Method of accessing secure element (SE), terminals and computer-readable storage medium

Abstract

The embodiment of the invention provides a method of accessing a secure element (SE), terminals and a computer-readable storage medium. The method includes: receiving a first accessing instruction which is sent by a terminal application through an interface provided by an REE (Rich Execution Environment) system of the terminal and is of accessing the security element; acquiring a hash value of a signature certificate of the terminal application through using a connected application (CA) in the REE system, and combining the hash value and the first accessing instruction to generate a second accessing instruction; receiving the second accessing instruction through a trusted application (TA) in a TEE (Trusted Execution Environment) system of the terminal, and parsing the second accessing instruction to acquire the hash value; acquiring a pre-stored hash value, which corresponds to the terminal application, from the secure element, and judging whether the hash value is consistent with thepre-stored hash value; and if yes, controlling the trusted application to restore the first accessing instruction by the second accessing instruction and send the first accessing instruction to the secure element. Through verifying legitimacy of the terminal application in a TEE, the method improves security of accessing the secure element.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a method for accessing a secure element, a terminal and a computer-readable storage medium. Background technique [0002] A secure element (Secure Element, referred to as SE) is usually provided in the form of a chip. In order to prevent external malicious analysis attacks and protect data security, the chip has an encryption / decryption logic circuit. Any application on the terminal can access SE through the programming interface. In this case, SE is easily attacked by malicious applications, resulting in data loss, tampering or leakage in SE. In order to ensure the information security of SE, it is necessary to SE access is monitored for security. [0003] The international standard stipulates SE access control rules. The general process is to first write the rules in the SE access rule application. When accessing the SE externally, first read the rules from the ...

AI Technical Summary

Problems solved by technology

The process of verifying whether the access application is legal is carried out in REE. The environmental safety factor of REE is not high. Malware can bypass this verification and directly access SE, causing security risks.

Images