Smart mobile terminal trust chain security transfer method and system based on trustzone

Abstract

The invention discloses a TrustZone-based intelligent mobile terminal trust chain security transfer method and system, which uses a trusted third-party TTP to interact with Bootloader1, Bootloader2, OS1, APP1, Bootloader3, OS2, and APP2 to perform security boot preprocessing respectively, and obtain public key hash value; and store the public key hash value in the OTP area respectively; finally, the public key provided by the latter program is authenticated by the earlier program through the public key hash value of the latter program in sequence according to the startup sequence. Started through security certification, a trust chain security transfer process from the security environment to the normal environment has been established. According to OTP’s one-time programmable characteristics, the hash value of the public key is stored in the OTP area to ensure the uniqueness of the public key, thus ensuring It ensures the security of the startup process of the smart mobile terminal, and can resist software attacks and hardware attacks.

Description

technical field [0001] The invention relates to the field of information security, in particular to a TrustZone-based intelligent mobile terminal trust chain security transmission method and system. Background technique [0002] With the development of mobile Internet and smart mobile terminals, the ability of mobile terminals to obtain and process information has been greatly improved, and some data services that could only be processed by personal computers have gradually been transferred to mobile terminals, which makes more and more mobile terminals. Handle personal data and sensitive information with care. Therefore, it is necessary to provide security protection means for smart mobile terminals, so as to deal with the security problems brought by the openness of mobile Internet and the complexity of smart operating systems to smart mobile terminals. [0003] ARM has launched TrustZone, which is a security method implemented at all levels within the computer system, ma...

AI Technical Summary

Problems solved by technology

The chain of trust should be able to resist software attacks and hardware attacks. At present, smart mobile terminals based on TrustZone only realize the boot loading process from the security environment to the normal environment, and have not established complete trust of Bootloader1→Bootloader2→OS1→APP1 / Bootloader3→OS2→APP2 Chain, unable to ensure the security of the smart mobile terminal startup process, and resist software attacks and hardware attacks

Images