Communication optimization method and system on computing platform with TEE extension

Abstract

The invention discloses a communication optimization method and system on a computing platform with TEE extension. The communication optimization method comprises the following steps: allocating a shared memory to a common application program CA and a secure application program TA; enabling the common application program CA to call the security application program TA and transmit data through theshared memory; executing the security application program TA in one of an execution mode I and an execution mode II in the TEE system; and destroying the shared memory allocated to the common application program CA and the security application program TA. An execution mode I and an execution mode II provide two TEE calling interfaces; the REE interrupt request is shielded or not shielded through selection; the two switching modes are achieved, various functions of the trusted execution environment can be met, according to actual needs, in the program execution process, the communication efficiency is comprehensively considered and improved, the communication safety and diversified communication requirements are met, and the problems of starvation of REE application programs, unreasonable shared memory allocation and the like are further solved.

Description

technical field [0001] The invention relates to the field of computer operating systems, in particular to a communication optimization method and system on a computing platform with TEE extension. Background technique [0002] TEE (Trusted Execution Environment), also known as Trusted Execution Environment, is a secure area isolated from the host system. TEE technology adds hardware expansion capability to the existing CPU, and obtains an execution environment isolated from the host environment based on the combination of software and hardware, and ensures the confidentiality and integrity of the code and data loaded in the isolated environment. The host environment It will run concurrently with TEE as a REE (Rich Execution Environment) environment (general computing environment), and can use the secure communication mechanism to obtain TEE services. The hardware isolation mechanism ensures that the components in the TEE are not affected by the software running in the REE. ...

AI Technical Summary

Problems solved by technology

The present invention can meet various requirements of a trusted execution environment. According to actual needs, in the process of program execution, comprehensive consideration is given to improving communication efficiency, solving communication security and diverse communication requirements, and also solving REE application program "starvation" and Issues such as unreasonable allocation of shared memory

Images