System and method for having access to credible execution environment and credible application

Abstract

The invention discloses a system and method for having the access to a credible execution environment and a credible application, and relates to the field of mobile terminal devices. The method comprises the following steps a pre-developed or pre-modified CA and a pre-developed or pre-modified TA are deployed into an REE and a TEE respectively, and a TEE access module capable of analyzing a CA behavior script and recognizing assigned behaviors is created and deployed into the REE; then, the CA behavior script used for describing CA access needs and assigning CA access behaviors is written; when the CA operates to the time when the TA in the TEE needs to be accessed, the CA reads the CA behavior script and transmits the content of the CA behavior script to the TEE access module; the TEE access module analyzes the received CA behavior script and has assess to the TA in the TEE according to the assigned behaviors in the recognized CA behavior script. By means of the system and method for having the access to the credible execution environment and the credible application, the universality of the CA can be effectively improved, and the flexible access of the TEE and the TA can be achieved.

Description

technical field [0001] The invention relates to the field of mobile terminal equipment, specifically a system and method for accessing trusted execution environments and trusted applications. Background technique [0002] The development of mobile communication technology has brought about the rapid development of mobile terminal technology. Modern mobile terminal equipment provides a powerful and flexible REE (Rich Execution Environment, Rich Execution Environment), but it also makes the equipment vulnerable to security threats. TEE (Trusted Execution Environment, Trusted Execution Environment) is a technical solution proposed to solve the security risks existing in current mobile terminal equipment. TEE and REE run in parallel on the same device. TEE can guarantee the storage, processing and protection of sensitive data in a trusted environment, and provides a secure execution environment for authorized security software (trusted software). Protection, confidentiality, in...

AI Technical Summary

Problems solved by technology

However, when the existing access methods encounter changes in application scenarios, requirements, or TA changes, it is necessary to redevelop the CA and write the code of the CA to adapt to this change. The operation process is very cumbersome and the efficiency is extremely low.

Especially when it is necessary to perform integrity testing on TEE and TA, it is necessary to write a CA with a very complicated process, or to write multiple CAs to achieve the purpose of scheduled complete testing, which is very inflexible in operation

Images