Carl Zeiss Microscopy Gmbh

Amlogic (Shanghai) Co., Ltd.

Qi Cao

Martin Stohr

Ilka Schlesiger

Michael Winterot

Leander Dietzsch

Fang Dong

Jochen Schweizer

Qiong Zhang

Jacquelyn Schmelter

Peifu Jiang

Pengguang Zhu

Ting Yao

Zhi Zhou

Yanhong Chen

Yong Wan

Microscope

A microcode signature security management system based on a Trustzone technology comprises the steps of: starting a normal operating system; acquiring the signature-encrypted microcode file and outputting the signature-encrypted microcode file and a switching signal by the normal operating system; receiving the switching signal and starting the monitor mode by the microprocessor to start a secure operating system; receiving the signature-encrypted microcode file, performing signature verification on the signature-encrypted microcode file, loading the file when the signature verification passes, otherwise outputting microcode error information when the signature verification fails by the secure operating system. The security of microcode is ensured on the basis of a secure operating system safety environment to which a system layer is inaccessible. A cryptography tool measure is adopted, so that the security, integrity and correctness of loaded microcode are ensured, and the risk of breaking, modifying and replacing an existing microcode management mechanism is lowered.

Microcode signature security management system based on trustzone technology and method

A method for improving the security of a trusted application comprises: signing the trusted application in a hierarchical signature mode by the upper computer to generate a signature file package about the trusted application, and saving the signature file package in a main operation system; obtaining the signature file package and loading the signature file package to the second operation environment by the security execution system; parsing the signature file package by the security execution system to obtain a parsed result; and performing hierarchical verification on the parsed result by the security execution system, and if the hierarchical verification is passed, it will indicate that the trusted application is in a security state, otherwise, it is in a non-security state. The defects of lack of a security authentication mode for the trusted application and relatively low security due to mere adoption of a simple digital signature mechanism are overcome.

Method for improving security of trusted application

Growing community of inventors

Shanghai, China

Qi Cao