Secure Storage Model Based on TrustZone

Abstract

The explosive growth of the mobile Internet has brought great convenience to people’s lifestyles, but it is followed by corresponding security issues. Especially on the Android system with open-source nature, once the system is rooted, it will not be able to protect effectively the user’s data security. This paper proposes a secure storage model to provide better security for secure storage of private files based on TrustZone technology. We isolate the system’s hardware and software environment into two areas-the Trusted Execution Environment (TEE) and the Rich Execution Environment (REE) by using TrustZone technology. We perform normal operations in the REE and switch to the TEE environment for encryption and decryption when it is necessary to operate the privacy file. We combine a traditional encryption and decryption algorithm to implement a secure encryption and decryption module to encrypt and decrypt private data. The core encryption and decryption operations are implemented in the TEE to achieve secure encryption and decryption.