Android environment secret key segmentation processing method and device

Abstract

The invention discloses an Android environment secret key segmentation processing method and device. The processing method comprises secret key storage and secret key extraction, wherein the secret key storage comprises inputting an initial secret key into a white box secret key module to generate a target storage secret key; generating a key operation factor according to the equipment unique identifier; and generating a to-be-segmented key according to the target storage key and the key operation factor, executing a segmentation operation, and storing the segmented sub-key to a correspondingso library. The key extraction comprises the steps of obtaining segmented sub-keys from a so library and assembling the segmented sub-keys into a ciphertext; decrypting the assembled ciphertext by using a key operation factor, and decomposing a decryption result into a key and a key hash value; and if the calculated hash value of the secret key is consistent with the decomposed hash value of the secret key, inputting the secret key into the white box secret key module to be decrypted to obtain an initial secret key, and enabling secret key extraction to succeed. According to the method and thedevice, the key data is protected by adopting a strategy of storing the keys in sections by multiple so libraries, so that the method and the device are suitable for all Android system equipment andare beneficial to popularization of security applications.

Description

technical field [0001] The present application relates to the technical field of key storage, in particular to a method and device for segmenting keys in an Android environment. Background technique [0002] For the android mobile phone system, the key storage in the mobile phone is currently done through TEE and SE. TA is used as the application of TEE, and the key data is stored in TA, located in TEE, and TEE is isolated from REE (such as android system ), multiple TAs run in parallel in the TEE without interfering with each other and are isolated from each other. This ensures the security of the key stored by TA and the data generated in the intermediate process. SE needs the support of secure hardware in the mobile phone, and the key can be stored in the applet of SE. [0003] For the Android system, although the current mainstream mobile phones launched by mobile phone manufacturers include TEE system and SE, which can run TA applications and install applets, the mobi...

AI Technical Summary

Problems solved by technology

[0003] For the Android system, although the current mainstream mobile phones launched by mobile phone manufacturers include the TEE system and SE, which can run TA applications and install applets, the mobile phones in the third- and fourth-tier cities and remote areas are relatively low-end, and most of the mobile phones are in the thousands. Due to cost issues, it does not include TEE environment and SE, and cannot store keys. In the direction of mobile phone security applications, limited mobile phone models cannot be widely promoted

[0004] In addition, for the Android system, because the mobile phone brands are different, the CPU chip models used are different, so the TEE system and SE used are also different. For example, Huawei uses its own TEE environment, and Qualcomm also has its own TEE environment. The TA application cannot be adapted to mobile phones with Huawei Kirin chips and Qualcomm chips at the same time. Mobile phone security applications are limited by mobile phone brands and mobile phone chips. The development cost is high and cannot be widely promoted.

Images