Cell phone private information safe box based on ARM Trust Zone

Abstract

The invention discloses a cell phone private information safe box based on an ARM Trust Zone. The cell phone private information safe box comprises a common zone operating system (Rish OS) and a security zone operating system (Security OS); when the common region zone operating system is switched to the security zone operating system, a monitor mode provided by the ARM Trust Zone is needed; a user sends a fast interrupt request (FIQ) through the common zone operating system to enter the monitor mode; under the monitor mode, an NS site of a security configuration register (SCR) of an ARM processor is modified and is set to be 0, so that a CPU status is switched to the security zone operating system; and a user of a security zone can selectively carry out a security operating procedure or store a cell phone private document, and utilizes an encryption function provided by the CPU of the ARM Trust Zone to carry out encryption and decryption on the security zone. According to the cell phone private information safe box provided by the invention, the cell phone private document and software with high-security requirements are preserved in the security region by a user of a common zone through simple operation, and the private document of the user in the security zone is encrypted and decrypted; and meanwhile, the user can safely operate application programs with high-security requirements.

Description

technical field [0001] The invention belongs to the technical field of mobile phone security, and relates to a safe for mobile phone private information protection and safe operation of application programs, in particular to a mobile phone private information safe based on ARM TrustZone. Background technique [0002] Currently, there are two security isolation technologies in the field of mobile devices, one is virtualization technology, and the other is the trusted execution environment proposed by GlobalPlatform. [0003] Virtualization technology provides different guest operating systems with all the resources required by the system, and each operating system can run independently in different security level modes. The implementation of virtualization technology is based on a virtual machine (Virtual Machine), which divides memory space, resources and time at the same time. OpenKernel Labs has released SecureIT Mobile, a virtualization solution based on the microkerne...

AI Technical Summary

Problems solved by technology

However, more advantages of this chip are focused on performance improvement, and there is no more guidance for users' security applications.

Images