Secure element and related device

A device, comprising:

• a processor configured to:
• divide program code and read-only data of an image of a secure operating system into at least one system image resident segment and at least one system image dynamic loading segment in a manner that that pieces of the program code or pieces of the read-only data of the image of the secure operating system that correspond to functions of the secure operating system that are mandatory for the secure operating system to run are comprised in the at least one system image resident segment and pieces of the program code or pieces of the read-only data of the image of the secure operating system that correspond to functions of the secure operating system that are not mandatory for the secure operating system to run are comprised in the at least one system image dynamic loading segment;
• generate a first signature for the at least one system image resident segment;
• and
• generate a second signature from a combined group comprising the at least one system image resident segment, the first signature, and the at least one system image dynamic loading segment, wherein the secure operating system is an operating system run by a secure element disposed in a terminal device;
• and
• a secure memory configured to provide a storage space for running of the processor.

A method, comprising:

• receiving, by a terminal device, a secure program from a server, wherein:
• the terminal device comprises a secure element, the secure element comprising a processor and a secure memory, the processor and the secure memory being integrated into a semiconductor chip, the secure memory being configured to provide a storage space for the processor to load and run the secure program;
• the secure program comprises an image of a secure operating system, program code and read-only data of the image of the secure operating system being divided into at least one system image resident segment and at least one system image dynamic loading segment in a manner that that pieces of the program code or pieces of the read-only data of the image of the secure operating system that correspond to functions of the secure operating system that are mandatory for the secure operating system to run are comprised in the at least one system image resident segment and pieces of the program code or pieces of the read-only data of the image of the secure operating system that correspond to functions of the secure operating system that are not mandatory for the secure operating system to run are comprised in the at least one system image dynamic loading segment;
• the at least one system image resident segment and initialized and uninitialized data of the image of the secure operating system reside in the secure memory when the processor runs the secure operating system;
• and
• the image of the secure operating system comprises:
• a first signature for the at least one system image resident segment;
• and
• a second signature generated from a combined group comprising the at least one system image resident segment, the first signature, and the at least one system image dynamic loading segment;
• dividing, by the terminal device, the at least one system image dynamic loading segment into a plurality of pages, wherein each of the plurality of pages comprises content of the corresponding system image dynamic loading segment;
• performing, by the terminal device, security processing on each of the plurality of pages to obtain a plurality of security-processed pages;
• and
• migrating, by the terminal device, each of the plurality of security-processed pages to an external storage for the secure element.