GB/T 42572-2023Information security technology - Trusted execution environment service specification (English PDF)

1 Scope

This document establishes a technical framework system for trusted execution environment services, and specifies relevant security technical requirements and testing and evaluation methods:

This document is applicable to the design, development, testing, etc: of trusted execution environment services, equipment manufacturers, system software providers, testing agencies and

Participants in credible execution environment services such as scientific research institutions can refer to it:

2 Normative references

The contents of the following documents constitute the essential provisions of this document through normative references in the text: Among them, dated references

For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document:

GB/T 17901:1-2020 Information Technology Security Technology Key Management Part 1: Framework

GB/T 25069-2022 Information Security Technical Terminology

GB/T 41388-2022 Information Security Technology Trusted Execution Environment Basic Security Specifications

3 Terms and Definitions

The following terms and definitions defined in GB/T 25069-2022 and GB/T 41388-2022 apply to this document:

3:1

Based on hardware-level isolation and secure boot mechanism, in order to ensure the confidentiality, integrity, and authenticity of security-sensitive application-related data and codes

A software operating environment built with the goal of non-repudiation:

Note: Hardware-level isolation refers to the hardware-based security extension mechanism, through the fixed division or dynamic sharing of computing resources, to ensure that isolated resources are not blocked by the rich execution environment:

A security mechanism for environment access:

[Source: GB/T 41388-2022, 3:3]

3:2

A software operating environment that provides basic functions and computing resources for applications:

Note: The rich execution environment is an operating environment that exists independently of the trusted execution environment:

[Source: GB/T 41388-2022, 3:4]

3:3

A software program that runs in a trusted execution environment and provides basic, general, and public functions for REE:

Note: This document is referred to as "TEE service":

3:4

A software program that runs in a trusted execution environment and provides an information interaction interface:

END: AI-Assisted Draft (Manual Translation Upon Order)

GB/T 42447 | GB/T 42453 | GB/T 42460 | GB/T 42570 | GB/T 42564 | […]