Abstract: An apparatus including a processor and a memory, where the processor and the memory are configured to provide a secure execution environment and the memory stores a hardware unique key and a class key. The processor is configured to recover, in the secure execution environment, a certificate signing key based on the class key, where the certificate signing key is associated with a certificate authority. The processor is further configured to derive a device key pair based on the hardware unique key, where the device key pair includes a device public key and a device private key, and generate a device certificate based on the device public key and the certificate signing key. The generated device certificate is configured to be validated based on a public key associated with the certificate authority.

Abstract: In an antitheft method for a mobile terminal that relates to the field of communications technologies, a baseband processor detects integrity of an operating system running on an application processor, generates a short message service (SMS) message when the operating system has no integrity, and transfers the SMS message to the application processor. The application processor controls a display to display the SMS message in order to inform a user that the operating system of the mobile terminal is damaged. In a scenario in which a mobile terminal is stolen and an operating system is maliciously tampered with, according to the solution provided in this application, an SMS message is used to prompt a user, thereby improving security of the mobile terminal.

Abstract: An apparatus including a processor and a memory, where the processor and the memory are configured to provide a secure execution environment and the memory stores a hardware unique key and a class key. The processor is configured to recover, in the secure execution environment, a certificate signing key based on the class key, where the certificate signing key is associated with a certificate authority. The processor is further configured to derive a device key pair based on the hardware unique key, where the device key pair includes a device public key and a device private key, and generate a device certificate based on the device public key and the certificate signing key. The generated device certificate is configured to be validated based on a public key associated with the certificate authority.

Abstract: In an antitheft method for a mobile terminal that relates to the field of communications technologies, a baseband processor detects integrity of an operating system running on an application processor, generates a short message service (SMS) message when the operating system has no integrity, and transfers the SMS message to the application processor. The application processor controls a display to display the SMS message in order to inform a user that the operating system of the mobile terminal is damaged. In a scenario in which a mobile terminal is stolen and an operating system is maliciously tampered with, according to the solution provided in this application, an SMS message is used to prompt a user, thereby improving security of the mobile terminal.