TW201939345A - Data processing method, and application method and apparatus of trusted user interface resource data - Google Patents

Abstract

Disclosed are a data processing method, and an application method and apparatus of trusted user interface resource data, comprising: triggering the launch of a trusted user interface on a non-trusted user interface, acquiring encrypted trusted user interface resource data from a rich execution environment, and providing same to a trusted execution environment; in the trusted execution environment, decrypting the encrypted trusted user interface resource data and, on the basis of the decrypted trusted user interface resource data, displaying a trusted user interface. The present application at least ensures the security and integrity of TUI resource data when a terminal device cannot provide a secure storage function.

Description

Data processing method, application method and device of trusted user interface resource data

The present invention relates to the field of computer technology, and in particular, to a data processing method, a method and a device for applying trusted user interface resource data.

In related technologies, the display of a Trusted User Interface (TUI) requires the use of TUI resource information. By using these resources, a graphical user interface can be displayed in a Trusted Execution Environment (TEE). To provide users with a secure and trusted graphical interactive interface to protect user information (such as account information, password information, etc.). In related technologies, TUI resource data is generally stored on the trusted memory of the terminal device. However, when the terminal device cannot use the relatively expensive trusted memory due to cost considerations or cannot provide the trusted memory due to the hardware design defect of the terminal device, the terminal device cannot provide a secure storage function. At this time, how to store TUI resource data to ensure the security and integrity of TUI resource data, no effective solution has been proposed at present.

The present invention aims to solve the above technical problems in the related art. The present invention provides a data processing method, a method and a device for applying resource data of a trusted user interface, which can at least ensure the safety and integrity of resource data when a terminal device cannot provide a secure storage function. The present invention adopts the following technical scheme. A method for applying trusted user interface resource data includes: (i) triggering the activation of a trusted user interface on an untrusted user interface, obtaining encrypted trusted user interface resource data from a rich execution environment, and providing it to the trusted execution environment; The trusted execution environment decrypts the encrypted trusted user interface resource data, and displays the trusted user interface based on the decrypted trusted user interface resource data. Wherein, the method further comprises: generating the encrypted trusted user interface resource data before obtaining the encrypted trusted user interface resource data from the rich execution environment and providing it to the trusted execution environment; wherein the generating the encryption The trusted user interface resource data includes one of the following: Generate a trusted user interface resource data package, use a secure hash algorithm and an asymmetric encryption algorithm to generate a digital signature of the trusted user interface resource data package, and A digital signature is attached to the trusted user interface resource data package to obtain the encrypted trusted user interface resource data; The advanced encryption standard AES encryption algorithm is used to directly encrypt the trusted user interface resource data to Generate the encrypted trusted user interface resource data. (1) Wherein, the decrypting the encrypted trusted user interface resource data in a trusted execution environment includes: using a preset trusted user interface resource key to decrypt the encrypted trusted user interface resource data. Wherein, the decrypting the encrypted trusted user interface resource data in a trusted execution environment includes one of the following: using a public key to verify the digital signature of the encrypted trusted user interface resource data Decrypt the encrypted trusted user interface resource data using an AES decryption algorithm. Wherein, the method further comprises: storing the encrypted trusted user interface resource data in the rich execution environment before obtaining the encrypted trusted user interface resource data from the rich execution environment and providing it to the trusted execution environment. Wherein, the storing the encrypted trusted user interface resource data in the rich execution environment includes: storing the encrypted trusted user interface resource data in an untrusted storage space in the rich execution environment. The triggering of the trusted user interface on the untrusted user interface, obtaining encrypted trusted user interface resource data from the rich execution environment, and providing the trusted user interface resource to the trusted execution environment includes users on the untrusted user interface. When the operation triggers the start of the trusted user interface, the encrypted trusted user interface resource data is loaded in a rich execution environment and sent to a shared memory; the encrypted trusted user interface resource is loaded in the trusted execution environment. Data is copied from the shared memory to the protected memory of the trusted execution environment. Wherein, obtaining encrypted trusted user interface resource data from the rich execution environment and providing it to the trusted execution environment includes: sending a request for the trusted user interface resource data to the rich execution environment through a trusted user interface program, based on the The request loads the encrypted trusted user interface resource data in a rich execution environment and sends the encrypted trusted user interface resource data to the shared memory; and the encrypted trusted user interface resource data is transferred from the shared memory through the trusted user interface program. To protected memory of the trusted execution environment. The request for trusted user interface resource information carries a trusted user interface identifier; in a rich execution environment, a corresponding encrypted trusted user interface is loaded based on the trusted user interface identifier carried in the request. Resource data is sent to shared memory. Wherein, the method further comprises: clearing the trusted user in the protected memory of the trusted execution environment during the process of exiting the trusted user interface program or after exiting the trusted user interface program. Interface resource information. Wherein, the method further comprises: after the trusted user interface program exits, clearing the encrypted trusted user interface resource data in the shared memory. Wherein, displaying the trusted user interface based on the decrypted trusted user interface resource data includes displaying a graphical trusted user interface based on the decrypted trusted user interface resource data. An application device for trusted user interface resource data includes: (1) a providing module for triggering the activation of the trusted user interface on an untrusted user interface, obtaining encrypted trusted user interface resource data from a rich execution environment, and providing the Trusted execution environment; Trusted user interface module for decrypting the encrypted trusted user interface resource data in a trusted execution environment, and displaying trusted users based on the decrypted trusted user interface resource data interface. Among them, it also includes: (1) a generating module for generating the encrypted trusted user interface resource data by one of the following: (1) generating a trusted user interface resource data packet, and generating the encrypted hash algorithm and asymmetric encryption algorithm The digital signature of the trusted user interface resource data package, and the digital signature is attached to the trusted user interface resource data package to obtain the encrypted trusted user interface resource data; Encryption using the advanced encryption standard AES The algorithm directly encrypts the trusted user interface resource data to generate the encrypted trusted user interface resource data. Wherein, the providing module is configured to load the encrypted trusted user interface resource data in a rich execution environment and send the shared trusted user interface resource data when a user operation on the untrusted user interface triggers the startup of the trusted user interface. Memory; the trusted user interface module, configured to copy the encrypted trusted user interface resource data from the shared memory to the protected memory of a trusted execution environment. It also includes: a storage module set in a rich execution environment for storing the encrypted trusted user interface resource data. An application device of trusted user interface resource data, comprising: a display; 记忆 a memory storing a computer program; a processor configured to read the computer program to execute the operation of the application method of the trusted user interface resource data. (2) A computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, implements the steps of the method for applying the above-mentioned trusted user interface resource data. A data processing method, which includes: 获取 Obtaining encrypted resource data from a rich execution environment and providing it to a trusted execution environment; 解密 Decrypting the encrypted resource data in a trusted execution environment; 处理 Processing the decrypted resource data. The present invention includes the following advantages: In the present invention, when the TUI needs to be displayed, the REE can obtain the encrypted TUI resource information from the REE and provide it to the TEE. After the TEE decrypts it, the TUI resource information can be used to display the TUI. The integrity and confidentiality of resource data, and TUI resource data can be stored on untrusted memory, which avoids the limitation of having to use trusted memory to store TUI resource data, and solves the problem that some terminal devices cannot provide secure memory The problem that the TUI resource data cannot be stored securely can effectively reduce the hardware cost of the mobile device using mobile security technology. Of course, it is not necessary for any product implementing the present invention to achieve all the advantages described above at the same time.

The technical solution of the present invention will be described in more detail below with reference to the drawings and embodiments. It should be noted that if there is no conflict, the embodiments of the present invention and various features in the embodiments can be combined with each other, which are all within the protection scope of the present invention. In addition, although the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than here. In a typical configuration, the client or server computing device may include one or more processors (CPUs), input / output interfaces, network interfaces, and memory. Memory may include non-permanent memory, random access memory (RAM), and / or non-volatile memory in computer-readable media, such as read-only memory (ROM) or flash memory (flash) RAM). Memory is an example of a computer-readable medium. The memory may include module 1, module 2, ..., module N (N is an integer greater than 2). Computer-readable media includes permanent and non-permanent, removable and non-removable storage device media. The storage medium can realize information storage by any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), and other types of random access memory (RAM) , Read-only memory (ROM), electrically erasable and programmable read-only memory (EEPROM), flash memory or other memory technologies, read-only disc read-only memory (CD-ROM), digital multi-function Optical discs (DVDs) or other optical storage, magnetic tape cartridges, magnetic tape storage or other magnetic storage devices or any other non-transmitting medium may be used to store information that can be accessed by computing devices. According to the definition in the present invention, computer-readable media does not include non-transitory computer-readable media (such as modulated data signals and carrier waves).终端 The terminal device described in the present invention may be a mobile phone, a tablet computer, a mobile Internet device, a wearable device, or other hardware entities or virtual devices that can deploy a CPU.术语 The terms of the present invention are explained as follows: Trusted Execution Environment (TEE, Trusted Execution Environment): Provides an execution environment that is isolated from REE, and provides code execution protection and data confidentiality and privacy management functions. Rich Execution Environment (REE): An operating environment provided to the rich operating system for execution and management. It is outside the trusted execution environment, and applications executed in that environment are considered untrusted. Rich operating system (ROS, Rich OS): Executed in REE. Compared to the operating system executed in TEE, rich operating system will provide more rich functions. It is more open to the installation and use of applications than trusted operating systems. . Trusted operating system (TOS, Trusted OS): execute in TEE, use hardware, software or a combination of technologies related to TEE security features to protect the executed code and data, and provide TA loading, execution and management And other functions. TUI (Trusted User Interface): Provide a trusted user interface in TEE to protect sensitive information such as passwords and identities from being detected by programs other than TEE. TUI Agent: It is a TUI agent running on the REE side. It is responsible for receiving application requests for TUI and forwarding them to TUI, and loading TUI resource data. Platform Hardware: A complete system with hardware and supporting software that can run TEE. For example, the ARM CPU supports TEE through TrustZone technology, and supports the switching of REE and TEE and the transmission of information through matching trusted firmware (ARM Trust firmware). The ARM CPU includes TrustZone and trusted firmware. Can be an example of Platform Hardware. Shared memory: Memory for common use of REE and TEE. REE side dedicated memory: Memory used only under REE. TEE's protected memory: Memory used only under TEE. Secure Hash Algorithm (SHA): It is the national standard FIPS PUB 180 issued by the National Institute of Standards and Technology. The latest standard has been updated to FIPS PUB 180-3 in 2008. It specifies SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512 one-way hash algorithms. SHA-1, SHA-224 and SHA-256 are suitable for messages up to 2 ^ 64 binary bits in length. SHA-384 and SHA-512 are suitable for messages up to 2 ^ 128 binary bits in length. Advanced Encryption Standard (AES): AES was published by FIST PUB 197 by NIST (National Institute of Standards and Technology) on November 26, 2001, and became a valid standard on May 26, 2002. AES algorithm is a symmetric key cryptographic algorithm. AES is an iterative, symmetric key block cipher, which can use 128, 192, and 256-bit keys, and uses 128-bit (16-byte) Encrypt and decrypt data in blocks. IEEE 802.15.4 uses a fixed 128-bit key, denoted AES-128. Regardless of the AES encryption algorithm or the decryption algorithm, it is an operation using round transformation. The working modes include ECB (Electronic Codebook Book) mode, password block connection mode (CBC), password feedback mode (CFB), output feedback mode (OFB), and counter mode (CTR, Counter). RSA (RSA algorithm): an asymmetric encryption algorithm, which is one of the best public key algorithms in encryption and decryption technology. As shown in Figure 1, it is a system architecture that supports TEE in related technologies. The system includes ROS under the REE, TUI Agent, Trusted Storage, and TOS and TUI under the TEE. Platform hardware is shared by ROS and TOS, and messages and messages can be exchanged between ROS and TOS. TUI The resource data is stored in the trusted memory, and the TEE uses the secure storage key (Trusted storage key) to decrypt to obtain the TUI resource data and provide the TUI resource data to the TUI for use. This method depends on the existence of trusted memory. However, trusted memory requires hardware to provide support, such as the RPMB partition of an embedded multimedia memory card (eMMC, Embedded Multi Media Card) or on-chip flash protected by hardware. When the terminal device cannot use the relatively expensive eMMC due to cost considerations, or the trusted storage device that cannot provide hardware protection due to the hardware design defect of the terminal device, and can only use external ordinary flash, the terminal device will not be able to provide Trust memory or lack of the trusted memory. At this time, the above scheme will not be available, and TUI resource data will not be effectively protected.解决 In order to solve the above problems, the present invention proposes the following technical solution, which is applicable to an application scenario in which resource data is required when there is no secure storage device. The technical solution of the present invention includes: a data processing method, the method may include: obtaining encrypted resource data from a REE and providing it to the TEE; decrypting the encrypted resource data in the TEE; and performing the decrypted resource data deal with. Here, the resource material includes, but is not limited to, TUI resource material. The TUI resource material is used for presenting TUI, and is suitable for an application scenario in which the TUI resource material is needed when there is no secure storage device. Processing resource materials includes but is not limited to the presentation of TUI under TEE. It should be understood that in the technical solution of the present invention, the resource materials may also be of other types, and the corresponding processing is not limited to the presentation of the TUI. The types of resource materials and their processing methods depend on specific application scenarios, and the present invention is not limited. The implementation of the technical solution of the present invention is described in detail below. Embodiment 1 A method for applying TUI resource information, as shown in FIG. 2, may include: Step 201: Trigger the start of TUI on a non-TUI, obtain encrypted trusted user interface resource data from a REE and provide it to TEE; Step 202. Decrypt the encrypted TUI resource data in a TEE, and display a TUI based on the decrypted TUI resource data. In this embodiment, when the TUI needs to be displayed, the encrypted TUI resource data is obtained from the REE and provided to the TEE. The TEE decrypts it to display the TUI using the TUI resource data. In this way, not only the integrity and confidentiality of the TUI resource data can be guaranteed. Moreover, TUI resource data can be stored on untrusted memory, which avoids the restriction that the trusted memory must be used to store TUI resource data, and solves the problem that certain terminal devices cannot provide TUI resource data due to the inability to provide secure memory. The problem of being securely stored can effectively reduce the hardware cost of mobile devices using mobile security technology. In this embodiment, the method may further include: before obtaining the encrypted trusted user interface resource data from the rich execution environment and providing it to the trusted execution environment, storing the encrypted TUI resource data in the REE. Because this embodiment uses encrypted TUI resource data, it can be stored in any memory in the REE when it is stored, that is, it can be stored in either trusted memory or untrusted memory. The specific type of memory used to store the encrypted TUI resource data can be flexibly adjusted according to the needs of the actual application or the hardware settings of the terminal device. In an implementation manner, the encrypted TUI resource data may be stored in an untrusted storage space in the REE to reduce the cost of the memory. In practical applications, this untrusted storage space can also be referred to as a non-secure storage area. Here, the storage space may be a memory or an area in the memory. For example, the encrypted TUI resource data may be stored in a flash external to the terminal device. In this embodiment, the TUI resource data may include fonts, characters, pictures, and the like. The TUI resource data may be a TUI static resource data or a TUI dynamic resource data. Among them, the TUI static resource data can be pre-stored on the terminal device with the installation of the application, and the TUI dynamic resource data needs to be delivered through the network in real time. For the TUI static resource data, the encrypted TUI resource data can be stored in the REE in advance when the application is installed. For the TUI dynamic resource data, the network side can dynamically send the encrypted TUI resource data to the terminal device, and the terminal device temporarily stores the encrypted TUI resource data in the REE. The method in this embodiment is preferably used for TUI static resource data. In this embodiment, the activation of the trusted user interface may be triggered by a user operation on the untrusted user interface. That is, the user can perform operations on the non-TUI when the terminal device displays the non-TUI to trigger the start of the TUI. In practical applications, the operation may be a key operation, a voice operation, a touch operation, or other user operations. For example, when a user uses an application on a terminal device, the user can first enter the non-TUI of the application. When a non-TUI is displayed, the user can operate on the non-TUI and trigger a TUI display request. The terminal device displays the The REE to TEE switching is performed as instructed. During the execution of this switching, the REE can provide the TEE with encrypted TUI resource information. After the TEE decrypts it, the TUI resource information is used to display the TUI. In this embodiment, the method may further include: generating the encrypted TUI resource data before obtaining the encrypted trusted user interface resource data from the rich execution environment and providing it to the trusted execution environment; wherein the generating the The encrypted TUI resource data may include one of the following methods: 1) generating a TUI resource data packet, generating a digital signature of the TUI resource data packet using a secure hash algorithm and an asymmetric encryption algorithm, and signing the digital signature It is added to the TUI resource data package to obtain the encrypted TUI resource data; 2) AES encryption algorithm is used to directly encrypt the TUI resource data to generate the encrypted TUI resource data. In practical applications, an appropriate encryption algorithm can be selected to encrypt the TUI resource data based on the requirements of the application environment to ensure the integrity and confidentiality of the TUI resource data. In practical applications, the TUI resource data of all user interfaces of an application can be uniformly encrypted. All of these TUI resource data use the same encryption algorithm and the same key. The TUI resource data corresponding to different applications can use different encryption algorithms, or the same encryption algorithm, but different keys are required to use the same encryption algorithm. In this embodiment, decrypting the encrypted TUI resource data in TEE may include: using a preset TUI resource key to decrypt the encrypted TUI resource data. In an implementation manner, the method for decrypting the encrypted TUI resource data in TEE may include one of the following: 1) using a public key to verify the digital signature of the encrypted TUI resource data; 2) using The AES decryption algorithm decrypts the encrypted TUI resource data. In practice, if a digital signature is used to encrypt the TUI resource information, the TEE uses a public key to verify the encrypted TUI resource information. At this time, the preset TUI resource key refers to the Public key. If the AES encryption algorithm is used to encrypt the TUI resource data, the TEE uses the corresponding AES decryption algorithm to decrypt the encrypted TUI resource data. At this time, the preset TUI resource key refers to the AES decryption algorithm. Key to law. Specifically, the encryption and decryption algorithm of the TUI resource data may adopt the following scheme: 1) first use one of SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512 to perform the TUI resource data packet A digital digest, and then encrypting the digital digest by an asymmetric encryption algorithm (such as an RSA algorithm) to generate a digital signature of the TUI resource data package, and attaching the digital signature to the TUI resource data package After that, the encrypted TUI resource data is obtained. When the TEE uses the encrypted TUI resource data, it is only necessary to verify the digital signature with the public key to ensure that the TUI resource is untampered data. 2) Use the AES encryption algorithm of ECB, CBC, CFB, OFB, CTR to directly encrypt the TUI resource data. When the TEE uses the encrypted TUI resources, the TUI resource data can be used by directly decrypting using the corresponding AES decryption algorithm. In actual operation, the application developer can use the above-mentioned encryption algorithm to generate TUI resource data and perform encryption processing through the resource generation tool. The private key involved in encrypting the TUI resource data can be protected by the application developers themselves. For example, during the development process, application developers use the TUI resource generation tool to generate TUI resource data packages, and digitally digest the resource packages through SHA256, and then encrypt the digests through RSA2048 to generate digital signatures for the TUI resource data packages. After the digital signature is added to the TUI resource information package, an encrypted TUI resource information package can be obtained. When the application is installed, the encrypted TUI resource data package is stored in the memory of the REE. When the TUI is displayed, the TEE uses the public key to verify and sign the encrypted TUI resource information package. After the verification is passed, the TUI resource information is stored in the protected memory of the TEE and used when displaying the TUI. Here, the TUI resource tool is a tool specifically for manual coding. For another example, during the development process, application developers generate TUI resource data through the TUI resource generation tool and use AES CTR algorithms to directly encrypt the TUI resource data to generate encrypted TUI resource data packages. When the application is installed, the encrypted TUI resource data package is stored in the memory of the REE. When the TUI is displayed, after the TEE obtains the encrypted TUI resource data package, the encrypted TUI resource data package is decrypted by the key of the AES CTR algorithm, and stored in the protected memory of the TEE for use when displaying the TUI. In actual application, the installation of the above application program depends on the specific conditions of the terminal device. It can be preset in the terminal device during the production stage, or it can be manually downloaded to the terminal device by the user through the network. For example, for a two-dimensional barcode payment device, its application program is preset in the production stage of the device. Correspondingly, the encrypted TUI resource data can also be stored in the memory of the two-dimensional barcode payment device in advance during the production phase. In this embodiment, triggering the start of the TUI on the non-TUI, and obtaining the encrypted trusted user interface resource information from the REE and providing it to the TEE may include: when a user operation on the non-TUI triggers the start of the TUI, loading in the REE The encrypted TUI resource data is sent to a shared memory; the encrypted TUI resource data is copied from the shared memory to the protected memory of the TEE in a TEE. In an implementation manner, providing the encrypted TUI resource data to the TEE may include: sending a request for the TUI resource data to the REE through a TUI program, and loading the encrypted TUI resource data in the REE based on the request, and To the shared memory; copy the encrypted TUI resource data from the shared memory to the protected memory of the TEE through the TUI program. Here, the request for TUI resource information may carry a TUI identifier; in the REE, based on the TUI identifier carried in the request, the corresponding encrypted TUI resource information is loaded and sent to the shared memory. In practical applications, the TUI identifier may be a universally unique identifier (UUID) or other similar information. In actual application, when the application program requests to open the TUI, the TUI agent is first opened, and then the application program calls the TUI Agent to send a TUI startup command to the TEE. In the TEE, the TUI program is started according to the requirements of the TUI startup command. The TUI program At startup, a request for TUI resource data is sent to the TUI Agent in the REE. The TUI Agent loads the corresponding encrypted TUI resource data into the shared memory based on the request. The TUI program in the TEE reads the encrypted TUI resource data from the shared memory. After decryption, the TUI resource data is stored in the protected memory on the TEE side and provided to the TUI program to use when presenting the TUI. In this embodiment, different commands can be used to distinguish the data requested by the TUI program from the REE. In an implementation manner, the above-mentioned request for TUI resource information may be expressed as a specified command. For example, CMD = 1 can be set in advance as the TUI resource data open command. Then, the TUI program in TEE sends the command of "CMD = 1" to the TUI Agent in REE, and TUI Agent will download it at the instruction of the command. Enter the corresponding encrypted TUI resource data into the shared memory. In practical applications, if there are multiple TUI programs on the terminal device, then the corresponding TUI resource data and TUI programs can be bound by a TUI identifier (for example, UUID). Here, a TUI identifier (for example, UUID) corresponding to a certain TUI program is included in the encrypted TUI resource data. For example, if the TUI_A program needs to load the TUI_A resource data, the TUI Agent may send a request for the TUI resource data carrying the UUID of the TUI_A, and then the TUI Agent may search the memory according to the UUID carried in the request for the TUI resource data. Among the stored encrypted TUI resource materials, which UUID of the encrypted TUI resource material matches the UUID of the TUI_A, find the encrypted TUI resource data that matches the UUID of the TUI_A, and then load it. In practical applications, the TUI in this embodiment may be of any type. In an implementation manner, the TUI is preferably an imaged TUI. For example, the TUI may be a TUI including a two-dimensional bar code paid by a merchant. That is, in an implementation manner of this embodiment, a graphical TUI may be displayed based on the decrypted TUI resource data. In this embodiment, the method may further include: clearing the TUI resource data in the protected memory of the TEE during the process of exiting the TUI program or after exiting the TUI program. For example, after receiving a shutdown command for the TUI program from the REE side, the TOS in the TEE may clear the TUI resource data in the protected memory of the TEE to release the space in the protected TEE. In other words, this embodiment stores the decrypted TUI resource data in the protected memory on the TEE side during the process of displaying the TUI, and lasts the entire lifetime of the TUI display until the user closes the TUI. After the TUI is closed, the decrypted TUI resource data is cleared from the protected memory on the TEE side to release the memory it occupied. In this embodiment, the method may further include: after the TUI program exits, clearing the encrypted TUI resource data in the shared memory. For example, after the TUI Agent on the REE side issues a shutdown command for the TUI program, the encrypted TUI resource data in the shared memory can be deleted, and the space occupied by the encrypted TUI resource data in the shared memory can be released in a timely manner. In other words, in this embodiment, in the process of displaying the TUI, the encrypted TUI resource data is stored in the shared memory on the REE side for immediate reading by the TEE side. After the TUI is closed, the encrypted TUI resource data can be cleared from the shared memory to release the memory it occupied.的 The above method of this embodiment can be implemented by any terminal device capable of providing TEE security capabilities. In particular, it is applicable to terminal equipment that cannot provide secure storage but can provide TEE security capabilities. Such as low-cost offline two-dimensional bar code payment equipment. As shown in FIG. 3, when the above method of this embodiment is applied to a terminal device that cannot provide secure storage but can provide TEE security capabilities, an example system system diagram of the terminal device is shown, and FIG. 4 shows a system architecture of the terminal device. Another exemplary illustration. As shown in FIG. 5, the above method in this embodiment may be implemented by using the following exemplary process: Step 501: Before the TUI resource data is installed on the terminal device, encrypt the TUI resource data by using encryption software to generate encrypted TUI resources. Data (TUI En-Rsc, TUI encrypted resource); step 502, when the application is installed, store the encrypted TUI resource data of the application in a memory (eg, untrusted memory) on the REE side of the terminal device; step 503. When the TUI needs to be started, the TUI Agent loads the encrypted TUI resource data from the memory on the REE side to the shared memory, so as to provide the loaded encrypted TUI resource data (through the shared memory in the Platform) to the TEE side. . Step 504: On the TEE side, after the TUI program obtains the encrypted TUI resource data from the shared memory, it decrypts the TUI resource key by using a preset TUI resource key to obtain the decrypted TUI resource data (TUI De-Rsc, TUI decrypted). resource) and store the decrypted TUI resource data in the protected memory on the TEE side; Step 505, the TUI program uses the decrypted TUI resource data to display a graphical TUI so that the user can operate in a secure TEE (For example, enter the account password; for example, enter ID information, etc.). It should be noted that FIG. 3, FIG. 4 and FIG. 5 above are exemplary implementation forms of the method in this embodiment, and the above method in this embodiment may also be implemented in other manners in other application scenarios. Embodiment 2 This embodiment provides a TUI resource data application device, which may include: a providing module and a processing module; wherein the providing module can be used to obtain encrypted resource data from the REE and provide it to the TEE; the processing module, It can be used to decrypt the encrypted resource data in TEE; and process the decrypted resource data. The processing module includes, but is not limited to, a TUI module described below. Specifically, as shown in FIG. 6, the application device of the TUI resource information in this embodiment may include: a providing module 62 for triggering the start of the TUI on a non-TUI, and obtaining the encrypted trusted user interface resource data from the REE And provide it to TEE; TUI module 63, for decrypting the encrypted TUI resource data in TEE, and displaying TUI based on the decrypted TUI resource data. The above-mentioned application device of this embodiment may further include: a generating module 64 for generating the encrypted TUI resource data by one of the following: 1) generating a TUI resource data packet, using a secure hash algorithm and an asymmetric encryption algorithm Method to generate a digital signature of the TUI resource information package, and attach the digital signature to the TUI resource information package to obtain the encrypted TUI resource information; 2) directly use an advanced encryption standard AES encryption algorithm to directly The TUI resource data is encrypted to generate the encrypted TUI resource data.上述 The above-mentioned application device of this embodiment may further include: a storage module 61 provided in the REE, for storing the encrypted TUI resource data. In an implementation manner, the storage module 61 may be an untrusted storage space in the REE. In the above application device in this embodiment, the providing module 62 may be used to load the encrypted TUI resource data in the REE and send it to the shared memory when a user operation on the non-TUI triggers the start of the TUI. The TUI module may be used to copy the encrypted TUI resource data from the shared memory into the protected memory of the TEE. In practical applications, the above-mentioned application device of this embodiment may be set in or implemented as any terminal device capable of providing TEE security capabilities. In particular, the above-mentioned application device of this embodiment may be provided in or implemented as a terminal device that cannot provide secure storage but can provide TEE security capabilities. For example, the above-mentioned application device of this embodiment may be provided in a low-cost offline two-dimensional barcode payment device. It should be noted that in the above-mentioned application device of this embodiment, the storage module 61, the provision module 62, the TUI module 63, and the generation module 64 provided in the REE may be software, hardware, or a combination of the two. . In an implementation manner, the storage module 61 provided in the REE may be embodied as an untrusted memory or an untrusted storage area of the terminal device, and the providing module 62 may be embodied as a TUI Agent and a TUI module 63 on the REE side of the terminal device. It can be embodied as a TUI program on the TEE side of the terminal device, and the generation module 64 can be embodied as an external device of the terminal device. The external device can be a tool that supports TUI resource generation, encryption algorithms (such as AES algorithms; for example, digital signature Chapter-related encryption algorithms, etc.) of any type of device. Embodiment 3 An application device for TUI resource data, as shown in FIG. 7, may include: a display 71; a memory 72 storing a computer program; ； a processor 73 configured to read the computer program to execute the first embodiment Operation of the application method of the trusted user interface resource data. Here, the processor 73 may be configured to read the computer program to perform the following operations: obtain the encrypted resource data from the REE and provide it to the TEE; decrypt the encrypted resource data in the TEE; and decrypt the decrypted resource Data for processing. Specifically, the processor 73 is configured to read the computer program to execute steps 201 to 202 in the first embodiment.其他 For other technical details of the application device of the TUI resource data in this embodiment, refer to the method section above. In practical applications, the application device of the TUI resource information shown in FIG. 7 can be implemented by any terminal device capable of providing TEE security capabilities. It should be noted that the application device of the TUI resource data shown in FIG. 7 may include other components in addition to the above-mentioned memory and processor. For example, the application device of the TUI resource data may also include data memory (for example, untrusted memory, etc.) for storing user data; for another example, the application device of the TUI resource data may also include data for use with external devices. A communication circuit for communication; for another example, the application device of the TUI resource information may further include a bus bar for coupling and connecting various parts. For another example, the application device of the TUI resource data may further include an audio output component (such as a speaker) that outputs TUI related audio. In addition, the application device of the TUI resource information may further include other components. Embodiment 4 实施 This embodiment also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program. When the computer program is executed by a processor, the steps of the method for applying the TUI resource data are implemented. Here, the steps implemented when the computer program is executed by the processor include: obtaining the encrypted resource data from the REE and providing it to the TEE; decrypting the encrypted resource data in the TEE; and processing the decrypted resource data . Specifically, when the computer program is executed by the processor, steps 201 to 202 of the first embodiment can be implemented. For other technical details of this embodiment, refer to the first embodiment. Exemplary implementations of the foregoing embodiments are described in detail below. It should be noted that the following examples can be combined with each other. In addition, the processes and execution processes in the examples below can also be adjusted according to the needs of actual applications. In addition, in actual applications, the foregoing embodiments may have other implementation manners. Example 1 低成本 There are low-cost terminal devices in practical applications, such as offline 2D barcode payment devices, which can provide payment 2D barcode display, but it does not have the ability to provide secure storage. Therefore, when such a device needs to provide a TUI function, it is necessary to use the solution of this embodiment to protect the security of TUI resource data. In this example, a low-cost offline two-dimensional barcode payment device is taken as an example to describe the specific implementation manners of the embodiments of the present invention. As shown in Figure 8, it is an example diagram of the application environment of the two-dimensional barcode payment device and its internal system architecture. In this example, the two-dimensional barcode payment device can provide a merchant's payment two-dimensional barcode display, and the buyer can scan the two-dimensional barcode displayed by the two-dimensional barcode payment device through a mobile phone to complete the payment. The two-dimensional bar code displayed by the two-dimensional bar code payment device needs to meet the requirements of security and irreplaceability. Therefore, based on its ability to provide TEE, it will display the two-dimensional bar code through TUI to protect the security of the two-dimensional bar code. As shown in FIG. 9, the process of displaying the two-dimensional barcode by the two-dimensional barcode payment device through TUI may include: Step 901, the merchant presses the power key to start the device, and when the device starts, the two-dimensional barcode payment application calls the TUI Agent. Among them, the two-dimensional barcode payment application is mainly responsible for obtaining merchant's payment two-dimensional barcode information, uploading transaction information, obtaining transaction status information, and calling the TUI Agent to complete TUI display and interaction. Step 902, when displayed on a non-TUI interface, the merchant triggers the TUI Agent to send a TUI start command by pressing the confirmation key, and the TUI start command is transmitted to the TOS by calling the Platform Hardware service through the ROS driver. In step 903, after receiving the TUI start command, the TOS starts the TUI program and requests the TUI Agent for the encrypted resource data, and sends a request for the TUI resource data to the TUI Agent. In step 904, the TUI Agent receives the request for the TUI resource data. Then, open the encrypted TUI resource data stored in the untrusted memory of the REE and load it into the shared memory. Here, the TUI Agent can also download encrypted TUI resource data from the network to the shared memory. Step 905, the TUI program copies the encrypted TUI resource data in the shared memory to the protected memory of the TEE, and uses the pre-stored TUI resource key to decrypt the encrypted TUI resource data and decrypt the TUI after decryption. Resources are stored in TEE's protected memory. (Step 906) The TUI program reads the decrypted TUI resource data from the protected memory of the TEE, uses the TUI resource data to generate a TUI containing the payment two-dimensional barcode of the merchant, and displays the TUI. As shown in FIG. 10, an example diagram of displaying the TUI for a two-dimensional barcode payment device. In actual application, after the buyer scans the code through the mobile phone and completes the payment, the merchant can press the escape button to exit the TUI, or after the buyer scans the code and completes, the transaction server uses the network to pay for the two-dimensional barcode application on the terminal device The program issues transaction success information, and the 2D barcode payment application calls the TUI Agent to initiate the TUI exit process. Actively initiate a TUI close command to TOS. As shown in FIG. 11, in this example, the TUI exit process may include: Step 1101, the merchant presses the escape key on the two-dimensional barcode payment device, the TUI Agent sends a shutdown command to the TOS, or the two-dimensional barcode payment device passes the network. After receiving the transaction status information from the transaction server indicating that the transaction was successful, TUI Agent directly sends a close command to TOS. In step 1102, after receiving the shutdown command, the TOS clears the currently used TUI resource data to release the memory occupied by the TUI resource data and closes the TUI program. Step 1103, the TUI Agent loads the data into the shared memory. The TUI resource data is cleared to release the space occupied by the TUI resource data in the shared memory; Step 1104, the TUI Agent continuously monitors user operations (such as pressing keys) to start the TUI program when triggered until the two-dimensional barcode payment device Power off. It should be noted that the above FIG. 8 to FIG. 11 are merely examples and are not used to limit the present invention. In other application scenarios, it can also be implemented in other ways.普通 Those of ordinary skill in the art can understand that all or part of the steps in the above method can be completed by a program instructing related hardware, and the program can be stored in a computer-readable storage medium, such as a read-only memory, a magnetic disk, or an optical disc. Optionally, all or part of the steps in the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module / unit in the above embodiments may be implemented in the form of hardware, or may be implemented in the form of software functional modules. The invention is not limited to any specific form of combination of hardware and software. Of course, the present invention may have various other embodiments. Without departing from the spirit and essence of the present invention, those skilled in the art can make various corresponding changes and modifications according to the present invention, but these corresponding changes and All the deformations should belong to the protection scope of the patent application scope of the present invention.

201-202‧‧‧step

501-505‧‧‧step

61‧‧‧Storage Module

62‧‧‧Provide modules

63‧‧‧TUI Module

64‧‧‧ Generate Module

71‧‧‧ Display

72‧‧‧Memory

73‧‧‧ processor

901-906‧‧‧step

1101-1104 ‧‧‧ steps

FIG. 1 is a schematic diagram of a related system architecture; FIG. 2 is a schematic flowchart of a TUI resource data application method in the first embodiment; FIG. 3 is an example of a system structure applicable to the TUI resource data application method in the first embodiment; FIG. 4 is Another example of a system structure applicable to the method for applying a TUI resource material in the first embodiment; FIG. 5 is an exemplary flowchart of a method for applying the TUI resource material in the embodiment; ； FIG. 6 is a structure of the TUI resource material application device in the second embodiment. Schematic diagram; FIG. 7 is a schematic structural diagram of a TUI resource data application device in Embodiment 3; FIG. 8 is a schematic diagram of an application environment and an internal system architecture of a two-dimensional barcode payment device in Example 1; FIG. Schematic diagram of TUI displaying two-dimensional bar code; FIG. 10 is a diagram of a TUI display example of a two-dimensional bar code payment device in Example 1. FIG. 11 is a schematic diagram of a process of exiting TUI of a two-dimensional bar code payment device in Example 1.

Claims (19)

A method for applying trusted user interface resource data includes: (i) triggering the activation of a trusted user interface on an untrusted user interface, obtaining encrypted trusted user interface resource data from a rich execution environment, and providing it to the trusted execution environment; Decrypt the encrypted trusted user interface resource data in a trusted execution environment, and display the trusted user interface based on the decrypted trusted user interface resource data. The application method according to claim 1, wherein the method further comprises: before obtaining the encrypted trusted user interface resource data from the rich execution environment and providing it to the trusted execution environment, generating the encrypted trusted user interface resource data; The trusted user interface resource data generating the encryption includes one of the following: generating a trusted user interface resource data packet, using a secure hash algorithm and an asymmetric encryption algorithm to generate a digital signature of the trusted user interface resource data packet Chapter, attach the digital signature to the trusted user interface resource package to obtain the encrypted trusted user interface resource information; use the advanced encryption standard AES encryption algorithm to directly encrypt the trusted user interface resource data To generate the encrypted trusted user interface resource data. The application method according to claim 1, wherein the decrypting the encrypted trusted user interface resource data in a trusted execution environment comprises: using a preset trusted user interface resource key to encrypt the encrypted trusted user interface resource data. User interface resource data is decrypted. The application method according to claim 3, wherein the decrypting the encrypted trusted user interface resource data in a trusted execution environment includes one of the following: using the public key to the encrypted trusted user interface resource data The digital signature of the user is used to verify the signature; Use the AES decryption algorithm to decrypt the encrypted trusted user interface resource data. The application method according to claim 1, further comprising: 之前 storing the encrypted trusted user interface resource data before obtaining the encrypted trusted user interface resource data from the rich execution environment and providing the encrypted trusted user interface resource data In this rich execution environment. The application method according to claim 5, wherein storing the encrypted trusted user interface resource data in a rich execution environment includes: storing the encrypted trusted user interface resource data in an untrusted rich execution environment storage space. The application method according to any one of claims 1 to 6, wherein the triggering of the trusted user interface on the untrusted user interface is to obtain encrypted trusted user interface resource data from the rich execution environment and provide it to The trusted execution environment includes: 时 When a user operation on an untrusted user interface triggers the startup of the trusted user interface, the encrypted trusted user interface resource data is loaded in the rich execution environment and sent to the shared memory; Copy the encrypted trusted user interface resource data from the shared memory to the protected memory of the trusted execution environment in the trusted execution environment. The application method according to claim 7, wherein the obtaining the encrypted trusted user interface resource data from the rich execution environment and providing it to the trusted execution environment includes: 发送 sending a trusted user interface program to the rich execution environment for trusted Request for user interface resource data, based on the request, load the encrypted trusted user interface resource data in the rich execution environment and send it to the shared memory; the encrypted trusted user interface resource data through the trusted user interface program Protected memory copied from this shared memory to a trusted execution environment. The application method according to claim 8, wherein: the request for trusted user interface resource information carries a trusted user interface identifier; in a rich execution environment, based on the trusted user interface identifier carried in the request, load The corresponding encrypted trusted user interface resource data is sent to the shared memory. The application method according to claim 7, wherein the method further comprises: 清除 clearing the protected memory of the trusted execution environment during the process of exiting the trusted user interface program or after exiting the trusted user interface program Resource information for this trusted user interface. The application method according to claim 7, wherein the method further comprises: clearing the encrypted trusted user interface resource data in the shared memory after the trusted user interface program exits. The application method according to claim 1, wherein the displaying the trusted user interface based on the decrypted trusted user interface resource data comprises: 显示 displaying a graphical trusted user based on the decrypted trusted user interface resource data. interface. An application device for trusted user interface resource data, comprising: (1) providing a module for triggering the startup of a trusted user interface on an untrusted user interface, and obtaining encrypted trusted user interface resources from a rich execution environment; The data is provided to the trusted execution environment; The trusted user interface module is used to decrypt the encrypted trusted user interface resource data in the trusted execution environment, and display the data based on the decrypted trusted user interface resource data. Trust the user interface. The application device according to claim 13, further comprising: a generating module for generating the encrypted trusted user interface resource data by one of the following: generating a trusted user interface resource data packet, using a secure hash algorithm And asymmetric encryption algorithm to generate a digital signature of the trusted user interface resource data package, and append the digital signature to the trusted user interface resource data package to obtain the encrypted trusted user interface resource data; The advanced encryption standard AES encryption algorithm directly encrypts the trusted user interface resource data to generate the encrypted trusted user interface resource data. The application device according to claim 13, wherein: the providing module is configured to load the encrypted trusted interface in a rich execution environment when a user operation on the untrusted user interface triggers the startup of the trusted user interface. The user interface resource data is sent to the shared memory. The trusted user interface module is used to copy the encrypted trusted user interface resource data from the shared memory to the protected memory of the trusted execution environment. The application device according to claim 13, further comprising: a storage module provided in the rich execution environment for storing the encrypted trusted user interface resource data. An application device for trusted user interface resource data, comprising: a display; 记忆 a memory storing a computer program; a processor configured to read the computer program to execute any one of claims 1 to 12 Operation of the application method of trusted user interface resource information. A computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, an application method for requesting any one of the trusted user interface resource data of claim 1 to 12 is performed A step of. A data processing method includes: 获取 obtaining encrypted resource data from a rich execution environment and providing it to a trusted execution environment; 解密 decrypting the encrypted resource data in a trusted execution environment; 处理 processing the decrypted resource data.