Integrity verification method and related device

Patent metadata

Field	Value
Publication number	US-12530503-B2
Application number	US-202318321232-A
Country	US
Kind code	B2
Filing date	May 22, 2023
Priority date	Nov 20, 2020
Publication date	Jan 20, 2026
Grant date	Jan 20, 2026

Abstract

An integrity verification method includes: a first device that sends first data to a second device. The first device sends an integrity measurement baseline value corresponding to the first data to a verification server, and the second device sends an integrity measurement value corresponding to the first data to the verification server. The verification server performs integrity verification on the first data based on the integrity measurement value and the integrity measurement baseline value.

First claim

What is claimed is:

1 . An integrity verification method implemented by a second device, wherein the integrity verification method comprises:
receiving, from a first device, first data; receiving, from a verification server and/or from the first device, an indication indicating the second device to perform the integrity verification on the first data; obtaining, in response to the indication, an integrity measurement value based on a first operation log corresponding to the receiving of the first data; and sending, to the verification server, the integrity measurement value to enable the verification server to perform the integrity verification on the first data based on an integrity measurement baseline value received from the first device and the integrity measurement value, wherein the first device obtains the integrity measurement baseline value based on a second operation log corresponding to sending of the first data.

2 . The integrity verification method of claim 1 , further comprising: determining the integrity measurement value based on all content of the first data.

3 . The integrity verification method of claim 1 , wherein before sending the integrity measurement value, the integrity verification method further comprises: generating the integrity measurement value when a preset condition is satisfied.

4 . The integrity verification method of claim 3 , wherein the preset condition comprises at least one of:
a total length of the first data reaches a preset length threshold; a quantity of entries comprised in the first data reaches a preset quantity threshold; an accumulated duration of receiving the first data reaches a preset duration; or the first data is incremental data.

5 . A network system comprising:
a first device having first one or more processors configured to execute first set of instructions to cause the first device to:
send first data;
obtain an integrity measurement baseline value based on a first operation log corresponding to sending of the first data; and
send the integrity measurement baseline value corresponding to the first data;
a second device coupled to the first device, the second device having second one or more processors configured to execute second set of instructions to cause the second device to:
receive, from the first device, the first data;
receive an indication indicating the second device to perform integrity verification on the first data;
obtain, in response to the indication, an integrity measurement value based on a second operation log corresponding to receiving of the first data; and
send the integrity measurement value;
a verification server coupled to the first device and the second device, the verification server having third one or more processors configured to execute third set of instructions to cause the verification server to:
receive the integrity measurement baseline value from the first device;
receive the integrity measurement value from the second device; and
perform the integrity verification on the first data based on the integrity measurement baseline value received from the first device and the integrity measurement value received from the second device.

6 . The network system of claim 5 , wherein the first one or more processors are further configured to execute the first set of instructions to cause the first device to determine the integrity measurement baseline value based on all content of the first data, and wherein the second one or more processors are further configured to execute the second set of instructions to cause the second device to further determine the integrity measurement value based on all content of the first data.

7 . The network system of claim 5 , wherein the first one or more processors are further configured to execute the first set of instructions to cause the first device to determine the integrity measurement baseline value based on partial content of the first data.

8 . The network system of claim 5 , wherein the first one or more processors are further configured to execute the first set of instructions to cause the first device to send the indication.

9 . The network system of claim 5 , wherein the third one or more processors are further configured to execute the third set of instructions to cause the verification server to send the indication.

10 . The network system of claim 5 , wherein before sending the integrity measurement value, the second one or more processors are further configured to execute the second set of instructions to cause the second device to generate the integrity measurement value when a preset condition is satisfied.

11 . The network system of claim 10 , wherein the preset condition comprises at least one of:
a total length of the first data reaches a preset length threshold; a quantity of entries comprised in the first data reaches a preset quantity threshold; an accumulated duration of receiving the first data reaches a preset duration; or the first data is incremental data.

12 . A second device comprising:
a memory configured to store instructions; and one or more processors coupled to the memory and configured to execute the instructions to cause the second device to: receive, from a first device, first data; receive, from a verification server and/or from the first device, an indication indicating the second device to perform integrity verification on the first data; obtain, in response to the indication, an integrity measurement value based on a first operation log corresponding to receiving of the first data; and send, to the verification server, the integrity measurement value to enable the verification server to perform the integrity verification on the first data based on an integrity measurement baseline value received from the first device and the integrity measurement value, wherein the first device obtains the integrity measurement baseline value based on a second operation log corresponding to sending of the first data.

13 . The second device of claim 12 , wherein the one or more processors are further configured to execute the instructions to cause the second device to further determine the integrity measurement value based on all content of the first data.

14 . The second device of claim 12 , wherein before sending the integrity measurement value, the one or more processors are further configured to execute the instructions to cause the second device to generate the integrity measurement value when a preset condition is satisfied.

15 . The second device of claim 14 , wherein the preset condition comprises at least one of:
a total length of the first data reaches a preset length threshold; a quantity of entries comprised in the first data reaches a preset quantity threshold; an accumulated duration of receiving the first data reaches a preset duration; or the first data is incremental data.

Assignees

• Huawei Tech Co Ltd

Inventors

• Wu Di
• Cao Bin
• Pan Wei

Classifications

• H04W12/106

  Packet or message integrity · CPC title

• H04L9/3236 Primary

  using cryptographic hash functions · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/3297

  involving time stamps, e.g. generation of time stamps · CPC title