基於OP-TEE的可信應用程式軟體生態系統;TAMS:An Trusted Application Ecosystem base on OP-TEE

NCUIR > College of Electrical Engineering & Computer Science > Executive Master of Computer Science and Information Engineering > Electronic Thesis & Dissertation > Item 987654321/83948

Please use this identifier to cite or link to this item: http://ir.lib.ncu.edu.tw/handle/987654321/83948

Title:	基於OP-TEE的可信應用程式軟體生態系統;TAMS:An Trusted Application Ecosystem base on OP-TEE
Authors:	邱振玠;Chiu, Chen-Chieh
Contributors:	資訊工程學系在職專班
Keywords:	OP-TEE;IoT;OP-TEE;IoT
Date:	2020-08-20
Issue Date:	2020-09-02 17:44:31 (UTC+8)
Publisher:	國立中央大學
Abstract:	半導體技術的進步，嵌入式平台的計算能力愈來愈強大，加上5G 超高速、低延時通訊技術，使得物聯網應用正快速發展，物聯網安全也越趨重要。為了提昇物聯網安全性，各大處理器廠商都在自家處理器加上可信執行環境(Trust Execution Environment) 技術，讓有隱私或安全議題的應用程式在可信執行環境中執行以保護其安全性，而且置放於可信執行環境中執行的應用程式亦必須是可信的應用程式(Trusted Application)。當設備製造商開始使用可信執行環境在來作為開發平台時，如何建構出一個同時兼顧安全性與開放性的平台軟體生態圈讓第三方進來開發可信應用程式，是必然會面臨到的問題與挑戰。本論文中完善OPTEE 中所欠缺的針對第三方所開發的可信應用程式的來源驗證機制，同時提供了一個具體而微的實作範例。;The Internet of Things (IoT) is rapidly evolving in recent years. IoT devices will be able to generate large amounts of securityand privacysensitive data. In order to enhance the security of the Internet of Things, processor manufacturers have added Trusted Execution Environment (TEE) to their processors to enhance the security of the Internet of Things. Building the TEE software ecosystem is the important thing for device manufacturers, software vendor, cloud service provider and customers. To building TEE software ecosystem will be facing a problem which most secure operating system in TEE like OPTEE, by default all Trusted Applications (TA) are signed with the single RSA key (private key). Device manufacturers need to provide the same private key to many software vendors for TA signing. However, ask all software vendors to protect the same private key safely is difficultly. In this paper, we implement third parties the trusted application verify mechanism of OPTEE. It solves problem of the OPTEE only support a single key and reduce loading of private key management in device manufacturers .
Appears in Collections:	[Executive Master of Computer Science and Information Engineering] Electronic Thesis & Dissertation

Files in This Item:

File	Description	Size	Format
index.html		0Kb	HTML	229	View/Open

社群 sharing

Loading...