3 results about "Remote function call" patented technology

The application relates to a method for remote function calling in a security application based on TEE specification, which comprises the following steps: 1) a client application calls TEEC_InvokeCommand, and a security application backs up an entry function context; 2) the security application executes business logic and judges whether remote function calling is needed, if not, the execution is completed, and a calling result is returned; if yes, calling parameters are encapsulated, an interrupt function context is backed up, and the client application is quickly returned; 3) the client application analyzes the calling parameters, system calling and encapsulated calling result, and calls TEEC_InvokeCommand; 4) the security application acquires a remote function calling context, restores a calling site, analyzes a remote calling result, and executes step 2). Compared with the prior art, the application has the advantages that the security application can use the function in a rich execution environment through a remote calling mode at any time, and parameters of any type and in any direction can be transmitted.

The invention provides a client, a server, equipment, a storage medium and a computer program product. The client comprises a client module, a first cache module, a first serialization module and a first message sending module, the modules are packaged functional entities, and messages are transmitted among the modules through interfaces exposed after packaging; the client module is used for receiving a first calling message sent by the first service layer through the interface; the first message is used for requesting remote function calling or carrying an execution result of the remote function; the first caching module is used for receiving a first message sent by the client module through the interface and caching the first message; the first serialization module is used for reading the first message from the first cache module through the interface and serializing the first message according to a predefined message format to obtain a second message; and the first message sending module is used for receiving the second message sent by the first serialization module through the interface and sending the second message to the server.

To improve the ability of an application to process sensitive data, a trusted execution environment (TEE) can be used to store and compute sensitive sources (e.g., variables) from a set of sensitive sources. To make the TEE application language independent, a process can transform specific statements from the application code to a remote function call that can access the TEE. To identify these statements to transform, a forward and backward taint analysis can be performed to identify the statements to be transformed. The identified statements can be transformed into enclave instructions. At runtime, a cloak enclave environment within the TEE can execute the enclave instructions as called by the remote call in the application code. The sensitive sources in the identified statements are maintained and computed in the cloak enclave, grouped by a function runtime instance, which is uniquely identified by uuids.