A management method and terminal for offline management instructions

Abstract

Embodiments of the present invention provide a method for managing offline management instructions and a terminal. The management method includes: the TEE of the terminal receives the offline management instruction sent by the REE of the terminal, the offline management instruction includes offline management parameters, and the offline management parameters include a usage time threshold And or at least one of the use times threshold; TEE executes the offline management operation corresponding to the offline management instruction, and generates an offline management strategy according to the offline management parameters; when the usage status of the security domain SD or the trusted application TA does not meet the offline management strategy , the TEE deletes the SD or TA, or the TEE restores the SD or TA to the state before the update; wherein, the SD or TA is installed or updated offline by the TEE according to the offline management instruction. Based on the offline management strategy, the terminal judges whether the offline management of SD or TA by REE meets the situation of malicious occupation of TEE resources, so that the TEE of the terminal has active defense capabilities.

Description

technical field [0001] The invention relates to the field of security management, in particular to a management method and terminal for offline management instructions. Background technique [0002] With the development of electronic products and the user's demand for data security, with the support of hardware, many terminals can have two execution environments at the same time, one is the common execution environment, or called the rich execution environment (rich execution environment, REE), general execution environment generally refers to the operating environment without specific security functions; the other is the trusted execution environment (trusted execution environment, TEE), TEE has security functions, can meet certain security needs of users, and can realize the same time as REE operating mechanism in isolation. [0003] Under the TEE management framework (TEE management framework, TMF), the international platform organization (GlobalPlatform, GP) has issued ...

AI Technical Summary

Problems solved by technology

In other words, TEE has the ability to verify the legality of offline management instructions and execute legal offline management instructions, but it does not have the ability to identify whether the use of offline management instructions is legal.

Images