TEE-based operating system application integrity measurement method and system

Abstract

The invention discloses a TEE-based operating system application integrity measurement method and system, the method comprises the execution process under system initial deployment, an integrity measurement scene, a local evaluation scene and a remote authentication scene, and the system initial deployment comprises the following steps: a TEE operating system generates a unique HMAC key for equipment; the REE operating system generates a file hash value for a file needing to be protected to serve as an integrity measurement reference value; the REE operating system calls the TEE operating system to encrypt or sign the integrity measurement reference value by using the HMAC key; and the REE operating system stores the encrypted or signed integrity measurement reference value in the IMA extension attribute of the file. Based on the TrustZone technology, integrity measurement of the operating system can be achieved, and the method has the advantages of being comprehensive in protection, high in verification level, safe, reliable, good in universality and high in expansibility.

Description

technical field [0001] The invention relates to the field of information security of computer operating systems, in particular to a method and system for measuring the integrity of operating system applications based on TEE. Background technique [0002] With the rapid development of Internet information technology, computers are playing an increasingly important role in people's daily life. Operating system security is the foundation of computer security, and integrity protection is an important prerequisite for the safe operation of the operating system. Linux system provides IMA framework support for operating system integrity measurement. The IMA integrity verification framework follows the TCG open integrity standard and uses the TPM as the root of trust. It supports multiple functions such as remote authentication, local evaluation, trusted metadata management, etc. The overall structure of IMA includes three layers: measurement target (executable file, loadable ker...

AI Technical Summary

Problems solved by technology

In the existing technology, the public key of the RSA algorithm used by IMA or the plaintext data used in the calculation may be intercepted by malicious users. If the private key prepared in advance is used to sign the hash value of the file, the integrity of IMA may be bypassed. metric checks, thus creating a security risk

Images