ARM TrustZone技术简介

最新推荐文章于 2024-09-22 13:08:03 发布

ASMARM

最新推荐文章于 2024-09-22 13:08:03 发布

阅读量2.9k

点赞数

分类专栏： ARM 文章标签： ARM TrustZone

ARM 专栏收录该内容

26 篇文章

订阅专栏

TrustZone技术为客户端及服务器计算平台提供全面的安全解决方案。通过紧密集成到Cortex-A处理器中，并扩展到整个系统的AMBA AXI总线和特定的TrustZone系统IP块，TrustZone能够保护诸如安全内存、加密模块等外设免受软件攻击。本文介绍TrustZone如何构建一个可信执行环境（TEE），并支持支付保护、数字版权管理等多种应用场景。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

原文出自：http://www.arm.com/zh/products/processors/technologies/trustzone/index.php

TrustZone

ARM TrustZone ^® technology is a system-wide approach to security for a wide array of client and server computing platforms, including handsets, tablets, wearable devices and enterprise systems. Applications enabled by the technology are extremely varied but include payment protection technology, digital rights management, BYOD, and a host of secured enterprise solutions.

TrustZone technology is tightly integrated tightly into Cortex™-A processors but the secure state is also extended throughout the system via the AMBA^® AXI™ bus and specific TrustZone System IP blocks. This system approach means that it is possible to secure peripherals such as secure memory, crypto blocks, keyboard and screen to ensure they can be protected from software attack.

Devices developed with TrustZone technology, according to the recommendations of the Trusted Base System Architecture specification, enables the delivery of platforms capable of supporting a full Trusted Execution Environment (TEE) and security aware applications and secure services, or Trusted Applications (TA). A Trusted Execution Environment is a small secure kernel, and normally developed with standard APIs, developed to the TEE specification evolved by the Global Platform industry forum .

TrustZone enables the development of separate Rich Operating System and Trusted Execution Environments by creating additional operating modes to the Normal domain, known as the Secure domain and the Monitor mode. The Secure domain has the same capabilities to the normal domain while operating in a separate memory space. The Secure Monitor acts as a virtual gatekeeper controlling migration between the domains.

Read more information on the use and development of TEEs and Secure Monitor Code.

为什么选择 TrustZone？

硬件架构

软件架构

系统架构

系统组件

Mobile devices have evolved into open software platforms capable of downloading a huge variety of applications from the internet. These applications are validated by the device OEM to ensure quality, however malicious code is increasingly being created to target this class of devices.

In parallel, the demand for mobile devices to handle high-value services is gaining significant momentum. New business models are emerging, from the capability to pay for, download and view the latest Hollywood blockbuster for a specific period, or the ability to pay bills and manage bank accounts remotely from a handset.

These trends have already made mobile devices the next frontier for software attack vectors such as malware, trojans and rootkits. However, through the application of advanced security technology based on ARM TrustZone technology and integrating SecurCore™ tamper resistant elements it is possible to develop devices that can offer both a feature-rich open operating environment and robust security solutions.