Abstract: Based on the analysis of currently mainstream trusted storage system(TSS)， we design and implement a trusted execution environment(TEE)-based TSS， which conforms to Global Platform(GP)standard. Our TSS provides not only authorized encryption，the integrity and consistency of data， but also many security storage operation properties such as atomicity operations of persistent object. In order to improve the read/write performance of big data， a new method is proposed for dynamically allocating continuous memory in REE’s kernel memory space and mapping the address to the TEE through communication pipe. This method can reduce switching times， allocating memory times and copy memory overloads between two worlds. The experiments show that our system has an 8% to 10% performance improvement compared with related trusted storage systems.

Key words: trusted storage, trusted execution environment, GP standard, storage features