TEE 환경의 AVF 기반 전환 및 적용 연구

다국어 초록 (Multilingual Abstract)

The ARM TrustZone-based TEE(Trusted Execution Environment) has provided hardware-level security and fulfilled Android's security requirements. However, it faces limitations due to the increasing TCB(Trusted Computing Base) and fragmentation issues. To address these challenges, Android 13 introduced the AVF(Android Virtualization Framework), which provides isolated execution environments. Nevertheless, AVF does not consider compatibility with existing TEE-based applications, making migration difficult.<BR/> In this study, we extend the existing Open-TEE research that emulates GP(GlobalPlatform) compatible APIs to AVF-based, and validate the proposed system through experiments in terms of security, compatibility, performance, and ease of adaptation. The results demonstrate the feasibility of porting existing CA(client application) and TA(trusted application) to AVF environments with minimal modifications.