基于TEE的移动终端数据安全研究与实现

doi:10.11959/j.issn.1000-0801.2017036

Abstract

Abstract:

The three kinds of data security scheme for mobile terminal were analyzed and compared. The framework of data security for mobile terminal based on TEE was proposed, and the typical mobile payment scheme based on TEE was discussed. On the basis of the typical scheme, an innovative business plan based on TEE to adjust the payment amount of fingerprintsdynamically was proposed, and finally the core code was given.

Key words: mobile terminal, data security, mobile payment, trusted execution environment

CLC Number:

TN929.5

Shuzhen CHEN,Minwei YANG,Yao HE. Research and implementation of data security for mobile terminal based on TEE[J]. Telecommunications Science, 2017, 33(3): 126-133.

Figures/Tables 7

References 6

[1]	张大伟，郭烜，韩臻 . 安全可信智能移动终端研究[J]. 中兴通信技术， 2015,21(5): 39-44.
	ZHANG D W , GUO X , HAN Z . Security and trusted intelligent mobile terminal[J]. ZTE Technology Journal, 2015,21(5): 39-44.
[2]	郭茂文 . 基于FIDO协议的指纹认证方案研究[J]. 广东通信技术， 2016,36(4): 2-5.
	GUO M W . Research on fingerprint authentication scheme based on FIDO protocol[J]. Guangdong Communication Technology, 2016,36(4): 2-5.
[3]	国炜，王宗岳 . 移动终端安全隔离技术分析[J]. 移动通信， 2016,40(21).
	GUO W , WANG Z Y . Analysis on security isolation techniques on mobile terminal[J]. Mobile Communications, 2016,40(21).
[4]	范冠男，董攀 . 基于TrustZone的可信执行环境构建技术研究[J]. 信息网络安全， 2016(3).
	FAN G N , DONG P . Research on trusted execution environment building technology based on TrustZone[J]. Netinfo Security, 2016(3).
[5]	纪祥敏，赵波，陈璐，等. 基于信任扩展的可信云执行环境[J]. 华中科技大学学报(自然科学版), 2016,44(3): 105-109.
	JI X M , ZHAO B , CHEN L , et al. Trusted cloud execution environment based on trust extension[J]. Journal of Huazhong University of Science and Technology(Nature Science Edition), 2016,44(3): 105-109.
[6]	包依勤 . TrustZone技术在Android系统中的安全性研究[J]. 物联网技术， 2015(10): 70-73.
	BAO Y Q . Research on the security of TrustZone technology in Android system[J]. Internet of Things Technologies, 2015(10): 70-73.

Metrics

Recommended 0

No Suggested Reading articles found!

	单域应用级	双域系统级	TEE芯片硬件级
密钥存储	应用级存储	REE安全操作系统存储	TEE存储
敏感数据加解密	应用级加密	REE安全操作系统执行	TEE执行
应用下载	无验证或应用级验证（如360杀毒等）	无验证或应用级验证（如360杀毒等）	TEE和管理系统的授权下载、下载前会验证和认证、下载过程中会校验
应用访问	应用控制	应用和用户控制	TEE控制TA应用安全访问
隔离	应用级隔离，如沙箱模式、权限管控等	系统级隔离，如多用户、双系统、虚拟化等	硬件实现REE和TEE隔离
防软件攻击能力	未经认证的OS保护；有限boot完整性检查	未经认证的OS保护；有限boot完整性检查	对富操作系统和外设的安全访问由经认证的TEE OS保证
防硬件攻击能力	基本没有保护	基本没有保护	依赖于 TEE实现及宿主平台的硬件特性，包括安全应用部署

[1]	Zhiyong LIU, Zhongjiang HE, Yilong RUAN, Junfeng SHAN, Chao ZHANG. Big data security features and operation practices [J]. Telecommunications Science, 2021, 37(5): 160-169.
[2]	Li SU, Li LU, Xing ZHANG, Chang LIU. Graph database based security protection mechanism of 5G network data flow [J]. Telecommunications Science, 2021, 37(4): 28-36.
[3]	Xiaojun LIU,Juan WU,Xiaoqing XU. Big data architecture analysis and data security fusion technology [J]. Telecommunications Science, 2020, 36(7): 146-155.
[4]	Tao PANG,Haihua QIU,Biying PAN. Research on artificial intelligence key technologies of mobile terminal [J]. Telecommunications Science, 2020, 36(5): 145-151.
[5]	Yufei CUI,Jinwu WEI,Siyu PAN,Rongfang ZHANG,Xiao WANG,Zixiang JIA. Research on terminal switch interval based on DTL [J]. Telecommunications Science, 2019, 35(7): 165-172.
[6]	Youkang ZHU,Guangxue YUE,Xiaohui YANG,Jiansheng LIU. A survey on edge computing offloading [J]. Telecommunications Science, 2019, 35(4): 74-94.
[7]	Hongbin ZHU,Long AN,Mingchen YANG. Research and practice on power big data security governance system [J]. Telecommunications Science, 2019, 35(11): 140-145.
[8]	Boxuan LV,Jingwen LIU,Wei XU,Dan WANG,Wenying NIE,Ming HE. Mobile office system oriented to intelligent terminal [J]. Telecommunications Science, 2018, 34(2): 115-121.
[9]	Jingwen LIU,Wei XU,Boxuan LV,Dan WANG,Wenying NIE,Ning FAN. Design of mobile payment system based on NFC [J]. Telecommunications Science, 2018, 34(2): 131-138.
[10]	Shengli ZHOU,Bin CHEN,Lifa WU. Data security protection schema of telecom operators under the environment of big data [J]. Telecommunications Science, 2017, 33(5): 119-125.
[11]	Lei WANG,Meng LU. Initialization scheme of the trusted execution environment based on the user card [J]. Telecommunications Science, 2017, 33(2): 9-14.
[12]	Xueqiong WANG,Junjie XIONG,Xiaohui YAO. Terminal replacement model based on big data mining [J]. Telecommunications Science, 2016, 32(12): 43-52.
[13]	Fei Zhao,Wenjun Zhang,Yong Deng. Solution of Communication Services of Vehicle Mobile Terminals Based on LTE and Ev-Do Hybrid Networking [J]. Telecommunications Science, 2015, 31(8): 165-170.
[14]	Jiaren Jiang. Virtualization Security, Key Issues of Public Cloud Computing Security [J]. Telecommunications Science, 2015, 31(12): 121-124.
[15]	Kun Hu,Di Liu,Minghui Liu. Research on Security Connotation and Response Strategies for Big Data [J]. Telecommunications Science, 2014, 30(2): 112-117.

Research and implementation of data security for mobile terminal based on TEE

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 7

References 6

Related Articles 15

Metrics

Recommended 0