A security communication method and device

Abstract

The present application proposes a secure communication method and device, wherein the method includes establishing a connection between the security chip and the trusted application through basic information authentication, external authentication, and secondary authentication, and the trusted application and the user application pass basic information authentication, external authentication, and secondary authentication To establish a connection, the security chip establishes a logical connection with the user application. By establishing a secure channel before business communication, all communication data in the secure channel is encrypted and transmitted, making the data in the link no longer transparent. This method can effectively prevent eavesdropping and ensure The secure execution of services without additional external devices enhances user experience.

Description

technical field [0001] The present invention relates to a communication technology, in particular to a safe communication method and device. Background technique [0002] At present, there are generally two types of application running environments in mobile terminals: one is the Rich Execution Environment (REE), in which any application CA can be executed; the other is the Trusted Execution Environment (TEE). ), the TEE can support security features such as secure startup and security management of the trusted application TA. Specifically, the TEE presets the relevant key in the mobile terminal, or dynamically writes the relevant key, and the trusted A series of security operations are performed when the TA is applied, thereby improving the security of information processing by the mobile terminal. [0003] When the TEE performs security operations on the application according to its preset or dynamically written key, it first obtains the relevant key from the ROM of the c...

AI Technical Summary

Problems solved by technology

[0004] Except that the public key of the chip manufacturer is stored in the ROM of the core chip of the mobile terminal, other keys are stored in the TEEOS. Since the OS in the TEE uses Flash as the storage medium, this medium is not safe. If it is used for storage, the security requirements are very high key, there is a risk of being cracked, therefore, the security of mobile terminals for information processing is still poor

[0005] Although there is currently a method of presetting the key in the security chip SE, the communication between the SE and the trusted application TA in the TEE, or the communication between the trusted application TA and the application CA in the REE, uses plaintext communication, and the link data Transparent, so it is easy to be monitored and endanger the security of communication interaction. In addition, ciphertext communication will increase system overhead and poor user experience

Images