A startup method and device suitable for tee safety application examples

Abstract

The invention provides a starting method and device suitable for TEE safety application examples. This method divides the existing TEE instance into a host instance and a plug-in instance. The contents of all encrypted memory pages of the host instance are not allowed to be shared, and the generated instance hash remains unchanged during the life cycle. The plug-in instance The hash and content of the plugin are not allowed to be updated after initialization, but the plugin instance is allowed to be added to the host instance using hardware mapping primitives; the host instance reuses the plugin instance's content and hash to avoid lengthy startup time . Compared with the prior art, the present invention has the advantages of low start-up delay, low memory occupancy rate, and low runtime overhead, and simultaneously has good security sharing characteristics.

Description

technical field [0001] The present invention relates to a startup process of a trusted execution environment, and in particular, to a startup method and device suitable for a TEE security application instance. Background technique [0002] Among the hardware security technologies with trusted chips as the core, trusted execution environment technology is one of the important technologies. Trusted execution environment is a security sandbox isolation technology provided by hardware (usually a processor), which isolates the code of the data that the user cares about from the external environment, ensuring the integrity of the execution process and the confidentiality of computing data. sex. In recent years, with the rapid development of data security and privacy computing requirements, trusted execution environment technology has been used in cloud computing security, edge computing security and other fields. [0003] From the perspective of the protected objects, the protec...

AI Technical Summary

Problems solved by technology

But its disadvantages are: the cost of hardware computing hash is high, hardware instructions can only perform hash update at the granularity of a single memory "page" (page) each time, and the hash algorithm can only be executed serially, any out-of-order acceleration may cause the hash value verification to fail

The disadvantage of this method is that the newly generated code segment needs to modify the page permissions of the memory, which still requires the participation of the hardware instruction set. The modification of the code segment permissions requires the hardware to update page by page (from readable and writable to Executable), the page-by-page update method results in poor instance startup scalability

Therefore, whether it is a hardware solution or a software solution, they all face the problem of startup performance caused by the limitation of "page" granularity

Images