System comprising TEE and SE electronic signature module and electronic signature system thereof

Abstract

The invention relates to a system comprising a TEE (Trusted Execution Environment), which is characterized in that a trust root of the TEE system comprises a TEE hardware system, a system ROM (Read Only Memory) firmware program, an SE (Secure Element) electronic signature module which is connected and communicated with the TEE system, and updatable verification data which is stored in the SE electronic signature module and is used for verifying a TEE software module to be loaded and established; wherein the TEE system is a TEE system which is established by starting from the firmware program of the ROM memory of the system in a chain type signature verification mode on the basis of the TEE system trust root; the TEE system is matched with the security level of the SE electronic signature module of the TEE system trust root. An electronic signature system applied to the TEE-comprising system comprises a TEE system of the electronic signature system and an SE electronic signature module connected and communicated with the TEE system, wherein the TEE system is used for electronic signature application; wherein the SE electronic signature module and verification data stored in the SE electronic signature module and used for verifying the TEE software module to be loaded and established are trust roots of the TEE system.

Description

Technical Field

[0001] The present invention relates to the technical fields of TEE (Trusted Execution Environment) and electronic signature systems, and more specifically, to a "system including TEE", its SE electronic signature module, and an electronic signature system. Background Art

[0002] The concept of the present invention stems from the analysis of "integrating an electronic signature system and its applications in mobile phones" and is applicable to all "systems including TEE, their SE electronic signature modules, and electronic signature systems".

[0003] In the era of interconnected communication, digital certificates and their electronic signature systems (such as bank USBKeys) are widely used. At the same time, mobile communication technology and smartphone technology have also developed vigorously, and the potential of digital certificates and electronic signature applications based on smartphones is huge.

[0004] However, research has found that existing digital certificate technologies and their electronic signature systems have not been widely and fully applied in mobile phones. Analyzing the reasons, it is mainly because there are still defects in the existing technologies.

[0005] For further analysis, the following first introduces the relevant concepts and principles of the existing technologies:

[0006] 1. TEE and REE

[0007] 1) TEE is the abbreviation of Trusted Execution Environment, and its Chinese meaning is: Trusted Execution Environment, also known as the "Secure Execution Environment";

[0008] TEE is a secure execution environment based on ARM TrustZone technology; ARM TrustZone is a technology used by ARM Company to build the underlying hardware isolation for TEE;

[0009] 2) REE is the abbreviation of Rich Execution Environment, and its Chinese meaning is: Rich Execution Environment, also known as the "Normal Execution Environment";

[0010] 3) TEE and REE are two independent system execution environments that exist relatively in the same system, are isolated by hardware technology, have their own independent software systems, are closely related and can communicate with each other; the TEE system can access all areas and resources of the REE system through software configuration, while the REE system cannot access the secure areas and resources set by the TEE system; for example: current mobile phone systems basically include an REE system (i.e., the Android system execution environment) and a TEE system (i.e., a secure execution environment based on ARM TrustZone technology, running software applications with high security requirements, such as fingerprint, password input, payment, etc.);

[0011] 4) The TEE itself is also a computer system, which is a system composed of a TEE hardware system and a TEE software system; different TEE software systems run on the TEE hardware system to form different TEE systems (for example: in an existing mobile phone system, each node system from the ROM firmware to the establishment of the TEE trusted operating system is a "TEE system running different TEE programs");

[0012] 5) The initial TEE system refers to the TEE system automatically established after the TEE system is reset.

[0013] 2. Systems including TEE

[0014] A "system including TEE" refers to a "system containing the TEE trusted execution environment"; a "system including TEE" definitely also includes the REE; for example: "a mobile phone system containing TEE".

[0015] 3. Security description of existing TEE systems

[0016] 1) An existing TEE system is a TEE system in an existing "system including TEE (such as: a mobile phone system)", which is a secure execution environment based on ARM TrustZone technology and is used to run "software applications with high security requirements";

[0017] 2) An existing TEE system is established by starting with a chain signature verification based on the trust root of the existing TEE system; the software programs and "verification data for signature verification operations (such as: public keys and Hash values for signature verification)" in the trust root of the existing TEE system are stored in the system ROM memory and cannot be modified; among them, the first-stage signature verification operation during its startup establishment process is completed by "the firmware in the ROM memory", and the "public key or Hash value for signature verification" used in its signature verification operation is also written into the OTP / efuse memory before the product leaves the factory;

[0018] Among them, the meaning of "signature verification" is: "According to the agreement, use 'agreed verification data (such as: public key or Hash value for signature verification)' to verify 'the loaded program module'; it includes: 'According to the agreement, use 'agreed verification data (such as: public key for signature verification)' to verify 'the electronic signature of the loaded program module'", or 'According to the agreement, use 'agreed verification data (such as: Hash value)' to verify 'the Hash value of the loaded program module'";

[0019] Among them, the meaning of "chain signature verification" is: continuous signature verification stage by stage according to the pre-designed stages and processes; for example: the "firmware program in the ROM memory" running in the first stage verifies the "Hash value of the loaded program module" using the "agreed verification data (such as: Hash value)" as agreed. If the verification passes, the execution of the "loaded program module" is started and the second stage is entered; the program running in the second stage, according to the agreement, continues to verify the "electronic signature of the loaded program module" using the "agreed verification data (such as: public key for signature verification)". If the verification passes, the execution of the "loaded program module" is started and the third stage is entered;... and so on continuously, completing the "signature verification process for each pre-designed stage" to establish the TEE system.

[0020] Among them, the root of trust of the TEE system is the basic trust resource that "is to be used in the process of establishing the TEE system and determines the trust level of the established TEE system", and it is a part of the system; it includes hardware, the firmware program in the ROM memory, and the "verification data for signature verification operations (such as: public key and Hsah value for signature verification)".

[0021] Among them, ROM is the abbreviation of Read Only Memory, and its Chinese meaning is: read-only memory; OTP is the abbreviation of One Time Programable (one-time programmable); eFuse memory is a new type of one-time programmable memory; OTP memory and eFuse memory both belong to ROM memory.

[0022] 3) Existing TEE systems are all under the exclusive management and control of the manufacturers of the "system including TEE" (such as: mobile phone manufacturers) and are not open to the outside world.

[0023] 4) The TEE white paper of the international standardization organization Global Platform clearly states that the security level of the TEE system is lower than that of the SE system; therefore, in practice, generally, the "private key for electronic signature" will not be established, stored, and applied in the TEE system.

[0024] 4. Electronic signature system

[0025] An electronic signature system is a computer system that can establish, store, and apply the "private key for electronic signature" and can implement electronic signatures; it is generally established using the "SE security chip or SE security chip module with high security characteristics".

[0026] A reliable electronic signature system refers to an electronic signature system that has been certified by a "third-party certification authority established according to law" and can implement a "reliable electronic signature". According to the Electronic Signature Law, only a "reliable electronic signature" has legal effect.

[0027] 5. SE and SE System, SE Electronic Signature Module

[0028] 1) SE is the abbreviation of Secure Element, and its Chinese meaning is: secure chip or secure chip module; in this article, it refers to: an SOC chip or integrated circuit module used in the field of electronic signature, with a secure protection design and "integrating functional units such as CPU, memory, and encryption / decryption modules".

[0029] Among them, SOC is the abbreviation of SYSTEM ON CHIP, and its Chinese meaning is: system on chip.

[0030] 2) The SE system is a system that "includes an SE secure chip module and its software system".

[0031] 3) The SE electronic signature module, in this article, refers to an SE system that "can establish, store, and apply the 'private key for electronic signature'" and can implement electronic signatures, such as: bank USBKEY.

[0032] In application, the SE electronic signature module generally cooperates with "other host computer systems" to jointly complete tasks involving electronic signatures. Therefore, relative to the host computer system, the SE electronic signature module is also called the SE electronic signature module subsystem.

[0033] After being registered and used, the SE electronic signature module generally will not change except for regularly updating the signature key according to strict authentication processes. It is a relatively fixed-function and secure computer system.

[0034] Referring to the above concepts, the reasons why the "technology of existing electronic signature systems" has not been widely and fully applied in mobile phones are analyzed below; 1. Analysis of the technology of existing electronic signature systems represented by "bank USBKey":

[0035] This type of electronic signature system is established by applying an "SE secure chip with high security characteristics"; its features are: its SE secure chip system comes with a liquid crystal display and button input; the sensitive information to be signed is displayed on the liquid crystal display screen of the USBKey, achieving the effect of what you see is what you sign, eliminating security vulnerabilities brought by hackers tampering with information; at the same time, its transaction signature can only be realized by the user inputting and confirming on the buttons of the USBKey, enabling the user to control the process of transaction signature.

[0036] The disadvantages of this type of electronic signature system are:

[0037] (1) The display capacity of the "SE security chip system with built-in liquid crystal display" is small, the amount of information is small, and the functions are limited. It is only applicable to the "electronic signature applications of a small amount of sensitive information" in the banking industry and cannot be applied to the "electronic signature applications of large texts, pictures, videos, etc.", which limits the application expansion;

[0038] (2) It is not suitable for integration and application in mobile phones; because the "SE security chip system with built-in liquid crystal display and keypad input" will occupy a large space in the mobile phone, have a great impact on the overall structure layout of the mobile phone, and increase the cost, which is not conducive to the overall sales of the mobile phone;

[0039] Therefore, this type of electronic signature system technology has not been widely applied in existing mobile phones;

[0040] 2. The trust root of the existing mobile phone TEE system and the security level of its TEE system are lower than the security level of the SE electronic signature module (such as: bank USBKey), resulting in the inability to utilize the powerful functions of the existing mobile phone TEE system to make up for the shortcomings of the existing electronic signature system (such as: unable to be applied to the "electronic signature applications of large texts, pictures, videos, etc."), and unable to combine and build a powerful (TEE + SE) architecture electronic signature system, which restricts the wide application of electronic signature system technology in mobile phones; The following is a specific analysis:

[0041] Referring to the "Security Description of the Existing TEE System" mentioned above, it can be known that:

[0042] (1) The security level of the public key for signature verification in the trust root of the existing TEE system is insufficient.

[0043] The existing TEE system is established based on the trust root of the existing TEE system in a chained signature verification manner; among them, the public key for signature verification as the TEE trust root is either directly written into the OTP / efuse (ROM memory) and cannot be modified, or indirectly restricted by the Hash value written into the OTP / efuse (ROM memory) and cannot be modified;

[0044] Because the existing public key for signature verification cannot be modified and updated, the corresponding private key for trusted signature cannot be updated either. In the long run, the private key for trusted signature can be cracked, enabling hackers to forge signatures and deceive trust, thus posing a risk; Therefore, the trust root of the existing mobile phone TEE system and the security level of its TEE system are lower than the security level of the SE electronic signature module (such as: bank USBKey), resulting in the inability to combine and build a (TEE + SE) architecture electronic signature system;

[0045] Meanwhile, when the "TEE system download module" is upgraded, it is impossible to upgrade and update the Hash verification value of the "TEE system download module" in the system ROM module. Only the method of verifying the electronic signature can be used to verify the "new version of the TEE system download module". However, this can only verify the electronic signature and cannot identify the new and old versions because the trust signatures of the new and old versions of the "TEE system download module" will both pass the verification. Therefore, hackers can replace the "new version and its signature" with the "old version and its signature" and still use the vulnerabilities of the old version to attack the system.

[0046] (2) Existing mobile phone TEE systems are all under the exclusive management and control of mobile phone manufacturers, with insufficient credibility and security level.

[0047] Existing TEE systems are started and established in the way of chained signature verification. Among them, the signature private keys corresponding to the "public keys for signature verification" are all under the exclusive management and control of mobile phone manufacturers. Therefore, the security of existing mobile phone TEE systems is certified and controlled by the mobile phone manufacturers themselves without being certified and controlled by an authoritative third party.

[0048] Therefore, compared with the "SE electronic signature module certified and controlled by an authoritative third party", the existing mobile phone TEE systems have insufficient credibility and security level.

[0049] Through the above analysis, it can be seen that the defects of existing mobile phone TEE systems and the defects of existing SE electronic signature module technologies have led to the fact that existing electronic signature system technologies cannot be widely and fully applied in mobile phones.

[0050] Based on the above analysis, the present invention provides a new technical solution that can solve the above problems and defects.

[0051] The present invention is an improvement and innovation on the existing technology based on the existing technology. Next, the relevant content of the existing technology will be introduced:

[0052] 1. Hash Algorithm and Hash Digest

[0053] 1) Hash is generally translated as "hash" and can also be directly transliterated as "Hash". In this article, its English is directly used.

[0054] 2) The Hash algorithm is an algorithm that maps binary values of any length to binary values of a shorter fixed length, including algorithms such as CRC32, MD5, and SHA1.

[0055] 3) Hash digest. The Hash algorithm maps a binary value of any length into a binary value of a shorter fixed length. This small binary value is called the Hash digest, Hash value, or Hash verification data; it is a unique and extremely compact numerical representation of a piece of data. It is computationally almost impossible to find two different inputs with the same Hash digest. Therefore, the Hash digest of data can be used to verify the integrity of the data.

[0056] 2. Symmetric encryption algorithm and its symmetric key

[0057] A symmetric encryption algorithm refers to an encryption algorithm in which the encryption key and the decryption key are the same or can be deduced from each other. The key used in a symmetric encryption algorithm is called the symmetric key.

[0058] The encryption key of a symmetric encryption algorithm can be deduced from the decryption key, and at the same time, the decryption key can also be deduced from the encryption key. In most symmetric algorithms, the encryption key and the decryption key are the same.

[0059] 3. Asymmetric encryption algorithm and its asymmetric key pair

[0060] An asymmetric encryption algorithm refers to an encryption algorithm in which the encryption key and the decryption key are different; such as the RSA algorithm.

[0061] The two keys used in an asymmetric encryption algorithm are the public key (abbreviated as the public key) and the private key (abbreviated as the private key). They are a pair, but it is computationally almost impossible to deduce each other from each other, and they are called an asymmetric key pair.

[0062] If the data is encrypted using the public key and this algorithm, only the corresponding private key and this algorithm can be used to decrypt it; if the data is encrypted using the private key and this algorithm, then only the corresponding public key and this algorithm can be used to decrypt it.

[0063] 4. Digital certificate

[0064] A digital certificate is an electronic signature authentication certificate, which refers to a data message or other electronic record that can prove the connection between the electronic signatory and the electronic signature production data;

[0065] A digital certificate is generally a file containing the public key and the information of the public key owner, electronically signed by a digital certificate certification authority (CA).

[0066] 5. Digital certificate application

[0067] Digital certificate application refers to "applications related to digital certificates", which can be "key pairs for generating digital certificates", can be "downloading and establishing digital certificates", or can be "updating digital certificates", etc.

[0068] 6. Electronic signature

[0069] 1) An electronic signature, also known as a digital signature, refers to data contained in or attached to a data message in electronic form that is used to identify the signatory and indicate that the signatory approves the content therein. For example: The sender first calculates a message digest (also known as: HASH digest) for the message according to a pre-agreed HASH algorithm; then encrypts the message digest using the sender's private key and an asymmetric encryption algorithm, and the resulting ciphertext is called "the electronic signature of the sender for this message". The electronic signature needs to be bound to the original message and sent to the recipient together.

[0070] 2) Electronic signature production data refers to the characters, codes, etc. used in the electronic signature process that reliably link the electronic signature with the electronic signatory.

[0071] 3) Electronic signature verification data refers to the data used to verify the electronic signature, including codes, passwords, algorithms, or public keys, etc.

[0072] 4) The verification method of the electronic signature is recorded and described in the digital certificate.

[0073] 7. CA is the abbreviation of Certification Authority, and its Chinese meaning is: Certification Authority; it is a third-party trust institution that adopts public key infrastructure technology, specializes in providing network identity authentication services, is responsible for authenticating, issuing, and managing digital certificates, and has authority and fairness. It is usually also called the Digital Certificate Certification Center.

[0074] 8. Download and establishment means downloading, storing, and applying in the memory of a computer.

[0075] 9. ID data. ID is the abbreviation of identification, and ID data refers to: identification data. Summary of the Invention

[0076] The basic concept of the present invention is as follows: improve the existing TEE system to enhance the security level of the TEE system; make the "improved TEE system match the security level of the SE electronic signature module and cooperate to form a powerful electronic signature system with a new (TEE + SE) architecture"; including: (1) Improve the trust root of the existing TEE system, that is: use the SE electronic signature module as a component of the TEE system trust root, and transfer and store the "unchangeable verification data (such as the public key for signature verification) in the existing TEE system trust root for verifying the 'TEE module to be loaded and established'" to the SE electronic signature module that can be connected and communicate with the TEE system and serves as a component of the TEE system trust root, and update it regularly according to the requirements of security specifications (such as updating the public key for signature verification); (2) Improve the signature verification process of the TEE system; perform signature verification by applying the SE electronic signature module and the "verification data (such as the public key for signature verification and Hsah value) in the SE electronic signature module for verifying the 'TEE software module to be loaded and established'", so as to improve the security and reliability of the TEE system established in the "chain signature verification method"; (3) Improve the problem that the "existing TEE system has always been under the exclusive management and control of the system manufacturer (such as a mobile phone manufacturer) without third-party certification and supervision"; make the "TEE system for electronic signature applications" verifiable and controllable by an "authoritative third party (such as a CA)", so as to improve the security and reliability of the "TEE system for electronic signature applications"; (4) At the same time, the "SE electronic signature module connected and communicating with the TEE system" is also correspondingly improved.

[0077] A "system including a TEE", its SE electronic signature module, and an electronic signature system disclosed by the present invention can have various different solutions under the overall concept; to completely describe various different solutions under the overall concept of the present invention, various different solutions of the present invention are described below in a hierarchical and modular structure.

[0078] 1. The present invention discloses a system including a Trusted Execution Environment (TEE), which includes a Rich Execution Environment (REE) system and a Trusted Execution Environment (TEE) system, and is characterized in that:

[0079] The TEE system trust root included therein includes: a TEE hardware system, a system ROM memory firmware program, an SE electronic signature module connected and communicating with the TEE system, and verification data stored in the SE electronic signature module for verifying the TEE module to be loaded and established;

[0080] Among them, the TEE system is a TEE system established in a chain signature verification method starting from the system ROM memory firmware program based on the TEE system trust root; the security level of the TEE system matches that of the SE electronic signature module of the TEE system trust root;

[0081] Among them, the TEE system includes a TEE loading and establishment management module, which is used to manage, verify, and establish the TEE module to be loaded and established;

[0082] The TEE loading and establishment management module obtains the electronic signatures of the TEE module to be loaded and established and its authenticator according to the protocol and process;

[0083] The TEE loading and establishment management module communicates and cooperates with the SE electronic signature module according to the protocol and process, and uses the verification data in the SE electronic signature module for verifying the TEE module to be loaded and established to verify the electronic signature of the TEE module to be loaded and established;

[0084] The TEE loading and establishment management module executes the next step according to the protocol agreement based on the verification result of the electronic signature.

[0085] 2. A system including a TEE as described in 1 above, further characterized in that:

[0086] The trust root of the TEE system it contains includes: the TEE hardware system, the system ROM memory firmware program, the SE reliable electronic signature module connected and communicating with the TEE system, and the verification data (such as the public key for signature verification) of the authoritative third party (such as: CA) and the verification data (such as the public key for signature verification) of the system manufacturer (such as: mobile phone manufacturer) stored in the SE reliable electronic signature module for verifying the TEE module to be loaded and established;

[0087] Among them, the TEE system is a TEE system established in a chained signature verification manner starting from the system ROM memory firmware program based on the trust root of the TEE system; the TEE system matches the security level of the SE electronic signature module of the trust root of the TEE system;

[0088] Among them, the TEE system includes a TEE loading and establishment management module, which is used to manage, verify, and establish the TEE module to be loaded and established;

[0089] The TEE loading and establishment management module obtains the electronic signatures of the TEE module to be loaded and established, its authoritative third party (such as: CA), and the system manufacturer (such as: mobile phone manufacturer) according to the protocol and process;

[0090] The TEE loading and establishment management module communicates and cooperates with the SE electronic signature module according to the protocol and process, and uses the verification data of the authoritative third party and the verification data of the system manufacturer in the SE electronic signature module for verifying the TEE module to be loaded and established to respectively verify the electronic signatures of the authoritative third party and the system manufacturer of the TEE module to be loaded and established;

[0091] If the verification of the electronic signature of the authoritative third party and the electronic signature of the system manufacturer fails, the TEE loading and establishment management module rejects the startup and execution of the TEE module to be loaded and established;

[0092] If the verification of the electronic signatures of both the authoritative third party and the system manufacturer passes, the TEE loading and establishment management module continues to execute the next step according to the process.

[0093] 3. The present invention discloses an electronic signature system, which is characterized in that it is an electronic signature system applied to the system including the trusted execution environment TEE; it includes: the TEE system for electronic signature applications of the electronic signature system and the SE electronic signature module connected and communicating with the TEE system;

[0094] Among them, the trust root of the TEE system for electronic signature applications includes: the TEE hardware system, the system ROM memory firmware program, the SE electronic signature module connected and communicating with the TEE system, and the verification data stored in the SE electronic signature module for verifying the TEE module to be loaded and established;

[0095] Among them, the TEE system is a TEE system established in a chained signature verification manner starting from the system ROM memory firmware program based on the trust root of the TEE system; the TEE system matches the security level of the SE electronic signature module of the trust root of the TEE system; the TEE system and the SE electronic signature module cooperate with each other to jointly complete the tasks of electronic signature applications;

[0096] Among them, the SE electronic signature module includes: the verification data in the trust root of the TEE system for verifying the TEE module to be loaded and established;

[0097] Among them, the SE electronic signature module includes an assistance TEE establishment management module for applying the verification data in the SE electronic signature module for verifying the TEE module to be loaded and established, and assisting the TEE loading and establishment management module of the TEE system to manage and verify the TEE module to be loaded and established;

[0098] Among them, the TEE loading and establishment management module communicates and cooperates with the SE electronic signature module and its assistance TEE establishment management module according to the protocol and process, and verifies the electronic signature of the TEE module to be loaded and established by applying the verification data in the SE electronic signature module for verifying the TEE module to be loaded and established.

[0099] 4. An electronic signature system as described in item 3 above, further characterized in that: it is an electronic signature system applied to the system including the Trusted Execution Environment (TEE) and verified by an authoritative third party; it includes: a TEE system for electronic signature applications verified by an authoritative third party in the electronic signature system and an SE electronic signature module verified by an authoritative third party and connected to the TEE system for communication;

[0100] Among them, for the TEE system for electronic signature applications verified by an authoritative third party, its root of trust includes: a TEE hardware system, a system ROM memory firmware program, an SE reliable electronic signature module connected to the TEE system for communication, and verification data of an authoritative third party and verification data of the system manufacturer stored in the SE reliable electronic signature module for verifying the TEE module to be loaded and established;

[0101] Among them, the TEE system is a TEE system established in a chain signature verification manner starting from the system ROM memory firmware program based on the root of trust of the TEE system; the TEE system matches the security level of the SE electronic signature module of the root of trust of the TEE system; the TEE system and the SE electronic signature module cooperate with each other to jointly complete the tasks of electronic signature applications;

[0102] Among them, the SE electronic signature module verified by an authoritative third party includes: verification data of an authoritative third party and verification data of the system manufacturer in the root of trust of the TEE system for verifying the TEE module to be loaded and established;

[0103] Among them, the SE electronic signature module includes an assisting TEE establishment management module for applying the verification data of an authoritative third party and verification data of the system manufacturer in the SE electronic signature module for verifying the TEE module to be loaded and established, and assisting the TEE loading and establishment management module of the TEE system to manage and verify the TEE module to be loaded and established;

[0104] Among them, the TEE loading and establishment management module communicates and cooperates with the SE electronic signature module and its assisting TEE establishment management module according to protocols and processes, and verifies the electronic signatures of an authoritative third party and the system manufacturer of the TEE module to be loaded and established by applying the verification data of an authoritative third party and verification data of the system manufacturer in the SE electronic signature module for verifying the TEE module to be loaded and established.

[0105] 5. The present invention discloses an SE electronic signature module, which includes: a processor, a memory, and a computer program stored on the memory and executable on the processor, characterized in that:

[0106] The SE electronic signature module can be interconnected and communicate with the TEE system of the "system including TEE", and is a trust root component of the TEE system for verifying the "TEE module to be loaded and established";

[0107] The verification data for verifying the TEE module to be loaded and established is stored in the SE electronic signature module;

[0108] Meanwhile, the "SE electronic signature module and the verification data for verifying the TEE module to be loaded and established stored in the SE electronic signature module" serve as the trust root of the TEE system of the "system including TEE" for verifying the "TEE module to be loaded and established";

[0109] It is further characterized in that: the SE electronic signature module includes an "assistant TEE establishment management module" for applying the "verification data for verifying the TEE module to be loaded and established in the SE electronic signature module" to assist the TEE loading and establishment management module of the TEE system in managing and verifying the TEE module to be loaded and established;

[0110] Among them, the TEE loading and establishment management module of the TEE system obtains the TEE module to be loaded and established and its electronic signature according to the protocol and process;

[0111] The TEE loading and establishment management module of the TEE system communicates and cooperates with the SE electronic signature module and its "assistant TEE establishment management module" according to the protocol and process, and applies the verification data in the SE electronic signature module for verifying the TEE module to be loaded and established to verify the electronic signature of the TEE module to be loaded and established;

[0112] The TEE loading and establishment management module executes the next step according to the protocol agreement based on the verification result of the electronic signature.

[0113] 6. An SE electronic signature module as described in item 5 above, which includes: a processor, a memory, and a computer program stored on the memory and executable on the processor. It is further characterized in that:

[0114] The verification data of the authoritative third party and the verification data of the system manufacturer for verifying the TEE module to be loaded and established are stored in the SE electronic signature module;

[0115] Meanwhile, the "SE electronic signature module and the verification data of the authoritative third party and the verification data of the system manufacturer for verifying the TEE module to be loaded and established stored in the SE electronic signature module" serve as the trust root of the TEE system of the "system including TEE" for verifying the "TEE module to be loaded and established";

[0116] It is further characterized in that: the SE electronic signature module includes an "assistant TEE establishment management module" for applying "the verification data of the authoritative third party and the verification data of the system manufacturer in the SE electronic signature module for verifying the TEE module to be loaded and established", and assisting the TEE loading and establishment management module of the TEE system to manage and verify the TEE module to be loaded and established;

[0117] Among them, the TEE loading and establishment management module of the TEE system obtains the electronic signature of the TEE module to be loaded and established and its authoritative third party and the electronic signature of the system manufacturer according to the protocol and process;

[0118] The TEE loading and establishment management module of the TEE system communicates and collaborates with the SE electronic signature module and its "assistant TEE establishment management module" according to the protocol and process, and applies the verification data of the authoritative third party and the verification data of the system manufacturer in the SE electronic signature module for verifying the TEE module to be loaded and established to respectively verify the electronic signature of the authoritative third party and the electronic signature of the system manufacturer of the TEE module to be loaded and established;

[0119] If either the verification of the electronic signature of the authoritative third party or the verification of the electronic signature of the system manufacturer fails, the TEE loading and establishment management module rejects the startup and execution of the TEE module to be loaded and established;

[0120] If the verifications of both the electronic signature of the authoritative third party and the electronic signature of the system manufacturer pass, the TEE loading and establishment management module continues to execute the next step according to the process.

[0121] Beneficial effects:

[0122] The technical solution of the present invention can solve the problems that: due to the "low security level of the trust root of the existing TEE system", the "security level of the existing TEE system is lower than that of the SE electronic signature module", and further the "existing TEE system cannot be safely matched with the SE electronic signature module and cannot establish a (TEE+SE) architecture electronic signature system"; at the same time, it can also solve the problems that the "existing TEE system is specifically controlled by the system manufacturer, without third-party supervision, and the security does not meet the standards, cannot be safely matched with the SE electronic signature module, and cannot establish a reliable electronic signature system with a (TEE+SE) architecture";

[0123] In addition, the technical solution of the present invention has a "highly secure TEE system trust root that is securely matched with the SE electronic signature module", enabling the establishment of a "highly secure TEE system that is securely matched with the SE electronic signature module"; at the same time, a powerful and reliable electronic signature system with a (TEE + SE) architecture can be established; at the same time, by leveraging the powerful functions of the mobile phone TEE system, reliable electronic signature service applications where what is signed is what is seen across all fields can be realized (including: pictures, videos, large text data, etc.). Compared with "existing electronic signature systems where what is signed is what is seen (such as: bank UKEYs, which are only applicable to very small text data)", the functions are significantly more powerful and the security is significantly improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0124] Figure 1 is a schematic structural diagram of the TEE system trust root of the existing "system including TEE"; wherein, the "verification data for verifying the TEE software module to be loaded and established" of the TEE system trust root is stored in the system ROM module;

[0125] Figure 2 is a schematic structural diagram of the TEE system trust root of the "system including TEE" of the present invention; it includes: a TEE hardware system, a system ROM memory firmware program, an SE electronic signature module connected and communicating with the TEE system, and verification data stored in the SE electronic signature module for verifying the TEE module to be loaded and established;

[0126] Figure 3 is a schematic structural diagram of the electronic signature system for the "system including TEE" of the present invention; it includes: the TEE system for electronic signature applications and an "SE electronic signature module connected and communicating with the TEE system". DETAILED DESCRIPTION OF THE EMBODIMENTS

[0127] The following specific embodiments are given in conjunction with the accompanying drawings to further describe the overall concept and specific technical solutions of the present invention:

[0128] Embodiment 1: A mobile phone system, its SE reliable electronic signature module, and an electronic signature system

[0129] A mobile phone system provided in Embodiment 1 of the present invention includes a REE system (Android system) and a TEE system; the TEE system can interact and communicate with the SE reliable electronic signature module; the SE reliable electronic signature module includes verification data for verifying the TEE module to be loaded and established; characterized in that:

[0130] The trust root of the TEE system of the mobile phone includes: a TEE hardware system, a system ROM memory firmware program, an SE reliable electronic signature module connected and communicating with the TEE system, and verification data stored in the SE reliable electronic signature module for verifying the TEE module to be loaded and established, which is equivalent to "verification data of an authoritative third party and verification data of the system manufacturer".

[0131] Among them, the TEE system is a "TEE system for running the TEE trusted operating system program" established in a chain signature verification manner starting from the system ROM memory firmware program based on the trust root of the TEE system (including: the SE electronic signature module and its verification data for verifying the TEE module to be loaded and established); the security level of the TEE system matches that of the SE electronic signature module of the trust root of the TEE system (both are security-certified by an authoritative third party).

[0132] Among them, the TEE system includes a TEE loading and establishment management module for managing, verifying, and establishing the "TEE module for electronic signature application" to be loaded and established.

[0133] The TEE loading and establishment management module obtains, according to the protocol and process, the "TEE module for electronic signature application" to be loaded and established and its electronic signature equivalent to "the electronic signature of an authoritative third party and the electronic signature of the system manufacturer".

[0134] The TEE loading and establishment management module communicates and collaborates with the SE electronic signature module according to the protocol and process, and uses the verification data equivalent to "verification data of an authoritative third party and verification data of the system manufacturer" in the SE electronic signature module to verify the electronic signature equivalent to "the electronic signature of an authoritative third party and the electronic signature of the system manufacturer" of the "TEE module for electronic signature application" to be loaded and established.

[0135] If the verification of the electronic signature fails, the TEE loading and establishment management module rejects to start and execute the "TEE module for electronic signature application" to be loaded and established.

[0136] If the verification of the electronic signature passes, the TEE loading and establishment management module executes the "TEE module for electronic signature application" according to the process.

[0137] Among them, the "electronic signature equivalent to the 'electronic signatures of the authoritative third party and the system manufacturer'" refers to: the TEE module is sent to the "authenticated trusted server system" after being authenticated and electronically signed by the authoritative third party and the system manufacturer respectively. The authenticated trusted server system verifies the electronic signatures of the authoritative third party and the system manufacturer of the TEE module respectively according to the agreement. If both verifications pass, then "the trusted server system electronically signs the TEE module again according to the agreement and outputs the application"; at this time, the electronic signature of the trusted server system for the TEE module is equivalent to the "electronic signatures of the authoritative third party and the system manufacturer of the TEE module" according to the agreement. Therefore, the "electronic signature of the trusted server system for the TEE module" is also called the "electronic signature equivalent to the 'electronic signatures of the authoritative third party and the system manufacturer'".

[0138] Among them, the "verification data equivalent to the'verification data of the authoritative third party and the system manufacturer'" refers to: the verification data of the "electronic signature of the trusted server system for the TEE module" above; this verification data is equivalent to the "verification data of the authoritative third party and the system manufacturer for verifying the 'electronic signatures of the authoritative third party and the system manufacturer'" according to the agreement. Therefore, the "verification data of the 'electronic signature of the trusted server system for the TEE module'" is also called the "verification data equivalent to the'verification data of the authoritative third party and the system manufacturer'".

[0139] Embodiment 1 of the present invention provides an electronic signature system with a mobile phone (TEE + SE) architecture, which includes: the "TEE system for electronic signature applications verified by an authoritative third party" of the mobile phone system, and the "SE electronic signature module verified by an authoritative third party and connected to the TEE system for communication".

[0140] Among them, the "TEE system for electronic signature applications verified by an authoritative third party" is characterized in that its trust root includes: a TEE hardware system, a system ROM memory firmware program, an SE reliable electronic signature module connected to the TEE system for communication, and verification data stored in the SE reliable electronic signature module for verifying the TEE module to be loaded and established, which is equivalent to the "verification data of the authoritative third party and the system manufacturer".

[0141] Among them, the "TEE system for electronic signature applications verified by an authoritative third party" is a TEE system established in a chain signature verification manner starting from the firmware program of the system ROM memory based on the trust root of the TEE system; the security level of the TEE system matches that of the SE electronic signature module in the trust root of the TEE system; the TEE system and the SE electronic signature module cooperate with each other to jointly complete the tasks of electronic signature applications.

[0142] Among them, the SE electronic signature module includes: verification data in the trust root of the TEE system for verifying the TEE module to be loaded and established.

[0143] Among them, the SE electronic signature module includes an assisting TEE establishment management module for applying the verification data in the SE electronic signature module for verifying the TEE module to be loaded and established, and assisting the TEE loading and establishment management module of the TEE system to manage and verify the TEE module to be loaded and established.

[0144] Among them, the TEE loading and establishment management module communicates and cooperates with the SE electronic signature module and its assisting TEE establishment management module according to protocols and processes, and verifies the electronic signature of the TEE module to be loaded and established by using the verification data in the SE electronic signature module for verifying the TEE module to be loaded and established.

[0145] Embodiment 1 provides an SE electronic signature module, which includes: a processor, a memory, and a computer program stored on the memory and executable on the processor, and is characterized in that:

[0146] The SE electronic signature module can be interconnected and communicate with the mobile phone TEE system, and is a trust root component of the TEE system for verifying the "TEE module to be loaded and established".

[0147] The SE electronic signature module stores "verification data for verifying the TEE module to be loaded and established".

[0148] At the same time, "the SE electronic signature module and the verification data stored in the SE electronic signature module for verifying the TEE module to be loaded and established" serve as the trust root of the mobile phone TEE system for verifying the "TEE module to be loaded and established".

[0149] It is further characterized in that: the SE electronic signature module includes an "assisting TEE establishment management module" for applying the "verification data in the SE electronic signature module for verifying the TEE module to be loaded and established", and assisting the TEE loading and establishment management module of the TEE system to manage and verify the TEE module to be loaded and established.

[0150] Among them, the TEE loading and establishment management module of the TEE system obtains the TEE module to be loaded and established and its electronic signature according to the protocol and process;

[0151] The TEE loading and establishment management module of the TEE system communicates and collaborates with the SE electronic signature module and its "assist TEE establishment management module" according to the protocol and process, and uses the verification data in the SE electronic signature module for verifying the TEE module to be loaded and established to verify the electronic signature of the TEE module to be loaded and established;

[0152] If the verification of the electronic signature fails, the TEE loading and establishment management module rejects the start of the execution of the TEE module to be loaded and established;

[0153] If the verification of the electronic signature passes, the TEE loading and establishment management module continues to execute the next step according to the process.

[0154] The above is only a preferred embodiment of the present application and is not intended to limit the present application; any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present application shall be included within the scope of protection of the present application.

Claims

1. A system including a Trusted Execution Environment (TEE), which includes a Rich Execution Environment (REE) system and a Trusted Execution Environment (TEE) system, characterized in that: The trust root of the TEE system it contains includes: a TEE hardware system, a system ROM memory firmware program, an SE electronic signature module connected and communicating with the TEE system, and verification data stored in the SE electronic signature module for verifying the TEE module to be loaded and established; Among them, the TEE system is a TEE system established in a chain signature verification manner starting from the system ROM memory firmware program based on the trust root of the TEE system (including: the SE electronic signature module and the verification data therein for verifying the TEE module to be loaded and established); the security level of the TEE system matches that of the SE electronic signature module of the trust root of the TEE system; Among them, the TEE system includes a TEE loading and establishment management module for managing, verifying, and establishing the TEE module to be loaded and established; The TEE loading and establishment management module obtains the electronic signature of the TEE module to be loaded and established and its certifying party according to the protocol and process; The TEE loading and establishment management module communicates and collaborates with the SE electronic signature module according to the protocol and process, and verifies the electronic signature of the TEE module to be loaded and established by using the verification data for verifying the TEE module to be loaded and established in the SE electronic signature module; The TEE loading and establishment management module executes the next step according to the protocol agreement based on the verification result of the electronic signature.

2. The system including a TEE according to claim 1, further characterized in that: The trust root of the TEE system it contains includes: a TEE hardware system, a system ROM memory firmware program, an SE reliable electronic signature module connected and communicating with the TEE system, and verification data of an authoritative third party and verification data of the system manufacturer stored in the SE reliable electronic signature module for verifying the TEE module to be loaded and established; Among them, the TEE system is a TEE system established in a chain signature verification manner starting from the system ROM memory firmware program based on the trust root of the TEE system; the security level of the TEE system matches that of the SE electronic signature module of the trust root of the TEE system; Among them, the TEE system includes a TEE loading and establishment management module for managing, verifying, and establishing the TEE module to be loaded and established; The TEE loading and establishment management module obtains the electronic signature of the authoritative third party and the electronic signature of the system manufacturer of the TEE module to be loaded and established according to the protocol and process; The TEE loading and establishment management module communicates and collaborates with the SE electronic signature module according to the protocol and process, and respectively verifies the electronic signature of the authoritative third party and the electronic signature of the system manufacturer of the TEE module to be loaded and established by using the verification data of the authoritative third party and the verification data of the system manufacturer for verifying the TEE module to be loaded and established in the SE electronic signature module; If the verification of the electronic signature of the authoritative third party and the electronic signature of the system manufacturer fails, the TEE loading and establishment management module rejects the startup of the TEE module to be loaded and established. If the verification of both the electronic signature of the authoritative third party and the electronic signature of the system manufacturer passes, the TEE loading and establishment management module continues to execute the next step according to the process.

3. An electronic signature system, characterized in that: It is an electronic signature system applied to the system including the Trusted Execution Environment (TEE); it includes: the TEE system for electronic signature applications of the electronic signature system and the SE electronic signature module connected and communicating with the TEE system. Among them, for the TEE system for electronic signature applications, its root of trust includes: the TEE hardware system, the system ROM memory firmware program, the SE electronic signature module connected and communicating with the TEE system, and the verification data stored in the SE electronic signature module for verifying the TEE module to be loaded and established. Among them, the TEE system is a TEE system established in a chain signature verification manner starting from the system ROM memory firmware program based on the root of trust of the TEE system; the TEE system matches the security level of the SE electronic signature module in the root of trust of the TEE system; the TEE system and the SE electronic signature module cooperate with each other to jointly complete the tasks of electronic signature applications. Among them, the SE electronic signature module includes the verification data in the root of trust of the TEE system for verifying the TEE module to be loaded and established. Among them, the SE electronic signature module includes an assisting TEE establishment management module for applying the verification data in the SE electronic signature module for verifying the TEE module to be loaded and established, and assisting the TEE loading and establishment management module of the TEE system to manage and verify the TEE module to be loaded and established. Among them, the TEE loading and establishment management module communicates and cooperates with the SE electronic signature module and its assisting TEE establishment management module according to the protocol and process, and applies the verification data in the SE electronic signature module for verifying the electronic signature of the TEE module to be loaded and established to verify the electronic signature of the TEE module to be loaded and established.

4. The electronic signature system according to claim 3, further characterized in that: It is an electronic signature system verified by an authoritative third party applied to the system including the Trusted Execution Environment (TEE); it includes: the TEE system for electronic signature applications verified by an authoritative third party of the electronic signature system and the SE electronic signature module verified by an authoritative third party connected and communicating with the TEE system. Among them, for the TEE system for electronic signature applications verified by an authoritative third party, its root of trust includes: the TEE hardware system, the system ROM memory firmware program, the SE reliable electronic signature module connected and communicating with the TEE system, and the verification data of the authoritative third party and the verification data of the system manufacturer stored in the SE reliable electronic signature module for verifying the TEE module to be loaded and established. Among them, the TEE system is a TEE system established in a chained signature verification manner starting from the system ROM memory firmware program based on the trust root of the TEE system; the TEE system matches the security level of the SE electronic signature module in the trust root of the TEE system; the TEE system and the SE electronic signature module cooperate with each other to jointly complete the tasks of electronic signature applications; Among them, the SE electronic signature module verified by an authoritative third party includes: the verification data of the authoritative third party and the verification data of the system manufacturer in the trust root of the TEE system for electronic signature applications, which are used to verify the TEE module to be loaded and established; Among them, the SE electronic signature module includes an assist TEE establishment management module, which is used to apply the verification data of the authoritative third party and the verification data of the system manufacturer in the SE electronic signature module for verifying the TEE module to be loaded and established, and assist the TEE loading and establishment management module of the TEE system to manage and verify the TEE module to be loaded and established; Among them, the TEE loading and establishment management module of the TEE system communicates and cooperates with the SE electronic signature module and its assist TEE establishment management module according to the protocol and process, and applies the verification data of the authoritative third party and the verification data of the system manufacturer in the SE electronic signature module for verifying the TEE module to be loaded and established to verify the electronic signatures of the authoritative third party and the system manufacturer of the TEE module to be loaded and established respectively.

5. A SE electronic signature module, comprising: A processor, a memory, and a computer program stored on the memory and executable on the processor, characterized in that: The SE electronic signature module can be connected and communicated with the TEE system of the "system including TEE", and is a trust root component of the TEE system for verifying the "TEE module to be loaded and established"; The SE electronic signature module stores "verification data for verifying the TEE module to be loaded and established"; At the same time, "the SE electronic signature module and the verification data stored in the SE electronic signature module for verifying the TEE module to be loaded and established" serve as the trust root of the TEE system of the "system including TEE" for verifying the "TEE module to be loaded and established"; It is further characterized in that: the SE electronic signature module includes an "assist TEE establishment management module", which is used to apply "the verification data in the SE electronic signature module for verifying the TEE module to be loaded and established", and assist the TEE loading and establishment management module of the TEE system to manage and verify the TEE module to be loaded and established; Among them, the TEE loading and establishment management module of the TEE system obtains the TEE module to be loaded and established and its electronic signature according to the protocol and process; The TEE loading and establishment management module of the TEE system communicates and collaborates with the SE electronic signature module and its "assistant TEE establishment management module" according to protocols and processes, and uses the verification data in the SE electronic signature module for verifying the TEE module to be loaded and established to verify the electronic signature of the TEE module to be loaded and established; The TEE loading and establishment management module executes the next step according to the protocol agreement based on the verification result of the electronic signature.

6. The SE electronic signature module according to claim 5, comprising: A processor, a memory, and a computer program stored on the memory and executable on the processor, and further characterized in that: The SE electronic signature module stores "verification data of an authoritative third party and verification data of the system manufacturer for verifying the TEE module to be loaded and established"; Meanwhile, "the SE electronic signature module, and the verification data of an authoritative third party and verification data of the system manufacturer stored in the SE electronic signature module for verifying the TEE module to be loaded and established" serve as the trust root of the TEE system of the "system including TEE" for verifying the "TEE module to be loaded and established"; It is further characterized in that: the SE electronic signature module includes an "assistant TEE establishment management module" for using "the verification data of an authoritative third party and verification data of the system manufacturer in the SE electronic signature module for verifying the TEE module to be loaded and established" to assist the TEE loading and establishment management module of the TEE system in managing and verifying the TEE module to be loaded and established; Among them, the TEE loading and establishment management module of the TEE system obtains the TEE module to be loaded and established, its electronic signature of an authoritative third party, and the electronic signature of the system manufacturer according to protocols and processes; The TEE loading and establishment management module of the TEE system communicates and collaborates with the SE electronic signature module and its "assistant TEE establishment management module" according to protocols and processes, and uses the verification data of an authoritative third party and verification data of the system manufacturer in the SE electronic signature module for verifying the TEE module to be loaded and established to respectively verify the electronic signature of an authoritative third party and the electronic signature of the system manufacturer of the TEE module to be loaded and established; If the verification of the electronic signature of an authoritative third party or the electronic signature of the system manufacturer fails, the TEE loading and establishment management module refuses to start and execute the TEE module to be loaded and established; If the verification of the electronic signature of an authoritative third party and the electronic signature of the system manufacturer both pass, the TEE loading and establishment management module continues to execute the next step according to the process.

Images