Build a trusted storage system on a mobile phone. (1st March 2019)

• Record Type: Journal Article
• Authors: Zhang, Qiang; Qiao, JianZhong; Meng, QingYang
• Is Part Of: IET information security. Volume 13:Number 2(2019)
• Page Start: 157
• Page End: 166
• Publication Date: 2019-03-01
• Subjects: mobile computing -- security of data -- storage allocation -- formal verification -- mobile handsets; mobile phone -- Trusted Execution Environment‐based trusted storage system -- TEE -- TSS -- mobile devices -- GlobalPlatform specifications -- security storage operation properties -- atomicity operations -- REE's kernel memory space -- memory overloads -- formal method -- functional correctness -- traditional formal verification tool -- data integrity -- memory times allocation; Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/iet-ifs.2018.5031
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract : The authors introduce their design, implementation and formally verification of a Trusted Execution Environment (TEE)‐based trusted storage system (TSS) in mobile devices, which conforms to GlobalPlatform specifications. The authors' TSS provides not only authenticating the integrity and freshness of data but also many security storage operation properties like atomicity operations of a persistent object. To improve data store efficient when a big persistent object is read or written, a new mechanism that dynamic allocate continuous memory in REE's kernel memory space and map the address to the TEE through a communication pipe is proposed. This method can reduce switching times, allocating memory times and copy memory overloads between two worlds. A formal method is used in their design and development to guarantee the correctness and security of TSS. They consider the functional correctness mainly in this study, and use traditional formal verification tool – VCC verify the functional correctness of TSS. Their evaluation demonstrates its advantage compared to existing systems in addition.