A Sensitive Data Protection Framework Based on TrustZone
Wenchang Wu, Min Zhao · 2022
The development of the Internet has made mobile devices become an indispensable part of work for people to store and process sensitive data. Protecting data through encryption algorithms is one of the best ways to solve data security problems at the current stage. However, traditional solutions only focus on the security of encrypted data, and cannot guarantee the security of data during the encryption process. Therefore, in view of the security problems of traditional data encryption, A sensitive data protection framework is proposed in this paper. The encryption process is security enhanced by implementing the data encryption process in the Trusted Execution Environment (TEE). The uniqueness and security of the keys are guaranteed by generating the keys related to the device and the application. The prototype system is implemented based on Qemu. Finally, experiments show that this framework has good security and feasibility with little increase in overhead.