Safety communication method between Android application programs based on trusted execution environment

Abstract

The invention discloses a safety communication method between Android application programs based on a trusted execution environment. The method comprises the following steps: a data receiver application program creates an asymmetric key pair in a safety trusted region, and opens a public key of the created asymmetric key pair to the public; the data sender application program acquires the public key opened by the receiver application program, and adopts the acquired public key as the sensitive data, enables the sensitive data to form ciphertext data, and then sends the ciphertext data to the data receiver application program; the data receiver application program receives the ciphertext data sent by the data sender application program, and decrypts the received ciphertext data by adoptingthe private key of the created asymmetric key pair, thereby acquiring the final sensitive data. Through the safety communication method disclosed by the invention, the data communication security between the Android application programs is protected, the safety level of the sensitive data communication is improved, and the user information is protected to the greatest extent.

Description

technical field [0001] The invention belongs to the technical field of Android device information communication security, and in particular relates to a secure communication method between Android applications based on Trusted Execution Environment (TEE, Trusted Execution Environment). Background technique [0002] The gradual maturity of the Android ecosystem benefits from the diversification of content in the form of applications (Apps). There are more and more occasions where Android applications need to interact, especially when the App acts as a service provider. For example, the lock screen application needs to receive and verify the user password; when the third-party application needs to refer to the registered account of the social software as the identity to log in, it needs to transmit the account number and password to the social software; when using the digital certificate application for signing, the digital certificate application The program needs to receive...

AI Technical Summary

Problems solved by technology

[0006] The technical problem to be solved by the present invention is: for the problems that the sensitive data of the plain text communication between the existing Android application programs cannot be protected, and the private key stored improperly and the sensitive data in the cipher text communication of the asymmetric algorithm still faces the threat of being cracked, etc., and provides A secure communication method between Android applications based on a trusted execution environment, which uses an asymmetric algorithm to protect sensitive data, and the private key used for the asymmetric algorithm is located in a trusted execution environment, which greatly protects between applications The communication data is safe, and the cost is small, and the sensitive information of users is well protected

Images