可信执行环境标准在金融支付场景下的应用  

Application of Trusted Execution Environment Standards in Financial Payment Scenarios

作　　者：孙权[1] 陈成钱[1] 杨阳[1] 于文海 杨意豪 

机构地区：[1]中国银联股份有限公司

出　　处：《信息技术与标准化》2024年第S01期47-50,55,共5页Information Technology & Standardization

摘　　要：围绕金融支付创新,以GB/T 41388—2022《信息安全技术可信执行环境基本安全规范》和GB/T 42572—2023《信息安全技术可信执行环境服务规范》两项可信执行环境标准为基础,开展了在金融支付场景下的手机Pay与手机POS产品创新实践,在手机这类消费类电子设备上提供了既安全又便捷的产品体验,为标准在金融领域中的实施发挥了引领作用。Focusing on financial payment innovation,based on the two feasible execution environment standards of GB/T 41388—2022"Information security technology-Trusted execution environment-Basic security specification"and GB/T 42572—2023"Information security technology-Trusted execution environment service specification",the company has carried out the innovative practice of mobile Pay and mobile POS products in financial payment scenarios,and provided both secure and convenient product experience on such consumer electronic devices as mobile phones.It provides safe and convenient product experience and plays a leading role in the implementation of the standard in the financial field.

关 键 词：安全 可信执行环境TEE 手机Pay 手机POS 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] F832.2[自动化与计算机技术—计算机科学与技术]