Secure mobile terminal electronic authentication method and system

Abstract

The invention provides a secure mobile terminal electronic authentication method and system. The secure mobile terminal electronic authentication system comprises a secure element (SE) which is arranged in a mobile terminal and can store a key, and a trusted execution environment (TEE) which is arranged in the mobile terminal; a secure application applet which can run in the secure element is arranged in the secure element (SE); the secure application can generate a public-private key pair for electronic signature; and a private key is stored in the secure element (SE) and cannot be exported or duplicated. A secure redisplay trusted application (TA) is arranged in the trusted execution environment (TEE), so that transaction correctness can be confirmed artificially by a user and the transaction cannot be attacked by trojan horse in a rich execution environment (REE). The secure mobile terminal electronic authentication method and system greatly reduce high cost caused by additionally required production of hardware devices, solve the problem of using and carrying inconvenience for the user, are conducive to energy conservation and emission reduction, and save the social resources.

Description

technical field [0001] The present invention relates to the field of electronic authentication of smart mobile terminals such as mobile phones, and specifically relates to a secure mobile terminal electronic authentication system and method, which are applied to security elements (SE) / trusted execution environments (TEE) and security element-based authentication of mobile terminals. (SE) and trusted execution environment (TEE) mobile terminal security service system and method. Background technique [0002] At present, the technical background of the application of electronic authentication on the mobile terminal mainly includes the following: [0003] 1. Use the mobile terminal Rich Execution Environment (REE) to store keys, and implement electronic authentication in software. [0004] 2. Use the mobile terminal Trusted Execution Environment (TEE) to store keys, and implement electronic authentication in software. [0005] 3. Use external components that can be inserted i...

AI Technical Summary

Problems solved by technology

[0010] The key in method 1 is stored in the rich execution environment (REE), and the key is easily stolen by a Trojan horse implanted in a mobile terminal, which cannot achieve the high security specified in the "Financial Electronic Authentication Specification" (JR / T 0118-2015) Require

[0011] The private key in method 2 is stored in the Trusted Execution Environment (TEE). The private key is not easy to be stolen by a Trojan horse implanted in the mobile terminal, but it can be obtained by the administrator of the Trusted Execution Environment (TEE), and there is also security. Risk, unable to meet the high security requirements in the "Financial Electronic Authentication Specification" (JR / T 0118-2015)

[0012] Mode 3, the private key is stored in the security element (SE), and the Trojan horse cannot steal it, but the user's transaction confirmation operation is operated in the rich execution environment (REE), and the transaction data is easily tampered by the Trojan horse in the rich execution environment (REE). Therefore, it cannot meet the high security requirements in the "Financial Electronic Authentication Specification" (JR / T 0118-2015)

[0013] Method 4, the private key is stored in the security unit (SE), and there is an independent operating system to control the transaction echo to facilitate the user's secondary confirmation of the transaction, which can meet the "Financial Electronic Authentication Specification" (JR / T 0118-2015) High security level requirements in the medium, but it is inconvenient for users to carry it around, and the cost is high

Images