Trust zone-based operating system and method

A trust zone-based operation method, wherein an operating system to which the method is applied is stored on a mobile device, the operating system comprises a secure world subsystem, a trusted execution environment (TEE), a TEE monitoring area, and a security switching apparatus run in the secure world subsystem, the TEE and the TEE monitoring area are separately connected to the security switching apparatus, and the method comprises:

• after receiving a first sensitive operation request sent by a trusted application (TA) in the TEE, storing, by the TEE, in a general-purpose register, a first sensitive instruction identifier corresponding to the first sensitive operation request and a first operation parameter of the first sensitive operation request, and sending a first switching request carrying a first switching identifier to the security switching apparatus, wherein the first switching identifier is used to identify that a running environment of the secure world subsystem needs to be switched from the TEE to the TEE monitoring area;
• switching, by the security switching apparatus, the running environment of the secure world subsystem from the TEE to the TEE monitoring area according to the first switching request;
• and
• storing, by the TEE monitoring area, a sensitive instruction in the operating system;
• and after the running environment of the secure module subsystem is switched from the TEE to the TEE monitoring area, reading the first sensitive instruction identifier and the first operation parameter from the general-purpose register, calling a corresponding first sensitive instruction based on the first sensitive instruction identifier, and performing a corresponding first sensitive operation by using the called first sensitive instruction and the first operation parameter.