Electronic device for authenticating application and operating method thereof

A method for operating an electronic device, the method comprising:

• transmitting, by an application on a rich execution environment (REE) associated with a normal operating system for managing program execution thereon, a request to access a secure storage to an authentication agent;
• generating, by the authentication agent on the REE, a digital fingerprint of the application;
• checking, by a driver in the normal operating system, integrity of the authentication agent;
• transmitting, by the authentication agent, the digital fingerprint of the application to a trusted application on a trusted execution environment (TEE), which is associated with a secure operating system for managing program execution thereon;
• verifying, by the trusted application, the digital fingerprint of the application;
• and
• accessing, by the trusted application, the secure storage based on the request to access the secure storage, responsive to success by the trusted application in verifying the digital fingerprint of the application;
• wherein the generating of the digital fingerprint comprises:
• reading, by the authentication agent, code data of a code area using a process identifier of the application received from the application.

A method for operating an electronic device, the method comprising:

• receiving, at a trusted application program executing in a trusted execution environment (TEE) of a processor, which is associated with a secure operating system for managing program execution thereon, a digital fingerprint corresponding to code of an application program from an authentication agent program, the application program and the authentication agent program executing on a rich execution environment (REE) associated with a normal operating system for managing program execution thereon, the normal operating system associated with the REE comprising a driver that is configured to check integrity of the authentication agent program;
• authenticating, by the trusted application program, the application program based on a comparison of the digital fingerprint thereof with a plurality of enrolled digital fingerprints associated with a secure storage medium;
• and
• permitting, by the trusted application program, access to the secure storage medium responsive to the authenticating of the application program based on the digital fingerprint thereof;
• wherein the digital fingerprint is generated based on code data of a code area that is read using a process identifier of the application provided by the application.