Secure storage service system and method based on TrustZone technology

Abstract

The invention relates to a secure storage service system and method based on a TrustZone technology. The secure storage service system comprises a data request module, a common application program, a secure storage service and a trusted application program; the data request module is responsible for packaging and transferring a secure storage service request of data between the common application program and the trusted application program, and providing a unified service request interface for data storage, data loading and data destruction for the common application program; and the secure storage service comprises a legality detection module, a data processing module and a secrete key management module. The secure storage service system and method disclosed by the invention aim to provide the unified data secure storage interface for the application programs on terminal equipment supporting the TrustZone technology; therefore, the secure storage problem of sensitive data of the application programs can be solved; and furthermore, the development convenience of the application programs is ensured.

Description

technical field [0001] The invention relates to a safe storage service system and method based on TrustZone technology, belonging to the field of data safe storage of mobile terminal equipment. Background technique [0002] With the rapid development of mobile Internet technology and mobile smart terminals, the business handled by mobile terminals has extended from traditional communication and entertainment fields to high-security and high-sensitive business fields such as mobile office and mobile payment. Mobile terminals need to process more and more sensitive data, including user account information, personal privacy information, payment order information, corporate private files, etc. How to effectively guarantee the security of sensitive data on mobile terminals has become a major problem for mobile terminal devices to carry out high-security and high-sensitive services. [0003] The usual solution is to encrypt sensitive data through a high-strength cryptographic alg...

AI Technical Summary

Problems solved by technology

However, due to the complexity and openness of traditional mobile terminal operating systems, it is impossible to create a safe operating environment, and the operating system itself and applications are vulnerable to malicious attacks.

After the malicious application attacks the legitimate application, it accesses the encrypted data stored on the file system as a legitimate application, and obtains the sensitive data through the corresponding decryption logic, resulting in the theft of sensitive data

At the same time, some mobile terminal device users flash their devices in order to obtain a better experience. When a malicious application obtains the highest authority of the mobile operating system, all the protection of sensitive data in the system will be insecure.

In addition, storing sensitive data encrypted in the ordinary file system also has the risk of illegal destruction leading to denial of service attacks

Therefore, the security of traditional solutions is not high enough, and it is difficult to effectively solve the problem of secure storage of application sensitive data

Images