TWI791050B - Data transmission method and system - Google Patents

Abstract

The present application provides a data transmission method and system, wherein a method includes: performing two-way authentication with the TAM security application of the trusted execution environment in the terminal device, negotiating a session key after the two-way authentication is passed; using the session key Encrypting the data to be sent to the security application; sending the encrypted data and the application identification of the security application to the TAM security application of the terminal device. The process of the TAM server sending encrypted data to the TAM security application is equivalent to transmitting data in a secure channel. This protects the data by preventing it from being exposed to untrusted environments.

Description

Data transmission method and system

The invention relates to the technical field of communication, in particular to a data transmission method and system.

The terminal device includes a trusted execution environment (Trusted Execution Environment, TEE) and a rich execution environment (Rich Execution Environment, REE). The rich execution environment is also called an untrusted execution environment.

Usually, in the process of installing an application on a terminal device, a client of the application (that is, a business client) is installed in a rich execution environment, and a secure end of the application (a business security application) is installed in a trusted execution environment. Business clients are used to perform user operations, and business security applications are used to protect sensitive resources such as payment, fingerprints, and digital copyrights.

In actual business, the server corresponding to the application (hereinafter referred to as the application server) needs to send sensitive resources to the business security application in the trusted execution environment TEE of the terminal device; for example, the application server needs to update the digital certificate in the business security application , the application server sends the payment QR code to the business security application, etc.

Currently, the process by which application servers send sensitive resources to business security applications The procedure can be as follows: the application server can establish a secure channel with the business client in the non-trusted execution environment in the terminal device, and then send encrypted sensitive resources to the business client through the secure channel. The business client decrypts the encrypted sensitive resource to obtain the sensitive resource, and transmits the sensitive resource to the business security application of the trusted execution environment.

However, the business client in the terminal device is in an open non-trusted execution environment. After the business client obtains the decrypted sensitive resource, the sensitive resource will be exposed in the non-trusted execution environment, so there is a sensitive resource risk of leakage.

In view of this, the present application provides a data transmission method and system, which can directly provide an end-to-end secure channel, that is, establish a secure channel between an application server and a business security application, thereby preventing leakage of sensitive resources.

In order to achieve the above object, the present application provides the following technical features: a data transmission system, including: an application server, used to send the application identification of the security application and the data to be sent to the security application to the TAM server; the TAM server The device is used to perform two-way authentication with the TAM security application of the trusted execution environment, and negotiate a session key after the two-way authentication is successful; receive the application identification and the data sent by the application server, and use the session key Perform an encryption operation on the data, and send the encrypted data and the application identification to the terminal device; the terminal device is used to control the TAM security application in the trusted execution environment Perform two-way authentication with the TAM server, and negotiate a session key after the two-way authentication is successful; the TAM client in the non-trusted execution environment receives the encrypted data and the application identifier sent by the TAM server , and transmit the encrypted data and the application ID to the TAM security application; the TAM security application uses the session key to decrypt the encrypted data to obtain the data, and sends the data to the application ID corresponding to the security application.

Optionally, the two-way authentication between the TAM security application in the trusted execution environment and the TAM server specifically includes: the TAM server sends an identity authentication request to the TAM security application via the TAM client, The TAM security application generates an identity authentication credential, the TAM security application sends the identity authentication credential to the TAM server via the TAM client, and the TAM server pairs the identity authentication request with the identity authentication credential The TAM security application performs identity authentication; the TAM security application sends an identity authentication request to the TAM server through the TAM client, and the TAM server generates an identity authentication certificate, and the TAM server passes the TAM The client sends the identity authentication credential to the TAM security application, and the TAM security application performs identity authentication on the TAM server based on the identity authentication request and the identity authentication credential; the TAM server and the TAM security After the two-way authentication is applied successfully, a session key is determined based on the identity authentication request and the identity authentication credential.

Optionally, the terminal device executes the process of sending the data to the security application corresponding to the application identifier, which specifically includes: the TAM security application calls an internal API of a trusted execution environment; through the internal application The program interface sends the data to the security application corresponding to the application identifier.

A data transmission method, comprising: conducting mutual authentication with a TAM security application in a trusted execution environment in a terminal device, and negotiating a session key after the two-way authentication is passed; using the session key to encrypt data to be sent to the security application ; Send the encrypted data and the application identification of the security application to the TAM security application of the terminal device.

Optionally, performing two-way authentication with the TAM security application in the trusted execution environment in the terminal device, and negotiating a session key after the two-way authentication passes includes: sending an identity authentication request to the TAM client in the non-trusted execution environment in the terminal device end, and the TAM client transmits the identity authentication request to the TAM security application, obtains the identity authentication credential sent by the TAM security application, and performs identity authentication on the TAM security application; receives the TAM security Apply the identity authentication request sent by the TAM client to generate an identity authentication credential, send the identity authentication credential to the TAM security application through the TAM client, for the TAM security application to perform identity authentication on the TAM server ; After the TAM server successfully authenticates the TAM security application pair, it determines a session key based on the identity authentication request and the identity authentication certificate.

Optionally, the sending the encrypted data and the application identification of the security application to the TAM security application of the terminal device includes: sending the encrypted data and the application identification to the TAM client, and The TAM client sends the encrypted data and the application identifier to the TAM security application.

A data transmission method, comprising: a TAM security application in a trusted execution environment performs mutual authentication with a TAM server, and negotiates a session key after the mutual authentication is passed; a TAM client in a non-trusted execution environment receives the TAM server Send the encrypted data and application ID, and transmit the encrypted data and the application ID to the TAM security application; the TAM security application uses the session key to decrypt the encrypted data to obtain data , and send the data to the security application corresponding to the application identifier.

Optionally, the TAM security application in the trusted execution environment performs two-way authentication with the TAM server, and negotiates a session key after the two-way authentication passes, including: the TAM security application receives the TAM server via the TAM client The identity authentication request sent by the server generates an identity authentication credential, and the TAM client sends the identity authentication credential to the TAM server for the TAM server to perform identity authentication on the TAM security application; the TAM The security application sends an authentication request via the TAM client Request to the TAM server, and obtain the identity authentication certificate sent by the TAM server, and perform identity authentication on the TAM server; after the TAM security application successfully authenticates the TAM server, based on the identity The authentication request and the authentication credentials determine a session key.

Optionally, the transmitting the encrypted data and the application identification to the TAM security application includes: the TAM client invokes an application program interface of a trusted execution environment; The encrypted data and the application are identified to the TAM security application.

Optionally, the transmitting the encrypted data and the application identification to the TAM security application includes: the TAM security application calls an internal API of a trusted execution environment; sends the The information is sent to the security application corresponding to the application identifier.

A data transmission system, comprising: an application server, configured to conduct mutual authentication with a business security application in a trusted execution environment, and negotiate a session key after the mutual authentication is successful; use the session key to encrypt data, Send the encrypted data to the terminal device; the terminal device is used to control the business security application in the trusted execution environment to perform two-way authentication with the application server, and negotiate a session key after the two-way authentication is successful; non-trusted execution The business client of the environment receives the encrypted data sent by the application server, and transmits the encrypted data The data is sent to the business security application; the business security application uses the session key to decrypt the encrypted data to obtain the data.

A data transmission method, comprising: performing two-way authentication with a business security application in a trusted execution environment in a terminal device, negotiating a session key after passing the two-way authentication; using the session key to encrypt data to be sent to the business security application Operation; send encrypted data to the business security application of the terminal device.

A data transmission method, comprising: a business security application in a trusted execution environment performs mutual authentication with an application server, and negotiates a session key after the two-way authentication passes; a business client in a non-trusted execution environment receives the encrypted data, and transmit the encrypted data to the business security application; the security application uses the session key to decrypt the encrypted data to obtain data.

Through the above technical means, the following beneficial effects can be achieved:

This application directly performs two-way authentication and negotiates a session key between the TAM server and the TAM security application in the trusted execution environment, which is equivalent to establishing a secure channel between the TAM server and the TAM security application. The TAM server sends the encrypted data to the TAM security application through the secure channel, and then the TAM security application transmits it to the business security application.

The process of the TAM server sending encrypted data to the TAM security application is equivalent to transmitting data in a secure channel. so that when the data is a sensitive resource In the case of , it can prevent sensitive resources from being exposed in untrusted environments, thereby protecting sensitive resources.

100: Application server

200: terminal equipment

300:TAM server

S201: step

S202: step

S203: step

S401: step

S402: step

S403: step

S404: step

S405: step

In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the drawings that need to be used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings in the following description are only the present invention. For some embodiments of the application, those skilled in the art can also obtain other drawings based on these drawings without making progressive efforts.

Figure 1 is a schematic structural diagram of a data transmission system disclosed in the embodiment of the application; Figure 2 is a flow chart of a data transmission method disclosed in the embodiment of the application; Figure 3 is a flow chart of another data transmission method disclosed in the embodiment of the application Figure; Figure 4a is a schematic structural diagram of a data transmission system disclosed in the embodiment of the application; Figure 4b is a flow chart of a data transmission method disclosed in the embodiment of the application; Figure 5 is another data transmission method disclosed in the embodiment of the application flow chart.

The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making progressive efforts belong to the scope of protection of this application.

Explanation of terms:

Sensitive resources: resources that require security protection, such as keys, digital certificates, and important materials.

TEE: The English full name is Trusted Execution Environment, and the Chinese full name is Trusted Execution Environment. TEE has an independent operating system for storing, processing and protecting sensitive resources.

REE: The English full name is Rich Execution Environment, and the Chinese full name is Rich Execution Environment. Because of its openness, it is also called untrusted execution environment. The untrusted execution environment has stronger processing capability but weaker security.

TAM: The English full name is Trusted Application Manager, and the Chinese full name is Trusted Application Management System. The trusted application management system is used to manage secure applications inside the TEE.

TA: The English full name is Trusted Application, the Chinese full name is Security Application, and the application running inside TEE is called Security Application.

In order to facilitate understanding and description, this specification uses sensitive resources as an example of information for detailed description. It can be understood that, in other application scenarios, the data may be in other implementation forms, and this application does not limit the specific content and form of the data.

For the convenience of those skilled in the art to understand, this application provides Embodiment 1 of a data transmission system. Referring to FIG. 1 , it includes: an application server 100 and a terminal device 200 . The untrusted execution environment of the terminal device includes a business client, and the trusted execution environment of the terminal device includes a business security application.

According to an embodiment of the present application, Embodiment 1 of a data transmission method is provided. See Figure 2, including the following steps:

Step S201: The application server 100 conducts two-way authentication with the business security application of the TEE, and negotiates a session key after successful authentication.

The application server sends an identity authentication request to the business security application through the business client, the business security application generates an identity authentication credential, and the business security application sends the identity authentication credential application to the server through the business client. The application server performs identity authentication on the business security application based on the identity authentication request and the identity authentication certificate. After the application server successfully authenticates the business security application, it determines the session key based on the identity authentication request and the identity authentication certificate.

At the same time, the business security application sends an identity authentication request to the application server through the business client, the application server generates an identity authentication credential, and the application server sends the identity authentication credential to the business security application through the business client. The business security application performs identity authentication on the application server based on the identity authentication request and the identity authentication certificate. After the business security application successfully authenticates the application server, it determines the session key based on the identity authentication request and the identity authentication certificate.

Referring to Figure 3, this step is illustrated by taking the "Alipay" application as an example: the "Alipay" application server performs two-way authentication with the "Alipay" security application through the "Alipay" client, and negotiates a session key after the authentication is successful .

The specific process of the two-way authentication and the specific process of negotiating the session key are mature technologies, and will not be repeated here.

This application directly performs two-way authentication and negotiates a session key between the application server and the business security application in the trusted execution environment, which is equivalent to establishing a safe channel between the application server and the business security application. Subsequently, the application server 100 and the business security application may use a secure channel to exchange sensitive resources.

Step S202: The application server 100 encrypts the sensitive resource with the session key, sends the encrypted sensitive resource to the business client, and the business client transmits the encrypted sensitive resource to the business security application.

The application server 100 uses the session key to encrypt the sensitive resource to obtain the encrypted sensitive resource. Then, since the external device cannot directly interact with the business security application, the application server 100 sends the encrypted sensitive resource to the business client.

The business client will call the application programming interface TEE Client API of the trusted execution environment, and transmit encrypted sensitive resources to the business security application.

Referring to Figure 3, continue to take the "Alipay" application as an example to illustrate this step: the "Alipay" application server 100 encrypts the sensitive resources with the session key, and sends the encrypted sensitive resources to the "Alipay" client, "Alipay "The client transmits encrypted sensitive resources to the "Alipay" security application.

Since encrypted sensitive resources are transmitted during the transmission process between the application server and the business security application, it is equivalent to transmitting sensitive resources in a secure channel. Therefore, this application does not expose sensitive resources to untrusted environments problem, so sensitive resources can be protected.

Step S203: The business security application uses the session key to decrypt the encrypted sensitive resource.

The business security application can use the session key negotiated in step S101 to decrypt the encrypted sensitive resource, so as to obtain and use the sensitive resource.

Continue to use the "Alipay" application as an example to illustrate this step: the "Alipay" security application uses the session key to decrypt the encrypted sensitive resources, thereby obtaining and using the sensitive resources.

Through the above technical means, the following beneficial effects can be achieved:

This application directly performs two-way authentication and negotiates a session key between the application server and the business security application in the trusted execution environment, which is equivalent to establishing a safe channel between the application server and the business security application.

The process of sending encrypted sensitive resources from the application server to the business security application is equivalent to transmitting sensitive resources through a secure channel. This protects sensitive resources by preventing them from being exposed to untrusted environments.

It can be understood that a terminal device contains many applications. For each application: the application server corresponding to the application and the security application corresponding to the application can adopt the scheme shown in FIG. 2 , so as to achieve the purpose of the application server sending sensitive resources to the security application.

It can be understood that, when the terminal device includes many applications, the application server and the service security application of each application need to perform two-way authentication and negotiate a session key. For the terminal device, more resources are needed in the process of two-way authentication and session key negotiation.

In order to make it easier and more convenient for the application server to send sensitive resources to For the solution of business security application, according to another embodiment of the present application, Embodiment 2 of a data transmission system is provided. Referring to FIG. 4 a , it includes: a plurality of application servers 100 , a TAM server 300 and a terminal device 200 .

In this embodiment, a TAM server 300 is added between the application server 100 and the terminal device 200, and a TAM client that works in conjunction with the TAM server is installed in the non-trusted execution environment of the terminal device, and installed in the trusted execution environment with the TAM client. A TAM security application that cooperates with TAM clients.

In this embodiment, the application server, business client, and business security application corresponding to each application do not need to perform the cumbersome process of two-way authentication and key negotiation, and each application server only needs to send sensitive resources and application identifiers to the TAM server. device.

The TAM server, the TAM client and the TAM security application work together, and the two-way authentication between the TAM server and the TAM security application and the process of negotiating a symmetric key replace the two-way communication between each application server and each business security application in Embodiment 1. The process of authenticating and negotiating a symmetric key.

In this embodiment, multiple application servers can manage sensitive resources through the second embodiment of the data transmission system, and there is no need to separately maintain the first embodiment of the data transmission system for each application server, thereby reducing the workload of application development and maintenance .

According to another embodiment provided in this application, Embodiment 2 of a data transmission method is provided. Since the execution process of each application server is consistent, an application server is taken as an example to describe the execution process of the second embodiment of the data transmission system.

See Figure 4b, including the following steps:

Step S401 : the application server 100 sends the application identification and sensitive resources of the business security application to the TAM server 300 .

Referring to FIG. 5 , taking the “Alipay” application as an example, the application server 100 corresponding to the “Alipay” application sends the application identification of “Alipay” and the sensitive resources that need to be sent to the security application of “Alipay” to the TAM server 300 .

Step S402: The TAM server 300 performs two-way authentication with the TAM security application of the Trusted Execution Environment, and negotiates a session key after the two-way authentication succeeds.

5a, the TAM server sends an identity authentication request to the TAM security application via the TAM client, the TAM security application generates an identity authentication certificate, and the TAM security application sends the identity authentication certificate to the TAM server via the TAM client. The TAM server performs identity authentication on the TAM security application based on the identity authentication request and the identity authentication certificate. After the TAM server successfully authenticates the TAM security application, it determines the session key based on the identity authentication request and the identity authentication certificate.

Referring to FIG. 5a, the TAM security application sends an identity authentication request to the TAM server through the TAM client, the TAM server generates an identity authentication certificate, and the TAM server sends the identity authentication certificate to the TAM security application through the TAM client. The TAM security application performs identity authentication on the TAM server based on the identity authentication request and the identity authentication certificate; after the TAM security application successfully authenticates the TAM server, it determines the session key based on the identity authentication request and the identity authentication certificate.

The specific process of the two-way authentication and the specific process of negotiating the session key are mature technologies, and will not be repeated here.

Step S403: TAM server 300 receives the application server sent The application identification and the sensitive resource, use the session key to encrypt the sensitive resource, and send the encrypted sensitive resource and the application identification to the TAM client of the non-trusted execution environment in the terminal device.

Step S404: The TAM client of the non-trusted execution environment receives the encrypted sensitive resource and the application identifier sent by the TAM server, and transmits the encrypted sensitive resource and the application identifier to the TAM security application.

The TAM client will call the application program interface TEE Client API of the trusted execution environment, and transmit encrypted sensitive resources to the TAM security application.

Since encrypted sensitive resources are transmitted during the transmission process between the TAM server and the TAM security application, it is equivalent to transmitting sensitive resources in a secure channel. Therefore, this application does not have the problem of sensitive resources being exposed in an untrusted environment, so sensitive resources can be protected.

Step S405: The TAM security application uses the session key to decrypt the encrypted sensitive resource to obtain a sensitive resource, and sends the sensitive resource to the security application corresponding to the application identifier.

After the TAM security application decrypts the encrypted sensitive resource and obtains the sensitive resource, it transfers the sensitive resource to the security application corresponding to the application identifier by calling the internal application programming interface (TEE Internal API) of the trusted execution environment.

Referring to Figure 5, continue to take the "Alipay" application as an example to illustrate this step: the TAM security application sends encrypted sensitive resources to the "Alipay" security application corresponding to the "Alipay" application identifier through the TEE Internal API.

Through the above technical means, the following beneficial effects can be achieved:

This application directly performs two-way authentication and negotiates a session key between the TAM server and the TAM security application in the trusted execution environment, which is equivalent to establishing a secure channel between the TAM server and the TAM security application. The TAM server sends encrypted sensitive data to the TAM security application through a secure channel, and then the TAM security application transmits it to the business security application.

The process of the TAM server sending encrypted sensitive resources to the TAM security application is equivalent to transmitting sensitive resources in a secure channel. This protects sensitive resources by preventing them from being exposed to untrusted environments.

Moreover, multiple application servers in this embodiment can manage sensitive resources through the second embodiment of the data transmission system, and there is no need to separately maintain the first embodiment of the data transmission system for each application server, thereby reducing the cost of application development and maintenance. workload.

If the functions described in the method of this embodiment are realized in the form of software function units and sold or used as independent products, they can be stored in a computing device-readable storage medium. Based on this understanding, the part of the embodiment of the present application that contributes to the prior art or the part of the technical solution can be displayed in the form of a software product, the software product is stored in a storage medium, and includes several instructions to make a A computing device (which may be a personal computer, a server, a mobile computing device or a network device, etc.) executes all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: USB flash drives, mobile hard drives, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disks or optical discs, etc. can store A medium for program code.

Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same or similar parts of each embodiment can be referred to each other.

The above description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the application. Therefore, the present application will not be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (3)

A data transmission system, characterized in that it includes: an application server, configured to send an application identifier of a secure application and data to be sent to the secure application to a TAM server; a TAM server, configured to communicate with a trusted execution environment The TAM security application of the TAM performs two-way authentication, and negotiates a session key after the two-way authentication is successful; receives the application identification and the data sent by the application server, uses the session key to encrypt the data, and sends The encrypted data and the application identification are sent to the terminal device; the terminal device is used to control the TAM security application in the trusted execution environment to perform two-way authentication with the TAM server, and negotiate a session key after the two-way authentication is successful; The TAM client of the non-trusted execution environment receives the encrypted data and the application identification sent by the TAM server, and transmits the encrypted data and the application identification to the TAM security application; The TAM security application uses the session key to decrypt the encrypted data to obtain data, and sends the data to the security application corresponding to the application identifier. The system according to claim 1, wherein the two-way authentication between the TAM security application in the trusted execution environment and the TAM server includes: the TAM server sends an identity authentication request via the TAM client To the TAM security application, the TAM security application generates an identity authentication credential The TAM security application sends the identity authentication certificate to the TAM server through the TAM client, and the TAM server performs identity authentication on the TAM security application based on the identity authentication request and the identity authentication certificate ; The TAM security application sends an identity authentication request to the TAM server through the TAM client, the TAM server generates an identity authentication certificate, and the TAM server sends the identity authentication certificate to the TAM client through the TAM client The TAM security application, the TAM security application performs identity authentication on the TAM server based on the identity authentication request and the identity authentication certificate; after the two-way authentication between the TAM server and the TAM security application succeeds, based on the A session key is determined based on the identity authentication request and the identity authentication credential. The system according to claim 1, wherein the terminal device executes the process of sending the data to the security application corresponding to the application identifier, which specifically includes: the TAM security application calls an internal application program of a trusted execution environment interface; sending the data to the security application corresponding to the application identifier through the internal API.

Images