WO2016183870A1

WO2016183870A1 - Security attribute switching method, security attribute switching apparatus and terminal

Info

Publication number: WO2016183870A1
Application number: PCT/CN2015/080398
Authority: WO
Inventors: 徐玮; 叶瑞权
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-05-20
Filing date: 2015-05-29
Publication date: 2016-11-24
Also published as: CN105631364A

Abstract

Provided are a security attribute switching method, a security attribute switching apparatus and a terminal. The security attribute switching method comprises: sending a pulse from a Trust Zone system or an operating system of the terminal to a security attribute switcher of the terminal, wherein an output end of the security attribute switcher is connected to an input end of a bus bridge apparatus of the terminal; and controlling the security attribute switcher to change an input signal to the bus bridge apparatus according to the pulse so as to change the security attribute of a peripheral device connected to the terminal. By means of the technical solution of the present invention, a peripheral slot on the bus is saved, the drawback of lack of security brought about by using application layer software to control a critical device is avoided, and the security of the terminal is greatly improved.

Description

Security attribute switching method, security attribute switching device and terminal

This application claims priority to Chinese Patent Application No. 201510259961.9, entitled "Safety Attribute Switching Method, Security Attribute Switching Device and Terminal", which is filed on May 20, 2015, the entire contents of which are incorporated by reference. In this application.

Technical field

The present invention relates to the field of terminal technologies, and in particular, to a security attribute switching method, a security attribute switching device, and a terminal.

Background technique

Existing terminals can be designed to have a TrustZone (secure domain) system and operating system. The TrustZone peripheral bus is equipped with a fixed peripheral device TZPC (TrustZone Protection Controller) to control other peripheral devices. Security attributes, while TZPC's own security attributes are permanently set to "secure", TZPC can be controlled by the application in the security domain to change the output to the AXI-to-APB bridge (Advanced eXtensible Interface to Advanced Peripheral Bus bridge, The bus bridges the signal, thereby changing the security attributes of a particular peripheral device. Among them, AXI-to-APB bridge is a bridge from advanced scalable interface to advanced peripheral bus, which is the bridge connecting system bus and peripheral bus.

However, the key devices on the bus for controlling security attributes are controlled by the application layer software, which has great security risks. Once the terminal has Trojans or malicious programs, the security and reliability of the application are worrying. At the same time, the TZPC needs to occupy one peripheral slot of the bus, which makes the peripheral slots on the bus itself less scarce.

Therefore, a new technical solution is needed to increase the security and reliability of the security attribute switching while saving the peripheral slots on the bus.

Summary of the invention

The invention is based on the above problems, and proposes a new technical solution, which can increase the security and reliability of the security attribute switching while saving the peripheral slots on the bus.

In view of this, an aspect of the present invention provides a security attribute switching method for a terminal having a TrustZone system and an operating system, including: from the TrustZone system of the terminal or the operating system to the terminal a safety attribute switcher transmitting a pulse, wherein an output of the safety attribute switcher is connected to an input of a bus bridge device of the terminal; controlling the safety attribute switcher to change the bus bridge device according to the pulse The input signal is used to change the security attributes of the peripheral device connected to the terminal while switching the system.

TrustZone technology is a new architecture in the AMR core that provides the terminal with a security system that is isolated from the normal operating system. It is promoted by ARM and can be tightly integrated with the Cortex ^TM -A processor.

The AXI bus and the specific TrustZone system IP block are expanded in the system. With hardware isolation, applications in the general operating system cannot access the contents of the security system, and can protect peripheral devices such as secure memory, encryption blocks, keyboards, and screens to ensure they are protected from software attacks, thereby improving terminal security. . For example, when performing a payment operation, the ordinary operating system can be switched to the security system for payment password input to ensure the security of the payment password.

In this technical solution, the existing technical solution of using TZPC as a peripheral device to switch the security attributes of other peripheral devices during system switching is abandoned, and a security attribute is connected to the input of the terminal bus bridge device. SNS (Secure Non-secure Switch), when a security attribute switch is required, directly sends a pulse to the security attribute switcher to change the level of the output of the security attribute switcher, thereby changing the bus bridge device. The input signal, which in turn changes the security properties of the peripheral devices connected to the bus, to match the changed system. For example, when performing a payment operation, a normal operating system can issue a system switching command, send a pulse to the security attribute switcher, change the level of its output, and then change the KMI (Keyboard and Mouse Interface) on the bus. The input signal of the port), the security attribute of the peripheral device keyboard that will be used to enter the password is changed from unsafe to secure. The technical solution saves the peripheral slots on the bus, and avoids the use of the application layer software to control the insecure drawbacks caused by the key devices, thereby greatly improving the security of the terminal. The peripheral devices include but are not limited to KMI, touch screen port, RTC (Real-Time Clock), Timers, DAC (Digital to Analog Converter), and the like.

In the above technical solution, preferably, the terminal is connected to one or more of the peripheral devices, and each of the peripheral devices is connected to the terminal through a corresponding port on a bus of the terminal.

In the technical solution, a plurality of peripheral ports are disposed on the peripheral bus, and each peripheral port corresponds to a certain type of peripheral device. When the security attribute of the peripheral device needs to be changed, the change command may be used to determine the need. Change the target peripheral device of the security attribute to send the changed input signal to the corresponding port.

In the above technical solution, preferably, before the controlling the security attribute switcher to change an input signal to the bus bridge device according to the pulse, further comprising: one or more of the A target peripheral device that needs to switch the security attribute is determined in the peripheral device.

In this technical solution, each peripheral port on the peripheral bus corresponds to a certain type of peripheral device, and when it is required to change the security attribute of the peripheral device, the target peripheral that needs to change the security attribute can be determined according to the change command. The device transmits the changed input signal to the corresponding port. Through this technical solution, the security attributes can be changed only for the used peripheral devices according to the actual needs of the user, which not only increases the security of the security attribute change, but also saves energy consumption, avoids the performance degradation of the terminal, and does not useless work.

In the above technical solution, preferably, the controlling the security attribute switcher to change an input signal to the bus bridge device according to the pulse comprises: changing an output of the security attribute switch according to the pulse Level of the terminal; changing the input signal of the port corresponding to the output terminal corresponding to the target peripheral device according to the changed level of the output terminal, for modifying the target peripheral device The security attributes of the device.

In this technical solution, the safety attribute switcher works like a pulse JK flip-flop. When the input terminal is kept low, the potential of the output terminal remains unchanged. When the input terminal obtains a pulse signal, the potential of the output terminal changes from low to low. It goes high or goes from high to low, further changing its input signal to the bus bridge. For example, when the system is running on a normal operating system, the security attribute of KMI is "non-secure", and the signal of DECPROT[0] is "1", where DECPROT[0] is an input of AXI-to-APB Bridge. port. When the normal operating system wants to switch to the security domain, the normal operating system will give the security attribute switcher a pulse signal. Immediately after the security attribute switcher, the signal of DECPROT[0] is reduced to "0". At this time, the security attribute of KMI will be switched from "non-secure" to "safe" and can be used in the security domain.

In the above technical solution, preferably, the security attribute of the peripheral device includes security or non-security.

In the technical solution, the security attributes of the peripheral device are classified into two types: security and non-security, which can be changed according to changes of the operating system. With the technical solution, the peripheral device can be changed by the security attribute switcher while switching the system. The security attribute saves the peripheral slots on the bus, avoids the use of the application layer software to control the insecure drawbacks caused by the key devices, and greatly improves the security of the terminal.

Another aspect of the present invention provides a security attribute switching apparatus for a terminal having a TrustZone system and an operating system, including: a bus including a system bus and a peripheral bus, the system bus and the peripheral The bus is connected by a bus bridge device; an output of the security attribute switch is connected to an input of the bus bridge device for receiving a pulse from the TrustZone system or the operating system, and The pulse changes an input signal to the bus bridge device for modifying a security attribute of a peripheral device connected to the bus.

In this technical solution, the existing technical solution of using TZPC as a peripheral device to switch the security attributes of other peripheral devices during system switching is abandoned, and a security attribute is connected to the input of the terminal bus bridge device. SNS (Secure Non-secure Switch), when performing system switching, directly sends a pulse to the security attribute switcher to change the level of the output of the security attribute switcher, thereby changing the input to the bus bridge device. The incoming signal changes the security attributes of the peripheral devices connected to the bus to match the changed system. For example, when performing a payment operation, a normal operating system can issue a system switching command, send a pulse to the security attribute switcher, change the level of its output, and then change the KMI (Keyboard and Mouse Interface) on the bus. The input signal of the port), the security attribute of the peripheral device keyboard that will be used to enter the password is changed from unsafe to secure. The technical solution saves the peripheral slots on the bus, and avoids the use of the application layer software to control the insecure drawbacks caused by the key devices, thereby greatly improving the security of the terminal. The peripheral devices include but are not limited to KMI, touch screen port, RTC (Real-Time Clock), Timers, DAC (Digital to Analog Converter), and the like.

In the above technical solution, preferably, the peripheral bus is provided with a plurality of ports for the peripheral device to connect to the terminal through the corresponding port.

In the above technical solution, preferably, the security attribute switcher includes: a determining unit that determines, in one or more of the peripheral devices connected to the terminal, a target peripheral device that needs to switch the security attribute.

In the above technical solution, preferably, the security attribute switcher is specifically configured to: according to the pulse, change a level of an output end of the security attribute switcher, and according to the changed level of the output end And changing the input signal of the port corresponding to the output end corresponding to the target peripheral device for modifying a security attribute of the target peripheral device.

In this technical solution, the safety attribute switcher works like a pulse JK flip-flop. When the input terminal is kept low, the potential of the output terminal remains unchanged. When the input terminal obtains a pulse signal, the potential of the output terminal changes from low to low. It goes high or goes from high to low, further changing its input signal to the bus bridge. For example, when the system is running on a normal operating system, the security attribute of KMI is "non-secure", and the signal of DECPROT[0] is "1", where DECPROT[0] is an input of AXI-to-APB Bridge. port. When the normal operating system wants to switch to the security domain, the normal operating system will give the security attribute switcher a pulse signal, and then the security attribute switcher will reduce the signal of DECPROT[0] to "0". The security attributes of KMI will be switched from "non-secure" to "secure" and can be used in the security domain.

In this technical solution, the security attributes of the peripheral device are classified into two types: security and non-security, which may be changed according to changes of the operating system. With the technical solution, the security attribute switcher changes the peripheral device while switching the system. The security attribute saves the peripheral slots on the bus, avoids the insecure drawbacks caused by the application layer software to control the key devices, and greatly improves the security of the terminal.

An embodiment of the third aspect of the present invention provides a terminal having a TrustZone system and an operating system, the terminal including a communication bus, a transceiver, a memory, and a processor, wherein:

The communication bus is configured to implement connection communication between the transceiver device, the memory, and the processor;

The program stores a set of program codes, and the transceiver device and the processor call program code stored in the memory to perform the following operations:

The transceiver device is configured to send a pulse from the TrustZone system or the operating system of the terminal to a security attribute switcher of the terminal, where an output end of the security attribute switcher and a bus of the terminal Connecting the input ends of the bridge device;

The processor, configured to control, by the security attribute switcher, an input signal to the bus bridge device according to the pulse sent by the transceiver device to change a security attribute of a peripheral device connected to the terminal .

In the above technical solution, preferably, the terminal is connected to one or more of the peripheral devices, Each of the peripheral devices is connected to the terminal through a corresponding port on a bus of the terminal.

In the above technical solution, preferably, the processor is further configured to: before the step of controlling the security attribute switcher to change an input signal to the bus bridge device according to the pulse:

Determining, in one or more of the peripheral devices connected to the terminal, a target peripheral device that needs to switch the security attribute.

In the above technical solution, preferably, the step of the processor controlling the security attribute switcher to change an input signal to the bus bridge device according to the pulse specifically includes:

Changing the level of the output of the safety attribute switcher according to the pulse;

Changing the input signal of the port connected to the output terminal corresponding to the target peripheral device to change a security attribute of the target peripheral device according to the changed level of the output terminal .

Through the above technical solution, the security attribute switcher changes the security attributes of the peripheral device, which saves the peripheral slots on the bus, and at the same time, avoids the use of the application layer software to control the insecure drawbacks caused by the key devices, greatly improving The security of the terminal.

DRAWINGS

1 shows a flow chart of a security attribute switching method in accordance with one embodiment of the present invention;

2 shows a block diagram of a security attribute switching device in accordance with one embodiment of the present invention;

Figure 3 shows a block diagram of a terminal in accordance with one embodiment of the present invention;

Figure 4 shows a schematic diagram of a bus connection in accordance with one embodiment of the present invention;

FIG. 5 shows a block diagram of a terminal in accordance with another embodiment of the present invention.

detailed description

The present invention will be further described in detail below with reference to the drawings and specific embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

In the following description, numerous specific details are set forth in order to provide a thorough understanding of the invention. The present invention may be embodied in other specific forms than those described herein. Therefore, the scope of the present invention is not limited by the specific embodiments disclosed below.

FIG. 1 shows a flow chart of a security attribute switching method in accordance with one embodiment of the present invention.

As shown in FIG. 1, a security attribute switching method according to an embodiment of the present invention is used for a terminal having a TrustZone system and an operating system, including:

Step 102: Send a pulse from the TrustZone system or operating system of the terminal to the security attribute switcher of the terminal, wherein the output of the security attribute switcher is connected to the input end of the bus bridge device of the terminal.

Step 104: The control security attribute switcher changes an input signal to the bus bridge device according to the pulse, so as to change the security attribute of the peripheral device connected to the terminal while switching the system.

In this technical solution, the existing technical solution of using TZPC as a peripheral device to switch the security attributes of other peripheral devices during system switching is abandoned, and a security attribute is connected to the input of the terminal bus bridge device. SNS (Secure Non-secure Switch), when a security attribute switch is required, directly sends a pulse to the security attribute switcher to change the level of the output of the security attribute switcher, thereby changing the bus bridge device. The input signal, which in turn changes the security properties of the peripheral devices connected to the bus, to match the changed system. For example, when performing a payment operation, a normal operating system can issue a system switching command, send a pulse to the security attribute switcher, change the level of its output, and then change the KMI (Keyboard and Mouse Interface) on the bus. The input signal of the port), the security attribute of the peripheral device keyboard that will be used to enter the password is changed from unsafe to secure. The technical solution saves the peripheral slots on the bus and avoids the use of the application layer. Software controls the insecure drawbacks of key devices, greatly improving the security of the terminal. The peripheral devices include but are not limited to KMI, touch screen port, RTC (Real-Time Clock), Timers, DAC (Digital to Analog Converter), and the like.

In the above technical solution, preferably, the terminal is connected to one or more peripheral devices, and each peripheral device is connected to the terminal through a corresponding port on the bus of the terminal.

In the above technical solution, preferably, before step 104, the method further includes: determining, in one or more peripheral devices connected to the terminal, a target peripheral device that needs to switch security attributes.

In the above technical solution, preferably, the step 104 specifically includes: changing the level of the output end of the safety attribute switcher according to the pulse; and changing the port corresponding to the output end corresponding to the target peripheral device according to the level of the changed output end; The input signal is used to change the security attributes of the target peripheral device.

In the above technical solution, preferably, the security attributes of the peripheral device include security or non-security.

2 shows a block diagram of a security attribute switching device in accordance with one embodiment of the present invention.

As shown in FIG. 2, a security attribute switching apparatus 200 according to an embodiment of the present invention is used for a terminal having a TrustZone system and an operating system, including: a bus 202 including a system bus 2022 and a peripheral bus 2024, and a system bus 2022. The peripheral bus 2024 is coupled to the bus bridge device 2026; the security attribute switch 204, the output of the security attribute switch 204 is coupled to the input of the bus bridge device 2026 for receiving pulses from the TrustZone system or operating system, and The input signal to the bus bridge device 2026 is pulsed to change the security attributes of the peripheral device connected to the bus.

In this technical solution, the existing technical solution of using TZPC as a peripheral device to switch the security attributes of other peripheral devices during system switching is abandoned, but a security is connected to the input end of the bus bridge device 2026 of the terminal. The attribute switcher 204 (SNS, Secure Non-secure Switch) directly sends a pulse to the security attribute switcher 204 when the system is switched, so that the level of the output of the security attribute switch 204 is changed, thereby changing the pair. The bus bridges the input signal to device 2026, which in turn changes the security attributes of the peripheral devices connected to the bus to match the changed system. For example, when the payment operation is performed, a pulse can be sent to the security attribute switcher 204 while the normal operating system issues a system switching command, and the level of the output terminal is changed, thereby changing the KMI (Keyboard and Mouse Interface) on the bus. The input signal of the mouse port), the security attribute of the peripheral device keyboard that will be used to enter the password is changed from unsafe to secure. The technical solution saves the peripheral slots on the bus, and avoids the use of the application layer software to control the insecure drawbacks caused by the key devices, thereby greatly improving the security of the terminal. The peripheral devices include but are not limited to KMI, touch screen port, RTC (Real-Time Clock), Timers, DAC (Digital to Analog Converter), and the like.

In the above technical solution, preferably, the peripheral bus 2024 is provided with a plurality of ports for the peripheral device to connect to the terminal through the corresponding port.

In the technical solution, the peripheral bus 2024 is provided with a plurality of peripheral ports, each of which corresponds to a certain type of peripheral device. When the security attribute of the peripheral device needs to be changed, the change command may be determined according to the change command. The target peripheral device that needs to change the security attribute sends the changed input signal to the corresponding port.

In the above technical solution, preferably, the security attribute switcher 204 includes: a determining unit 2042 that determines a target peripheral device that needs to switch security attributes in one or more peripheral devices connected to the terminal.

In this technical solution, each peripheral port on the peripheral bus 2024 corresponds to a certain type of peripheral device. When the security attribute of the peripheral device needs to be changed, the change command may be used to determine that the target of the security attribute needs to be changed. Set the device to send the changed input signal to the corresponding port. Through this technical solution, the security attributes can be changed only for the used peripheral devices according to the actual needs of the user, which not only increases the security of the security attribute change, but also saves energy consumption, avoids the performance degradation of the terminal, and does not useless work.

In the above technical solution, preferably, the security attribute switcher 204 is specifically configured to: change the level of the output end of the security attribute switcher 204 according to the pulse, and change the corresponding target peripheral device according to the level of the changed output end. The input signal to the port connected to the output for changing the security attributes of the target peripheral device.

In this technical solution, the safety attribute switcher 204 itself works like a pulse JK flip-flop. When the input terminal is kept low, the potential of the output terminal remains unchanged. When the input terminal obtains a pulse signal, the potential of the output terminal is low. It goes high or goes from high to low, further changing its input signal to the bus bridge device 2026. For example, when the system is running on a normal operating system, the security attribute of KMI is "non-secure", and the signal of DECPROT[0] is "1", where DECPROT[0] is an input of AXI-to-APB Bridge. port. When the normal operating system wants to switch to the security domain, the normal operating system will give the security attribute switcher 204 a pulse signal, and then the security attribute switcher 204 will lower the signal of DECPROT[0] to "0". At this time, the security attributes of KMI will be switched from "non-secure" to "secure" and can be used in the security domain.

In this technical solution, the security attributes of the peripheral device are classified into two types: security and non-security, which may be changed according to changes of the operating system. With the technical solution, the peripheral device is changed by the security attribute switch 204 while switching the system. The security attribute saves the peripheral slots on the bus, avoids the use of the application layer software to control the insecure drawbacks caused by the key devices, and greatly improves the security of the terminal.

Figure 3 shows a block diagram of a terminal in accordance with one embodiment of the present invention.

As shown in FIG. 3, a terminal 300 according to an embodiment of the present invention has a TrustZone system and an operating system, and further includes: a security attribute switching device 302 (corresponding to the security attribute switching device 200 in the embodiment shown in FIG. 2) And transmitting a pulse from the TrustZone system or the operating system of the terminal to the security attribute switcher of the terminal according to the received security attribute switching command, wherein the output of the security attribute switcher is connected to the input end of the bus bridge device of the terminal. And controlling the safety attribute switcher to change the input signal to the bus bridge device according to the pulse, so as to change the security attribute of the peripheral device connected to the terminal while switching the system.

The AXI bus and the specific TrustZone system IP block are expanded in the system. With hardware isolation, applications in the normal operating system cannot access the contents of the security system, and can protect peripheral devices such as secure memory, encryption blocks, keyboards, and screens to ensure they are protected from software attacks, thereby improving terminal security. . For example, when performing a payment operation, the ordinary operating system can be switched to the security system for payment password input to ensure the security of the payment password.

In addition, since the security attribute switching device 302 corresponds to the security attribute switching device 200 in the embodiment shown in FIG. 2, the terminal 300 has the same technical effect as the security attribute switching device 200 according to any one of the above aspects. , will not repeat them here. Figure 4 shows a schematic diagram of a bus connection in accordance with one embodiment of the present invention.

As shown in Figure 4, TrustZone's ARMCore (ARM processor) is connected to the AXI Bus (system bus), AXI Bus is connected to the peripheral bus APB Bus through the AXI-to-APB Bridge, and ARMCore is also connected to the Memory via AXI Bus. Adaptor (reader) to read SRAM (Static RAM).

The SNS itself works like a pulsed JK flip-flop. When the input is held low, the potential at the output remains the same. When the input receives a Switch Signal, the potential at the output changes from low to high or high. It becomes low. There are many settings on TrustZon's peripheral bus. Peripheral devices such as KMI, touch screen ports, RTC, Timers, DAC, etc.

When a peripheral device (such as KMI) needs to switch security attributes in real time, its security attribute is controlled by the DECPROT[0] signal port on the AXI-to-APB Bridge. "1" means non-secure and "0" means security. Connect the output of the SNS to the DECPROT[0] input port of the AXI-to-APB Bridge. If a Switch Signal is input into the SNS, the potential at the output of the switch immediately changes from "0" to "1" or from "1" to "0", and the signal is input to the AXI-to-APB Bridge by DECPROT[0]. Let the security attributes of the device change from "safe" to "non-secure" or from "non-secure" to "safe".

For example, when the system is running in a normal domain, the security attributes of the KMI peripheral device are "non-secure" and the signal of DECPROT[0] is "1". When the system wants to switch to the security domain, the system will give the SNS a Switch Signal, and then the SNS will reduce the signal of DECPROT[0] to "0". At this time, the security attribute of the KMI will be "non-secure". Switch to "secure" and use it in the security domain.

FIG. 5 is a block diagram showing the structure of a terminal according to another embodiment of the present invention. As shown in FIG. 5, the terminal may include at least one transceiver 503, at least one processor 501, such as a CPU, a memory 504, and at least one communication bus 502.

The communication bus 502 is configured to connect the transceiver 503, the processor 501, and the memory 504.

The above memory 504 may be a high speed RAM memory or a non-volatile memory such as a disk memory. The memory 504 is further configured to store a set of program codes, and the transceiver 503 and the processor 501 are configured to call the program code stored in the memory 504, and perform the following operations:

The transceiver device 503 is configured to send a pulse from the TrustZone system or the operating system of the terminal to a security attribute switcher of the terminal, where an output end of the security attribute switcher and the terminal The input ends of the bus bridge devices are connected;

The processor 501 is configured to control the security attribute switcher to change an input signal to the bus bridge device according to the pulse sent by the transceiver device, to change the security of the peripheral device connected to the terminal. Attributes.

In the above technical solution, preferably, the processor 501 is further configured to: before the step of controlling the security attribute switcher to change an input signal to the bus bridge device according to the pulse:

In the above technical solution, preferably, the step of the processor 501 controlling the security attribute switcher to change an input signal to the bus bridge device according to the pulse specifically includes:

Through this technical solution, the security attribute switcher changes the security attributes of the peripheral device, which saves the peripheral slots on the bus, and at the same time, avoids the disadvantages of using the application layer software to control the insecure of the key device, and greatly improves The security of the terminal.

In the present invention, the term "plurality" means two or more; the terms "connected", "connected" and the like are to be understood broadly, and may be, for example, a fixed connection, a detachable connection, or an integral Connections; they can be connected directly or indirectly through intermediate media. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood on a case-by-case basis.

The technical solution of the present invention is described in detail above with reference to the accompanying drawings. By the technical solution of the present invention, the security attribute of the peripheral device is changed by the security attribute switcher while the system is switched, thereby saving the peripheral slot on the bus. It avoids the disadvantages of using the application layer software to control the insecure of key devices, and greatly improves the security of the terminal.

The above are only the preferred embodiments of the present invention, and are not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection of the present invention. Within the scope of protection.

Claims

A security attribute switching method for a terminal having a TrustZone system and an operating system, comprising:

Transmitting a pulse from the TrustZone system or the operating system of the terminal to a security attribute switcher of the terminal, wherein an output end of the security attribute switcher is connected to an input end of a bus bridge device of the terminal;

Controlling the security attribute switcher to change an input signal to the bus bridge device based on the pulse for modifying a security attribute of a peripheral device connected to the terminal.
The security attribute switching method according to claim 1, wherein the terminal is connected to one or more of the peripheral devices, and each of the peripheral devices is connected through a corresponding port on a bus of the terminal. To the terminal.
The security attribute switching method according to claim 2, further comprising: before the controlling the security attribute switcher to change an input signal to the bus bridge device according to the pulse,

Determining, in one or more of the peripheral devices connected to the terminal, a target peripheral device that needs to switch the security attribute.
The security attribute switching method according to claim 3, wherein the controlling the security attribute switcher to change an input signal to the bus bridge device according to the pulse comprises:

Changing the level of the output of the safety attribute switcher according to the pulse;

Changing the input signal of the port connected to the output terminal corresponding to the target peripheral device to change a security attribute of the target peripheral device according to the changed level of the output terminal .
The security attribute switching method according to any one of claims 1 to 4, characterized in that the security attribute of the peripheral device comprises security or non-security.
A security attribute switching device for a terminal having a TrustZone system and an operating system, comprising:

a bus including a system bus and a peripheral bus, the system bus and the peripheral The bus is connected by a bus bridge device;

a security attribute switcher having an output coupled to an input of the bus bridge device for receiving a pulse from the TrustZone system or the operating system and modifying the pulse according to the pulse The bus bridges the input signal of the device for modifying the security attributes of the peripheral device connected to the bus.
The security attribute switching device according to claim 6, wherein a plurality of ports are disposed on the peripheral bus for the peripheral device to connect to the terminal through the corresponding port.
The security attribute switching device according to claim 7, wherein the security attribute switcher comprises:

And determining, by the one or more of the peripheral devices connected to the terminal, a target peripheral device that needs to switch the security attribute.
The security attribute switching device according to claim 8, wherein the security attribute switcher is specifically configured to:

Changing a level of an output of the safety attribute switch according to the pulse, and changing the corresponding to the output end corresponding to the target peripheral device according to the changed level of the output end The input signal of the port for modifying the security attributes of the target peripheral device.
The security attribute switching device according to any one of claims 6 to 9, wherein the security attribute of the peripheral device comprises security or non-security.
A terminal having a TrustZone system and an operating system, wherein the terminal comprises a communication bus, a transceiver, a memory, and a processor, wherein:

The communication bus is configured to implement connection communication between the transceiver device, the memory, and the processor;

The program stores a set of program codes, and the transceiver device and the processor call program code stored in the memory to perform the following operations:

The transceiver device is configured to send a pulse from the TrustZone system or the operating system of the terminal to a security attribute switcher of the terminal, where an output end of the security attribute switcher and a bus of the terminal Connecting the input ends of the bridge device;

The processor, configured to control, by the security attribute switcher, an input signal to the bus bridge device according to the pulse sent by the transceiver device to change a security attribute of a peripheral device connected to the terminal .
The terminal according to claim 11, wherein said terminal is connected to one or more of said peripheral devices, each of said peripheral devices being connected to said terminal through a corresponding port on a bus of said terminal .
The terminal according to claim 12, wherein said processor is further configured to: before said step of controlling said security attribute switcher to change an input signal to said bus bridge device according to said pulse;

Determining, in one or more of the peripheral devices connected to the terminal, a target peripheral device that needs to switch the security attribute.
The terminal according to claim 13, wherein the step of the processor controlling the security attribute switch to change an input signal to the bus bridge device according to the pulse comprises:

Changing the level of the output of the safety attribute switcher according to the pulse;

Changing the input signal of the port connected to the output terminal corresponding to the target peripheral device to change a security attribute of the target peripheral device according to the changed level of the output terminal .
The terminal according to any one of claims 11 to 14, wherein the security attribute of the peripheral device comprises security or non-security.