CN105391673A - Safe access method and device - Google Patents

Abstract

The invention relates to a safe access method and device, belonging to the field of computer safety. The method includes: in the normal world, obtain the encrypted data of the RFB server through the remote frame buffer RFB client; switch from the normal world to the safe world, decrypt the encrypted data to obtain the display data; show. The present invention obtains the encrypted data of the RFB server in the normal world, then switches to the secure world, decrypts the encrypted data to obtain display data, and displays according to the display data in the secure world, which solves the problem of security in the prior art. Running the RFB client in the world leads to the problem of increasing the code base in the secure world; under the premise of ensuring security, only a small part of the code base in the secure world needs to be added to access RFB safely through the RFB client server-side effects.

Description

Safe access method and device

technical field

The invention relates to the field of computer security, in particular to a method and device for secure access.

Background technique

Remote Frame Buffer (English: RemoteFrameBuffer, abbreviation: RFB) is a simple protocol for remote access to a graphical user interface. According to this protocol, the RFB client can remotely access the GUI of the RFB server. Remote frame buffer is widely used in remote office, remote control and other fields.

For the sake of security, Advanced RISC Machines (English: Advanced RISC Machines, abbreviation: ARM) company provides trust zone (English: TrustZone) hardware technology. In a terminal using the TrustZone hardware technology, the terminal can run in a normal world (English: NormalWorld) or a secure world (English: SecureWorld). Among them, the operating environments of the normal world and the safe world are isolated from each other. When the terminal runs the RFB client in a secure world, it can guarantee the security of the remote access process.

The inventor found at least the following problems in the existing technology: Since the secure world will not directly reuse the code base in the normal world, if you want to enable the RFB client to run in the secure world, you need to re-implement a set of supporting RFB in the secure world. The code base of the protocol will not only greatly increase the amount of code in the security world, but also cause loopholes that should not appear in the security world due to the increase in the amount of code.

Contents of the invention

The embodiment of the present invention provides a secure access method and device. Using the secure access method and device provided by the embodiment of the present invention can solve the problem of code base increase in the secure world caused by running the RFB client in the secure world. Described technical scheme is as follows:

In the first aspect, a secure access method is provided, which is used in a terminal supporting trust zone hardware technology, and the terminal can run in a normal world or a secure world, and the method includes:

In the normal world, obtain the encrypted data of the RFB server through the remote frame buffer RFB client;

switching from the normal world to the secure world, decrypting the encrypted data to obtain display data;

Under the safe world, it is displayed according to the display data.

With reference to the first aspect, in a first possible implementation manner of the first aspect, the switching from the normal world to the secure world, and decrypting the encrypted data to obtain display data include:

In the normal world, the write request of the RFB client is received, wherein the write request refers to a request to write the encrypted data into the frame buffer memory, and the frame buffer memory is only in the The memory that can be accessed under the above security world;

When the write request triggers an error, switch from the normal world to the secure world;

Under the secure world, decrypt the encrypted data to obtain display data;

The displaying under the safe world according to the display data includes:

The display data is written into the frame buffer memory, and the display component automatically reads the display data in the frame buffer memory for display.

With reference to the first aspect, in the second possible implementation manner of the first aspect, before obtaining the encrypted data of the RFB server through the remote frame buffer RFB client in the normal world, it also includes:

In the normal world, log in to the RFB server through the RFB client;

When the login to the RFB server is successful, the frame buffer memory is set as memory that can only be accessed under the security world.

With reference to the second possible implementation manner of the first aspect, in a third possible implementation manner of the first aspect, the logging in to the RFB server through the RFB client in the normal world includes :

In the normal world, obtain the login interface data of the RFB server through the RFB client;

displaying a login interface according to the login interface data;

switch from the normal world to the secure world, and receive the user name and password input in the login interface;

In the normal world, send the user name and the encrypted password to the RFB server, so that the RFB server performs verification according to the user name and the encrypted password.

With reference to the third possible implementation manner of the first aspect, in a fourth possible implementation manner of the first aspect, in the ordinary world, sending the user name and the encrypted password to the The RFB server includes:

Under the secure world, write the received password into a secure memory, write the received user name into a normal memory, and the secure memory is a memory that can only be accessed under the secure world , the normal memory is a memory that can be accessed under both the normal world and the secure world;

switch from the safe world to the normal world, and send the user name to the RFB server through the RFB client;

When the user name passes the verification of the RFB server, receive the random number generated by the RFB server;

Switch from the normal world to the secure world, and convert the random number and password into feedback information using a predetermined hash function, the predetermined hash function is pre-agreed by the RFB client and the RFB server the hash function;

switch from the safe world to the normal world, and send the feedback information to the RFB server through the RFB client.

In combination with the first aspect, or the first possible implementation manner of the first aspect, or the second possible implementation manner of the first aspect, or the third possible implementation manner of the first aspect, or the first possible implementation manner of the first aspect In the fourth possible implementation of the first aspect, in the fifth possible implementation of the first aspect, before obtaining the encrypted data of the RFB server through the remote frame buffer RFB client in the normal world, it also includes:

Enter the safe world directly after startup, and set the safe world reminder component to be usable only in the safe world, the safe world reminder component is used to remind the current running world as the normal world and the safe world One of.

In combination with the first aspect, or the first possible implementation manner of the first aspect, or the second possible implementation manner of the first aspect, or the third possible implementation manner of the first aspect, or the first possible implementation manner of the first aspect In the fourth possible implementation manner of the first aspect, in the sixth possible implementation manner of the first aspect, the method further includes:

Under the secure world, acquire an input signal received by an external input device, where the external input device is an external input device that can only be accessed under the secure world;

Encrypting the input signal and writing it into a normal memory, the normal memory is a memory that can be accessed in both the normal world and the secure world;

In the normal world, the encrypted input signal is sent to the RFB server through the RFB client.

With reference to the sixth possible implementation manner of the first aspect, in the seventh possible implementation manner of the first aspect, before acquiring the input signal received by the external input device under the secure world, further includes:

When the RFB client is started, the external input device of the terminal is set as an external input device that can only be accessed in the secure world.

In the second aspect, a secure access device is provided, which is used in a terminal supporting trust zone hardware technology, the terminal can run in the normal world or the secure world, and the device includes:

The data acquisition module is used to obtain the encrypted data of the RFB service end through the remote frame buffer RFB client in the normal world;

A data decryption module, configured to switch from the normal world to the secure world, and decrypt the encrypted data to obtain display data;

The data display module is configured to display according to the display data in the safe world.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the data decryption module includes:

The request receiving unit is used to receive the write request of the RFB client in the normal world, wherein the write request refers to a request to write the encrypted data into the frame buffer memory, and the frame buffer Zone memory is memory that can only be accessed under the secure world;

a security switching unit, configured to switch from the normal world to the secure world when the write request triggers an error;

A data decryption unit, configured to decrypt the encrypted data to obtain display data in the secure world;

The data display module is used to write the display data into the frame buffer memory, and the display component automatically reads the display data in the frame buffer memory for display.

With reference to the second aspect, in a second possible implementation manner of the second aspect, the device further includes:

A client login module, configured to log in to the RFB server through the RFB client in the normal world;

A secure memory module, configured to set the frame buffer memory as memory that can only be accessed under the secure world when the login to the RFB server is successful.

With reference to the second possible implementation manner of the second aspect, in a third possible implementation manner of the second aspect, the client login module includes:

A login interface unit, configured to obtain the login interface data of the RFB server through the RFB client in the normal world;

an interface display unit, configured to display a login interface according to the login interface data;

an input receiving unit, configured to switch from the normal world to the secure world, and receive the user name and password input in the login interface;

An input sending unit, configured to send the user name and the encrypted password to the RFB server in the normal world, so that the RFB server uses the user name and the encrypted password The above password is verified.

With reference to the third possible implementation manner of the second aspect, in a fourth possible implementation manner of the second aspect, the input sending unit includes:

The input write subunit is used to write the received password into a secure memory and write the received user name into a common memory under the secure world, and the secure memory is only used in the secure world The memory that can be accessed under the security world, the normal memory is the memory that can be accessed in both the normal world and the security world;

A username sending subunit, configured to switch from the secure world to the normal world, and send the username to the RFB server through the RFB client;

The random number receiving subunit receives the random number generated by the RFB server when the user name is verified by the RFB server;

A feedback generating subunit, configured to switch from the normal world to the secure world, and convert the random number and password into feedback information using a predetermined hash function, the predetermined hash function is the RFB client and The hash function pre-agreed by the RFB server;

The feedback sending subunit is configured to switch from the safe world to the normal world, and send the feedback information to the RFB server through the RFB client.

In combination with the second aspect, or the first possible implementation manner of the second aspect, or the second possible implementation manner of the second aspect, or the third possible implementation manner of the second aspect, or the first possible implementation manner of the second aspect In the fourth possible implementation manner of the second aspect, in the fifth possible implementation manner of the second aspect, the device further includes:

The safe start module is used to directly enter the safe world after startup, and set the safe world reminding component to be usable only in the safe world, and the safe world reminding component is used to remind the current running world as the normal One of the world and the secure world.

In combination with the second aspect, or the first possible implementation manner of the second aspect, or the second possible implementation manner of the second aspect, or the third possible implementation manner of the second aspect, or the first possible implementation manner of the second aspect In the fourth possible implementation manner of the second aspect, in the sixth possible implementation manner of the second aspect, the device further includes:

An input acquisition module, configured to acquire an input signal received by an external input device in the secure world, where the external input device is an external input device that can only be accessed in the secure world;

An encryption writing module, configured to encrypt the input signal and write it into a normal memory, where the normal memory is a memory that can be accessed in both the normal world and the secure world;

A signal sending module, configured to send the encrypted input signal to the RFB server through the RFB client in the normal world.

With reference to the sixth possible implementation manner of the second aspect, in a seventh possible implementation manner of the second aspect, the device further includes:

A secure input module, configured to set the external input device of the terminal as an external input device that can only be accessed in the secure world when the RFB client is started.

The beneficial effects brought by the technical solution provided by the embodiments of the present invention are:

By using the remote frame buffer RFB client to obtain the encrypted data of the RFB server in the normal world, switch from the normal world to the secure world to decrypt the encrypted data to obtain the display data, and display it according to the display data in the secure world, which solves the existing problem In the technology, running the RFB client in the secure world leads to an increase in the code base in the secure world; under the premise of ensuring security, the RFB client still runs in the normal world, and only a small part of the secure world needs to be added The code library, you can safely access the effect of the RFB server through the RFB client.

Further, by directly entering the safe world after startup, and setting the safe world reminder component to be used only in the safe world, the safe world reminder component is used to remind the current running world as one of the normal world and the safe world, achieving The user can judge whether the current terminal is in the safe world through the safe world reminder component, so as to decide whether to input confidential data, or judge whether the display of the current confidential data is safe or not.

Further, by obtaining the input signal received by the external input device in the secure world, the external input device is an external input device that can only be accessed in the secure world, and then encrypt the input signal and write it into the ordinary memory. The ordinary memory is in the ordinary memory. The memory that can be accessed in both the world and the safe world, and finally in the normal world, the encrypted input signal is sent to the RFB server through the RFB client, which not only ensures the security of the user's input signal, but also avoids RFB Clients running in a secure world have the effect of increasing the codebase.

Furthermore, when the login to the RFB server is successful, the frame buffer memory is set as a memory that can only be accessed in the secure world, so that the terminal can continue to display confidential data in the normal world. Users can also see the effect of smooth display images when switching from the normal world.

Further, by receiving the random number generated by the RFB server when the user name passes the verification of the RFB server, and then switching from the normal world to the secure world, and using a predetermined hash function to convert the random number and password into feedback information, the predetermined hash The function is the pre-agreed hash function between the RFB client and the RFB server, and finally switches from the safe world to the normal world, and sends the feedback information to the RFB server through the RFB client, that is, the feedback information is a dynamic information, which achieves the goal of using The technical solution provided by the embodiment of the present invention can effectively avoid the effect of replay attack.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained based on these drawings without creative effort.

FIG. 1 is a schematic diagram of an implementation environment of a secure access method provided by an embodiment of the present invention;

Fig. 2 is a method flowchart of a secure access method provided by an embodiment of the present invention;

Fig. 3 is a method flowchart of a secure access method provided by another embodiment of the present invention;

Fig. 4 is a structural block diagram of a security access device provided by an embodiment of the present invention;

Fig. 5A is a structural block diagram of a security access device provided by another embodiment of the present invention;

Fig. 5B is a structural block diagram of the input sending unit provided by the embodiment shown in Fig. 5A;

Fig. 6 is a structural block diagram of a terminal provided by an embodiment of the present invention.

detailed description

Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary examples do not represent all implementations consistent with the present invention. Rather, they are merely examples of apparatuses and methods consistent with aspects of the invention as recited in the appended claims.

FIG. 1 is a schematic diagram of an implementation environment of a secure access method shown in an embodiment of the present invention, the implementation environment includes: a terminal 110 and a server 120;

The terminal 110 is an electronic device capable of connecting to a network, such as a smart phone, a tablet computer, an electronic computer, and the like. The terminal 110 may run an RFB (English: Remote Frame Buffer, Chinese: Remote Frame Buffer) client. The terminal 110 includes a hardware architecture conforming to the TrustZone technical specification of the ARM (English: Advanced RISCMachines, Chinese: Advanced Reduced Instruction Set Machine) company, and the hardware architecture can support the secure access method shown in the embodiment of the present invention. In other words, the terminal 110 is a terminal that supports to operate in one of two modes, the secure world and the normal world.

The server 120 may be one server, or a server cluster composed of several servers, or a cloud computing service center. The server 120 may run an RFB server.

A network connection can be established between the terminal 110 and the server 120 .

Several terms involved in the embodiments of the present invention are described below:

The term "ordinary world" refers to the world in which the operating system of the terminal runs when the terminal is used in daily life, and the ordinary world can run the user's own application program.

The term "secure world" is a mode that is safely isolated from the "ordinary world". The code area can realize code isolation between the secure world and the normal world, that is, when the terminal runs in the secure world, the code in the normal world cannot access the data in the secure world. Thus, the user can perform various operations related to sensitive data in the secure world of the terminal.

Please refer to FIG. 2 , which shows a method flow chart of a secure access method provided by an embodiment of the present invention. In this embodiment, the secure access method is applied to the terminal 110 in the implementation environment shown in FIG. 1 as an example illustrate. The secure access method may include the following steps:

Step 201, in the normal world, obtain the encrypted data of the RFB server through the remote frame buffer RFB client.

Step 202, switch from the normal world to the secure world, and decrypt the encrypted data to obtain the display data.

Step 203, in the safe world, display according to the display data.

To sum up, the secure access method provided by this embodiment uses the remote frame buffer RFB client to obtain the encrypted data of the RFB server in the normal world, and then switches from the normal world to the secure world to decrypt the encrypted data to display Data, and in the safe world, display according to the displayed data, which solves the problem of running the RFB client in the safe world in the prior art, which leads to the increase of the code base in the safe world; it achieves the premise of ensuring security. The RFB client is still running in the normal world, and it only needs to add a small part of the code base in the secure world to access the effect of the RFB server safely through the RFB client.

Please refer to FIG. 3 , which shows a method flowchart of a secure access method provided by another embodiment of the present invention. This embodiment is illustrated by taking the secure access method applied to the implementation environment shown in FIG. 1 . The secure access method may include the following steps:

Step 301 , the terminal directly enters the secure world when starting up, and sets the secure world reminder component to be usable only in the secure world. The secure world reminder component is used to remind the current operating world as one of the normal world and the secure world.

The terminal enters the safe world when it is started, and the safe world reminder component is set to be used only in the safe world, so as to ensure that the setting is safe and effective.

The safe world reminder component can be an indicator light, and the terminal can set the indicator light to be on in the safe world and off in the normal world; or set the indicator light to be on in the normal world and off in the safe world.

The safe world reminder component can also be a sounding device, then the terminal can set the sounding device to emit a specific sound in the safe world, but not work in the normal world; or set the sounding device to emit a specific sound in the normal world, The next does not work.

The safe world reminding component can also be a vibration reminding device, and the terminal can set the vibration reminding device to vibrate in the safe world and not vibrate in the normal world; or set the vibration reminding device to vibrate in the normal world and not vibrate in the safe world.

After the setting is completed, the different reminder states of the indicator light, sound device and vibration reminder device correspond to the safe world and the normal world respectively, and the user can judge whether the current terminal is in the safe world through the reminder status of the safe world reminder component, so as to decide whether to proceed For inputting confidential data, or judging whether the current display of confidential data is safe, the terminal may include any one or more of the above three safe world reminder components.

It should be noted that this step generally only needs to be executed once to meet the security access needs of the terminal in the future. For example, this step can be completed before leaving the factory, and the terminal does not need to update the safe world reminder component after leaving the factory. However, when the user needs it, the user can still control the terminal to enter the safe world and set the safe world reminder component when the terminal is started.

In step 302, the terminal logs in to the RFB server through the RFB client in the normal world.

This step may include the following 7 sub-steps during execution:

1) In the normal world, the terminal sends a security access request to the RFB server through the RFB client.

The user operates the terminal to start the RFB client, and sends a security access request to the RFB server.

In addition, after the user starts the RFB client, the terminal can set the external input device of the terminal as an external input device that can only be accessed in the secure world, so that the user cannot perform input operations in the normal world, thus ensuring the user's security. Security of input data.

It should be noted that the terminal can also set the external input device to switch to the safe world after the user performs a specific operation on the external input device. For example, after the user clicks the input box on the touch screen, the terminal switches to the safe world. Another example is that the input device is a physical button. , after the user clicks a specific key or a specific key combination, the terminal enters the safe world.

2) After receiving the security access request through the RFB server, the server provides the login interface data of the RFB server to the RFB client.

Because the login interface data does not contain data that needs to be encrypted, the login interface data can be unencrypted login interface data, and it is also convenient for the RFB client to display the login interface data in the normal world.

3) In the normal world, the terminal obtains the login interface data of the RFB server through the RFB client.

In the normal world, the terminal receives the login interface data sent by the RFB server through the RFB client.

4) The terminal displays the login interface according to the login interface data.

The terminal writes the login interface data into the frame buffer memory and displays it.

5) The terminal switches from the normal world to the safe world, and receives the user name and password entered in the login interface.

After the terminal switches from the normal world to the secure world, the user enters the user name and password on the login interface through the external input device, and the terminal receives the user name and password.

Among them, the terminal can switch to the safe world immediately after displaying the login interface data, or switch to the safe world when the user wants to perform an input operation, for example, the terminal switches to the safe world after the user clicks the input box; another example is that the input device is a physical button , then switch to the safe world after the user clicks a specific button, the way the terminal switches to the safe world can be determined by the setting of the terminal to the external input device in 1).

6) In the normal world, the terminal sends the user name and encrypted password to the RFB server, so that the RFB server performs verification according to the user name and encrypted password.

In the normal world, the terminal can send the user name and the encrypted password to the RFB server. The encrypted password is encrypted with a predetermined key in the safe world. The predetermined key can be used between the RFB client and the RFB service. The secret key or password itself pre-agreed by the client. After receiving the user name and the encrypted password, the RFB server decrypts the encrypted password and verifies the decrypted password.

Optionally, this step may include the following 6 sub-steps:

(1) In the secure world, the terminal writes the received password into the secure memory, and writes the received user name into the normal memory. The secure memory is the memory that can only be accessed in the secure world. The normal memory is in Memory that can be accessed by both the normal world and the secure world.

After receiving the password input by the user, the terminal stores the password in the safe memory, and stores the user name in the common memory.

The secure memory can be set in step 301 as a memory that can only be accessed under the secure world.

(2) The terminal switches from the secure world to the normal world, and sends the user name to the RFB server through the RFB client.

Since the user name is stored in the normal memory, the normal memory can be accessed by both the normal world and the secure world, so after the terminal switches from the secure world to the normal world, it can obtain the user name from the normal memory and pass the user name through RFB The client sends to the RFB server.

(3) When the user name passes the verification of the RFB server, the terminal receives the random number generated by the RFB server.

After the RFB server obtains the user name, it verifies whether the user name belongs to a legal user. If the user name belongs to a legal user, the RFB server generates a random number, records the random number and sends the random number to the RFB client. The legal user may be a user permitted by the server to access the server, and the user name of the legal user may be stored in the server.

(4) The terminal switches from the ordinary world to the secure world and converts random numbers and passwords into feedback information using a predetermined hash function, which is a pre-agreed hash function between the RFB client and the RFB server.

After receiving the random number, the terminal uses a predetermined hash function to convert the random number and password into feedback information. For example, the random number and the password in the secure memory can be converted into feedback information as a whole through the fifth edition of the Message Digest Algorithm (English: Message Digest Algorithm 5, abbreviation: MD5).

(5) The terminal switches from the secure world to the normal world, and sends feedback information to the RFB server through the RFB client.

(6) The server receives the feedback information sent by the RFB client through the RFB server, and verifies the feedback information.

The server receives the feedback information sent by the RFB client through the RFB server.

After receiving the feedback information, the RFB server converts the random number sent to the RFB client stored in the server and the received user name into verification information through a predetermined hash function, and detects whether the verification information is consistent with the feedback information. When the verification information is consistent with the feedback information, the RFB client verification succeeds, and when the verification information is inconsistent with the feedback information, the RFB client verification fails.

It should be noted that (1) to (6) may be executed multiple times during the whole security access process, or once every predetermined time, so as to improve the security of the security access method of this embodiment.

7) When the verification is successful, the server sends a successful login prompt to the RFB client through the RFB server.

When the verification is successful, the server establishes a secure access connection with the RFB client through the RFB server, and sends a successful login prompt to the RFB server.

When the verification fails, the server sends a login failure prompt to the RFB client through the RFB server.

Step 303, when the terminal successfully logs in to the RFB server, set the frame buffer memory as the memory that can only be accessed in the secure world.

When the terminal successfully logs in to the RFB server, the terminal may set the frame buffer memory as a memory that can only be accessed in a secure world when receiving a successful login prompt fed back by the RFB server. The frame buffer memory is the memory used by the terminal to store the content of the screen image. This setting can prohibit the terminal from displaying the remote user graphical interface in the normal world.

After the RFB client logs in to the RFB server successfully, the display data sent by the RFB server to the RFB client may be confidential data. At this time, the terminal sets the frame buffer memory as the memory that can only be accessed in the safe world. It can effectively prevent confidential data from being displayed in the normal world.

When the terminal fails to log in to the RFB server, it can return to step 5) to re-receive the user name and password input in the login interface, that is, the user can re-enter the user name and password.

It should be noted that the operation of setting the framebuffer memory to be accessible only in the secure world can also be executed immediately when the user opens the RFB client. Correspondingly, the terminal will display the login interface data in the secure world , at this time, the login interface data may be encrypted or unencrypted, and when the login interface data is encrypted, the encryption key may be a predetermined key.

Step 304, the server provides encrypted data to the RFB client through the RFB server.

After the RFB client logs in to the RFB server successfully, the server provides encrypted data to the RFB client through the RFB server. The encrypted data can be the encrypted data that the RFB server sends to the RFB client by default after the RFB client successfully logs in, or it can be After the RFB server receives the request from the RFB client, it sends encrypted data according to the request.

In addition, the encryption key of the encrypted data may be a predetermined key, that is, a pre-agreed key between the RFB client and the RFB server, or the password itself used when the user logs in to the RFB server.

Step 305, the terminal obtains the encrypted data of the RFB server through the RFB client in the normal world.

Since it is a secure access connection established between the RFB client and the RFB server, the terminal needs to obtain the encrypted data sent by the RFB server through the RFB client in the normal world.

Step 306, the terminal receives a write request from the RFB client in the normal world, wherein the write request refers to a request to write encrypted data into the frame buffer memory, and the frame buffer memory is a memory that can only be accessed in the secure world .

After the terminal receives the encrypted data sent by the RFB server in the normal world, the RFB client will send a write request to the terminal to write the encrypted data into the frame buffer memory.

Step 307, the terminal switches from the normal world to the secure world when the write request triggers an error.

Since the frame buffer memory at this time is set as a memory that can only be accessed in the secure world, after the terminal receives a write request from the RFB client to write encrypted data into the frame buffer memory in the normal world, the terminal will trigger an error and switch to the safe world.

Step 308, the terminal decrypts the encrypted data in the secure world to obtain the display data.

After the terminal is switched to the secure world, the encrypted display data can be decrypted using a predetermined key.

Step 309, the terminal writes the display data into the frame buffer memory in the secure world, and the display component automatically reads the display data in the frame buffer memory for display.

Since the terminal is currently in the secure world, the terminal can write display data into the frame buffer memory and display it through the display component. Wherein, the display component is set to automatically read display data from the frame buffer memory for display.

Step 310, the terminal acquires the input signal received by the external input device under the secure world, and the external input device is an external input device that can only be accessed under the secure world.

After the terminal displays according to the display data, the user can perform an input operation through an external input device according to the display data, and the terminal can convert the user's input operation into an input signal through the external input device. The external input device can include a touch screen, physical buttons, and a microphone. and cameras and so on.

Step 311, the terminal encrypts the input signal and writes it into the normal memory, which is accessible to both the normal world and the secure world.

After the terminal obtains the user's input signal through the external input device, it encrypts the input signal and writes it into the ordinary memory, and the terminal can obtain the encrypted input signal in the ordinary memory in the ordinary world.

Step 312, the terminal switches from the secure world to the normal world, and in the normal world, the terminal sends the encrypted input signal to the RFB server through the RFB client.

When the terminal writes the encrypted input signal in the ordinary memory, it can send the encrypted input signal to the RFB server through the RFB client in the ordinary world.

Step 313, the terminal continues to receive subsequent encrypted data sent by the RFB server in the normal world.

The terminal continues to receive encrypted data sent by the RFB server in the normal world. That is, the terminal can return to step 304 to continue security access.

Wherein, the subsequent encrypted data may be sent according to the input signal after the RFB server decrypts the encrypted input signal and obtains the input signal.

In addition, before the RFB client receives the subsequent encrypted data sent by the RFB server after switching to the normal world, it can still display according to the display data, because the frame buffer memory at this time can only be accessed in the secure world, that is, in the normal world The terminal cannot read framebuffer memory, so it is safe to display this display data to the normal world.

To sum up, the secure access method provided by this embodiment uses the remote frame buffer RFB client to obtain the encrypted data of the RFB server in the normal world, and then switches from the normal world to the secure world to decrypt the encrypted data to display Data, and in the safe world, display according to the displayed data, which solves the problem of running the RFB client in the safe world in the prior art, which leads to the increase of the code base in the safe world; it achieves the premise of ensuring security. The RFB client is still running in the normal world, and it only needs to add a small part of the code base in the secure world to access the effect of the RFB server safely through the RFB client.

It should be added that the security access method provided by this embodiment also directly enters the security world after startup, and sets the security world reminder component to be usable only in the security world. The security world reminder component is used to remind the currently running The world is one of the normal world and the safe world, so that the user can judge whether the current terminal is in the safe world through the safe world reminder component, so as to decide whether to input confidential data or judge whether the current confidential data is displayed. safe effect.

It should be added that the secure access method provided in this embodiment also obtains the input signal received by the external input device in the secure world. The external input device is an external input device that can only be accessed in the secure world. The input signal is encrypted and written into the normal memory. The normal memory is a memory that can be accessed in both the normal world and the secure world. Finally, in the normal world, the encrypted input signal is sent to the RFB server through the RFB client, achieving both The safety of the user's input signal is guaranteed, and the effect of adding code bases is avoided when the RFB client runs in a safe world.

It should be added that the secure access method provided by this embodiment also sets the frame buffer memory as memory that can only be accessed in the secure world when the login to the RFB server is successful, so that the terminal can also access it in the normal world. Continuing to display confidential data achieves the effect that the user can also see smooth display images when the terminal switches between the secure world and the normal world.

It should be added that the secure access method provided by this embodiment also receives the random number generated by the RFB server when the user name passes the verification of the RFB server, and then switches from the normal world to the secure world, and uses the predetermined hash The function converts random numbers and passwords into feedback information, and the predetermined hash function is the hash function pre-agreed by the RFB client and RFB server, and finally switches from the safe world to the normal world, and sends the feedback information to RFB through the RFB client The server, that is, the feedback information is dynamic information, so that the technical solution provided by the embodiment of the present invention can effectively avoid replay attacks.

Please refer to FIG. 4 , which shows a structural block diagram of a security access device provided by an embodiment of the present invention. The security access device can be implemented as a device in the implementation environment shown in FIG. 1 through software, hardware or a combination of both. All or part of Terminal 110. The security access device includes: a data acquisition module 410, a data decryption module 420 and a data display module 430;

The data obtaining module 410 is used to obtain the encrypted data of the RFB server through the remote frame buffer RFB client in the normal world.

The data decryption module 420 is configured to switch from the normal world to the secure world, and decrypt encrypted data to obtain display data.

The data display module 430 is configured to display according to the display data in a safe world.

To sum up, the secure access device provided by this embodiment uses the remote frame buffer RFB client to obtain the encrypted data of the RFB server in the normal world, and then switches from the normal world to the secure world to decrypt the encrypted data to display Data, and in the safe world, display according to the displayed data, which solves the problem of running the RFB client in the safe world in the prior art, which leads to the increase of the code base in the safe world; it achieves the premise of ensuring security. The RFB client is still running in the normal world, and it only needs to add a small part of the code base in the secure world to access the effect of the RFB server safely through the RFB client.

Please refer to FIG. 5A, which shows a structural block diagram of a security access device provided by another embodiment of the present invention. The security access device can be realized by software, hardware or a combination of the two in the implementation environment shown in FIG. 1. All or part of the terminal 110. The security access device includes: a data acquisition module 410, a data decryption module 420 and a data display module 430;

The data obtaining module 410 is used to obtain the encrypted data of the RFB server through the remote frame buffer RFB client in the normal world.

The data decryption module 420 is configured to switch from the normal world to the secure world, and decrypt encrypted data to obtain display data.

The data display module 430 is configured to display according to the display data in a safe world.

In this embodiment, the data decryption module 420 may include:

The request receiving unit 421 is used to receive the write request of the RFB client in the normal world, wherein the write request refers to a request to write encrypted data into the frame buffer memory, and the frame buffer memory can only be used in the secure world. the memory accessed;

A security switching unit 422, configured to switch from the normal world to the secure world when the write request triggers an error;

A data decryption unit 423, configured to decrypt encrypted data to obtain display data in the secure world;

The data display module 430 is used for writing the display data into the frame buffer memory, and the display component automatically reads the display data in the frame buffer memory for display.

In this embodiment, the security access device may also include:

The customer login module 440 is used to log in to the RFB server through the RFB client in the normal world;

The secure memory module 450 is configured to set the frame buffer memory as memory that can only be accessed under the secure world when the login to the RFB server is successful.

In this embodiment, the client login module 440 may include:

The login interface unit 441 is used to obtain the login interface data of the RFB server through the RFB client in the normal world;

An interface display unit 442, configured to display the login interface according to the login interface data;

The input receiving unit 443 is used to switch from the ordinary world to the safe world, and receive the user name and password input in the login interface;

The input sending unit 444 is used to send the user name and the encrypted password to the RFB server in the normal world, so that the RFB server performs verification according to the user name and the encrypted password.

As shown in FIG. 5B, the input sending unit 444 may include:

The input write subunit 444a is used to write the received password into the safe memory under the safe world, and write the received user name into the normal memory. The safe memory is the memory that can only be accessed under the safe world. Ordinary memory is memory that can be accessed in both the normal world and the secure world;

The user name sending subunit 444b is used to switch from the safe world to the common world, and send the user name to the RFB server through the RFB client;

The random number receiving subunit 444c receives the random number generated by the RFB server when the user name is verified by the RFB server;

The feedback generating subunit 444d is used to switch from the ordinary world to the secure world, and convert random numbers and passwords into feedback information by using a predetermined hash function, the predetermined hash function being the hash function pre-agreed by the RFB client and the RFB server ;

The feedback sending subunit 444e is configured to switch from the safe world to the normal world, and send the feedback information to the RFB server through the RFB client.

In this embodiment, the security access device may also include:

The safe start module 460 is used to directly enter the safe world when starting, and set the safe world reminding component to be usable only under the safe world, and the safe world reminding component is used to remind that the current running world is one of the normal world and the safe world kind.

In this embodiment, the security access device may also include:

The input obtaining module 470 is used to obtain the input signal received by the external input device in the safe world, and the external input device is an external input device that can only be accessed in the safe world;

The encryption writing module 480 is used to encrypt the input signal and write it into the ordinary memory, and the ordinary memory is the memory that can be accessed in both the ordinary world and the safe world;

The signal sending module 490 is configured to send the encrypted input signal to the RFB server through the RFB client in the normal world.

In this embodiment, the security access device may also include:

The secure input module 500 is configured to set the external input device of the terminal as an external input device that can only be accessed in a secure world when the RFB client is started.

To sum up, the secure access device provided by this embodiment uses the remote frame buffer RFB client to obtain the encrypted data of the RFB server in the normal world, and then switches from the normal world to the secure world to decrypt the encrypted data to display Data, and in the safe world, display according to the displayed data, which solves the problem of running the RFB client in the safe world in the prior art, which leads to the increase of the code base in the safe world; it achieves the premise of ensuring security. The RFB client is still running in the normal world, and it only needs to add a small part of the code base in the secure world to access the effect of the RFB server safely through the RFB client.

The security access device provided by this embodiment also directly enters the security world after starting, and the security world reminder component is set to be usable only in the security world. One of the worlds, which achieves the effect that the user can judge whether the current terminal is in the safe world through the safe world reminder component, so as to decide whether to input confidential data, or judge whether the current confidential data display is safe.

The secure access device provided by this embodiment also obtains the input signal received by the external input device in the secure world, the external input device is an external input device that can only be accessed in the secure world, and then encrypts the input signal and writes it into Ordinary memory, ordinary memory is memory that can be accessed in both the normal world and the secure world. Finally, in the normal world, the encrypted input signal is sent to the RFB server through the RFB client, which ensures that the user's input signal security, and avoid the effect that the RFB client needs to increase the code base when running in a secure world.

The secure access device provided by this embodiment also sets the frame buffer memory as a memory that can only be accessed in the secure world when the login to the RFB server is successful, so that the terminal can continue to perform confidential data in the normal world. The display achieves the effect that the user can also see smooth display images when the terminal switches between the secure world and the normal world.

The secure access device provided by this embodiment also receives the random number generated by the RFB server when the user name is verified by the RFB server, then switches from the normal world to the secure world, and uses a predetermined hash function to combine the random number and password Converted into feedback information, the predetermined hash function is the hash function pre-agreed between the RFB client and the RFB server, and finally switch from the safe world to the normal world, and send the feedback information to the RFB server through the RFB client, that is, the feedback information As a piece of dynamic information, the technical solution provided by the embodiment of the present invention can effectively avoid replay attacks.

Please refer to FIG. 6 , which shows a structural block diagram of a terminal provided by an embodiment of the present invention. The terminal includes: a processor 620 and a memory 640 .

The processor 620 is configured to obtain encrypted data of the RFB server through the remote frame buffer RFB client in the normal world.

The processor 620 is configured to switch from the normal world to the secure world, and decrypt encrypted data to obtain display data.

The processor 620 is configured to display according to the display data in a safe world.

To sum up, the terminal provided in this embodiment uses the remote frame buffer RFB client to obtain the encrypted data of the RFB server in the normal world, and then switches from the normal world to the secure world to decrypt the encrypted data to obtain the display data. And in the safe world, it is displayed according to the display data, which solves the problem of running the RFB client in the safe world in the prior art, which leads to the increase of the code base in the safe world; it achieves the premise of ensuring security, and the RFB client The end still runs in the normal world, only need to add a small part of the code base in the secure world, and you can safely access the RFB server through the RFB client.

In a more optional embodiment provided based on the embodiment shown in FIG. 6:

Optionally, memory 640 includes frame buffer memory.

The processor 620 is configured to receive a write request from the RFB client in the normal world, wherein the write request refers to a request to write encrypted data into the frame buffer memory, and the frame buffer memory can only be accessed in the secure world memory;

Processor 620, configured to switch from the normal world to the safe world when the write request triggers an error;

Processor 620, configured to decrypt encrypted data to obtain display data in a secure world;

The processor 620 is configured to write display data into the frame buffer memory, and the display component automatically reads the display data in the frame buffer memory for display.

Processor 620, configured to log in to the RFB server through the RFB client in the normal world;

The processor 620 is configured to set the frame buffer memory as a memory that can only be accessed under the security world when the login to the RFB server is successful.

The processor 620 is used to obtain the login interface data of the RFB server through the RFB client in the normal world;

A processor 620, configured to display a login interface according to the login interface data;

Processor 620, configured to switch from the common world to the safe world, and receive the user name and password input in the login interface;

The processor 620 is configured to send the user name and the encrypted password to the RFB server in a normal world, so that the RFB server performs verification according to the user name and the encrypted password.

Optionally, the memory 640 also includes a secure memory and a common memory, and the secure memory may include a frame buffer memory.

The processor 620 is configured to write the received password into the secure memory in the secure world, and write the received user name into the common memory. The secure memory is a memory that can only be accessed in the secure world, and the common memory is memory accessible in both the normal world and the secure world;

The processor 620 is used to switch from the safe world to the common world, and send the user name to the RFB server through the RFB client;

Processor 620 receives the random number generated by the RFB server when the user name is verified by the RFB server;

The processor 620 is configured to switch from the ordinary world to the secure world, and convert random numbers and passwords into feedback information by using a predetermined hash function, the predetermined hash function being a pre-agreed hash function between the RFB client and the RFB server;

The processor 620 is configured to switch from the safe world to the common world, and send feedback information to the RFB server through the RFB client.

The processor 620 is configured to directly enter the safe world at startup, and set the safe world reminding component to be usable only in the safe world, and the safe world reminding component is used to remind that the current running world is one of the normal world and the safe world .

The processor 620 is configured to obtain an input signal received by an external input device in a secure world, where the external input device is an external input device that can only be accessed in a secure world;

The processor 620 is used to encrypt the input signal and write it into the common memory, and the common memory is a memory that can be accessed in both the normal world and the safe world;

The processor 620 is configured to send the encrypted input signal to the RFB server through the RFB client in a normal world.

The processor 620 is configured to set the external input device of the terminal as an external input device that can only be accessed in a secure world when the RFB client is started.

To sum up, the terminal provided by this embodiment also directly enters the safe world after startup, and sets the safe world reminder component to be usable only in the safe world. The safe world reminder component is used to remind the current running world to be normal One of the world and the safe world, the user can judge whether the current terminal is in the safe world through the safe world reminder component, so as to decide whether to input confidential data, or judge whether the display of the current confidential data is safe .

The terminal provided in this embodiment also obtains the input signal received by the external input device in the secure world. The external input device is an external input device that can only be accessed in the secure world, and then encrypts the input signal and writes it into the ordinary memory. , the normal memory is the memory that can be accessed in both the normal world and the secure world. Finally, in the normal world, the encrypted input signal is sent to the RFB server through the RFB client, which not only ensures the security of the user's input signal In addition, it avoids the effect that the RFB client needs to increase the code base when running in a secure world.

In the terminal provided by this embodiment, when the login to the RFB server is successful, the frame buffer memory is set as a memory that can only be accessed in the secure world, so that the terminal can continue to display confidential data in the normal world, It achieves the effect that the user can also see smooth display images when the terminal switches between the secure world and the normal world.

The terminal provided by this embodiment also receives the random number generated by the RFB server when the user name passes the verification of the RFB server, then switches from the normal world to the secure world, and uses a predetermined hash function to convert the random number and password into Feedback information, the predetermined hash function is the hash function pre-agreed by the RFB client and RFB server, and finally switch from the safe world to the normal world, and send the feedback information to the RFB server through the RFB client, that is, the feedback information is a The dynamic information achieves the effect that the technical solutions provided by the embodiments of the present invention can effectively avoid replay attacks.

Other embodiments of the invention will be readily apparent to those skilled in the art from consideration of the specification and practice of the invention invented herein. This application is intended to cover any modification, use or adaptation of the present invention, these modifications, uses or adaptations follow the general principles of the present invention and include common knowledge or conventional technical means in the technical field not invented by the present invention . The specification and examples are to be considered exemplary only, with a true scope and spirit of the invention being indicated by the following claims.

It should be understood that the present invention is not limited to the precise constructions which have been described above and shown in the accompanying drawings, and various modifications and changes may be made without departing from the scope thereof. The scope of the invention is limited only by the appended claims.

Claims (16)

1. A secure access method, characterized in that, the method is used in a terminal supporting trust zone hardware technology, and the terminal can run in the normal world or the secure world, and the method includes: In the normal world, obtain the encrypted data of the RFB server through the remote frame buffer RFB client; switching from the normal world to the secure world, decrypting the encrypted data to obtain display data; Under the safe world, it is displayed according to the display data. 2. The method according to claim 1, wherein the switching from the normal world to the secure world, and decrypting the encrypted data to obtain display data comprises: In the normal world, the write request of the RFB client is received, wherein the write request refers to a request to write the encrypted data into the frame buffer memory, and the frame buffer memory is only in the The memory that can be accessed under the above security world; When the write request triggers an error, switch from the normal world to the secure world; Under the secure world, decrypt the encrypted data to obtain display data; The displaying under the safe world according to the display data includes: The display data is written into the frame buffer memory, and the display component automatically reads the display data in the frame buffer memory for display. 3. the method according to claim 1, is characterized in that, described under normal world, before obtaining the encrypted data of RFB service end by remote frame buffer RFB client, also comprises: In the normal world, log in to the RFB server through the RFB client; When the login to the RFB server is successful, the frame buffer memory is set as memory that can only be accessed under the security world. 4. The method according to claim 3, wherein the logging in to the RFB server through the RFB client in the normal world comprises: In the normal world, obtain the login interface data of the RFB server through the RFB client; displaying a login interface according to the login interface data; switch from the normal world to the secure world, and receive the user name and password input in the login interface; In the normal world, send the user name and the encrypted password to the RFB server, so that the RFB server performs verification according to the user name and the encrypted password. 5. The method according to claim 4, wherein, in the normal world, sending the user name and the encrypted password to the RFB server includes: Under the secure world, write the received password into a secure memory, write the received user name into a normal memory, and the secure memory is a memory that can only be accessed under the secure world , the normal memory is a memory that can be accessed under both the normal world and the secure world; switch from the safe world to the normal world, and send the user name to the RFB server through the RFB client; When the user name passes the verification of the RFB server, receive the random number generated by the RFB server; Switch from the normal world to the secure world, and convert the random number and password into feedback information using a predetermined hash function, the predetermined hash function is pre-agreed by the RFB client and the RFB server the hash function; switch from the safe world to the normal world, and send the feedback information to the RFB server through the RFB client. 6. The method according to any one of claims 1 to 5, wherein, under the normal world, before obtaining the encrypted data of the RFB service end by the remote frame buffer RFB client, it also includes: Enter the safe world directly after startup, and set the safe world reminder component to be usable only in the safe world, the safe world reminder component is used to remind the current running world as the normal world and the safe world One of. 7. The method according to any one of claims 1 to 5, characterized in that the method further comprises: Under the secure world, acquire an input signal received by an external input device, where the external input device is an external input device that can only be accessed under the secure world; Encrypting the input signal and writing it into a normal memory, the normal memory is a memory that can be accessed in both the normal world and the secure world; In the normal world, the encrypted input signal is sent to the RFB server through the RFB client. 8. The method according to claim 7, characterized in that, before obtaining the input signal received by the external input device under the safe world, further comprising: When the RFB client is started, the external input device of the terminal is set as an external input device that can only be accessed in the secure world. 9. A secure access device, characterized in that it is used in a terminal supporting trust zone hardware technology, the terminal can run in the normal world or the secure world, and the device includes: The data acquisition module is used to obtain the encrypted data of the RFB service end through the remote frame buffer RFB client in the normal world; A data decryption module, configured to switch from the normal world to the secure world, and decrypt the encrypted data to obtain display data; The data display module is configured to display according to the display data in the safe world. 10. The device according to claim 9, wherein the data decryption module comprises: The request receiving unit is used to receive the write request of the RFB client in the normal world, wherein the write request refers to a request to write the encrypted data into the frame buffer memory, and the frame buffer Zone memory is memory that can only be accessed under the secure world; a security switching unit, configured to switch from the normal world to the secure world when the write request triggers an error; A data decryption unit, configured to decrypt the encrypted data to obtain display data in the secure world; The data display module is used to write the display data into the frame buffer memory, and the display component automatically reads the display data in the frame buffer memory for display. 11. The device according to claim 9, further comprising: A client login module, configured to log in to the RFB server through the RFB client in the normal world; A secure memory module, configured to set the frame buffer memory as memory that can only be accessed under the secure world when the login to the RFB server is successful. 12. The device according to claim 11, wherein the client login module comprises: A login interface unit, configured to obtain the login interface data of the RFB server through the RFB client in the normal world; an interface display unit, configured to display a login interface according to the login interface data; an input receiving unit, configured to switch from the normal world to the secure world, and receive the user name and password input in the login interface; An input sending unit, configured to send the user name and the encrypted password to the RFB server in the normal world, so that the RFB server uses the user name and the encrypted password The above password is verified. 13. The device according to claim 12, wherein the input sending unit comprises: The input write subunit is used to write the received password into a secure memory and write the received user name into a common memory under the secure world, and the secure memory is only used in the secure world The memory that can be accessed under the security world, the normal memory is the memory that can be accessed in both the normal world and the security world; A username sending subunit, configured to switch from the secure world to the normal world, and send the username to the RFB server through the RFB client; The random number receiving subunit receives the random number generated by the RFB server when the user name is verified by the RFB server; A feedback generating subunit, configured to switch from the normal world to the secure world, and convert the random number and password into feedback information using a predetermined hash function, the predetermined hash function is the RFB client and The hash function pre-agreed by the RFB server; The feedback sending subunit is configured to switch from the safe world to the normal world, and send the feedback information to the RFB server through the RFB client. 14. The device according to any one of claims 9 to 13, wherein the device further comprises: The safe start module is used to directly enter the safe world after startup, and set the safe world reminding component to be usable only in the safe world, and the safe world reminding component is used to remind the current running world as the normal One of the world and the secure world. 15. The device according to any one of claims 9 to 13, wherein the device further comprises: An input acquisition module, configured to acquire an input signal received by an external input device in the secure world, where the external input device is an external input device that can only be accessed in the secure world; An encryption writing module, configured to encrypt the input signal and write it into a normal memory, where the normal memory is a memory that can be accessed in both the normal world and the secure world; A signal sending module, configured to send the encrypted input signal to the RFB server through the RFB client in the normal world. 16. The device according to claim 15, further comprising: A secure input module, configured to set the external input device of the terminal as an external input device that can only be accessed in the secure world when the RFB client is started.