Abstract: As virus or equipment lost, secret data on mobile phone is facing the danger of leakage. To meet the security needs of mobile platforms,TCG's MPWG has proposed the Mobile Trusted Platform specification,which does not spc cify a particular technical approach to design a Mobile Trusted Module(MTM). Existing research does not provide an o- verall framework of the M`hM, which can actually be used in the smart phone environment, and nor a detailed deploy- ment process of the Trusted Software Stack(TSS) of the framework. A model design on mobile trusted platform for smart phone was proposed in this paper, which combines the pure software MhM based on TrustZone technology with smart card MTM based on Java Card to build two trusted engines. The deployment scheme of trusted computing bases and security analysis of this model were put forward as well.

Key words: MTM, TrustZone, Smart card, Java card, TCG software stack, Software deployment