信息网络安全

信息网络安全 ›› 2016, Vol. 16 ›› Issue (3): 21-27.doi: 10.3969/j.issn.1671-1122.2016.03.004

• • 上一篇    下一篇

基于TrustZone的可信执行环境构建技术研究

范冠男, 董攀()   

  1. 国防科学技术大学计算机学院,湖南长沙 410073
  • 收稿日期:2016-01-04 出版日期:2016-03-25 发布日期:2020-05-13
  • 作者简介:

    作者简介: 范冠男(1992--), 男,河北,硕士研究生,主要研究方向为操作系统与信息安全;董攀(1978--),男,河南,副研究员,博士,主要研究方向为操作系统与信息安全.

  • 基金资助:
    国家自然科学基金[61572514,61502510]

Research on Trusted Execution Environment Building Technology Based on TrustZone

Guannan FAN, Pan DONG()   

  1. School of Computer, National University of Defense Technology, Changsha Hunan 410073, China
  • Received:2016-01-04 Online:2016-03-25 Published:2020-05-13

RichHTML

10

PDF (PC)

439

摘要：

可信执行环境(TEE)作为一种通过隔离的方法保护数据和程序的技术,与传统安全技术相比,能够主动防御来自外部的安全威胁,更有效地保障自身安全.随着内置TrustZone技术的ARM处理器的广泛应用,可信执行环境开发受到重视.目前已经出现了很多基于TrustZone的开源项目,但因缺乏相应标准等原因给应用开发带来了障碍.文章以Open-TEE为例,深入研究了可信执行环境的整体结构,分析了软件层的组件构成和运行流程,提出了可信应用的开发方法.通过实验,比较分析了几种可信执行环境在部署难易度,开发难易度,内存占用等方面的性能.文章提出的可信执行环境构建方法具有良好的软件结构,易于开发.

关键词: TrustZone, 可信执行环境, Open-TEE, ARM

Abstract:

As a technique for protecting data and programs, compared with the traditional security technology, the trusted execution environment (TEE) can actively prevent threats from outside and ensure the safety of host more effectively by means of hardware aided isolation. With the extensive application of the ARM processor with the built-in TrustZone, trusted execution environment development has been paid increasing attentions. At present, there have been many open source TEE projects based on TrustZone, but their applications still face with problems because of the lack of corresponding standards. Taking Open-TEE as an example, this paper deeply studies the overall structure of TEE, analyzes the architecture of software layer and operational process, and proposes the development method of trusted application. The performances of deployment, development and memory footprint of some TEEs are compared through experiments. The development method of TEE proposed in this paper has good software architecture and is easy to be developed.

Key words: TrustZone, trusted execution environment, Open-TEE, ARM

中图分类号: