Apparatus for security information interaction

Abstract

The present invention discloses an apparatus for security information interaction, the apparatus comprising a first system management device and a second system management device; the first system management device is used for providing an operation environment in a normal mode for an application and is composed of: a unified interface command module used for providing a unified command interface for the application; a command distribution module for determining to which external secure carrier the command is to be sent according to the command received from the unified interface command module; and a first control module used for performing command interaction with the external secure carrier in a normal mode; and the second system management device is used for providing an operation environment in a secure mode and is composed of: a second control module used for performing command interaction with the secure carrier in a secure mode, wherein the command distribution module is configured to invoke the first control module when the external secure carrier is determined to be in the normal mode and is configured to invoke the second control module when the external secure carrier is determined to be in the secure mode.

Description

technical field [0001] The present invention relates to a device for information exchange, and more particularly, a device for security information exchange. Background technique [0002] With the increasingly wide application of computers and networks and the increasing variety of businesses in different fields, equipment used for security information interaction (that is, information interaction with high security requirements, such as transaction processing in the financial field) (especially It is a security information interaction device based on mobile terminals) is becoming more and more important. [0003] In traditional technical solutions, in order to improve the security of information interaction equipment, the following two methods are typically adopted: (1) Implement security mechanisms for existing system management devices (such as conventional multimedia operating systems) of information interaction equipment; Improvement, such as adding firewalls, anti-vir...

AI Technical Summary

Problems solved by technology

[0004] However, the traditional technical solutions have the following problems: (1) Since new viruses and Trojan horses may continue to appear, the first method is difficult to provide active and Thorough solution; (2) Since the system management device of the information interaction equipment (such as the conventional multimedia operating system) has its own loopholes, even if the security boot method is used, the loopholes still exist. In addition, the frequent updates of the system and the application Modification of program leads to high cost

[0008]1. The client program needs two types of access interfaces, one interface is used to access the SSD under the multimedia operating system, and the other interface is used to access the SSD under the secure operating system SSD security application increases the complexity of the client program

[0009]2. It is necessary to deploy an SSD security application under the security operating system, resulting in the dispersion of the overall application environment, and it is necessary to maintain two sets of applications at the same time

[0010]3. The security application under the security operating system requires operations such as authorization and authentication of the TEE controller, which will increase the difficulty of application deployment and is not conducive to the promotion of the overall application

Images