Safe communication method and device

Abstract

The invention provides a safe communication method and device. The method comprises steps of performing basic information authentication, external authentication and secondary authentication on a security chip and a trusted application, so as to establish a connection between the security chip and the trusted application; performing basic information authentication, external authentication and secondary authentication on the trusted application and a user application, so as to establish a connection between the trusted application and the user application; and establishing a logic connection between the security chip and the user application. A safe channel is established before business communication, and all data communicated in the safe channel is encrypted and transmitted, so that the data in the link is not transparent any longer. The method can effectively prevent interception, guarantees the business to be executed safely, needs no external equipment, and increases user experience.

Description

technical field [0001] The present invention relates to a communication technology, in particular to a safe communication method and device. Background technique [0002] At present, there are generally two types of application running environments in mobile terminals: one is Rich Execution Environment (REE), in which any application CA can be executed; the other is Trusted Execution Environment (TEE), TEE It can support security features such as secure startup and security management of the trusted application TA. Specifically, the TEE presets the relevant key in the mobile terminal, or dynamically writes the relevant key, when downloading, starting or running the trusted application TA A series of security operations are performed to improve the security of information processing by the mobile terminal. [0003] When the TEE performs security operations on the application according to its preset or dynamically written key, it first obtains the relevant key from the ROM of...

AI Technical Summary

Problems solved by technology

[0004] Except that the public key of the chip manufacturer is stored in the ROM of the core chip of the mobile terminal, other keys are stored in the TEEOS. Since the OS in the TEE uses Flash as the storage medium, this medium is not safe. If it is used for storage, the security requirements are very high key, there is a risk of being cracked, therefore, the security of mobile terminals for information processing is still poor

[0005] Although there is currently a method of presetting the key in the security chip SE, the communication between the SE and the trusted application TA in the TEE, or the communication between the trusted application TA and the application CA in the REE, uses plaintext communication, and the link data Transparent, so it is easy to be monitored and endanger the security of communication interaction. In addition, ciphertext communication will increase system overhead and poor user experience

Images