【摘要】 可信执行环境（Trusted Execution Environment,TEE）技术常用于保证云服务器上用户关键任务数据的机密性和完整性，考虑云服务器的负载均衡以及服务响应延迟，往往需要对TEE下的用户关键任务数据进行迁移。为了解决TEE下任务数据迁移中如何确认迁移双方身份可信性、保证迁移数据传输安全性和提高迁移速度等问题，文章提出一种高效的TEE下任务数据安全迁移方案。该方案使用软件防护扩展（Software Guard Extension,SGX）远程认证功能对迁移双方进行身份可信性验证，并基于SM2密钥协商算法和SM4分组密码算法保证迁移数据安全传输。安全性分析表明，该方案可以确保迁移双方身份可信性和迁移数据传输安全性；仿真实验结果表明，该迁移方案能够提高TEE下任务数据迁移速度。更多还原

【Abstract】 Trusted execution environment(TEE) technology is often used to protect the confidentiality and integrity of users’ critical task data on cloud servers, which often need to be migrated considering the load balancing and service response latency of cloud servers. In order to solve the problems of how to confirm the identity credibility of the migration parties,how to ensure the security of migrating data transmission, and how to improve the migration performance. This paper proposed an efficient and secure migration scheme for task data under TEE. The scheme used software guard extension(SGX) remote attestation to verify the identity credibility of the migration parties, and it ensured the secure transmission of the migrated data based on the SM2 and SM4 algorithms. The security analysis shows that the solution can ensure the trustworthiness of the identity of both parties and the security of the migration data transmission. And the simulation results show that the migration solution can improve the speed of task data migration under TEE.更多还原