Service Data Encryption Using Dynamic Keys and Symmetric Root Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security authentication methods for biological data in terminal devices require frequent updates with the application framework layer, leading to non-universal solutions and compromised security due to low-level key storage.
Innovation Solution
A data processing method using symmetric root keys to encrypt and decrypt service data independently within an encryption protection system, ensuring secure transmission without requiring updates for different background servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the third-party application uses the application framework layer interface to access the TA in the TEE, then the biological authentication information can be verified securely, but the solution requires frequent updates with the application framework layer, reducing universality
Solution Approach 1:
The patent segments the authentication system into multiple independent components: the TEE for secure key storage, the application framework layer for interface operations, and the third-party application for service execution. This segmentation allows each component to operate independently, so updates in the application framework layer do not affect the core security mechanisms in the TEE, thereby maintaining universality while ensuring security.
Solution Approach 2:
The patent introduces the application framework layer as an intermediary between the third-party application and the TEE. This intermediary handles the interface operations and communication protocols, allowing the core security mechanisms in the TEE to remain unchanged while adapting to different application frameworks, thus resolving the contradiction between security and universality.
2Ease of operation
If the application framework layer interface is used for data exchange between the third-party application and the TA, then authentication can be performed, but device adaptation on the hardware layer is required, compromising security
Solution Approach 1:
The patent extracts the security-critical operations (key storage and verification) from the application framework layer and places them in the TEE. This extraction ensures that the ease of data exchange through the application framework layer does not compromise security, as the sensitive operations are isolated in a secure environment independent of the framework layer's update cycle.
3Adaptability or versatility
If the third-party application defines a redefined interface function to call the hardware abstraction layer, then access to the TA is enabled, but the solution is not universal due to frequent updates needed
Solution Approach 1:
The patent designs the application framework layer interface to provide universal access to the TEE through standardized operations. The redefined interface function is designed to be framework-agnostic, allowing the same interface to work across different application frameworks and hardware abstraction layers, thereby reducing device complexity and improving universality without sacrificing access capability.
Data Source
AI summary
In a data processing method, in response to a trigger event of a target service, service data corresponding to the target service is obtained. An encryption key corresponding to the target service is obtained. The encryption key is generated by a server of the target service by encrypting a dynamically generated service key based on a pre-stored first root key. Based on a pre-stored second root key, the encryption key is decrypted to obtain the service key. The first root key and the second root key form a set of symmetric keys. The service data is encrypted based on the service key to generate intermediate data. The intermediate data is transmitted to the server. An execution result generated by the server based on the service data is received, The server decrypts the intermediate data based on the service key to obtain the service data.