An application key data protection system and its protection method

Abstract

The invention discloses an application key data protection system which comprises a hosting process, a guest operating system, computer hardware and a key data protector. The hosting process utilizes the guest operating system to access the computer hardware; when key data protection needs to be carried out, a request is sent to the key data protector and the read-write operation is executed on key data under the control of the key data protector; the key data protector operates on the computer hardware, provides an insulation protection environment for the key data in the hosting process and carries out management and access processing on the key data. The invention also provides an application key data protection method which comprises the following steps of starting and initializing the key data protector; registering the key data; requesting to access the key data; judging the legality of the access request by the key data protector; exiting access to the key data; logging out the key data. According to the invention, the hostile attack on the kernel level in the operating system can be effectively stopped and safety protection is provided for the application key data.

Description

technical field [0001] The invention relates to the field of key data protection with high security requirements used by application programs, in particular to a virtual machine monitor implementation and key data protection method for protecting key data of application programs under the condition of an untrustworthy operating system kernel. Background technique [0002] Operating systems are usually part of the trusted computing base for upper-layer applications, and their security is an important basis for trusted execution environments. However, due to its huge code size and unavoidable flaws in the design and implementation process, the security of the operating system cannot be fully trusted. In fact, as the scale of software continues to increase, there will be more vulnerabilities. In addition, the cloud computing model is becoming more and more popular. When multiple users share the same computing environment, the user's demand for the protection of their own impor...

AI Technical Summary

Problems solved by technology

However, due to its huge code size and unavoidable flaws in the design and implementation process, the security of the operating system cannot be fully trusted.

In fact, as the scale of software continues to increase, there will be more vulnerabilities

Images