Trusted application access control method and terminal

An apparatus, comprising:

• at least one processor;
• and
• a memory coupled to the at least one processor and configured to store programming instructions that, when executed by the at least one processor, cause the apparatus to perform operations comprising:
• receiving, in a trusted execution environment (TEE), a request for accessing a target trusted application (TA) from a client application (CA);
• determining a CA identifier in the TEE based on the request for accessing the target TA;
• determining, in the TEE, a service level of the CA based on a correspondence between the CA identifier and the service level of the CA;
• and
• providing, in the TEE by using the target TA, a service corresponding to the service level for the CA, including loading the target TA corresponding to the service level of the CA, creating a session handle of the target TA, and returning the session handle, wherein the session handle is used by the CA to access the target TA.

A non-transitory computer-readable storage medium having computer-readable program code stored therein that, in response to execution by a processor of an apparatus, cause the apparatus to perform operations comprising:

• receiving, in a trusted execution environment (TEE), a request for accessing a target trusted application (TA) from a client application (CA);
• determining a CA identifier in the TEE based on the request for accessing the target TA;
• determining, in the TEE, a service level of the CA based on a correspondence between the CA identifier and the service level of the CA;
• and
• providing, in the TEE by using the target TA, a service corresponding to the service level for the CA, including loading the target TA corresponding to the service level of the CA, creating a session handle of the target TA, and returning the session handle, wherein the session handle is used by the CA to access the target TA.