Design And Implementation Of Mobile Payment System Based On ARM-Trustzone

The mobile payment industry was born under the circumstance of the rapid development of modern communication and information technology and popularity of mobile devices such as smart phones. The widespread use of mobile payment can accelerate the traditional consumption process and make people's daily lives convenient. It can increase the efficiency of payment and has a huge development potential. But unfortunately, current mobile device operating systems such as Android do not provide an adequate secure environment and are vulnerable to security attacks. This situation will be the constraint of mobile payment development. Therefore, how to enhance the security of mobile devices is a key challenge we are facing to in future years.Addressing this challenge, many researchers in different institutions and companies have done a lot of research work to meet security requirements of mobile device. The recent developments in enhancing the security of mobile devices include software and hardware virtualization. A non-profit association called GlobalPlatform has developed and published a specification called Trusted Execution Environment (TEE), which has been seen as a reasonable solution to solve this problem. In this specification, a separate TEE that running alongside Rich Execution Environment (REE) (such as Android, iOS) is proposed to provides security services for REE, and this solution relies on the hardware security extension such as ARM TrustZone.This thesis focuses on the research of the TEE solution based on ARM TrustZone. Firstly it analyses the background of mobile payment and TEE specification, introduces the research progress and status of mobile device security issue at home and abroad. Then, the thesis mainly illustrates the related technology of TEE. On this basis, we design and implement a mobile payment prototype system based on TEE; in addition we test its function and capability. The result demonstrates that the function and capability of the system reaches our expectation. It will be a good help to wide usage of mobile payment application with TEE.