A system and method for establishing a session key between CA and TA

Abstract

A system for establishing a session key between a CA and a TA, the CA runs in a rich system environment, the TA runs in a trusted environment, and the CA includes the following modules: a time factor calculation module 11; a root key storage module 12 saves the root The key S; the hash calculation module 13, which generates the session key K1; the CA encryption module 14, which encrypts the plaintext message to obtain the ciphertext message. TA includes the following modules: time factor calculation module 21; root key storage module 22 to store root key S; hash calculation module 23 to generate session key K2; TA decryption module 24 to perform decryption operation to obtain plaintext information. Through the present invention, the CA and the TA do not need to carry out additional communication before transmitting the message, and the ciphertext of the message can be directly transmitted, and the other party can decrypt it. The ciphertext transmitted at different times uses different session keys; the goal of security, efficiency, and zero overhead can be achieved in the high-frequency communication scenario of one-time-one-pad.

Description

technical field [0001] The present invention relates to information security transmission technology, and more particularly, to a system and method for establishing a session key between a CA and a TA. Background technique [0002] Currently, terminals such as mobile phones are mostly integrated with a Trusted Execution Environment (TEE, Trusted Execution Environment) and a Rich Execution Environment (REE, Rich Execution Environment). The REE consists of a client application (CA, Client Application) and an application operating system. The TEE is composed of a trusted application (TA, Trusted Application) and a trusted operating system (Trusted OS, Trusted Operating System). REE supports rich applications, but REE has certain security risks. The TEE is an independent area in the terminal. The installation of applications in this area is controlled by the management server platform, and is usually used to manage documents with high security requirements. [0003] In the AR...

AI Technical Summary

Problems solved by technology

However, if the same key is used for a long time, it is easy to be attacked by cryptanalysis methods, and the confidentiality cannot be effectively guaranteed.

Images