移动终端TEE技术进展研究  

Research on Development of Trusted Execution Environment Technology on Mobile Platform

作　　者：刘志娟 高隽 丁启枫 王跃武[1] LIU Zhijuan;GAO Jun;DING Qifeng;WANG Yuewu(The Data Assurance and Communication Security Research Center of Chinese Academy of Sciences, Beijing 100093, China;Industry Development and Promotion Center of Ministry of Industry and Information Technology of the People’s Republic of China, Beijing 100846, China;The State Radio Monitoring Center Testing Center, Beijing 100041, China)

机构地区：[1]中国科学院数据与通信保护研究教育中心,北京100093 [2]工业和信息化部产业发展促进中心,北京100846 [3]国家无线电监测中心检测中心,北京100041

出　　处：《信息网络安全》2018年第2期84-91,共8页Netinfo Security

基　　金：国家重点研发计划[2016YFB0800102];"十三五"国家密码发展基金密码理论研究课题[MMJJ20170215];工业和信息化部产业发展促进中心2016年专题研究课题

摘　　要：移动终端TEE技术是目前移动应用安全保障的核心技术,受到产业和学术领域的广泛关注。文章全面分析TEE技术的安全特性对于相关研究开展具有重要参考价值。首先从TEE安全环境构建及安全功能可信提供两个角度,系统完整地总结了TEE技术的安全特征。然后,围绕TEE安全特征的实现,文章对相关软硬件技术发展进行了分析,提出了基本的移动终端TEE软硬件技术架构。在全面分析TEE技术的基础上,文章还将TEE技术与其他当前移动终端关注的系统安全技术进行了对比分析,为TEE技术的具体应用提供了借鉴。最后,文章还针对TEE技术发展总结了其面临的技术挑战,为TEE技术的下一步发展提供了参考。Trusted execution environment（TEE）as one of the most prevalent mobile device secure technology has attracted more and more attention from academy field and industry feld. Thus, analyzing the security of TEE technology thoroughly is very valuable. According to TEE construction and TEE secure function providing, this paper presents fve secure features of TEE in detail. Then, the software and hardware technologies used to implement the fve secure features are investigated and the general software and hardware architecture are presented. In addition, we compare TEE technology with other mobile device secure technology carefully. Finally, the challenges faced by TEE technology development are listed. The work of this paper may be a good reference for TEE technology development.

关 键 词：移动终端 可信执行环境 安全隔离 可信用户交互 安全证明 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]