Method, system and terminal capable of improving safety of trusted execution environment

Abstract

The embodiment of the invention discloses a method, a system and a terminal capable of improving the safety of a trusted execution environment. The method comprises the following steps of: acquiring the connection request initiated by a trusted application to a target server, the connection request containing the identification of the target server; acquiring a server list stored in a smart card through a modulator-demodulator; judging whether the target sever is contained in the server list according to the identification of the target server; if so, then allowing the trusted application to establish connection with the target server, or else, then refusing the trusted application to establish connection with the target server. The embodiment of the invention is capable of improving the safety of the TEE through the smart card.

Description

technical field [0001] Embodiments of the present invention relate to the field of communication technologies, and in particular, to a method, system, and terminal for enhancing the security of a trusted execution environment. Background technique [0002] With the rapid development of mobile networks and smart terminals and the popularization of intelligent consumer electronics products, the types and quantities of mobile applications are increasing. The current mobile applications are not limited to the expansion of the basic functions and entertainment functions of smart terminals. Terminal security applications, etc. These industry applications require a terminal operating environment with a higher security level. [0003] However, the design of the operating system of the smart terminal is mainly focused on functional requirements, not from the perspective of security. At the same time, due to the openness, complexity, and complexity of the entire system, it is impossi...

AI Technical Summary

Problems solved by technology

However, TEE technology itself cannot completely guarantee that user data will not be tampered with or attacked, and TEE is not a completely closed operating system and operating environment. Applications in TEE still need to use REE to realize data interaction with remote servers, such as online payment process Among them, the application in the TEE needs to communicate with the remote server. The application in the TEE initiates a connection request to the remote server through the REE, and the operating system in the REE completes the data connection function. In addition, the application in the TEE is regularly updated to patch software vulnerabilities And when upgrading the security algorithm, it is also necessary to exchange data with the remote server through REE, and the security is still not guaranteed

Images