基于TrustZone技术的隐私数据自动加密方法研究

Research on privacy data automatic encryption method based on TrustZone technology

互联网的快速发展带来了用户隐私数据安全等问题,传统的解决方案是对数据进行加密。但由于加密方法存在加密过程中数据容易被泄漏,以及密钥不易存储和管理等问题,因此,针对以上问题,在TrustZone技术的基础上,对数据加密密钥生成、存储结构、加密策略、密钥存储、密钥获取进行了设计,解决了加密隐私数据过程中容易出现的安全隐患的问题。最后,在qemu虚拟硬件平台上进行了测试,验证了加密方法的可行性。

the rapid development of the Internet has brought security problems such as user privacy data security.The traditional solution is to encrypt the data.However,the data is easy to be leaked and the key is not easy to store and manage in the encryption process.Therefore,in view of the above problems,the data encryption key generation,storage structure,encryption strategy,key storage and key acquisition are designed based on TrustZone technology,so as to solve the security risks in the process of encrypting private data.Finally,QEMU virtual hardware platform is used to verify the feasibility of the encryption method.