Method and device for batch production of television system keys and medium

Abstract

The invention discloses a method and a device for batch production of television system keys and a medium, and relates to the technical field of Android television systems. The method comprises the following steps: acquiring batch key generation materials; a GPG algorithm is used to decrypt the Mgkid.gpg, and a batch of Netflix ESNs are obtained; generating a first random seed PFID and a second random seed PFPK in batches; the method comprises the following steps: reading a Mac.txt file, generating a batch of mac.bin files, and then respectively creating corresponding folders according to the mac.bin files; the method comprises the following steps of: respectively distributing a batch of Netflix ESN (Enhanced Sensor Network), a batch of PFID (Personal Frequency Identifier), a batch of PFPK (Personal FPK), a batch of mac.bin and a batch of Widevine Key into each Mac And executing operation on the keys in each Mac folder to obtain a combined key. According to the method and the device for manufacturing the television system keys in batches and the medium, the problems that multiple groups of keys are burnt in at the same time and the binding relation of the keys is recorded are solved, and the production efficiency and the accuracy are improved.

Description

Technical Field

[0001] This invention relates to the field of Android TV system technology, and in particular to a method, apparatus and medium for batch production of TV system keys. Background Technology

[0002] Widevine is a new DRM (Digital Rights Management) solution launched by Google. To prevent video copyright infringement, a private key (unique to each device) needs to be pre-installed in the TV system to decrypt videos from YouTube, Netflix, and other platforms. Similarly, Netflix requires an ESN (unique to each device) to play Netflix videos correctly.

[0003] Therefore, television manufacturers need to pre-install Widevine Keys and Netflix ESNs in large quantities during production. In the existing technology, the solution described in the patent titled "A System and Method for Batch Pre-installing Widevine Keys in Televisions" (Publication No. CN107809677A) can only generate Widevine Keys in batches at once, and cannot support simultaneous burning of Netflix ESNs. It can only burn them separately, increasing the workload of manual operation and the risk of human error. Summary of the Invention

[0004] The technical problem to be solved by the present invention is to provide a method, apparatus and medium for batch production of television system keys, which obtains batch key generation materials and then uniformly generates combined keys for television manufacturers to burn into television devices, solves the problem of burning multiple sets of keys at the same time and recording the binding relationship of each key, and improves production efficiency and accuracy.

[0005] In a first aspect, the present invention provides a method for batch production of television system keys, comprising:

[0006] Step 1: Obtain the bulk key generation materials, including the MAC list file, the PCPK key provided by the TV manufacturer, the Mgkid.gpg file generated by GPG encryption by Netflix ESN, and the bulk Widevine Key;

[0007] Step 2: Use the GPG algorithm to decrypt Mgkid.gpg to obtain a batch of Netflix ESNs;

[0008] Step 3: Batch generate the first random seed PFID and the second random seed PFPK;

[0009] Step 4: Read the Mac.txt file, generate a batch of mac.bin files, and then create corresponding folders based on the mac.bin files;

[0010] Step 5: Distribute the batch Netflix ESN, PFID, PFPK, mac.bin, and Widevine Key to the respective Mac folders;

[0011] Step 6: Perform steps 61 to 65 on the keys in each Mac folder:

[0012] Step 61: Generate an OTA Key based on mac.bin using a fixed algorithm;

[0013] Step 62: Encrypt the Netflix ESN with the PCPK key to obtain MGKID 1;

[0014] Step 63: Encrypt Netflix ESN using the second random seed PFPK to obtain MGKID 2;

[0015] Step 64: Encrypt the first random seed PFID with the PCPK key to obtain the encrypted PFID ciphertext; encrypt the second random seed PFPK with the PCPK key to obtain the encrypted PFPK ciphertext.

[0016] Step 65: According to fixed rules, combine Mac.bin, OTAKey, PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key into a combined key Combined_Key.bin for TV manufacturers to burn into TV devices.

[0017] Secondly, the present invention provides an apparatus for batch production of television system keys, comprising:

[0018] The material acquisition module is used to acquire batch key generation materials, including MAC list files, PCPK keys provided by TV manufacturers, Mgkid.gpg files generated by GPG encryption by Netflix ESN, and batch Widevine Keys;

[0019] The decryption module is used to decrypt Mgkid.gpg using the GPG algorithm to obtain batch Netflix ESNs;

[0020] The random seed generation module is used to generate the first random seed PFID and the second random seed PFPK in batches.

[0021] The MAC folder creation module reads the Mac.txt file, generates a batch of mac.bin files, and then creates corresponding folders based on the mac.bin files.

[0022] The material allocation module is used to distribute batches of Netflix ESN, PFID, PFPK, mac.bin, and WidevineKey to various Mac folders.

[0023] The encryption combination module is used to perform steps 61 to 65 on the keys in each Mac folder:

[0024] Step 61: Generate an OTA Key based on mac.bin using a fixed algorithm;

[0025] Step 62: Encrypt the Netflix ESN with the PCPK key to obtain MGKID 1;

[0026] Step 63: Encrypt Netflix ESN using the second random seed PFPK to obtain MGKID 2;

[0027] Step 64: Encrypt the first random seed PFID with the PCPK key to obtain the encrypted PFID ciphertext; encrypt the second random seed PFPK with the PCPK key to obtain the encrypted PFPK ciphertext.

[0028] Step 65: According to fixed rules, combine Mac.bin, OTAKey, PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key into a combined key Combined_Key.bin for TV manufacturers to burn into TV devices.

[0029] Thirdly, the present invention provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the method described in the first aspect.

[0030] The technical solutions provided in the embodiments of the present invention have at least the following technical effects:

[0031] By acquiring batch key generation materials and then uniformly generating combined keys for TV manufacturers to burn into TV devices, the problem of simultaneously burning multiple sets of keys and recording the binding relationships of each key can be solved. This also reduces manual operations and makes it easier for TV device manufacturers to batch burn various TV keys such as Mac, OTA Key, encrypted PFID, encrypted PFPK, Netflix ESN encrypted by PFPK, Netflix ESN encrypted by PCPK, Widevine Key, etc. (other keys can be added as needed). At the same time, it reduces errors that may be caused by manual operations and improves production efficiency and accuracy.

[0032] The above description is merely an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention and to implement it in accordance with the contents of the specification, and in order to make the above and other objects, features and advantages of the present invention more apparent and understandable, specific embodiments of the present invention are described below. Attached Figure Description

[0033] The present invention will be further described below with reference to the accompanying drawings and embodiments.

[0034] Figure 1 This is a flowchart of the method in Embodiment 1 of the present invention;

[0035] Figure 2 This is a schematic diagram of the KeyWrapper tool in a specific embodiment of the present invention;

[0036] Figure 3 This is a schematic diagram of the device in Embodiment 2 of the present invention;

[0037] Figure 4 This is a schematic diagram of the structure of the medium in Embodiment 3 of the present invention. Detailed Implementation

[0038] This invention provides a method, apparatus, and medium for batch production of television system keys. It obtains batch key generation materials and then uniformly generates combined keys for television manufacturers to burn into television devices. This solves the problem of simultaneously burning multiple sets of keys and recording the binding relationship of each key, and reduces manual operation.

[0039] The overall concept of the technical solutions in the embodiments of the present invention is as follows:

[0040] To facilitate TV manufacturers in pre-setting multiple unique ciphertexts, this invention combines multiple ciphertexts into one ciphertext and binds it to the TV's MAC address to ensure uniqueness.

[0041] 1) When burning the MGKID (Netflix ESN) to a TV device, two keys, PFID and PFPK, need to be burned simultaneously. The MGKID, PFID, and PFPK must be unique for each TV device. The MGKID contains two keys: one encrypting the Netflix ESN using the PCPK, and the other encrypting the Netflix ESN using the PFPK. Therefore, when burning these four keys in batches, ensure that each key set matches.

[0042] 2) While burning MGKID, it also supports burning Widevine Key simultaneously.

[0043] The above method solves the problem of simultaneously burning multiple sets of keys and recording the binding relationships of each key, while reducing manual operations and improving accuracy. A backup file (keylist.gpg) is also generated to back up the various keys burned into each TV device, facilitating subsequent OTA (Over-The-Air) updates.

[0044] The following are explanations of the terms used in this embodiment:

[0045] OTA: OverThe AirTechnology, remote upgrade technology.

[0046] OTA Key: The key used for communication and interaction between the TV device and the TV service provider's backend server during remote upgrades.

[0047] MGKID: which stands for Netflix ESN, is released in plaintext by Netflix and must be unique to each device.

[0048] PFID: ProvisionField ID, a key index used to associate with MGKID, and must be unique for each device.

[0049] PFPK: ProvisionFieldProtectKey, an AES key used for OTA encryption, encrypting the MGKID used during OTA (Over-The-Air) communication. Each device must have a unique PFPK.

[0050] PCPK: Provision CommonProtectKey, an AES key used for public encryption, encrypting MGKID or Widevine Key, with each TV manufacturer using a single key.

[0051] TEE: Trusted Execution Environment. It is typically used for Digital Rights Management (DRM), mobile payments, and sensitive data protection.

[0052] Example 1

[0053] This embodiment provides a method for batch production of television system keys, such as... Figure 1 As shown, including;

[0054] Step 1: Obtain the bulk key generation materials, including the MAC list file, the PCPK key provided by the TV manufacturer, the Mgkid.gpg file generated by GPG encryption by Netflix ESN, and the bulk Widevine Key;

[0055] Step 2: Use the GPG algorithm to decrypt Mgkid.gpg to obtain a batch of Netflix ESNs;

[0056] Step 3: Batch generate the first random seed PFID and the second random seed PFPK;

[0057] Step 4: Read the Mac.txt file, generate a batch of mac.bin files, and then create corresponding folders based on the mac.bin files;

[0058] Step 5: Distribute the batch Netflix ESN, PFID, PFPK, mac.bin, and Widevine Key to the respective Mac folders;

[0059] Step 6: Perform steps 61 to 65 on the keys in each Mac folder to obtain the combined key:

[0060] Step 61: Generate an OTA Key based on mac.bin using a fixed algorithm;

[0061] Step 62: Encrypt the Netflix ESN with the PCPK key to obtain MGKID 1;

[0062] Step 63: Encrypt Netflix ESN using the second random seed PFPK to obtain MGKID 2;

[0063] Step 64: Encrypt the first random seed PFID with the PCPK key to obtain the encrypted PFID ciphertext; encrypt the second random seed PFPK with the PCPK key to obtain the encrypted PFPK ciphertext.

[0064] Step 65: According to fixed rules, combine Mac.bin, OTAKey, PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key into a combined key Combined_Key.bin for TV manufacturers to burn into TV devices.

[0065] One possible implementation also includes:

[0066] Step 7: Compress all Mac folders in the current batch, and then encrypt the compressed package using GPG to obtain the keylist.gpg file;

[0067] Step 8: Upload the keylist.gpg file to the TV service provider's backend for backup using the specified method.

[0068] In one possible implementation, after obtaining a batch of combined keys, the TV manufacturer can sequentially burn the combined keys into the TV device through host computer software. The TV system middleware program will parse the combined key Combined_Key.bin to obtain Mac.bin and OTA Key, and write them to the system's unifykey partition respectively. At the same time, it will obtain PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key, and write them to the Trusted Execution Environment (TEE) respectively.

[0069] In one specific embodiment, the television service provider develops the KeyWrapper tool to implement the above-described method for batch generating television system keys, and then provides it to the television manufacturer for use, such as... Figure 2 As shown, the key materials input to the KeyWrapper tool include:

[0070] Mac.txt: Device MAC list file, recording the list of pre-burned device MAC addresses. Provided by the manufacturer.

[0071] PCPK: Provided by the TV manufacturer.

[0072] Mgkid.gpg: This is the Netflix ESN. The plaintext file is provided by Netflix, and the TV service provider uses GPG encryption to generate the Mgkid.gpg file, which contains a batch of Netflix ESNs.

[0073] Widevine Keys: Batch Widevine Keys encrypted with PCPK, provided by the brand owner.

[0074] The KeyWrapper tool is primarily used to perform the following steps:

[0075] A. Use the GPG algorithm to decrypt Mgkid.gpg to obtain a batch of Netflix ESN plaintext files;

[0076] B. Batch generate random seed PFIDs;

[0077] C. Batch generate random seed PFPK;

[0078] D. Read the Mac.txt file and generate a batch of mac.bin files;

[0079] E. Create folders named after Mac;

[0080] F. Distribute the batch Netflix ESN, PFID, PFPK, mac.bin, and Widevine Key to the respective Mac folders in sequence;

[0081] G. Perform the following H~M operations on the keys in each Mac folder in sequence;

[0082] H. Generate an OTA Key based on a fixed algorithm using mac.bin;

[0083] I. Encrypt the Netflix ESN using PCPK to obtain MGKID 1;

[0084] J. Encrypt the Netflix ESN using PFPK to obtain MGKID 2;

[0085] K. Encrypt PFID using PCPK to obtain the encrypted PFID ciphertext;

[0086] L. Encrypt PFPK with PCPK to obtain the encrypted PFPK ciphertext;

[0087] M. Combine Mac.bin, OTA Key, PFID ciphertext, PFPK ciphertext, GKID 1, MGKID 2, and Widevine Key into a single key named Combined_Key.bin according to a fixed set of rules.

[0088] N. Compress each Mac folder into a keylist.zip file, and then encrypt it with GPG to obtain a keylist.gpg file.

[0089] Through the above steps, the KeyWrapper tool obtained batch combined key files Combined_Key.bin and keylist.gpg.

[0090] After receiving the batch of combined key files, the TV manufacturer can use the host computer software to sequentially burn the keys into the TV device. The TV system middleware program will parse the combined key to obtain the Mac and OTA keys and write them to the unifykey partition respectively. At the same time, it will obtain the PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key and write them to the TEE respectively.

[0091] At the same time, TV manufacturers need to upload the keylist.gpg file to the TV service provider's backend for backup using a specified method.

[0092] Based on the same inventive concept, this application also provides an apparatus corresponding to the method in Embodiment 1, as detailed in Embodiment 2.

[0093] Example 2

[0094] This embodiment provides an apparatus for batch production of television system keys, such as... Figure 3 As shown, it includes:

[0095] The material acquisition module is used to acquire batch key generation materials, including MAC list files, PCPK keys provided by TV manufacturers, Mgkid.gpg files generated by GPG encryption by Netflix ESN, and batch Widevine Keys;

[0096] The decryption module is used to decrypt Mgkid.gpg using the GPG algorithm to obtain batch Netflix ESNs;

[0097] The random seed generation module is used to generate the first random seed PFID and the second random seed PFPK in batches.

[0098] The MAC folder creation module reads the Mac.txt file, generates a batch of mac.bin files, and then creates corresponding folders based on the mac.bin files.

[0099] The material allocation module is used to distribute batches of Netflix ESN, PFID, PFPK, mac.bin, and WidevineKey to various Mac folders.

[0100] The encryption combination module is used to perform steps 61 to 65 on the keys in each Mac folder:

[0101] Step 61: Generate an OTA Key based on mac.bin using a fixed algorithm;

[0102] Step 62: Encrypt the Netflix ESN with the PCPK key to obtain MGKID 1;

[0103] Step 63: Encrypt Netflix ESN using the second random seed PFPK to obtain MGKID 2;

[0104] Step 64: Encrypt the first random seed PFID with the PCPK key to obtain the encrypted PFID ciphertext; encrypt the second random seed PFPK with the PCPK key to obtain the encrypted PFPK ciphertext.

[0105] Step 65: According to fixed rules, combine Mac.bin, OTAKey, PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key into a combined key Combined_Key.bin for TV manufacturers to burn into TV devices.

[0106] One possible implementation also includes:

[0107] The compression module is used to compress all Mac folders in the current batch, and then encrypt the compressed package using GPG to obtain the keylist.gpg file;

[0108] The backup module is used to upload the keylist.gpg file to the TV service provider's backend for backup using a specified method.

[0109] In one possible implementation, after the TV manufacturer burns the data into the TV device, the TV system middleware program parses the combined key Combined_Key.bin to obtain Mac.bin and OTA Key, and writes them to the system's unifykey partition. At the same time, it obtains the PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key, and writes them to the Trusted Execution Environment (TEE).

[0110] Since the apparatus described in Embodiment 2 of the present invention is an apparatus used to implement the method of Embodiment 1 of the present invention, those skilled in the art can understand the specific structure and variations of the apparatus based on the method described in Embodiment 1 of the present invention, and therefore will not be described again here. All apparatuses used in the method of Embodiment 1 of the present invention fall within the scope of protection of the present invention.

[0111] Based on the same inventive concept, this application provides a storage medium corresponding to Embodiment 1, as detailed in Embodiment 3.

[0112] Example 3

[0113] This embodiment provides a computer-readable storage medium, such as... Figure 4 As shown, a computer program is stored thereon, which, when executed by a processor, can implement any of the embodiments in Example 1.

[0114] Since the computer-readable storage medium described in this embodiment is the same computer-readable storage medium used to implement the method in Embodiment 1 of this application, those skilled in the art can understand the specific implementation methods and various variations of the computer-readable storage medium in this embodiment based on the method described in Embodiment 1 of this application. Therefore, how this computer-readable storage medium implements the method in the embodiments of this application will not be described in detail here. Any computer-readable storage medium used by those skilled in the art to implement the method in the embodiments of this application falls within the scope of protection of this application.

[0115] This invention solves the problem of simultaneously burning multiple sets of keys and recording the binding relationships of each key by obtaining batch key generation materials and then uniformly generating combined keys for TV manufacturers to burn into TV devices. It also reduces manual operation and makes it easier for TV device manufacturers to batch burn various TV keys such as Mac, OTA Key, encrypted PFID, encrypted PFPK, Netflix ESN encrypted by PFPK, Netflix ESN encrypted by PCPK, Widevine Key, etc. (other keys can be added as needed). At the same time, it reduces errors that may be caused by manual operation and improves production efficiency and accuracy.

[0116] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, apparatus, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0117] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus, and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0118] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0119] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0120] While specific embodiments of the present invention have been described above, those skilled in the art should understand that the specific embodiments described are merely illustrative and not intended to limit the scope of the present invention. Equivalent modifications and variations made by those skilled in the art in accordance with the spirit of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A method for batch production of television system keys, characterized in that, include: Step 1: Obtain the bulk key generation materials, including the MAC list file, the PCPK key provided by the TV manufacturer, the Mgkid.gpg file generated by GPG encryption by Netflix ESN, and the bulk Widevine Key; Step 2: Use the GPG algorithm to decrypt Mgkid.gpg to obtain a batch of Netflix ESNs; Step 3: Batch generate the first random seed PFID and the second random seed PFPK; Step 4: Read the Mac.txt file, generate a batch of mac.bin files, and then create corresponding folders based on the mac.bin files; Step 5: Distribute the batch Netflix ESN, PFID, PFPK, mac.bin, and Widevine Key to the respective Mac folders; Step 6: Perform steps 61 to 65 on the keys in each Mac folder: Step 61: Generate an OTA Key based on mac.bin using a fixed algorithm; Step 62: Encrypt the Netflix ESN with the PCPK key to obtain MGKID 1; Step 63: Encrypt Netflix ESN using the second random seed PFPK to obtain MGKID 2; Step 64: Encrypt the first random seed PFID with the PCPK key to obtain the encrypted PFID ciphertext; encrypt the second random seed PFPK with the PCPK key to obtain the encrypted PFPK ciphertext. Step 65: According to fixed rules, combine Mac.bin, OTAKey, PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key into a combined key Combined_Key.bin for TV manufacturers to burn into TV devices.

2. The method according to claim 1, characterized in that, Also includes: Step 7: Compress all Mac folders in the current batch, and then encrypt the compressed package using GPG to obtain the keylist.gpg file; Step 8: Upload the keylist.gpg file to the TV service provider's backend for backup using the specified method.

3. The method according to claim 1, characterized in that: After the TV manufacturer burns the key into the TV device, the TV system middleware program parses the combined key Combined_Key.bin to obtain Mac.bin and OTA Key, and writes them to the system's unifykey partition. At the same time, it obtains the PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key, and writes them to the Trusted Execution Environment (TEE).

4. An apparatus for mass production of television system keys, characterized in that, include: The material acquisition module is used to acquire batch key generation materials, including MAC list files, PCPK keys provided by TV manufacturers, Mgkid.gpg files generated by GPG encryption by Netflix ESN, and batch Widevine Keys; The decryption module is used to decrypt Mgkid.gpg using the GPG algorithm to obtain batch Netflix ESNs; The random seed generation module is used to generate the first random seed PFID and the second random seed PFPK in batches. The MAC folder creation module reads the Mac.txt file, generates a batch of mac.bin files, and then creates corresponding folders based on the mac.bin files. The material allocation module is used to distribute batches of Netflix ESN, PFID, PFPK, mac.bin, and Widevine Key to various Mac folders. The encryption combination module is used to perform steps 61 to 65 on the keys in each Mac folder: Step 61: Generate an OTA Key based on mac.bin using a fixed algorithm; Step 62: Encrypt the Netflix ESN with the PCPK key to obtain MGKID 1; Step 63: Encrypt Netflix ESN using the second random seed PFPK to obtain MGKID 2; Step 64: Encrypt the first random seed PFID with the PCPK key to obtain the encrypted PFID ciphertext; encrypt the second random seed PFPK with the PCPK key to obtain the encrypted PFPK ciphertext. Step 65: According to fixed rules, combine Mac.bin, OTAKey, PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key into a combined key Combined_Key.bin for TV manufacturers to burn into TV devices.

5. The apparatus according to claim 4, characterized in that, Also includes: The compression module is used to compress all Mac folders in the current batch, and then encrypt the compressed package using GPG to obtain the keylist.gpg file; The backup module is used to upload the keylist.gpg file to the TV service provider's backend for backup using a specified method.

6. The apparatus according to claim 4, characterized in that: After the TV manufacturer burns the key into the TV device, the TV system middleware program parses the combined key Combined_Key.bin to obtain Mac.bin and OTA Key, and writes them to the system's unifykey partition. At the same time, it obtains the PFID ciphertext, PFPK ciphertext, MGKID 1, MGKID 2, and Widevine Key, and writes them to the Trusted Execution Environment (TEE).

7. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the method as described in any one of claims 1 to 3.

Images