WO2023016151A1

WO2023016151A1 - Software framework of security application of linux system, and creation method for same

Info

Publication number: WO2023016151A1
Application number: PCT/CN2022/104299
Authority: WO
Inventors: 刘成城
Original assignee: 北京字节跳动网络技术有限公司
Priority date: 2021-08-12
Filing date: 2022-07-07
Publication date: 2023-02-16
Also published as: CN113703790A

Abstract

Provided in the present disclosure are a software framework of a security application of a Linux system, and a creation method for same. The software framework is deployed on a Linux system in the form of an application package, and is run on the Linux system, wherein the application package comprises a security application, a trusted execution environment module, and an Android basic framework; the security application is a security-type application run on the Linux system; the trusted execution environment module is configured to provide a trusted operation basis for the security application; and the Android basic framework is configured to provide an operation basis for the trusted execution environment module.

Description

Software framework and creation method of Linux system security application

This application claims priority to a Chinese patent application with application number 202110924877.X filed with the China Patent Office on August 12, 2021, the entire contents of which are incorporated herein by reference.

technical field

The present disclosure relates to the technical field of computer basic software, for example, to a software framework and a creation method of a Linux system security application.

Background technique

Trusted Execution Environment (TEE), which can ensure that computing will not be interfered by the conventional operating system, so it is called "trusted". TEE is usually used to run key operations, such as: (1), mobile payment: fingerprint verification, personal identification number (Personal Identification Number, PIN) input, etc.; (2), confidential data: secure storage of private keys, certificates, etc.; (3), content protection: digital rights protection (Digital Rights Management, DRM), etc.

Since the normal operation of the TEE module depends on the basic framework of the Android system, how to make the security application compatible with the Android system run normally in the Linux system has become a major technical problem to be solved in related technologies.

Contents of the invention

This disclosure provides a software framework and creation method for a Linux system security application, which can avoid the situation that the security application compatible with the Android system is not compatible with the Linux system in related technologies, and realize the normal operation of the security application compatible with the Android system in the Linux system. .

This disclosure provides a software framework for Linux system security applications, the software framework can be deployed on the Linux system in the form of an application package and run on the Linux system; the application package includes: a security application, a trusted execution environment module, and an Android basic framework;

The security application is a security application running on a Linux system;

The trusted execution environment module is configured to provide a trusted operating basis for the secure application;

The Android basic framework is set to provide a running basis for the trusted execution environment module.

The present disclosure also provides a computer program product, including a computer program stored on a non-transitory computer-readable storage medium, the computer program includes program instructions, and when the program instructions are executed by a computer, the computer can execute according to the above-mentioned Steps in any method for creating a software framework for a Linux system security application.

The present disclosure also provides an electronic device, including a memory, a processor, and a computer program stored on the memory and operable on the processor. When the processor executes the program, any one of the above-mentioned Describe the steps of the method for creating a software framework for Linux system security applications.

Description of drawings

Fig. 1 is a schematic diagram of the architecture of the software framework of the security application in the Android system of the related art;

Fig. 2 is the structural representation of the software framework of Linux system security application provided by the present disclosure;

Fig. 3 is a schematic diagram of the architecture of the software framework of the Linux system security application provided by the present disclosure;

Fig. 4 is the flowchart of the method for creating the software framework of the Linux system security application provided by the present disclosure;

FIG. 5 is a flowchart of step 430 in FIG. 4 .

Fig. 6 is a schematic structural diagram of an electronic device provided by the present disclosure.

Detailed ways

Trusted Execution Environment (TEE), which runs a complete operating system inside, runs in isolation from REE (Rich Execution Environment) (such as Android system or Linux system). REE provides a common environment for mobile devices and runs common Operating system (Operating System, OS), such as Android, IOS system, etc. The TEE module interacts with the REE module through shared memory.

The TEE module is divided into kernel mode and user mode. The user mode of TEE can run multiple different security applications (Trusted Application, TA). The most direct way to apply the TEE module in the REE module is to communicate with the TA in the TEE module, so the part of the REE module that communicates with the TA is called the client application (Client Application, CA).

As shown in Figure 1, it is a schematic diagram of the software framework of the security application on the Android system in the related art. The TEE driver, TEE basic library, TEE management service and multiple CAs in the REE module side corresponding to the TEE module on the left side of the figure all belong to the TEE The components of the module, three security applications (services) including decryption, fingerprint and face are listed in the figure. In Figure 1, the CA of each security application in the REE side system depends on the TEE basic library, and the TEE management service component of the TEE module itself also depends on the TEE basic library, and the TEE basic library depends on the Android basic framework and the TEE kernel. The TEE kernel is located in the Linux kernel that the Android system depends on and is not easy to change and transplant.

There are many kinds of TEE schemes. Based on different TEE cores, multiple sets of TEE schemes are derived, such as: op-tee, trusty, QSEE, etc. Among them, op-tee is a TEE solution supported by the main line of the Linux kernel. For the op-tee kernel, the Linux kernel provides support for drivers, upper-layer management services and basic libraries; trusty is a TEE solution used in Android, which provides a basic framework ( Basic library/management service), and trusty kernel; QSEE is the TEE solution adopted by Qualcomm platform.

In addition, as the same trusty solution for the Android system, the trusty-based TEE provided by each chip manufacturer may also be different, and each manufacturer may modify management services, basic library interfaces, etc. according to its own chip characteristics. Moreover, the loading verification signature process of TA is also different. Android device manufacturers will also provide different versions of device TEE application solutions according to each chip manufacturer.

Based on the above reasons, the final product integrator is basically unable to "create" a new TEE solution by itself, or even fine-tune the original solution. In this way, when the REE system of the original scheme is not the system that the product manufacturer wants to adopt, the problem becomes particularly difficult.

The Android system has already played a pivotal role in all parts of the world. Chip manufacturers and equipment manufacturers have provided software and hardware solutions for the Android system, including the TEE solution.

In related technologies, since the operating system kernel depends on multiple device drivers, most of the security applications compatible with the Android system are transplanted to the Linux system and run, and most of them adopt a container solution, that is, put the Android system into a certain container of the Linux system ( The components of each TEE module are also located in the container), so that the security application running on the Android system can be quickly transplanted to the Linux system and run.

The container solution is to put the entire Android system or most of the key components into the container, so that the attributes of the container must be set in a highly isolated manner (for example, different process identification systems are used inside and outside the container, and Inter Process Communication (Inter Process Communication) inside and outside the container , IPC) communication is limited, and the storage of the container is partially or completely isolated), otherwise it will cause conflicts between resources inside and outside the container. Therefore, many applications in the Linux system application ecosystem outside the container cannot easily use the TEE module of the Android system located in the container. Even if it can be used, it is necessary to modify the source code of the existing application in the Linux system ecosystem (for example Only by modifying the inter-process communication method) can the TEE in the container be used, which brings a lot of burden to the development.

Therefore, quickly and conveniently deploying and running a security application compatible with the Android system in the Linux system has become a technical problem that needs to be solved urgently.

In the embodiment of the present disclosure, those skilled in the art can understand that Android is the operating system on the mobile terminal developed by Google, based on the open source version of the system Android Open Source Project (Android Open-Source Project, AOSP) On the Internet, a number of companies have derived and developed versions such as MIUI, EMUI, and One UI, as well as customized versions such as Pixel Experience and Lineage OS in the open source community. The Android mentioned in this disclosure covers the above-mentioned various implementations.

In an embodiment of the present disclosure, the Linux system includes various Linux OS distributions based on the Linux kernel, such as Ubuntu, RedHat, Jing OS, and the like.

In the embodiments of the present disclosure, the so-called Android basic framework includes the basic component Android Framework for supporting the operation of the Android OS.

As shown in Figure 2, the embodiment of the present disclosure provides a software framework for Linux system security applications, it is easy to understand that the software framework can be deployed on the Linux system in the form of an application package, and run on the Linux system; the application package includes : a security application 210, a trusted execution environment module 220 and an Android basic framework 230;

The security application 210 is a security application running on a Linux system;

The trusted execution environment module 220 is configured to provide a trusted operating basis for the secure application;

The Android basic framework 230 is configured to provide a running basis for the trusted execution environment module.

In the embodiments of the present disclosure, security applications refer to applications related to security functions, such as applications related to fingerprint recognition, face recognition, financial payment, encryption and decryption, etc. that rely on the trusted environment provided by the TEE module. "Hereinafter referred to as "TEE module", because the application related to the security function depends on the trusted environment provided by the TEE module, the normal operation of the security application depends on the support provided by the TEE component in the TEE module, and the operation of the TEE component depends on the relevant TEE basic library, and TEE basic library relies on the Android basic framework, and packages multiple parts that security applications or services depend on in the application package, so that the application package can run normally in the Linux system, thereby avoiding security applications that rely on the Android basic framework Compatible operation in Linux system.

In the embodiment of the present disclosure, the TEE module includes basic components, security support components and basic libraries;

The basic class components and the security support class components respectively correspond to the basic libraries on which their own operation depends;

The basic component is set to provide basic support for the security support component; the security support component is set to provide the support of the trusted execution environment for the operation of the security application.

In the embodiment of the present disclosure, the development of each component in the TEE module has its own division of labor. General basic components, such as the TEE kernel and TEE management services, are developed by the chip manufacturer. The CA (client application) and the corresponding TA ( Security applications) are developed by equipment vendors and integrated by integrators.

A typical secure application fingerprint recognition function that relies on the application TEE module is used as an example to illustrate. The fingerprint provider sends a request from the CA running in the non-secure world to the TA running in the secure world on the TEE infrastructure framework. The TA is responsible for high-level security processing and returns the result to the CA. The TEE basic framework does not pay attention to the business logic between CA and TA, and only provides basic services, such as communication channel establishment, TA identity verification, etc.

In the embodiment of the present disclosure, the software framework of the Linux system security application also includes a management software package, and the management software package is deployed on the Linux system and runs on the Linux system;

The management software package includes: the basic class component, the basic library on which the basic class component depends, and the Android basic framework.

In the embodiment of the present disclosure, the basic class components that the security support class components depend on, as well as the basic libraries related to the basic class components and the Android basic framework are packaged and deployed on the Linux system, in order to support the security support class components on the Linux system. Support for normal operation. As shown in Figure 3, the TEE management service belonging to the basic component and its dependent TEE basic library and Android basic framework are packaged to form an independent management software package and deployed on the Linux system.

For example, the application package in the embodiment of the present disclosure includes: at least one security application, the security support component that each security application depends on, the basic library that each security support component depends on, and the Android basic framework .

For example, the software framework in the embodiments of the present disclosure includes at least one application package.

In the embodiments of the present disclosure, each security application may be packaged independently in an application package, or several or all security applications may be packaged in the same application package to provide comprehensive functions externally. The external presentation of the application package can be a single application or an intermediate service.

As shown in Figure 3, it is one of the software framework schematic diagrams of the Linux system security application provided by the embodiment of the present disclosure. Taking the application package in the form of snap as an example, each snap package in Figure 3 includes the Android basic framework, and the Android basic framework in the snap package The client application corresponding to the framework, TEE basic library and security application does not depend on the Linux framework, but other parts in the snap package depend on the Linux framework, and the snap mechanism itself depends on the Linux framework and basic services.

The method for creating the software framework of the Linux system security application provided by the embodiment of the present disclosure is described below. The method for creating the software framework of the Linux system security application described below and the software framework of the Linux system security application described above can be referred to each other, as shown in FIG. 4, the embodiment of the present disclosure provides a method for creating a software framework for Linux system security applications, including the following steps:

Step 410: Determine the dependency relationship between the security application running on the Linux system and the components in the trusted execution environment module; wherein, the trusted execution environment module includes components and basic libraries;

In this step, the corresponding relationship between each security application developed on the Linux system and the security support component in the TEE module is determined. In this step, each security application developed on the Linux system depends on the security support component TEE component in the TEE module. The security application in this step refers to the application or service related to system security related to the TEE module on the Linux system. The normal operation of these applications or services depends on the function of the TEE module to complete a certain security function, such as fingerprint identification , face recognition, document decryption, etc.

Step 420: Determine the basic library corresponding to the component that the security application depends on;

Step 430: package the security application, the components that the security application depends on, the basic library corresponding to the component, and the Android basic framework that the basic library depends on, into a software package with a set format to obtain an application package;

In this step, the TEE basic library that each security application depends on in the Linux system and the part of the basic framework in the entire Android framework are packaged as software to form an application package, which is directly transplanted in the Linux system, so that the TEE module can be used on the Linux system. Support the normal operation of each security application.

In some embodiments of this step, the security application, the security support component that the security application depends on, the basic library corresponding to the security support component, and the Android basic framework that the basic library depends on are packaged in software , to get the application package in the form of snap.

In this embodiment, the use of the unique snap technology on Linux can avoid the situation that the original TEE module cannot run due to environmental changes in the Linux system.

By packaging the basic components of the system that the application directly depends on, they are co-produced with the application into a snap application package, and such an application package can run normally when installed in different operating environments.

The Android basic framework that the TEE module depends on is packaged together with the Linux CA into a snap package, and the snap package is deployed in the Linux system, so that the security application can run normally in the Linux system.

In some embodiments of this step, the security application, the security support component that the security application depends on, the basic library corresponding to the security support component, and the Android basic framework that the basic library depends on are packaged in software , to get the application package in the form of flatpak.

In this embodiment, the use of the unique flatpak technology on Linux can avoid the situation that the original TEE module cannot run due to environmental changes in the Linux system.

flatpak is a package management utility that distributes installs and manages software without worrying about dependencies, runtimes, or Linux distributions. Software can be installed regardless of the Linux distribution (whether it is a Debian-based distribution or an Arch-based distribution), so flatpak is called a universal package.

The premise that the technical solutions provided by the embodiments of the present disclosure can be applied is that the application package only includes the Android basic framework on which the TEE module depends, so using snap or flatpak is more flexible and can abandon the isolation limitation of the container. In addition, the particularity of the TEE module is that the driver of the TEE module is different from drivers such as Bluetooth audio, GPS, etc. The TEE module driver itself supports multiple visitors to use at the same time (the Android system in the container and Linux system access at the same time), so the TEE module can use the solution provided by the embodiment of the present disclosure to meet the safety application requirements without transplanting its driver.

After building the above software package, the user or system publisher can perform step 440: deploy the application package on the Linux system, and run the software package when the security application needs to be executed.

The application packages in this step are deployed on the Linux system according to the actual system conditions, so that each application package can run normally on the Linux system, and provide support for a safe operating environment for each security application to run normally on the Linux system.

In the embodiment of the present disclosure, multiple components of the TEE module depend on the corresponding basic libraries, and the dependent basic libraries may also depend on other basic libraries. Therefore, in step 430, it is necessary to find all the basic libraries that the security application indirectly depends on, and Encapsulate all the basic libraries that are depended on in the application package.

In some embodiments of the present disclosure, as shown in FIG. 5 , after step 430, it also includes:

Step 510: performing software packaging on the base class component, the base library corresponding to the base class component, and the Android basic framework on which the base base library depends, to obtain a management software package in the form of snap or flatpak;

After obtaining the management software package, the system publisher may perform step 520: deploy the management software package on the Linux system, so as to provide it to users.

A schematic diagram of the physical structure of an electronic device provided by an embodiment of the present disclosure is described below in conjunction with FIG. 6. As shown in FIG. ) 630 and a communication bus 640, wherein, the processing 610, the communication interface 620, and the storage 630 complete mutual communication through the communication bus 640. The processor 610 can call the logical instructions in the memory 630 to execute a method for creating a software framework of a Linux system security application, and the method includes: determining the dependency relationship between the security application running on the Linux system and the components in the trusted execution environment module; , the trusted execution environment module includes a component and a basic library; determining the basic library corresponding to the component that the security application depends on; combining the security application, the component that the security application depends on, and the basic library corresponding to the component and the Android basic framework on which the basic library depends, and package the software in a set format to obtain an application package; deploy and run the application package on a Linux system.

In addition, the logic instructions in the above-mentioned memory 630 may be implemented in the form of software functional units and when sold or used as an independent product, may be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiments of the present disclosure is essentially or the part that contributes to the related technology or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium. Several instructions are included to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in the multiple embodiments of the present disclosure. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disc, etc., which can store program codes. .

In the above terminal device embodiment, it should be understood that the processor 610 may be a central processing unit (English: Central Processing Unit, CPU for short), and may also be other general-purpose processors, digital signal processors (English: Digital Signal Processor, Abbreviation: DSP), application specific integrated circuit (English: Application Specific Integrated Circuit, abbreviation: ASIC), etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like. The steps of the method disclosed in conjunction with the present disclosure may be directly implemented by a hardware processor, or implemented by a combination of hardware and software modules in the processor.

On the other hand, an embodiment of the present disclosure also provides a computer program product, the computer program product includes a computer program stored on a non-transitory computer-readable storage medium, the computer program includes program instructions, and when the program instructions When being executed by a computer, the computer can execute the method for creating a software framework of a Linux system security application provided by the above multiple methods, the method includes: determining the dependency relationship between the security application running on the Linux system and the components in the trusted execution environment module; Wherein, the trusted execution environment module includes a component and a base library; determine the base library corresponding to the component that the security application depends on; set the security application, the component that the security application depends on, and the base library that the component The library and the Android basic framework on which the basic library depends are packaged with software in a set format to obtain an application package; the application package is deployed and run on a Linux system.

In yet another aspect, an embodiment of the present disclosure also provides a non-transitory computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, it is implemented to execute the Linux system security application provided by the above-mentioned multiple embodiments. A method for creating a software framework: determining the dependency relationship between a security application running on a Linux system and a component in a trusted execution environment module; wherein, the trusted execution environment module includes a component and a basic library; determining all the components that the security application depends on The base library corresponding to the above-mentioned components; the security application, the components that the security application depends on, the base library corresponding to the components, and the Android basic framework that the base library depends on are packaged with software in a set format to obtain an application package ; Deploy and run the application package on the Linux system.

The device embodiments described above are only illustrative, and the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in One place, or it can be distributed to multiple network elements. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. It can be understood and implemented by those skilled in the art without any creative effort.

Through the above description of the implementations, those skilled in the art can clearly understand that multiple implementations can be implemented by means of software plus a necessary general-purpose hardware platform, and of course also by hardware. Based on this understanding, the essence of the above technical solutions or the part that contributes to related technologies can be embodied in the form of software products, and the computer software products can be stored in computer-readable storage media, such as ROM/RAM, disk , CD, etc., including several instructions to make a computer device (which may be a personal computer, server, or network device, etc.) execute the methods described in multiple embodiments or some parts of the embodiments.

The software framework and creation method of the Linux system security application provided by the present disclosure are deployed in the Linux system in the form of an application package by deploying the security application to be run in the Linux system, the trusted execution environment module and the Android basic framework on which it depends. It is convenient to quickly transplant the security application compatible with the Android system to the Linux system and realize the normal operation of the security application compatible with the Android system in the Linux system.

Claims

A software framework for Linux system security applications, the software framework can be deployed on the Linux system in the form of an application package and run on the Linux system; the application package includes: security applications, trusted execution environment modules, and Android Android foundation frame;

The security application is a security class application running on the Linux system;

The trusted execution environment module is configured to provide a trusted operating basis for the secure application;

The Android basic framework is set to provide a running basis for the trusted execution environment module.
The software framework according to claim 1, wherein the trusted execution environment module includes basic components, security support components and basic libraries;

The basic class components and the security support class components respectively correspond to the basic libraries on which their own operation depends;

The basic class components are set to provide basic support for the security support class components;

The security support component is configured to provide support for a trusted execution environment for the security application to run.
The software framework according to claim 2, further comprising a management software package that can be deployed on the Linux system and run on the Linux system;

The management software package includes: the basic class component, the basic library on which the basic class component depends, and the Android basic framework.
The software framework according to claim 3, wherein the application package includes: at least one of the security applications, the security support components that each security application depends on, and the basic library that each security support component depends on And Android basic framework.
4. The software framework of claim 4, wherein said software framework includes at least one of said application packages.
A method for creating a software framework for Linux system security applications, the method comprising:

Determine the dependency relationship between the secure application running on the Linux system and the components in the trusted execution environment module; wherein the trusted execution environment module includes the components and the basic library;

determining a basic library corresponding to the component on which the security application depends;

The security application, the components that the security application depends on, the basic library corresponding to the component, and the Android basic framework that the basic library depends on are packaged with software in a set format to obtain an application package.
The method according to claim 6, wherein said components include base class components and security support class components;

The described security application, the components that the security application depends on, the basic library corresponding to the component, and the Android basic framework that the basic library depends on, are packaged with software in a set format to obtain an application package, including:

The security application, the security support component that the security application depends on, the basic library corresponding to the security support component, and the Android basic framework that the basic library depends on are packaged in software to obtain an application package in the form of snap or flatpak .
According to the method according to claim 7, the said security application, the components that the security application depends on, the basic library corresponding to the component, and the Android basic framework that the basic library depends on, are packaged in a software package with a set format , after getting the application package, it also includes:

The basic class component, the basic library corresponding to the basic class component, and the Android basic framework on which the basic library depends are packaged in software to obtain a management software package in the form of snap or flatpak.
A computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, when the program instructions are executed by a computer, the computer can execute the Steps in any one of the methods for creating a software framework for Linux system security applications.
An electronic device, comprising a memory, a processor, and a computer program stored on the memory and operable on the processor, when the processor executes the program, the Linux system as claimed in claims 6 to 8 is realized Steps of a method for creating a software framework for a safety application.