Rushmore: securely displaying static and animated images using TrustZone
Rushmore: securely displaying static and animated images using TrustZone
复制标题
Rushmore：使用 TrustZone 安全地显示静态和动画图像
DOI：
--
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Steven Y. Ko
中科院分区：
文献类型：
--
作者：
Chang Min Park;Donghwi Kim;D. Sidhwani;Andrew Fuchs;Arnob Paul;Sung;Karthik Dantu;Steven Y. Ko
我们提出了拉什莫尔（Rushmore）系统，它使用TrustZone安全地显示静态或动态图像。拉什莫尔的核心功能是在移动设备上安全地解密并显示（由可信方发送的）加密图像。尽管先前的方法已经表明使用TrustZone安全显示加密图像是可能的，但它们存在一个严重的局限性，这极大地阻碍了TrustZone在显示安全方面的应用。这个局限性在于，当TrustZone的可信域（安全世界）控制显示器时，不可信域（普通世界）无法同时显示任何内容。这个局限性源于先前的方法为了保证安全而给予安全世界对显示硬件的独占访问权。通过拉什莫尔系统，我们利用一个众所周知但被忽视的名为图像处理单元（IPU）的硬件特性来克服这个局限性，该硬件特性提供多个显示通道。通过在普通世界和安全世界之间划分这些通道，我们使两个世界能够在不牺牲安全性的情况下同时在屏幕上显示像素。此外，我们表明，通过正确的加密方法，对于中小尺寸的图像，我们能够以30帧每秒或更高的帧率解密并显示加密的动态图像，对于大尺寸图像则能达到约30帧每秒。我们为拉什莫尔系统采用的一种值得注意的加密方法是视觉密码学，并且我们证明对于某些用例它是其他加密方法的一种轻量级替代方案。我们的评估表明，除了提供可用的帧率外，拉什莫尔系统对在普通世界中运行的应用程序产生的开销小于5%。
We present Rushmore, a system that securely displays static or animated images using TrustZone. The core functionality of Rushmore is to securely decrypt and display encrypted images (sent by a trusted party) on a mobile device. Although previous approaches have shown that it is possible to securely display encrypted images using TrustZone, they exhibit a critical limitation that significantly hampers the applicability of using TrustZone for display security. The limitation is that, when the trusted domain of TrustZone (the secure world) takes control of the display, the untrusted domain (the normal world) cannot display anything simultaneously. This limitation comes from the fact that previous approaches give the secure world exclusive access to the display hardware to preserve security. With Rushmore, we overcome this limitation by leveraging a well-known, yet overlooked hardware feature called an IPU (Image Processing Unit) that provides multiple display channels. By partitioning these channels across the normal world and the secure world, we enable the two worlds to simultaneously display pixels on the screen without sacrificing security. Furthermore, we show that with the right type of cryptographic method, we can decrypt and display encrypted animated images at 30 FPS or higher for medium-to-small images and at around 30 FPS for large images. One notable cryptographic method we adapt for Rushmore is visual cryptography, and we demonstrate that it is a light-weight alternative to other cryptographic methods for certain use cases. Our evaluation shows that in addition to providing usable frame rates, Rushmore incurs less than 5% overhead to the applications running in the normal world.
DOI：
10.1145/3210240.3210334
发表时间：
2018-06
期刊：
Proceedings of the 16th Annual International Conference on Mobile Systems, Applications, and Services
影响因子：
--
作者：
Matthew Lentz;Rijurekha Sen;P. Druschel;Bobby Bhattacharjee
通讯作者：
Matthew Lentz;Rijurekha Sen;P. Druschel;Bobby Bhattacharjee
DOI：
10.1145/3268935.3268937
发表时间：
2018-01
期刊：
Proceedings of the 3rd Workshop on System Software for Trusted Execution
影响因子：
--
作者：
Renju Liu;Mani Srivastava
通讯作者：
Renju Liu;Mani Srivastava
DOI：
10.1145/2906388.2906412
发表时间：
2016-06
期刊：
Proceedings of the 14th Annual International Conference on Mobile Systems, Applications, and Services
影响因子：
--
作者：
Paarijaat Aditya;Rijurekha Sen;P. Druschel;Seong Joon Oh;Rodrigo Benenson;Mario Fritz;B. Schiele;Bobby Bhattacharjee;Tongyu Wu
通讯作者：
Paarijaat Aditya;Rijurekha Sen;P. Druschel;Seong Joon Oh;Rodrigo Benenson;Mario Fritz;B. Schiele;Bobby Bhattacharjee;Tongyu Wu