Implementation method of high security application system based on trusted execution environment

Abstract

The invention relates to an implementation method of a high security application system based on a trusted execution environment. The implementation method comprises the following steps of firstly, utilizing a sensitive business library to implement hypersensitive business logic and making the sensitive business library complete signature of a trusted third party CA (Certificate Authority); secondly, implementing data interaction with the sensitive business library in the trusted environment through a gasket shared library; and lastly, publishing the high security application system to a user for downloading and installation in a terminal supporting a trusted execution environment through an application system packaging technology so as to dynamically and safely load the sensitive business library in the trusted execution environment. The implementation method has the advantages of high application system security, short development period, capability of reducing complexity for construction of the trusted execution environment and the like.

Description

technical field [0001] The invention relates to a method for realizing a high-security application system based on a trusted execution environment, and belongs to the field of high-security application construction based on a trusted execution environment for mobile terminals. Background technique [0002] With the rapid development of the mobile Internet, the services carried by mobile devices have gradually changed from the original communication, SMS, social networking, games, etc., to areas with high security requirements such as enterprise office and mobile payment. [0003] Traditionally, in order to solve the high security system requirements of mobile devices, the framework layer of the smart terminal is generally used to process the highly sensitive business of the application system (such as data encryption and decryption, signature verification, key generation, destruction, etc.). Completing the sensitive business processing of the application system at this layer...

AI Technical Summary

Problems solved by technology

Completing the sensitive business processing of the application system at this layer can guarantee the security of the application system to a certain extent. However, due to the serious fragmentation problem in the smart terminal operating system (such as the Android operating system), if many system vulnerabilities in the user’s mobile device are If it is not repaired in time, the application system will face serious security risks (such as Trojan horse threats, application system being hijacked, etc.)

At the same time, all application system codes run in the same smart terminal operating system, it is difficult to ensure complete isolation from other application systems, and sensitive data will not be stolen

Therefore, the security level of this scheme is not high enough, and it is difficult to truly solve the security problems of highly sensitive application systems

Images