A private-data protection mechanism for trusted mobile platform

Abstract

The need for user's data protection in mobile platform is a key element of mobile security. Although existing Operating Systems (OS) for mobile terminal have introduced many methods to enhance privacy, these methods have the lacks of efficiency and flexibility. Focus on the leaking of private information, this paper proposes a private-data protection mechanism based on Mobile Trusted Module (MTM). Our method takes advantage of computing resources in MTM and MTM hardware security property. The private key is generated inside MTM with a secure key-generation algorithm. Through the encryption technology, system could maintain credibility even when the system does not powered on and trusted mechanism does not worked. A prototype system is developed with Linux kernel. The testing result shows that the proposed data protection mechanism is helpful to ensure user's data integrity and privacy.