System and method for trusted application security authentication

Abstract

The present invention proposes a system and method for trusted application security authentication, relating to the technical field of mobile device security and used for improving the security of user data. The system comprises a client application, a security manager, a TEE client API and a trusted application, wherein the client application operates in a rich execution environment and processes a process and / or data irrelevant to security in the client application, and makes a request for invoking the TEE client API to the security manager when running to a process and / or data relevant to security; the security manager monitors authorization states of the client application, and conducts hierarchical authorization on the request for invoking the TEE client API made by the client application according to different authorization states; and the trusted application operates in a trusted application environment, and processes the process and / or data relevant to security in the request of the client application after conducting security authentication on the client application. The system and method provided by the present invention is used for improving the security of user data.

Description

technical field [0001] The present application relates to the technical field of mobile device security, and relates to a system and method for trusted application security authentication. Background technique [0002] The development of mobile communication technology has brought about the rapid development of mobile terminal technology. Modern mobile terminal equipment provides a powerful and flexible REE (Rich Execution Environment, Rich Execution Environment), but it also makes mobile terminal equipment vulnerable to security threats. TEE (Trusted Execution Environment, Trusted Execution Environment) is proposed to solve the above problems. Among them, TEE and REE run in parallel on the same mobile terminal device. TEE can ensure the storage, processing and protection of sensitive data in a trusted environment, and provides a safe execution environment for authorized security software. [0003] Common applications include TA (Trusted Application, trusted application) an...

AI Technical Summary

Problems solved by technology

[0004] Since TEE allows multiple CAs and TAs to run at the same time, and there is no mutual authentication between CAs and TAs, that is, TAs cannot identify whether the currently accessed CA is legal, etc., there may be security issues that CA access to TAs is not controlled, such as forging a CA, whose ID number is within the range allowed by TEE, then the CA can send instructions to TA at will and get the response result, which poses a security risk

Images