Mobile terminal security protection method and device

Abstract

The embodiment of the present invention discloses a mobile terminal security protection method and system, wherein the method includes: a pre-TA determines a security module corresponding to service data and a deployment method of the security module, and the security module includes: a security function TA, an eSE The pre-TA sends the business data to the security module, performs corresponding data security processing on the business data through the security module, and receives the data security processing result data returned by the security module and sends it to the business application or external device. In the method and system of the present invention, the traditional mobile phone shield TA is divided into functions, the core security function can be realized by the TEE soft shield or the eSE hard shield, and the pre-TA has a unified certificate management method for the TEE soft shield and the eSE hard shield. The password verification and transaction message signature process uses a unique process to reduce development and maintenance costs under the TEE platform.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to a mobile terminal security protection method and device. Background technique [0002] With the development of mobile communication technology, the demand for online banking transactions and other services on smart mobile terminals is increasingly strong, and the security requirements for mobile payment transactions are also getting higher and higher. Using the TEE solution on smart mobile terminals for online banking transactions, there are two solutions for the realization of online banking shield: use TA in TEE to realize all functions of the second-generation online banking shield, including non-core security functions, such as transaction message analysis, transaction information Display, password input, transaction information confirmation, etc., as well as core security functions, such as password verification and transaction message signature. Messag...

AI Technical Summary

Problems solved by technology

[0003] For the existing two different implementation technical solutions of online banking shield, in the personalization process or when performing the same core security function, the online banking system APP and certificate management system running in REE are used by TA running in TEE and running in eSE The online banking Applet in the application needs to use different instruction streams. Correspondingly, for the online banking system APP and the certificate management system, the existence of this difference increases the complexity of the design and implementation of the APP, and increases the difficulty of developing and deploying the certificate management system.

At the same time, the TEE soft shield solution develops a TA that includes TUI and security services, and the eSE hard shield solution needs to develop a TA that includes TUI and transparent transmission of commands with eSE, which increases the development and maintenance costs under the TEE platform

Images