EMUI 11.0 Security Technical White Paper Issue 1.0 Date 2020-11-30 EMUI 11.0 Security Technical White Paper Contents Contents 1 Overview ........................................................................................................................... 1 Introduction ......................................................................................................................................................... 1 EMUI Security ..................................................................................................................................................... 2 2 Hardware Security ............................................................................................................. 5 Secure Boot ......................................................................................................................................................... 5 Hardware Encryption/Decryption Engine and RNG ................................................................................................. 6 HUK ................................................................................................................................................................... 7 Device Group Key ................................................................................................................................................ 7 Device Attestation ................................................................................................................................................ 7 Secure Element* .................................................................................................................................................. 8 Secure Storage* ................................................................................................................................................... 8 Mobile Security Processor* ................................................................................................................................... 8 3 TEE ................................................................................................................................... 9 iTrustee Secure OS ............................................................................................................................................... 9 Trusted Storage Service ....................................................................................................................................... 11 Encryption/Decryption Service ............................................................................................................................. 11 Trusted Display and Input (TUI) ........................................................................................................................... 11 Trusted Time ...................................................................................................................................................... 12 4 System Security ............................................................................................................... 13 Integrity Protection ............................................................................................................................................. 14 Kernel Vulnerability Anti-exploitation.................................................................................................................. 15 Kernel Attack Detection ...................................................................................................................................... 16 MAC ................................................................................................................................................................. 16 Identity Authentication ....................................................................................................................................... 17 5 Data Security ................................................................................................................... 20 HUKS ............................................................................................................................................................... 20 Lock Screen Password Protection ........................................................................................................................ 21 Data Classification and Hierarchical Encryption ................................................................................................... 22 Secure Erasure ................................................................................................................................................... 23 Password Vault ................................................................................................................................................... 23 6 App Security .................................................................................................................... 24 EMUI 11.0 Security Technical White Paper Contents App Release Security Detection ........................................................................................................................... 24 Signature Verification During App Installation ...................................................................................................... 25 App Sandbox ..................................................................................................................................................... 25 Runtime Memory Protection ............................................................................................................................... 25 Secure Input* ..................................................................................................................................................... 26 App Threat Detection ......................................................................................................................................... 26 AI Security Protection* ....................................................................................................................................... 26 Malicious Website Detection* ............................................................................................................................. 26 7 Network and Communication Security ............................................................................. 27 VPN .................................................................................................................................................................. 27 TLS ................................................................................................................................................................... 27 Wi-Fi Security* .................................................................................................................................................. 28 Protection Against Fake Towers* ......................................................................................................................... 28 8 Distributed Security ......................................................................................................... 29 Device Interconnection Security .......................................................................................................................... 29 Collaborative User Identity Authentication of the Distributed System ..................................................................... 30 Distributed Permission Management .................................................................................................................... 31 9 Advanced Security ........................................................................................................... 32 Huawei Pay ....................................................................................................................................................... 32 Transportation Card ............................................................................................................................................ 34 Door Key ........................................................................................................................................................... 35 Secure Keys* ..................................................................................................................................................... 36 eID* .................................................................................................................................................................. 37 Car Key ............................................................................................................................................................. 37 SMS Verification Code Protection* ...................................................................................................................... 38 10 Internet Cloud Service Security ..................................................................................... 39 HUAWEI ID ...................................................................................................................................................... 39 Account Protection ............................................................................................................................................. 39 HUAWEI ID Message .......................................................................................................................................