Information processing method and device for secure communication

Abstract

The embodiment of the invention provides an information processing method and device for secure communication. The method can be applied to a first security domain on terminal equipment and can also be applied to a second security domain. When the method is applied to a first security domain, the method comprises the following steps: receiving a security channel establishment request from a targetapplication on the terminal equipment, with the security channel establishment request comprising a domain identifier of a second security domain; in response to the establishment request, sending algorithm information to a second security domain, with the algorithm information comprising algorithm identifiers of a plurality of encryption and decryption algorithms supported by the target application, with the plurality of encryption and decryption algorithms corresponding to a plurality of algorithm types required by the security channel; receiving an encryption strategy from the second security domain, with the encryption strategy showing algorithm identifiers of a plurality of target algorithms and data types for encryption and decryption, with the plurality of target algorithms corresponding to the plurality of algorithm types and being encryption and decryption algorithms supported by both the target application and the second security domain; and executing a secure channel initialization operation according to the encryption strategy.

Description

technical field [0001] The embodiments of this specification relate to the technical field of information security, and in particular, to an information processing method and device for secure communication. Background technique [0002] At present, client applications with secure communication requirements (hereinafter collectively referred to as target applications) can be installed on terminal devices, and security domains (hereinafter collectively referred to as first security domains) can also be configured, such as TEE (Trusted Execution Environment, which can letter execution environment), etc. When the target application needs to communicate with applications on the server or other terminal devices, a secure channel with the second security domain can be established through the first security domain, and message transmission can be performed through the secure channel. Wherein, the second security domain is a security domain corresponding to applications on the serv...

AI Technical Summary

Problems solved by technology

[0003]In practice, the terminal environment is implemented based on various chip platforms, with different algorithm capabilities and encryption capabilities, and the security channel protocols they have do not match each other. If a set of encryption algorithm protocol is used, it cannot meet the unified requirements of client-client, client-server interaction business

Images