# US 2019/0318087 A1 · Tee access control method and mobile terminal implementing same

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0318087 A1
- Document ID: US20190318087A1
- Status: Published application
- Kind: A1
- Application number: 16/088,929
- Filed: 2017-03-28
- Published: 2019-10-17
- Earliest claimed: 2016-04-01
- Assignees: China Unionpay Co., Ltd.
- Applicants: China Unionpay Co., Ltd.
- Inventors: Chengqian CHEN; Yu ZHOU; Wei GUO
- Web page: https://patentgrep.com/patent/US20190318087A1

## CPC

- G06F 21/56: Computer malware detection or handling, e.g. anti-virus arrangements
- G06F 21/562: {Static detection}
- G06F 21/31: User authentication
- G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine
- G06F 21/74: operating in dual or compartmented mode, i.e. at least one secure mode
- G06F 2221/033: Test or assess software
- G06F 2221/2149: Restricted operating environment
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

The present invention relates to a method for access control of a multimedia system to a secure operating system and a mobile terminal for implementing the method. The method includes the steps of: initiating an application access request for selecting a trusted application from a client application of a multimedia system to a secure operating system; making a decision as to whether the client application is a malicious application, and if not, proceeding to a next step, if yes, returning Selection Failure to the client application and performing an interrupt handling; sending the application access request from the multimedia system to the secure system; and acquiring, at the secure operating system, the trusted application based on the application access request and returning the trusted application to the multimedia system. The malicious accesses initiated by a malicious application to a trusted application in a securing operating system can be prevented without switching between systems, and the problem that a trusted application cannot be accessed due to malicious access can be avoided.

## Claims

### Claim 1

A method for access control of a multimedia system to a secure system, comprising:
a secure service request step for initiating an application access request for selecting a trusted application from a client application of a multimedia system to a secure operating system;
an access right decision step for making a decision as to whether the client application that initiates an invocation is a malicious application, and if not, proceeding to an application request sending step, and if yes, returning Selection Failure to the client application and performing an interrupt handling;
the application request sending step for sending the application access request from the multimedia system to the secure operating system; and
an application acquiring step for acquiring a trusted application and returning the trusted application to the multimedia system based on the application access request at the secure operating system, .

### Claim 2 (depends on 1)

The method for access control of a multimedia system to a secure system according to claim 1, wherein the access right decision step comprises the sub-steps of:
acquiring an application identification of the client application that initiates the invocation;
deciding whether the client application is a malicious application based on the application identification; and
if not, proceeding to the application request sending step, and if yes, returning Selection Failure to the client application and performing the interrupt handling.

### Claim 3 (depends on 1, 2)

The method for access control of a multimedia system to a secure system according to claim 1 or claim 2, wherein in the step of deciding whether the client application is a malicious application based on the application identification, querying a malicious application registry stored in the multimedia system, and deciding whether the client application is a malicious application based on the application identification, wherein the malicious application registry stores at least application identifications of the malicious applications.

### Claim 4 (depends on 3)

The method for access control of a multimedia system to a secure system according to claim 3, wherein the application acquiring step comprises the sub-steps of:
selecting a respective trusted application based on a trusted application identification in the application access request at a secure operating system, and sending the application access request to the respective trusted application;
acquiring a username and a password from the application access request, and making a decision as to the validity of the username and the password; and
returning the result of validity decision as the trusted application selection result to the multimedia system from the secure operating system.

### Claim 5 (depends on 4)

The method for access control of a multimedia system to a secure system according to claim 4, wherein in the step of application acquiring step, the multimedia system acquires the trusted application selection result, deciding whether the client application is a malicious application based on a rule condition prestored therein, and if yes, the client application is registered into the malicious application registry.

### Claim 6 (depends on 5)

The method for access control of a multimedia system to a secure system according to claim 5, wherein the rule condition is set as: the times that the client application fails to acquire the trusted applications exceeds a prescribed number.

### Claim 7

A mobile terminal for implementing access control of a multimedia system to a secure operating system, the mobile terminal comprising a multimedia system and a secure operating system, wherein the multimedia system comprises:
a client application for initiating an application access request for selecting a trusted application to a secure operating system;
an interaction module for providing the client application with an application access interface for accessing the secure operating system;
a control access module for making a decision as to whether the client application that is currently accessing is a malicious application, and listening for a processing result of selecting the trusted application by the client application, and making a decision as to whether the access initiated by the client application is a malicious access based on prescribed rules; and
a first communication module for implementing data transmission between the multimedia system and the secure operating system, the secure operating system includes:
one or more trusted applications;
a command distributing module for distributing an application access request from a multimedia operating system to a respective trusted application;
a user access right management module, invoked by the trusted application, for making a decision as to the validity of the application access request; and
a second communication module for implementing data transmission between the secure operating system and the multimedia system.

### Claim 8 (depends on 7)

The mobile terminal according to claim 7, wherein the interaction module acquires an application identification of the client application from the application access request sent by the client application, and provides the application identification to the control access module.

### Claim 9 (depends on 8)

The mobile terminal capable according to claim 8, wherein the control access module includes:
a malicious application registry for storing at least application identifications of malicious applications;
a rule file for storing at least prescribed rules for making a decision as to whether the client application is a malicious application; and
a control processing module for making a decision as to whether the client application that is currently accessing, as provided from the interaction module, is a malicious application based on application identifications of the malicious applications stored in the malicious application registry, and listening for the processing result of selecting the trusted application by the client application, and making a decision as to whether the access initiated by the client application is a malicious access based on the prescribed rules stored in the rule file.

### Claim 10 (depends on 9)

The mobile terminal according to claim 9, wherein the control processing module obtains the processing result of selecting a trusted application by the client application from the first communication module.

### Claim 11 (depends on 10)

The mobile terminal according to claim 10, wherein the user access right management module makes a decision as to whether the username and the password contained in the application access request are correct based on the invocation of the trusted application.