基于TrustZone的密码令牌系统设计与实现  

Design and Implementation of Password Token System Based on TrustZone

作　　者：方世玉 许金林 李皙茹[2] 程龙乐 FANG Shiyu;XU Jinlin;LI Xiru;CHENG Longle(Anhui Zhongke Jingge Technologies Co.,Ltd.,Hefei 230031,China;Hefei Institutes of Physical Science,Chinese Academy of Sciences,Hefei 230031,China;University of Science and Technology of China,Hefei 230026,China)

机构地区：[1]安徽中科晶格技术有限公司,安徽合肥230031 [2]中国科学院合肥物质科学研究院,安徽合肥230031 [3]中国科学技术大学,安徽合肥230026

出　　处：《仪表技术》2023年第3期16-20,共5页Instrumentation Technology

基　　金：国家自然科学基金资助项目(61602435);国家重点研发计划(2021YFB2700006)。

摘　　要：提出了一种基于TrustZone的密码令牌系统,该系统包含数据处理单元、通信模块和上位机软件平台三部分。数据处理单元可生成公私钥对,并对输入的数据进行数字签名;通信模块负责上、下位机之间的数据加密通信;软件平台用于人机交互及处理签名数据,并借助区块链技术保障数据的有效存储。实验证明,该系统在硬件层面运用TrustZone技术特有的“安全核”架构,保障了用户进行电子身份认证时的数据安全性、完整性,实现了数据的防篡改及可追溯。This paper proposes a cryptographic token system based on TrustZone,which consists of three parts:a data processing unit,a communication module and a host computer software platform.The data processing unit can generate public and private key pairs and digitally sign the input data.The Communication module is responsible for the data encryption communication between the upper and lower computers.The software platform is used for human-computer interaction and signature data processing.The blockchain technology is used to ensure the effective storage of data.The experiment proves that the system uses the specific"security core"architecture of TrustZone technology at the hardware level,which ensures data security and integrity when the user conducts electronic identity authentication,and achieves data tamper-proof and traceability.

关 键 词：密码令牌 链上存储 数据可追溯性 系统安全技术 

分 类 号：TP274[自动化与计算机技术—检测技术与自动化装置] TP311[自动化与计算机技术—控制科学与工程] TP393