TEE Access Control via Malicious App Registry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional access control mechanisms for secure operating systems in mobile terminals, such as those using username/password verification, lead to system jitter and slower responses due to continuous malicious access attempts, causing TEE trusted applications to be overwhelmed and unable to handle normal access requests effectively.
Innovation Solution
A method for TEE access control that includes an access right decision step to identify malicious applications, an application request sending step to acquire trusted applications, and an interrupt handling mechanism to prevent malicious access, utilizing a malicious application registry and rule-based decision-making to block repeated failed access attempts without switching systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If username/password verification mechanism is used for TEE access control, then security of external secure carriers is improved, but system response speed deteriorates due to continuous switching between Android and TEE
Solution Approach 1:
The system performs preliminary verification by checking whether the client application's package name exists in the malicious application registry before switching to TEE. This preliminary action filters out malicious applications in advance, preventing unnecessary system switching and preserving response speed while maintaining security verification for legitimate applications.
Solution Approach 2:
The malicious application registry acts as an intermediary layer between the client application and the TEE access control mechanism. Instead of directly switching to TEE for every access request, the system uses this registry as a mediator to quickly identify and block malicious applications, thereby reducing the frequency of TEE switching and improving overall system response speed.
2Reliability
If continuous verification of each access request is performed by TEE, then access security is improved, but TEE trusted application becomes overwhelmed and cannot handle normal requests
Solution Approach 1:
The verification function is extracted from the TEE trusted application and implemented separately in the malicious application registry. By removing the continuous verification burden from the TEE trusted application, normal requests can be processed without being overwhelmed, while security is maintained through the separate registry checking mechanism.
Solution Approach 2:
The system provides self-service by automatically checking client applications against the malicious application registry before TEE access. This automated preliminary filtering reduces the number of requests reaching the TEE trusted application, allowing it to focus on processing legitimate requests without being overwhelmed by malicious ones.
3Reliability
If system switching to TEE is performed for each access request, then access control security is improved, but system jitter occurs and response time increases
Solution Approach 1:
The system performs preliminary checking of the client application's package name against the malicious application registry before initiating system switching to TEE. This preliminary action identifies and blocks malicious applications in advance, preventing unnecessary system switching and reducing response time while maintaining security control.
Solution Approach 2:
The malicious application registry serves as an intermediary that filters requests before they reach the TEE switching mechanism. By using this registry as a mediator, the system avoids frequent switching for malicious applications, thereby reducing system jitter and response time while preserving access control security through selective verification.
Data Source
AI summary
The present invention relates to a method for access control of a multimedia system to a secure operating system and a mobile terminal for implementing the method. The method includes the steps of: initiating an application access request for selecting a trusted application from a client application of a multimedia system to a secure operating system; making a decision as to whether the client application is a malicious application, and if not, proceeding to a next step, if yes, returning Selection Failure to the client application and performing an interrupt handling; sending the application access request from the multimedia system to the secure system; and acquiring, at the secure operating system, the trusted application based on the application access request and returning the trusted application to the multimedia system. The malicious accesses initiated by a malicious application to a trusted application in a securing operating system can be prevented without switching between systems, and the problem that a trusted application cannot be accessed due to malicious access can be avoided.