Patent Application
20210367776
The present disclosure to the technical field of data security, and more particularly, to a trusted execution environment-based key burning system and a method thereof.
With the popularity of intelligent devices, such as set-top boxes and mobile phones, online payment and Digital rights management (DRM) and other applications are widely used in various industries. Accordingly, large quantities of keys need to be preset in the terminals, so as to ensure the safety of data in the above-mentioned applications. Terminal manufacturers provide burning processes and keys by a burning method at the factory, and preset the keys in the terminals. Application vendors obtained the keys online and burn the keys into the terminals.
However, many problems listed as follows exist in the existing burning method. The burning method at the factory provided by the terminal manufacturer is prone to make artificial leak happens, and keys may be easily decrypted and leaked when burning in a rich execution environment (REE) by the terminal manufacturer and the application vendor. Once the key is leaked, data security in the applications may be under threat.
In order to solve the foregoing problems in the prior art, the present disclosure provides a trusted execution environment-based key burning system and a method thereof.
In one embodiment, a trusted execution environment-based key burning system includes a background device and a terminal device, wherein the background device is configured to encrypt original key data so as to acquire key data to be burned and output the key data to be burned, wherein the terminal device is provided with a microprocessor based on Trust Zone technology. The microprocessor has a physical core divided into a virtual secure core and a virtual normal core, and the microprocessor provides a trusted execution environment which provides a secure operating system based on the secure core, and a rich execution environment which provides a normal operating system based on the normal core. The microprocessor switches between the secure operating system and the normal operating system based on monitor mode of the microprocessor. After the terminal device is enabled, the normal operating system is started, a client application preset by the terminal device receives the key data to be burned and sends a request to the normal operating system. The normal operating system outputs a switching signal and the key data to be burned. The microprocessor receives the switching signal in a monitor mode and is switched to the secure operating system from the normal operating system. The secure operating system receives the key data to be burned and decrypts the data to be burned according to preset key data. If a decryption operation is successfully completed, the secure operating system will acquire the corresponding original key data and write the original key data into a secure storage area of the secure operating system, and will output a prompt message informing a user of a unsuccessful decryption if the decryption operation fails.
The background device may be a specific hardware security module or a general-purpose computer in which information security can be ensured. The background device includes a storage module, configured to store the original key data, the key data preset by the terminal device and the key data to be burned and generated from the background device also includes an encryption module, configured to encrypt the original key data using the key data preset by the terminal device so as to acquire the key data to be burned, and configured to output the key data to be burned. The normal operating system may include a client application module, configured to receive the key data to be burned, configured to output the switching signal and the key data to be burned.
The hardware module may include a monitor mode module, configured to receive the switching signal and switch the microprocessor between the normal operating system and the secure operating system. The secure operating system may include a trusted application module, configured to receive the key data to be burned and acquire preset key data, and configured to decrypt the key data to be burned using the preset key data, and configured to acquire the corresponding original key data and write the original key data into the secure storage area of the secure operating system if a decryption operation is successfully completed, and output a prompt message informing a user of a unsuccessful decryption if the decryption operation fails. After the decryption operation is successfully completed, the trusted application module writes the original key data into the secure storage area by calling a file system interface of the secure operating system.
In another embodiment, a trusted execution environment-based key burning method adopting the above-mentioned trusted execution environment-based key burning system, wherein the method includes Step S1, encrypting the original key data preset by the terminal device so as to acquire the key data to be burned and output the key data to be burned by the background device. The method includes Step S2, after the terminal device is enabled, starting the normal operating system and receiving the key data to be burned by the client application. The method includes Step S3, after the normal operating system is started, acquiring the key data to be burned, and outputting the switching signal and the key data to be burned. The method includes Step S4, receiving the switching signal by the microprocessor and switching the microprocessor to the secure operating system. The method includes Step S5, after the secure operating system is started, receiving the key data to be burned and decrypting the data to be burned according to preset key data through a decryption operation, and determining whether the decryption operation is successfully completed by the secure operating system. The method includes if the result shows “YES”, proceeding to Step S6; if the result shows “NO”, proceeding to Step S7. Step S6 includes after the decryption operation is successfully completed, acquiring the corresponding original key data and writing the original key data into the secure storage area by the secure operating system. Step S7 includes outputting a prompt message informing the user of an unsuccessful decryption by the secure operating system if the decryption operation fails.
In Step S3, the normal operating system receives the key data to be burned via the client application module, and outputs the switching signal and the key data to be burned. In Step S4, the microprocessor receives the switching signal via the monitor mode module, and starts the monitor mode to enable the secure operating system. In Steps S5, S6 and S7, the secure operating system receives the key data to be burned via the trusted application module, and decrypts the key data to be burned according to the preset key data, and acquires the corresponding original key data after the decryption operation is successfully completed, and writes the original key data into the secure storage area of the secure operating system, and outputs a prompt message informing the user of an unsuccessful decryption if the decryption operation fails.
The accompanying drawings, together with the specification, illustrate exemplary embodiments of the present disclosure, and, together with the description, serve to explain the principles of the present disclosure.
The present disclosure will now be described more fully hereinafter with reference to the accompanying drawings, in which exemplary embodiments of the invention are shown. The present disclosure may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the present disclosure to those skilled in the art. Like reference numerals refer to like elements throughout.
The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the present disclosure. As used herein, the singular forms “a”, “an” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms “comprises” and/or “comprising,” or “includes” and/or “including” or “has” and/or “having” when used herein, specify the presence of stated features, regions, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, regions, integers, steps, operations, elements, components, and/or groups thereof.
Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the present disclosure belongs. It will be further understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having a meaning that is consistent with their meaning in the context of the relevant art and the present disclosure, and will not be interpreted in an idealized or overly formal sense unless expressly so defined herein.
As used herein, the term “plurality” means a number greater than one. Hereinafter, certain exemplary embodiments according to the present disclosure will be described with reference to the accompanying drawings.
The present disclosure may have the following beneficial effects. Due to the use of the trusted execution environment-based key burning, the key is burned, stored and used safely. In addition, the cryptography protects the key from unexpected damage in transmission and keeps the key integral.
As shown in
After the terminal device 2 is enabled, the normal operating system is started, a client application acquires the key data to be burned and request the normal operating system to output the switching signal and the key data to be burned, the microprocessor receives the switching signal in a monitor mode and is switched to the secure operating system from the normal operating system, the secure operating system receives the key data to be burned and decrypts the data to be burned using preset key data, and if a decryption operation is successfully completed, the secure operating system will acquire the corresponding original key data and write the original key data into a secure storage area of the secure operating system, and will output a prompt message informing a user of a unsuccessful decryption if the decryption operation fails.
In the present embodiment, due to the use of the trusted execution environment-based key burning, the key is burned, stored and used safely. In addition, the cryptography protects the key from unexpected damage in transmission and keeps the key integral.
In one embodiment, the background device 1 can be a specific hardware security module or a general-purpose computer in which information security can be ensured, the background device including an encryption module 4, configured to encrypt the original key data so as to acquire the key data to be burned, and configured to output the key data to be burned.
In one embodiment, the normal operating system includes a client application module, configured to receive the key data to be burned, and configured to output the switching signal and the key data to be burned. In one embodiment, the hardware module includes a monitor mode module 5, configured to receive the switching signal and switch the microprocessor to the secure operating system.
In one embodiment, the secure operating system includes a trusted application module 7, configured to receive the key data to be burned and decrypt the key data to be burned using the preset key data, and configured to acquire the corresponding original key data and write the original key data into the secure storage area of the secure operating system if a decryption operation is successful, and output a prompt message informing a user of a unsuccessful decryption if the decryption operation fails.
In one embodiment, after the decryption operation is successfully completed, the trusted application module writes the original key data into the secure storage area by calling a file system interface of the secure operating system. In this embodiment, for a TEE-based burning, the original key data is encrypted at a terminal of the background device 1 so as to acquire the key data to be burned, that is, all the keys needs to be burned are encrypted. Then, all the encrypted keys are decrypted in the TA and are burned to the secure storage area (i.e., TEE data partition), such that keys ‘security can be ensured. The key data of the terminal device 2 supplied to the factory is encrypted, through which key leakage can be effectively prevented in the factory.
In addition, since all the encrypted keys are decrypted in the TA, all the data is stored in a secure memory, and the data cannot be easily decoded. The keys are burned to the TEE data partition. The TEE data partition is generally isolated and is encrypted by a key unknown to the TEE end, which means that only a specified TA can access the TEE data partition, and that the outside world is not allowed to acquire the original data even if the outside world can access the TEE data partition. Furthermore, key information related to the key is still in the TEE data partition after some operations, such as a root operation.
As shown in
If the result shows “YES”, proceeding to Step S6; if the result shows “NO”, proceeding to Step S7. Step S6 includes after the decryption operation is successfully completed, acquiring the corresponding original key data and writing the original key data into the secure storage area by the secure operating system Step S7 includes outputting a prompt message informing the user of an unsuccessful decryption if the decryption operation fails.
In one embodiment, in Step S3, the normal operating system receives the key data to be burned via the client application module 6, and outputs the switching signal and the key data to be burned. In one embodiment, in Step S4, the microprocessor receives the switching signal via the monitor mode module 5, and starts the monitor mode to switch to the secure operating system. In one embodiment, in Steps S5, S6 and S7, the secure operating system receives the key data to be burned via the trusted application module 7, and decrypts the key data to be burned according to the preset key data, and acquires the corresponding original key data after the decryption operation is successfully completed, and writes the original key data into the secure storage area of the secure operating system, and outputs a prompt message informing the user of an unsuccessful decryption if the decryption operation fails, and the secure operating system also outputs the failure information if the original key data is not written into the secure storage area.
In the present embodiment, the CA sends the key data to be burned (i.e., the encrypted key data) to the TA (the REE terminal can only access the encrypted data without access to the original data). The TA decrypts the key data using the preset key, and verifies the integrity of the data, and obtains the key original data (this step runs in the TEE environment, and all data cannot be accessed in the REE environment). The TA writes the encrypted data into the secure storage area by calling a file system interface of the secure operating system (this step is performed based on a certain security mechanism, and the REE cannot access the original data).
The above descriptions are only the preferred embodiments of the present embodiment, not thus limiting the embodiments and scope of the present embodiment. Those skilled in the art should be able to realize that the schemes obtained from the content of specification and drawings of the present disclosure are within the scope of the embodiment.
| Number | Date | Country | Kind |
|---|---|---|---|
| 201711340481.0 | Dec 2017 | CN | national |
The present application claims priority to and is a national phase of Ser. No. PCT/CN2018/113145 filed Oct. 31, 2018, which claims priority to and the benefit of Chinese Patent Application No. 201711340481.0 filed Dec. 14, 2017, the entire contents of each of these applications are incorporated herein by reference.
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/CN2018/113145 | 10/31/2018 | WO | 00 |
