TruZ-View: Developing TrustZone User Interface for Mobile OS Using Delegation Integration Model
TruZ-View: Developing TrustZone User Interface for Mobile OS Using Delegation Integration Model
复制标题
DOI：
10.1145/3292006.3300035
复制
发表时间：
2019-03
期刊：
影响因子：
--
通讯作者：
Kailiang Ying;Priyank Thavai;Wenliang Du
中科院分区：
文献类型：
--
作者：
Kailiang Ying;Priyank Thavai;Wenliang Du
当操作系统和管理程序受到损害时，移动设备当前提供了一个名为“受信任执行环境（TEE）”的硬件保护模式，以保证用户界面（UI）的机密性和完整性。当前的TEE UI解决方案采用了一个独立的设计模型，该模型在TEE中提供了功能齐全的UI堆栈，但它们无法管理TEE的一个关键设计原理：一个小的值得信赖的计算机（TCB），应该更容易地与丰富的操作系统相比，经过验证。由于单个UI堆栈的大小，自包含模型的TCB大小很大。为了降低TEE UI解决方案的TCB尺寸，我们提出了一种新型的TEE UI设计模型，称为委托模型。具体来说，我们的设计重用了大部分富含OS UI的堆栈。与在TEE中保护三维UI处理的现有UI解决方案不同，我们的设计仅作为二维表面保护UI，从而降低了TCB尺寸。我们的系统称为TRUZ-VIEW，允许应用程序开发人员使用丰富的OS UI开发环境来开发Tee UI，并在TEE和RICH OS上使用一致的UI外观。我们成功地在Hikey Board上实施了设计。此外，我们开发了几种Tee UI用例，以保护UI的机密性和完整性。我们进行了彻底的安全分析，以证明委托UI模型的安全性。我们的实际应用程序评估表明，开发人员可以利用我们的TEE UI，而对现有应用程序的UI逻辑进行了很少的更改。
When OS and hypervisor are compromised, mobile devices currently provide a hardware protected mode called Trusted Execution Environment (TEE) to guarantee the confidentiality and integrity of the User Interface (UI). The present TEE UI solutions adopt a self-contained design model, which provides a fully functional UI stack in the TEE, but they fail to manage one critical design principle of TEE: a small Trusted Computing Base (TCB), which should be more easily verified in comparison to a rich OS. The TCB size of the self-contained model is large as a result of the size of an individual UI stack. To reduce the TCB size of the TEE UI solution, we proposed a novel TEE UI design model called delegation model. To be specific, our design reuses the majority of the rich OS UI stack. Unlike the existing UI solutions protecting 3-dimensional UI processing in the TEE, our design protects the UI solely as a 2-dimensional surface and thus reduces the TCB size. Our system, called TruZ-View, allows application developers to use the rich OS UI development environment to develop TEE UI with consistent UI looks across the TEE and the rich OS. We successfully implemented our design on HiKey board. Moreover, we developed several TEE UI use cases to protect the confidentiality and integrity of UI. We performed a thorough security analysis to prove the security of the delegation UI model. Our real-world application evaluation shows that developers can leverage our TEE UI with few changes to the existing app's UI logic.