逻辑器件(英文：complex programmable logic device，缩写：CPLD)，现场可编程逻辑门阵列(英文：field-programmable gate array，缩写：FPGA)，通用阵列逻辑(英文：generic array logic,缩写：GAL)或其任意组合。处理器可以是指一个处理器，也可以包括多个处理器。存储器可以包括易失性存储器(英文：volatile memory)，例如随机存取存储器(英文：random-access memory，缩写：RAM)；存储器也可以包括非易失性存储器(英文：non-volatile memory)，例如只读存储器(英文：read-only memory，缩写：ROM)，快闪存储器(英文：flash memory)，硬盘(英文：hard disk drive，缩写：HDD)或固态硬盘(英文：solid-state drive，缩写：SSD)；存储器还可以包括上述种类的存储器的组合。存储器可以是指一个存储器，也可以包括多个存储器。在一个具体实施方式中，存储器中存储有计算机可读指令，所述计算机可读指令包括多个软件模块，例如发送模块，处理模块和接收模块。处理器执行各个软件模块后可以按照各个软件模块的指示进行相应的操作。在本实施例中，一个软件模块所执行的操作实际上是指处理器根据所述软件模块的指示而执行的操作。处理器执行存储器中的计算机可读指令后，可以按照所述计算机可读指令的指示，执行完整性校验中各设备或服务器可以执行的全部操作。
可以理解的是，上述实施例中，第一设备600的第一通信接口601，具体可以被用作 第一设备300中的发送单元302，实现第一设备到第二设备或验证服务器之间的数据通信；第一设备600的处理器603，具体可以被用作第一设备300中的处理单元301，例如可以用于根据所述第一数据的全部内容确定所述完整性度量基线值。同理，第二设备700的第一通信接口701，具体可以被用作第二设备400中的发送单元402，实现第二设备到验证服务器的数据通信；第二设备700的第二通信接口702，具体可以被用作第二设备400中的接收单元401，实现第一设备到第二设备的数据通信。同理，验证服务器800的第一通信接口801，具体可以被用作验证服务器500中的接收单元501，实现第一设备或第二设备到验证服务器的数据通信；验证服务器800的处理器803，具体可以被用作验证服务器500中的处理单元502，例如可以用于根据所述完整性度量基线值和所述完整性度量值，对所述第一数据的进行完整性校验。
此外，本申请实施例还提供了一种通信系统1200，参见图16所示。该通信系统1200包括第一设备1201、第二设备1202以及验证服务器1203，其中，第一设备1201具体可以是上述第一设备300、第一设备600或第一设备900，第二设备1202具体可以是上述第二设备400、第二设备700或第二设备1000，验证服务器1203具体可以是上述验证服务器500、验证服务器800或验证服务器1100。
需要说明的是，上述实施例中的各个设备或服务器，可以是用于执行上述方法的网络设备，也可以是指用于执行上述方法的单板、线卡、芯片等。
此外，本申请实施例还提供了一种计算机可读存储介质，该计算机可读存储介质中存储有指令，当其在计算机上运行时，使得所述计算机执行以上图1或图2所示实施例中的所述完整性校验方法。
此外，本申请实施例还提供了计算机程序产品，包括计算机程序或计算机可读指令，当所述计算机程序或所述计算机可读指令在计算机上运行时，使得计算机执行前述图1或图2所示实施例中的所述完整性校验方法。
通过以上的实施方式的描述可知，本领域的技术人员可以清楚地了解到上述实施例方法中的全部或部分步骤可借助软件加通用硬件平台的方式来实现。基于这样的理解，本申请的技术方案可以以软件产品的形式体现出来，该计算机软件产品可以存储在存储介质中，如只读存储器(英文：read-only memory，ROM)/RAM、磁碟、光盘等，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者诸如路由器等网络通信设备)执行本申请各个实施例或者实施例的某些部分所述的方法。
本说明书中的各个实施例均采用递进的方式描述，各个实施例之间相同相似的部分互相参见即可，每个实施例重点说明的都是与其他实施例的不同之处。尤其，对于系统实施例和设备实施例而言，由于其基本相似于方法实施例，所以描述得比较简单，相关之处参见方法实施例的部分说明即可。以上所描述的设备及系统实施例仅仅是示意性的，其中作为分离部件说明的模块可以是或者也可以不是物理上分开的，作为模块显示的部件可以是或者也可以不是物理模块，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现本实施例方案的目的。本领域普通技术人员在不付出创造性劳动的情况下，即可以理解并实施。
以上所述仅是本申请的优选实施方式，并非用于限定本申请的保护范围。应当指出，对于本技术领域的普通技术人员来说，在不脱离本申请的前提下，还可以作出若干改进和润饰，这些改进和润饰也应视为本申请的保护范围。

Claims (60)

  1. 一种完整性校验方法，其特征在于，包括：
    第一设备向第二设备发送第一数据；
    所述第一设备向验证服务器发送所述第一数据对应的完整性度量基线值，所述第二设备向所述验证服务器发送所述第一数据对应的完整性度量值；
    所述验证服务器根据所述完整性度量值和所述完整性度量基线值，对所述第一数据进行完整性校验。
  2. 根据权利要求1所述的方法，其特征在于，所述方法还包括：
    所述第一设备根据所述第一数据的全部内容确定所述完整性度量基线值；
    所述第二设备根据所述第一数据的全部内容确定所述完整性度量值。
  3. 根据权利要求1所述的方法，其特征在于，所述方法还包括：
    所述第一设备根据所述第一数据的部分内容确定所述完整性度量基线值；
    所述第二设备根据所述第一数据的所述部分内容确定所述完整性度量值。
  4. 根据权利要求1所述的方法，其特征在于，所述方法还包括：
    所述第一设备根据发送所述第一数据对应的第一操作日志，获得所述完整性度量基线值；
    所述第二设备根据接收所述第一数据对应的第二操作日志，获得所述完整性度量值。
  5. 根据权利要求1-4任一项所述的方法，其特征在于，所述第二设备向所述验证服务器发送所述第一数据对应的完整性度量值之前，所述方法还包括：
    所述第二设备接收第一指示，所述第一指示用于指示所述第二设备对所述第一数据进行完整性校验。
  6. 根据权利要求5所述的方法，其特征在于，所述第一指示由所述第一设备发送。
  7. 根据权利要求5所述的方法，其特征在于，所述第一指示由所述验证服务器发送。
  8. 根据权利要求1-4任一项所述的方法，其特征在于，所述第二设备向所述验证服务器发送所述第一数据对应的完整性度量值之前，所述方法包括：
    在满足预设条件时，所述第二设备生成所述完整性度量值。
  9. 根据权利要求8所述的方法，其特征在于，所述预设条件包括下述至少一种：
    接收到的所述第一数据的总长度达到预设长度阈值；
    接收到的所述第一数据包含的表项的数量达到预设数量阈值；
    接收所述第一数据的累计时长达到预设时长；或者
    所述第一数据为增量数据。
  10. 一种完整性校验方法，其特征在于，包括：
    第一设备向第二设备发送第一数据；
    所述第一设备向验证服务器发送所述第一数据对应的完整性度量基线值，所述完整性度量基线值用于对所述第一数据的进行完整性校验。
  11. 根据权利要求10所述的方法，其特征在于，所述方法还包括：
    所述第一设备根据所述第一数据的全部内容确定所述完整性度量基线值。
  12. 根据权利要求10所述的方法，其特征在于，所述方法还包括：
    所述第一设备根据所述第一数据的部分内容确定所述完整性度量基线值。
  13. 根据权利要求10所述的方法，其特征在于，所述方法还包括：
    所述第一设备根据发送所述第一数据对应的第一操作日志，确定所述完整性度量基线值。
  14. 根据权利要求10-13任一项所述的方法，其特征在于，所述方法还包括：
    所述第一设备向所述第二设备发送第一指示，所述第一指示用于指示所述第二设备对所述第一数据进行完整性校验。
  15. 根据权利要求14所述的方法，其特征在于，所述第一设备通过所述验证服务器向所述第二设备发送所述第一指示。
  16. 一种完整性校验方法，其特征在于，包括：
    第二设备接收第一设备发送的第一数据；
    所述第二设备向验证服务器发送所述第一数据对应的完整性度量值，所述完整性度量值用于对所述第一数据的进行完整性校验。
  17. 根据权利要求16所述的方法，其特征在于，所述方法还包括：
    所述第二设备根据所述第一数据的全部内容确定所述完整性度量值。
  18. 根据权利要求16所述的方法，其特征在于，所述方法还包括：
    所述第二设备根据所述第一数据的所述部分内容确定所述完整性度量值。
  19. 根据权利要求16所述的方法，其特征在于，所述方法还包括：
    所述第二设备根据接收所述第一数据对应的第二操作日志，获得所述完整性度量值。
  20. 根据权利要求16-19任一项所述的方法，其特征在于，所述第二设备向验证服务器发送所述第一数据对应的完整性度量值之前，所述方法还包括：
    所述第二设备接收第一指示，所述第一指示用于指示所述第二设备对所述第一数据进行完整性校验。
  21. 根据权利要求20所述的方法，其特征在于，所述第一指示由所述第一设备发送。
  22. 根据权利要求20所述的方法，其特征在于，所述第一指示由所述验证服务器发送。
  23. 根据权利要求16-19任一项所述的方法，其特征在于，所述第二设备向验证服务器发送所述第一数据对应的完整性度量值之前，所述方法包括：
    在满足预设条件时，所述第二设备生成所述完整性度量值。
  24. 根据权利要求23所述的方法，其特征在于，所述预设条件包括下述至少一种：
    接收到的所述第一数据的总长度达到预设长度阈值；
    接收到的所述第一数据包含的表项的数量达到预设数量阈值；
    接收所述第一数据的累计时长达到预设时长；或者
    所述第一数据为增量数据。
  25. 一种完整性校验方法，其特征在于，包括：
    验证服务器接收第一设备发送的第一数据对应的完整性度量基线值，所述第一数据由所述第一设备发送给第二设备；
    所述验证服务器接收所述第二设备发送的所述第一数据对应的完整性度量值；
    所述验证服务器根据所述完整性度量基线值和所述完整性度量值，对所述第一数据的进行完整性校验。
  26. 根据权利要求25所述的方法，其特征在于，所述方法还包括：
    所述验证服务器接收所述第一设备发送的第一指示，所述第一指示用于指示所述验证服务器对所述第一数据进行完整性校验。
  27. 根据权利要求26所述的方法，其特征在于，所述方法还包括：
    响应于所述第一指示，所述验证服务器向所述第二设备发送第二指示，所述第二指示用于指示对所述第一数据进行完整性验证。
  28. 根据权利要求25-27任一项所述的方法，其特征在于，所述验证服务器根据所述完整性度量基线值和所述完整性度量值，对所述第一数据的进行完整性校验，包括：
    所述验证服务器确定所述完整性度量值和所述完整性度量基线值匹配；
    所述验证服务器确定对所述第一数据的完整性校验通过。
  29. 根据权利要求1-28任一项所述的方法，其特征在于，所述第一数据包括下述至少一个：
    分段路由流量工程SR TE配置信息、分段路由流量工程的策略SR TE-policy配置信息、访问控制列表ACL配置信息或流规则FlowSpec配置信息。
  30. 根据权利要求1-15、25-29任意一项所述的方法，其特征在于，所述完整性度量基线值为：经过哈希计算得到的哈希值、数字签名或经过加密处理得到的加密值。
  31. 根据权利要求1-9、16-29任意一项所述的方法，其特征在于，所述完整性度量值为：经过哈希计算得到的哈希值、数字签名或经过加密处理得到的加密值。
  32. 据权利要求1-31任意一项所述的方法，其特征在于，所述第一设备和所述第二设备保持时钟同步。
  33. 根据权利要求1-31任意一项所述的方法，其特征在于，所述第一数据携带发送时间戳。
  34. 根据权利要求1-33任一项所述的方法，其特征在于，所述第一设备是控制管理设备，所述第二设备是终端设备。
  35. 一种网络系统，其特征在于，包括：第一设备，第二设备和验证服务器，所述网络系统用于执行权利要求1-9以及29-34任一项所述的方法。
  36. 一种第一设备，其特征在于，包括：
    收发单元，用于向第二设备发送第一数据；
    所述收发单元，还用于向验证服务器发送所述第一数据对应的完整性度量基线值，所述完整性度量基线值用于对所述第一数据的进行完整性校验。
  37. 根据权利要求36所述的第一设备，其特征在于，所述第一设备还包括：
    处理单元，用于根据所述第一数据的全部内容确定所述完整性度量基线值。
  38. 根据权利要求36所述的第一设备，其特征在于，所述第一设备还包括：
    处理单元，用于根据所述第一数据的部分内容确定所述完整性度量基线值。
  39. 根据权利要求36所述的第一设备，其特征在于，所述第一设备还包括：
    处理单元，用于根据发送所述第一数据对应的第一操作日志，确定所述完整性度量基线值。
  40. 根据权利要求36-39任一项所述的第一设备，其特征在于，
    所述收发单元，还用于向所述第二设备发送第一指示，所述第一指示用于指示所述第二设备对所述第一数据进行完整性校验。
  41. 根据权利要求40所述的第一设备，其特征在于，所述收发单元，具体用于：
    通过所述验证服务器向所述第二设备发送所述第一指示。
  42. 一种第二设备，其特征在于，包括：
    收发单元，用于接收第一设备发送的第一数据；
    所述收发单元，还用于向验证服务器发送所述第一数据对应的完整性度量值，所述完整性度量值用于对所述第一数据的进行完整性校验。
  43. 根据权利要求42所述的第二设备，其特征在于，所述第二设备还包括：
    处理单元，用于根据所述第一数据的全部内容确定所述完整性度量值。
  44. 根据权利要求42所述的第二设备，其特征在于，所述第二设备还包括：
    处理单元，用于根据所述第一数据的所述部分内容确定所述完整性度量值。
  45. 根据权利要求42所述的第二设备，其特征在于，所述第二设备还包括：
    处理单元，用于根据接收所述第一数据对应的第二操作日志，获得所述完整性度量值。
  46. 根据权利要求42-45任一项所述的第二设备，其特征在于，
    所述收发单元，还用于在向所述验证服务器发送所述第一数据对应的完整性度量值之前，接收第一指示，所述第一指示用于指示所述第二设备对所述第一数据进行完整性校验。
  47. 根据权利要求46所述的第二设备，其特征在于，所述第一指示由所述第一设备发送。
  48. 根据权利要求46所述的第二设备，其特征在于，所述第一指示由所述验证服务器发送。
  49. 根据权利要求42-45任一项所述的第二设备，其特征在于，
    所述处理单元，还用于在向所述验证服务器发送所述第一数据对应的完整性度量值之前，在满足预设条件时，生成所述完整性度量值。
  50. 根据权利要求49所述的第二设备，其特征在于，所述预设条件包括下述至少一种：
    接收到的所述第一数据的总长度达到预设长度阈值；
    接收到的所述第一数据包含的表项的数量达到预设数量阈值；
    接收所述第一数据的累计时长达到预设时长；或者
    所述第一数据为增量数据。
  51. 一种验证服务器，其特征在于，包括：
    收发单元，用于接收第一设备发送的第一数据对应的完整性度量基线值，所述第一数据由所述第一设备发送给第二设备；
    所述收发单元，还用于接收所述第二设备发送的所述第一数据对应的完整性度量值；
    处理单元，用于根据所述完整性度量基线值和所述完整性度量值，对所述第一数据的进行完整性校验。
  52. 根据权利要求51所述的验证服务器，其特征在于，
    所述收发单元，还用于接收所述第一设备发送的第一指示，所述第一指示用于指示所述验证服务器对所述第一数据进行完整性校验。
  53. 根据权利要求52所述的验证服务器，其特征在于，
    所述收发单元，还用于响应于所述第一指示，所述验证服务器向所述第二设备发送第二指示，所述第二指示用于指示对所述第一数据进行完整性验证。
  54. 根据权利要求51-53任一项所述的验证服务器，其特征在于，所述处理单元，具体用于：
    确定所述完整性度量值和所述完整性度量基线值匹配；
    确定对所述第一数据的完整性校验通过。
  55. 一种第一设备，包括：
    存储器，所述存储器包括计算机可读指令；
    与所述存储器通信的处理器，所述处理器用于执行所述计算机可读指令，使得所述第一设备执行权利要求10-15以及29-34任一项所述的方法。
  56. 一种第二设备，其特征在于，包括：
    存储器，所述存储器包括计算机可读指令；
    与所述存储器通信的处理器，所述处理器用于执行所述计算机可读指令，使得所述第二设备执行权利要求16-24以及29-34任一项所述的方法。
  57. 一种验证服务器，其特征在于，包括：
    存储器，所述存储器包括计算机可读指令；
    与所述存储器通信的处理器，所述处理器用于执行所述计算机可读指令，使得所述验证服务器执行权利要求25-34任一项所述的方法。
  58. 一种通信系统，其特征在于，所述通信系统包括：权利要求55对应的所述第一设备、权利要求56对应的所述第二设备、以及权利要求57对应的所述验证服务器；
    或者，所述通信系统包括：权利要求36-41任一项对应的所述第一设备、权利要求42-50任一项对应的所述第二设备、以及权利要求51-54任一项对应的所述验证服务器。
  59. 一种计算机可读存储介质，其特征在于，包括程序或指令，当其被处理器执行时实现如权利要求1-34任一项所述的方法。
  60. 一种计算机程序产品，其特征在于，包括计算机程序，所述计算机程序被处理器执行时实现权利要求1-34任一项所述的方法。
PCT/CN2021/130551 2020-11-20 2021-11-15 一种完整性校验方法及相关设备 Ceased WO2022105703A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP21893850.4A EP4239948A4 (en) 2020-11-20 2021-11-15 Integrity verification method and related device
US18/321,232 US12530503B2 (en) 2020-11-20 2023-05-22 Integrity verification method and related device

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202011313900.3 2020-11-20
CN202011313900.3A CN114598483A (zh) 2020-11-20 2020-11-20 一种完整性校验方法及相关设备

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US18/321,232 Continuation US12530503B2 (en) 2020-11-20 2023-05-22 Integrity verification method and related device

Publications (1)

Publication Number Publication Date
WO2022105703A1 true WO2022105703A1 (zh) 2022-05-27

Family

ID=81708345

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/130551 Ceased WO2022105703A1 (zh) 2020-11-20 2021-11-15 一种完整性校验方法及相关设备

Country Status (4)

Country Link
US (1) US12530503B2 (zh)
EP (1) EP4239948A4 (zh)
CN (1) CN114598483A (zh)
WO (1) WO2022105703A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN121278729A (zh) * 2025-09-30 2026-01-06 北京字跳网络技术有限公司 公有云部署的模型应用的可信验证方法、装置及程序产品

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104202168A (zh) * 2014-09-19 2014-12-10 浪潮电子信息产业股份有限公司 一种基于可信第三方的云数据完整性验证方法
CN108111464A (zh) * 2016-11-24 2018-06-01 腾讯科技（深圳）有限公司 一种数据校验方法及装置
US20180260583A1 (en) * 2017-03-08 2018-09-13 Quantum Corporation In-situ data verification for the cloud
CN111597590A (zh) * 2020-05-12 2020-08-28 重庆邮电大学 一种基于区块链的数据完整性快速检验方法

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2288476A (en) * 1994-04-05 1995-10-18 Ibm Authentication of printed documents.
US6145084A (en) * 1998-10-08 2000-11-07 Net I Trust Adaptive communication system enabling dissimilar devices to exchange information over a network
JP2003244139A (ja) * 2002-02-20 2003-08-29 Amano Corp 電子文書に対するタイムスタンプ押印システム、及び、そのプログラム媒体
JP4896595B2 (ja) * 2006-01-18 2012-03-14 株式会社Ｐｆｕ 画像読取装置およびプログラム
US10650373B2 (en) * 2010-06-01 2020-05-12 Ternarylogic Llc Method and apparatus for validating a transaction between a plurality of machines
US20150040240A1 (en) * 2013-08-01 2015-02-05 Corel Corporation System and method for software piracy monetization
EP3286897B1 (en) * 2015-04-24 2020-09-09 VID SCALE, Inc. Detecting man-in-the-middle attacks in adaptive streaming
CN113660389A (zh) * 2017-11-23 2021-11-16 星宸科技股份有限公司 视频防篡改方法及视频验证方法
JP7138456B2 (ja) * 2018-03-09 2022-09-16 株式会社エヌ・ティ・ティ・データ 印象導出システム、印象導出方法および印象導出プログラム
US10939295B1 (en) * 2018-08-21 2021-03-02 HYPR Corp. Secure mobile initiated authentications to web-services
CA3115142A1 (en) * 2018-10-02 2020-04-09 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
EP3939218B1 (en) * 2019-05-31 2026-02-25 Apple Inc. Providing user information in association with messaging

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104202168A (zh) * 2014-09-19 2014-12-10 浪潮电子信息产业股份有限公司 一种基于可信第三方的云数据完整性验证方法
CN108111464A (zh) * 2016-11-24 2018-06-01 腾讯科技（深圳）有限公司 一种数据校验方法及装置
US20180260583A1 (en) * 2017-03-08 2018-09-13 Quantum Corporation In-situ data verification for the cloud
CN111597590A (zh) * 2020-05-12 2020-08-28 重庆邮电大学 一种基于区块链的数据完整性快速检验方法

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP4239948A4

Also Published As

Publication number Publication date
CN114598483A (zh) 2022-06-07
EP4239948A1 (en) 2023-09-06
US20230297722A1 (en) 2023-09-21
US12530503B2 (en) 2026-01-20
EP4239948A4 (en) 2024-04-17

Similar Documents

Publication Publication Date Title
US12363191B2 (en) Attestation-based scheme for validating peering setups for critical infrastructure protocols
US11924223B2 (en) Technologies for proving packet transit through uncompromised nodes
US20230007022A1 (en) Method and Device for Preventing Replay Attack on Srv6 HMAC Verification
US11245484B2 (en) Authenticating time sources using attestation-based methods
EP4078919A1 (en) Attestation service gateway
US20110099255A1 (en) Managing command compliance in internetworking devices
US12224978B2 (en) Packet processing method and apparatus
CN112688907A (zh) 一种组合式设备远程证明模式的协商方法及相关设备
US11212318B2 (en) Verifying service advertisements using attestation-based methods
Varga et al. Robustness and reliability provided by deterministic packet networks (TSN and DetNet)
CN114362985B (zh) 一种报文处理方法及装置
WO2021008490A1 (zh) 一种远程证明方法及装置
EP4156622A1 (en) Method for checking application information, message processing method and device
WO2022105703A1 (zh) 一种完整性校验方法及相关设备
CN120263438A (zh) 用户身份凭证的处理方法、装置、身份鉴权装置及服务器
US11277269B2 (en) System and methods for generating and authenticating verifiable network traffic
CN108243099B (zh) 一种路径选择的方法、装置和系统
CN119831660B (zh) 一种数字化营销方法、系统、程序产品及存储介质
Wang et al. ZbSR: A Data Plane Security Model of SR-BE/TE based on Zero-Trust Architecture
CN117614711A (zh) 一种列车安全通信方法和装置
CN117411776A (zh) 核心网的性能指标上报方法、装置、设备和存储介质
Flores-Meath Digital Signatures for PTP Using Transparent Clocks

Legal Events

Date Code Title Description
ENP Entry into the national phase

Ref document number: 2021893850

Country of ref document: EP

Effective date: 20230530

NENP Non-entry into the national phase

Ref country code: DE

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21893850

Country of ref document: EP

Kind code of ref document: A1