CN105787376A - Data security access method and apparatus - Google Patents

Abstract

The invention discloses a data security access method, wherein the method includes: a non-safety operating system receiving a first data security access request; a non-safety operating system generating a second data security access request according to the first data security access request; After the access request, send the second data security access request to the security operating system; the security operating system performs legality authentication on the second data security access request, and when the legality authentication is successful, according to the first Two data security access requests perform data security access operations. The invention also discloses a data security access device at the same time.

Description

A data security access method and device

technical field

The invention relates to the field of safe storage of intelligent terminals, more specifically, a method and device for safe data access.

Background technique

With the rapid development of modern communication technology, terminals, especially smart terminals, such as mobile phones, tablet computers, smart watches, etc., have become more and more deeply involved in people's study, work and life and play a vital role. As users rely on smart terminals, some important data, such as personal data, address books, private photos, confidential documents, etc., are usually stored in smart terminals. It is important to keep this data secure.

There are three mainstream smart terminal operating systems on the market: Android (Android) operating system, Apple operating system (iOS, iPhone Operating System), and Windows operating system. However, each operating system cannot fully guarantee the security of the terminal, especially the Android operating system terminal. Due to the openness of the Android operating system itself, the Android operating system terminal is likely to be infected with viruses or Trojan horses, resulting in the loss of important information. leakage or destruction. Furthermore, due to the convenience of the smart terminal, the user is likely to lose the smart terminal, and valuable data will also be lost, such as personal privacy information or commercial confidential information. If obtained by others, this information may be leaked, which will cause serious losses.

However, there is currently no reliable solution for the secure access of local data on smart terminals, especially the ability for users to quickly and conveniently store and retrieve important security data while ensuring that user security data will not be leaked or destroyed.

Contents of the invention

In order to solve the existing technical problems, the embodiment of the present invention expects to provide a data security access method and device method and device.

An embodiment of the present invention provides a data security access method, the method comprising:

The non-secure operating system receives a first data security access request;

After the non-secure operating system generates a second data secure access request according to the first data secure access request, it sends the second data secure access request to a secure operating system;

The security operating system performs legality authentication on the second data security access request, and executes a data security access operation according to the second data security access request when the legality authentication is successful.

In the above solution, when the first data security access request is a data security storage request, the first data security access request includes the following data access information: the file name of the data to be stored and its storage path,

When the first data security access request is a data security extraction request, the first data security access request includes the following data access information: the file name of the data to be extracted and its extraction path.

In the above solution, when the first data security access request is: a data security storage request, the method further includes: the non-secure access task reads the data to be stored from the non-secure memory to the non-secure memory middle.

In the above solution, the non-secure operating system generates a second data security access request according to the first data security access request, including:

The non-secure access task in the non-secure operating system carries the following parameter 1 and parameter 2 in the first data security access request to generate a second data security access request:

Among them, parameter one includes task identifier, operation identifier, and data access information, and parameter two includes verification code MAGIC_NS.

In the above solution, the legality certification includes: the first legality certification and the second legality certification; wherein, the first legality certification includes:

The security monitoring task in the secure operating system judges whether the second data security access request carries a verification code MAGIC_NS, if yes, then determines that the first legitimacy authentication of the second data security access request is successful; if not, Then determine that the first legitimacy of the second data security access request fails;

The second legitimacy authentication includes: the main control task in the secure operating system judges whether each parameter in the parameter one is legal, and when each parameter in the parameter one is legal, the second legitimacy Validity authentication succeeds, otherwise, the second legitimacy authentication fails.

In the above solution, the secure operating system executes a data secure access operation according to the second data secure access request, including:

When the second data security access request is a data security storage request, the security access task performs the following operations: copy the data to be stored that has been stored in the non-secure memory to the security memory, and store the data to be stored in the security memory Encryption operation, writing the encrypted data to be stored into the safe memory;

When the second data security access request is a data security extraction request, the security access task performs the following operations: read the data to be extracted from the security storage to the security memory; perform a decryption operation on the data to be extracted in the security memory; The final data to be extracted is copied to non-secure memory.

In the above solution, after the secure operating system executes the data secure access operation according to the second data secure access request, the method further includes:

The security access task in the security operating system generates a data security access result and sends it to the security monitoring task in the security operating system. The data security access result includes: parameter three and parameter four; wherein parameter three includes data An indication message indicating whether the secure access is successful, parameter four is the verification code MAGIC_SECURE;

Described security monitoring task judges whether the value of parameter four in the data security access result is MAGIC_SECURE, if yes, then the security monitoring task is successful in verifying the legitimacy of the data security access result sent by the security access task, and data security The access process ends; if not, the security monitoring task fails to verify the validity of the data security access result sent by the security access task, and the security monitoring task returns the result of processing failure to the non-secure operating system, and the data security access process Finish.

An embodiment of the present invention provides a data security access device, the device includes: a non-secure operating system and a secure operating system; wherein,

The non-secure operating system is configured to receive a first data security access request; and after generating a second data security access request according to the first data security access request, send the second data security access request to a secure operating system;

The secure operating system is configured to perform legality authentication on the second data security access request, and execute a data security access operation according to the second data security access request when the legality authentication succeeds.

In the above solution, when the first data security access request is a data security storage request, the first data security access request includes the following data access information: the file name of the data to be stored and its storage path,

When the first data security access request is a data security extraction request, the first data security access request includes the following data access information: the file name of the data to be extracted and its extraction path.

In the above solution, the non-secure operating system includes a non-secure access task module for reading the data to be stored from the non-secure memory into the non-secure memory.

In the above solution, the non-secure access task module is further configured to carry the following parameter 1 and parameter 2 in the first data security access request to generate a second data security access request:

Among them, parameter one includes task identifier, operation identifier, and data access information, and parameter two includes verification code MAGIC_NS.

In the above scheme, the legality certification includes: the first legality certification and the second legality certification;

The safety operating system includes a safety monitoring task module and a main control task module; wherein,

The security monitoring task module is configured to receive a second data security access request sent by a non-secure operating system, and perform the first legitimacy authentication on the data security access request in the following manner:

The security monitoring task module judges whether the verification code MAGIC_NS is carried in the second data security access request, if yes, then determines that the first legitimacy authentication of the second data security access request is successful; if not, then determines that the The first legitimacy of the second data security access request fails;

The main control task module is configured to perform a second legitimacy authentication on the second data security access request in the following manner:

The main control task module judges whether each parameter in parameter one in the second data security access request is legal, and when each parameter in said parameter one is legal, the second legitimacy authentication is successful; Sex authentication failed.

In the above solution, the secure operating system also includes: a secure access task module, which is used to perform data secure access operations in the following ways:

When the second data security access request is a data security storage request, the security access task module performs the following operations: copy the data to be stored that has been stored in the non-secure memory to the security memory, and store the data to be stored in the security memory Perform an encryption operation, and write the encrypted data to be stored into the safe memory;

When the second data security access request is a data security extraction request, the security access task module performs the following operations: read the data to be extracted from the security storage to the security memory; decrypt the data to be extracted in the security memory; The decrypted data to be extracted is copied to non-secure memory.

In the above solution, the secure access task module is also used to generate data security access results and send them to the security monitoring task module. The data security access results include: parameter three and parameter four; where parameter three Including the indication message whether the data security access is successful, parameter four is the verification code MAGIC_SECURE;

The security monitoring task module is also used to verify the legitimacy of the data security access results in the following manner:

The security monitoring task module judges whether the value of parameter four in the data security access result is MAGIC_SECURE, if so, then the security monitoring task module successfully verifies the legality of the data security access result sent by the security access task module; if No, the security monitoring task module fails to verify the legality of the data security access result sent by the security access task module.

In the method and device for secure data access provided by the embodiments of the present invention, the non-secure operating system receives a first data secure access request; the non-secure operating system generates a second data secure access request according to the first data secure access request. After obtaining the request, the second data security access request is sent to the security operating system; the security operating system performs legality authentication on the second data security access request, and when the legality authentication is successful, according to the second The data security access request performs a data security access operation. In this way, users can quickly and conveniently store and retrieve important security data, while ensuring that user security data will not be leaked or destroyed.

Description of drawings

FIG. 1 is a flowchart of a data security access method provided by an embodiment of the present invention;

2 is a basic structural diagram of a data security access device provided by an embodiment of the present invention;

FIG. 3 is a flow chart of a data security storage method provided by an embodiment of the present invention;

FIG. 4 is a flow chart of a data security extraction method provided by an embodiment of the present invention.

detailed description

In the embodiment of the present invention, the non-secure operating system receives the first data security access request; after the non-secure operating system generates the second data security access request according to the first data security access request, the second data security The access request is sent to a secure operating system; the secure operating system performs legality authentication on the second data security access request, and when the legality authentication succeeds, executes a data security access operation according to the second data security access request .

The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

Embodiment one

Embodiment 1 of the present invention provides a method for secure data access, as shown in Figure 1, the method includes the following steps:

Step 101: the non-secure operating system receives a first data security access request;

The non-secure operating system usually runs in the non-secure state of the processor (for example, the advanced reduced instruction set (ARM, AdvancedRISCMachine) processor that supports the Trust Zone (TrustZone) security method includes two states: a secure state and a non-secure state), A non-secure operating system can only access non-secure hardware (ie, non-secure memory, non-secure memory). Non-secure memory refers to the memory that can only be accessed in the non-secure state of the processor, and is controlled by the memory controller; non-secure memory refers to the memory that can be accessed in the secure state of the processor or in the non-secure state. Controlled by the memory controller.

In this step, the first data security access request sent by the user is received by the non-secure access task of the non-secure operating system.

The first data security access request sent by the user may generally include: a data security storage request or a data security retrieval request.

When the first data security access request is: a data security storage request, the non-secure access task needs to read the data to be stored from the non-secure memory into the non-secure memory for use by the subsequent secure operating system .

When the first data security access request is a data security storage request, the first data security access request includes the following data access information: the file name of the data to be stored, and its storage path;

When the first data security access request is a data security extraction request, the first data security access request includes the following data access information: the file name of the data to be extracted and its extraction path (that is, the Storage path).

Step 102: After the non-secure operating system generates a second data secure access request according to the first data secure access request, send the second data secure access request to the secure operating system;

Specifically, in this step, after the non-secure access task in the non-secure operating system generates the second data secure access request according to the first data secure access request, the second data securely stores The fetch request is sent to the security monitoring task of the security operating system.

The non-secure access task in the non-secure operating system generates a second data secure access request according to the first data secure access request, including:

The non-secure access task carries the following parameters 1 and 2 in the first data security access request to generate a second data security access request:

Among them, parameter one includes task identification, operation identification and data access information, which is used when the security operating system performs data security access operations in subsequent operations;

Specifically, parameter one here is generated according to the first data security access request, and the value of the task identifier is SECURE_SOURCE or UNSECURE_SOURCE, which is used to indicate the resource type, that is, a security type resource (SECURE_SOURCE) or a non-security type resource (UNSECURE_SOURCE); since the embodiment of the present invention relates to a data security access method, therefore, the values of the task identification in the generated parameter one are all SECURE_SOURCE; the values of the operation identification are safe storage ( SECURE_SAVE), or security extraction (SECURE_LOAD), used to indicate the operation performed on the data of the resource type identified by the task identifier; the data access information in the first parameter is the first data security access request data access information;

Parameter two includes a verification code MAGIC_NS, which is used by the secure operating system to authenticate the legitimacy of the second data security access request in subsequent steps; specifically, the verification code MAGIC_NS is agreed in advance by the non-secure operating system and the secure operating system verification code.

Step 103: The secure operating system performs legality authentication on the second data security access request, and executes a data security access operation according to the second data security access request when the legality authentication is successful.

The secure operating system runs in the secure state of the processor, and can access secure hardware (that is, secure memory, secure memory), and can also access non-secure memory in non-secure hardware. The secure operating system is specially used to process tasks with high security levels. Such as storage and extraction of security data, encryption and decryption of security data, digital rights management, virtual private network (VPN, Virtual Private Network) management, etc. It is a streamlined and stable operating system. The security tasks running in the secure operating system are executed serially, and the scheduling policy is non-preemptive, which improves the security and stability of the system. The secure memory refers to the memory that can only be accessed in the secure state of the processor, and is controlled and implemented by the memory controller; the secure memory refers to the memory that can be accessed only in the secure state of the processor, and is controlled and implemented by the memory controller.

In this step, the legitimacy authentication includes: the first legitimacy authentication and the second legitimacy authentication; wherein, the first legitimacy authentication is performed in the safety monitoring task in the security operating system, and the second legitimacy authentication Security authentication is performed in the main control task in the security operating system; among them, the main control task in the security operating system is in the ready or execution state, and this task creates a corresponding security task through the parameters passed by the security monitoring task to complete the security required by the user. operate. The security monitoring task is also responsible for the communication and switching between the secure operating system and the non-secure operating system. Both the non-secure operating system and the secure operating system can execute a special instruction, such as ARM's security monitoring call (SMC, SecureMonitorCall) instruction jump Turning to the safety monitoring task, parameter 1 and parameter 2 of the SMC instruction are used to save the parameters transmitted from the non-safety operating system to the safe operating system.

Specifically, the security monitoring task that receives the second data security access request carrying parameter 1 and parameter 2 performs the first legitimacy authentication on the second data security access request, and the first Secondary legality verification, including:

The security monitoring task judges whether the verification code MAGIC_NS (i.e. parameter 2) is carried in the second data security access request, and if yes, then determines that the first legitimacy authentication of the second data security access request is successful; if not , it is determined that the second data security access request fails legally for the first time.

When the first legitimacy authentication fails, an error message is returned to the non-secure operating system, and no subsequent operations are performed;

When the first legitimacy authentication is successful, the security monitoring task in the secure operating system sends the parameter one in the second data security access request to the master control task in the secure operating system; after that, perform the second The second legitimacy authentication, the second legitimacy authentication includes: the main control task authenticates the legitimacy of each parameter in the parameter one (that is, it is judged that each parameter in the parameter one includes a task Whether the value of the identification and the operation identification is a legal value, judge whether the file name and the storage or extraction path in the data access information are correct), when each parameter in the parameter one is legal, the second legitimacy authentication Success, otherwise, the second legitimacy verification fails.

When the second legitimacy authentication fails, the main control task returns an error message to the non-secure operating system, and no subsequent operations are performed;

When the second legitimacy authentication succeeds, the main control task instructs the security access task in the security operating system to perform a data security access operation according to the second data security access request.

Specifically, the security access task performs a data security access operation according to the second data security access request, including:

When the second data security access request is a data security storage request, the security access task performs the following operations: copy the data to be stored that has been stored in the non-secure memory to the security memory, and store the data to be stored in the security memory Encryption operation, writing the encrypted data to be stored into the safe memory;

When the second data security access request is a data security extraction request, the security access task performs the following operations: read the data to be extracted from the security storage to the security memory; perform a decryption operation on the data to be extracted in the security memory; The final data to be extracted is copied to non-secure memory.

The algorithm for encrypting the data to be stored and the algorithm for decrypting the data to be extracted can be selected according to actual needs, and there is no limitation here.

After the data security storage or data security extraction operation is completed, the following operations need to be performed to ensure the security of the data security access process:

The security access task generates a data security access result and sends it to the security monitoring task. The data security access result includes: parameter 3 and parameter 4; where parameter 3 includes an indication message whether the data security access is successful, see Number four is the verification code MAGIC_SECURE, which is a verification code agreed in advance between the security access task and the security monitoring task, and is used for the security access task to verify the validity of the security monitoring task.

After receiving the data security access result, the security monitoring task judges whether the value of parameter 4 in the data security access result is MAGIC_SECURE. The legality verification is successful. At this time, save the secure operating system context, restore the non-secure system context, and the data security access process ends; if not, the security monitoring task verifies the legality of the data security access result sent by the security access task Unsuccessful, at this time, the security monitoring task saves the error information locally, and returns the result of processing failure to the non-secure operating system, and the data security access process ends.

Embodiment two

Embodiment 2 of the present invention provides a data security access device located on a terminal, as shown in FIG. 2 , the device includes: a non-secure operating system 21 and a secure operating system 22; wherein,

The non-secure operating system 21 is configured to receive a first data security access request; and after generating a second data security access request according to the first data security access request, send the second data security access request to Send to the security operating system 22;

The secure operating system 22 is configured to perform legality authentication on the second data security access request, and execute a data security access operation according to the second data security access request when the legality authentication is successful.

Wherein, the non-secure operating system 21 runs in the non-secure state of the processor (for example, the ARM processor supporting the TrustZone security method includes two states: a secure state and a non-secure state), and can only access non-secure hardware (that is, non-secure secure memory, non-secure memory). For example: Android, the mainstream operating system running on current smart terminals, is used to meet the various application needs of users on smart terminals. Since the system is open source and free, users can browse the web and install various applications, so the system The security is not high, and may be attacked by viruses or Trojan horses, resulting in the disclosure or destruction of security data.

The secure operating system 22 runs in the secure state of the processor, can access secure hardware (i.e., secure memory 26, secure memory 25), and can also access non-secure memory 23 in non-secure hardware, and is specially used to process tasks with high security levels , such as storage and extraction of security data, encryption and decryption of security data, digital rights management, VPN management, etc. It is a streamlined and stable operating system. The security tasks running in the secure operating system are executed serially, and the scheduling policy is non-preemptive, which improves the security and stability of the system. The main control task running in the main control task module 2203 is in the ready or execution state. This task creates a corresponding security task through the parameters passed by the security monitoring task 2202 in the security monitoring task module 2202 to complete the security operation required by the user. Safety applications can only be installed in the system after safety certification, which ensures the external safety of the safety operating system. The security side access task is running in the security access task module. The safety monitoring task module is also responsible for communication and switching between the safety operating system 22 and the non-safety operating system 21. Both the non-safety operating system 21 and the safety operating system 22 can jump by executing a special instruction, such as the SMC instruction of ARM For the security monitoring task, parameter 1 and parameter 2 of the SMC command are used to save the parameters transmitted from the non-secure operating system to the secure operating system.

Specifically, when the first data security access request is a data security storage request, the first data security access request includes the following data access information: the file name of the data to be stored and its storage path,

When the first data security access request is a data security extraction request, the first data security access request includes the following data access information: the file name of the data to be extracted and its extraction path.

Further, the device also includes: a non-secure memory 23, a non-secure memory 24, a secure memory 25, and a secure memory 26, which are respectively used to store data, including secure data and non-secure data; wherein, both the secure memory and the non-secure memory It is realized by the control of the memory controller; both the secure memory and the non-secure memory are controlled and realized by the memory controller.

Specifically, the non-secure operating system 21 includes a non-secure access task module 2101 for reading data to be stored from the non-secure memory 24 into the non-secure memory 23 .

The non-secure access task module 2101 is further configured to include the following parameter 1 and parameter 2 in the first data security access request to generate a second data security access request:

Among them, parameter one includes task identifier, operation identifier, and data access information, and parameter two includes verification code MAGIC_NS.

Specifically, the legality certification includes: the first legality certification and the second legality certification.

The safety operating system 22 includes a safety monitoring task module 2202 and a main control task module 2203; wherein,

The security monitoring task module 2202 is configured to receive the second data security access request sent by the non-secure operating system, and perform the first legitimacy authentication on the data security access request in the following manner: security monitoring task module 2202 Judging whether the second data security access request carries a verification code MAGIC_NS, if yes, then determining that the second data security access request is successfully authenticated for the first time; if not, then determining that the second data security access request is successful; The first legitimacy of the access request fails;

The main control task module 2203 is configured to perform a second legitimacy authentication on the second data security access request in the following manner: the main control task module 2203 judges whether each parameter 1 in the second data security access request Whether the parameters are legal, when all the parameters in the first parameter are legal, the second legitimacy verification succeeds, otherwise, the second legitimacy verification fails.

Further, the secure operating system also includes: a secure access task module 2201,

Among them, it is used to perform data security access operations in the following ways:

When the second data security access request is a data security storage request, the security access task module 2201 performs the following operations: copy the data to be stored that has been stored in the non-secure memory 23 to the secure memory 25, and store the data in the secure memory 25 The data to be stored is encrypted, and the encrypted data to be stored is written into the safety memory 26;

When the second data security access request is a data security extraction request, the security access task module 2201 performs the following operations: read the data to be extracted from the security storage 26 to the security memory 25; Decryption operation: copy the decrypted data to be extracted to the non-secure memory 23 .

Further, the non-safe operating system 21 also includes a non-safe side file system 2102 and a non-safe side underlying driver 2103, which are used to implement data access operations in the non-safe operating system;

The secure operating system 22 also includes a secure-side file system 2204 and a secure-side underlying driver 2205 for implementing data access operations in the secure operating system.

Further, the secure access task module 2201 is also used to generate a data security access result and send it to the security monitoring task module 2202, the data security access result includes: parameter three and parameter four; wherein, parameter The third includes the indication message whether the data security access is successful, and the fourth parameter is the verification code MAGIC_SECURE;

The security monitoring task module 2202 is also used to verify the legitimacy of data security access results in the following manner:

The security monitoring task module 2202 judges whether the value of parameter 4 in the data security access result is MAGIC_SECURE, if yes, then the security monitoring task module 2202 verifies the legitimacy of the data security access result sent by the security access task module 2201 If not, the security monitoring task module 2202 fails to verify the legality of the data security access result sent by the security access task module 2201.

The method described in the embodiment of the present invention will be described in detail below through specific examples.

The data security storage method provided by the embodiment of the present invention, in actual implementation, on the whole, as shown in Figure 3, mainly includes the following steps:

301: The non-safe side data storage task starts;

302: Select the data to be stored;

303: Read the data to be stored from the non-secure memory to the non-secure memory;

304: Prepare to store task-related parameters and switch to a safe operating system;

305: The security side judges whether the parameters related to the storage task are legal; if legal, go to step 307 to continue execution; if not legal, go to step 306 to continue execution;

306: Return an error message to the non-secure side and jump out of the current process;

307: The security side storage task starts;

308: Instruct the user to enter a password, and receive the password sent by the user;

309: Determine whether the password is legal; if not, go to step 310; if legal, go to step 311;

310: return an error message to the non-secure side, and jump out of the current process;

311: Execute the data security storage process;

Specifically, the process includes: copying the files in the non-secure memory to the secure memory, encrypting the files in the secure memory, writing the files to the secure memory, storing them successfully and returning to the non-secure system.

The data security extraction method provided by the embodiment of the present invention, in actual implementation, on the whole, as shown in Figure 4, mainly includes the following steps:

401: The non-safe side data extraction task starts;

402: Prepare relevant parameters of the data extraction task and switch to a safe operating system;

403: Judging whether the relevant parameters of the data extraction task are legal; if not legal, go to step 304 to continue execution; if legal, go to step 405 to continue execution;

404: Return an error message to the non-secure side and jump out of the current process;

405: The security side security data extraction task starts;

406: Instruct the user to enter a password; and receive the password sent by the user;

407: Judging whether the password is legal; when not legal, go to step 408; when legal, go to step 409;

408: Return an error message to the non-secure side and jump out of the current process;

409: Execute the data security extraction process;

Specifically, the data security extraction process includes: reading files from the secure memory to the secure memory, decrypting the files in the secure memory, copying the files in the secure memory to the non-secure memory, preparing parameters and returning to the non-secure operating system, Start the storage task on the non-secure side, select the storage path, and write files from the non-secure memory to the non-secure memory;

After the above process is executed, the data security extraction process is successful.

Taking the data security storage process as an example, the data security access method provided by the embodiment of the present invention is introduced in detail below;

This example includes the following steps:

Step 501: the processor starts a secure operating system and a non-secure operating system;

Specifically, when the terminal is powered on, the processor is in a secure state, and the secure operating system is first started; the secure operating system is initialized, the main control task is created and executed; the non-secure operating system context is initialized, and switched to the security monitoring task; the security monitoring saves the security The operating system context restores the non-secure operating system context and starts the non-secure operating system; the non-secure operating system is initialized, and then the system runs normally;

Step 502: The user initiates a secure storage request;

Specifically, the user opens the secure storage application program in the terminal, selects the file to be stored, selects the storage path, and clicks the corresponding button for initiating a storage request;

Step 503: the non-secure access task in the non-secure memory responds to the storage request of the user;

Specifically, the non-secure access task obtains storage information from the storage request initiated by the user: the file name and storage path of the file to be stored;

Step 504: If the non-secure access task is a storage request, read the file to be stored in the non-secure memory into the non-secure memory, and then, the non-secure access task prepares the SMC instruction parameters and switches to safety monitoring; specifically, Store the address of the secure storage command (including task ID: SECURE_SOURCE, operation ID: SECURE_SAVE, file parameters) in parameter 1 of the SMC command, for subsequent steps, when the security access task in the security operating system performs data access operations Use; store the verification code MAGIC_NS in the parameter 2 of the SMC command for security monitoring to verify the legitimacy of the SMC command; after that, switch to the security monitoring task;

Step 505: the security monitoring task verifies the legitimacy of the parameters in the SMC command;

Specifically, the safety monitoring task first checks whether the value of parameter 2 in the SMC command is MAGIC_NS, if not, the SMC parameter verification fails, the error information is saved in the CMD, and the result of the non-safe operating system processing failure is returned, and this step ends; If so, the SMC parameter verification is successful, save the value of parameter 1 of the SMC command to the specified global variable para_cmd, send it to the main control task of the security operating system, and save the non-security context, restore the security context, and this step ends;

Step 506: the main control task obtains the para_cmd parameter passed by the security monitoring task, and verifies the legitimacy of the parameter;

Specifically, the main control task verifies the validity of the para_cmd parameter, specifically to verify whether the values of the task ID, operation ID, and file parameters meet the requirements, that is, to determine whether the para_cmd parameter is a legal value, if all parameters are legal, according to The task identifier SECURE_SOURCE in the CMD creates a secure access task, and this step ends; otherwise, the verification of the para_cmd parameter fails, and the error information is saved in the CMD, switching to security monitoring, returning the result of the non-secure operating system processing failure, and this step ends;

Step 507: safe access task running;

Step 508: Authenticate the identity of the user;

Specifically, instruct the user to enter a password (the initial password needs to be set when using the data security access function for the first time) to verify the legitimacy of the password; it is used for storing or extracting secure files;

That is, determine whether the password entered by the user is a locally saved password; if yes, the user authentication is successful; if not, the user authentication fails;

When using it for the first time, after setting the initial password, the user directly logs in to the system to perform data security access operations; the security access task encrypts the initial password set by the user and saves it locally, which is used to verify the user when the user initiates a data storage or retrieval request next time identity.

Step 509: the user selects the storage path of the file to be stored, and clicks OK;

Step 510: the secure access task stores the encryption of the file to be stored in the secure memory from the non-secure memory;

The safe access task copies the files to be stored in the non-safe memory to the safe memory, encrypts the files to be stored in the safe memory, and writes the encrypted files into the safe memory;

Step 511: the safe access task saves the data safe storage result to the SMC instruction, sets the SMC parameter, and switches to safety monitoring;

The data security storage result includes parameter 3 and parameter 4:

Among them, parameter 3 includes information indicating whether the data security storage task is successful, and parameter 4 includes the verification code MAGIC_SECURE;

Step 512: Security monitoring verifies the legitimacy of the parameters in the SMC command;

Check whether the value of parameter 2 of the SMC command is MAGIC_SECURE, if not, the SMC parameter verification fails, save the error information in CMD, and return to the result of the security operating system processing failure, this step is over; if it is, the SMC parameter verification is successful, save The safe operating system context restores the non-safe system context, and this step ends;

Step 513: The parameters returned by the non-secure access task processing are completed for the secure storage process of the file to be stored;

After the storage task is completed, the non-secure access task can also be switched to other applications to perform other processing.

In the specific implementation process, the above-mentioned non-secure operating system 21 and secure operating system 22, non-secure access task module 2101, security monitoring task module 2202, main control task module 2203, secure access task module 2201, non-secure side file system 2102, non-safety side underlying driver 2103 security side file system 2204 and security side underlying driver 2205 can be controlled by a central processing unit (CPU, Central Processing Unit), a microprocessor (MPU, MicroProcessingUnit), a digital signal processor (DSP, DigitalSignalProcessor) in the terminal ) or programmable logic array (FPGA, Field-ProgrammableGateArray) to achieve.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, systems, or computer program products. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention.

Claims (14)

1. A method for securing access to data, the method comprising:

the non-secure operating system receives a first data secure access request;

after the non-secure operating system generates a second data secure access request according to the first data secure access request, sending the second data secure access request to a secure operating system;

and the security operating system carries out validity authentication on the second data security access request, and executes data security access operation according to the second data security access request when the validity authentication is successful.

2. The method according to claim 1, wherein when the first data security access request is a data security storage request, the following data access information is included in the first data security access request: the file name of the data to be stored, and its storage path,

when the first data security access request is a data security extraction request, the first data security access request comprises the following data access information: and the file name and the extraction path of the data to be extracted.

3. The method of claim 2, wherein when the first data security access request is: when the data is requested to be stored safely, the method further comprises the following steps: and reading the data to be stored from the non-secure storage into the non-secure memory by a non-secure access task in the non-secure operating system.

4. The method of claim 3, wherein generating, by the non-secure operating system, a second data security access request based on the first data security access request comprises:

the non-secure access task in the non-secure operating system carries the following parameters I and II in the first data secure access request to generate a second data secure access request:

the first parameter includes task identifier, operation identifier and data access information, and the second parameter includes verification code MAGIC _ NS.

5. The method of claim 4, wherein the legitimacy authentication comprises: first legality authentication and second legality authentication; wherein the first validity authentication includes:

a security monitoring task in a security operating system judges whether the second data security access request carries a verification code MAGIC _ NS, if so, the first time of validity authentication of the second data security access request is determined to be successful; if not, determining that the first validity of the second data security access request fails;

the second legality authentication includes: and the master control task in the safe operating system judges whether each parameter in the first parameter is legal or not, when each parameter in the first parameter is legal, the second legality authentication is successful, and otherwise, the second legality authentication is failed.

6. The method of any of claims 1 to 5, wherein the secure operating system performs a data security access operation according to the second data security access request, comprising:

when the second data security access request is a data security storage request, the security access task executes the following operations: copying the data to be stored which is stored in the non-secure memory to the secure memory, carrying out encryption operation on the data to be stored in the secure memory, and writing the encrypted data to be stored into the secure memory;

when the second data security access request is a data security extraction request, the security access task executes the following operations: reading the data to be extracted from the secure memory to the secure memory; carrying out decryption operation on data to be extracted in a secure memory; and copying the decrypted data to be extracted to the non-secure memory.

7. The method of claim 6, wherein after the secure operating system performs the data security access operation according to the second data security access request, the method further comprises:

the safety access task in the safety operating system generates a data safety access result and sends the data safety access result to the safety monitoring task in the safety operating system, wherein the data safety access result comprises the following steps: a third parameter and a fourth parameter; wherein the third parameter includes an indication message indicating whether the data security access is successful, and the fourth parameter is an authentication code MAGIC _ SECURE;

the security monitoring task judges whether the value of the parameter four in the data security access result is MAGIC _ SECURE, if yes, the security monitoring task successfully verifies the validity of the data security access result sent by the security access task, and the data security access process is finished; if not, the safety monitoring task fails to verify the validity of the data safety access result sent by the safety access task, the safety monitoring task returns a processing failure result to the non-safety operating system, and the data safety access process is finished.

8. A data security access apparatus, the apparatus comprising: a non-secure operating system and a secure operating system; wherein,

the non-secure operating system is used for receiving a first data secure access request; after a second data security access request is generated according to the first data security access request, the second data security access request is sent to a security operating system;

and the safety operating system is used for carrying out validity authentication on the second data safety access request, and when the validity authentication is successful, executing data safety access operation according to the second data safety access request.

9. The apparatus of claim 8, wherein when the first data security access request is a data security storage request, the following data access information is included in the first data security access request: the file name of the data to be stored, and its storage path,

when the first data security access request is a data security extraction request, the first data security access request comprises the following data access information: and the file name and the extraction path of the data to be extracted.

10. The apparatus of claim 9, wherein the non-secure operating system comprises a non-secure access task module for reading data to be stored from the non-secure storage into the non-secure memory.

11. The apparatus according to claim 10, wherein the unsecure access task module is further configured to carry the following parameters one and two in the first data security access request, and generate a second data security access request:

the first parameter includes task identifier, operation identifier and data access information, and the second parameter includes verification code MAGIC _ NS.

12. The apparatus of claim 11, wherein the legitimacy authentication comprises: first legality authentication and second legality authentication;

the safety operating system comprises a safety monitoring task module and a main control task module; wherein,

the security monitoring task module is used for receiving a second data security access request sent by a non-security operating system and carrying out first validity authentication on the data security access request in the following way:

the security monitoring task module judges whether the second data security access request carries a verification code MAGIC _ NS or not, and if so, the first time of validity authentication of the second data security access request is determined to be successful; if not, determining that the first validity of the second data security access request fails;

the main control task module is used for performing second validity authentication on the second data security access request in the following way:

and the main control task module judges whether each parameter in the first parameter in the second data security access request is legal or not, when each parameter in the first parameter is legal, the second legality authentication is successful, and otherwise, the second legality authentication is failed.

13. The method of claim 12, wherein the secure operating system further comprises: the secure access task module is used for executing the data secure access operation in the following way:

when the second data security access request is a data security storage request, the security access task module executes the following operations: copying the data to be stored which is stored in the non-secure memory to the secure memory, carrying out encryption operation on the data to be stored in the secure memory, and writing the encrypted data to be stored into the secure memory;

when the second data security access request is a data security extraction request, the security access task module executes the following operations: reading the data to be extracted from the secure memory to the secure memory; carrying out decryption operation on data to be extracted in a secure memory; and copying the decrypted data to be extracted to the non-secure memory.

14. The apparatus according to claim 13, wherein the security access task module is further configured to generate a data security access result and send the data security access result to the security monitoring task module, and the data security access result includes: a third parameter and a fourth parameter; wherein the third parameter includes an indication message indicating whether the data security access is successful, and the fourth parameter is an authentication code MAGIC _ SECURE;

the security monitoring task module is also used for verifying the validity of the data security access result in the following way:

the safety monitoring task module judges whether the value of the parameter four in the data safety access result is MAGIC _ SECURE, if yes, the safety monitoring task module successfully verifies the validity of the data safety access result sent by the safety access task module; if not, the security monitoring task module fails to verify the validity of the data security access result sent by the security access task module.