Data Transmission Protocol for TEE Privacy Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data transmission methods are limited in ensuring privacy security during data transmission and use, particularly in big data applications, and lack compatibility with various Trusted Execution Environment (TEE) scenarios.
Innovation Solution
A new data transmission protocol is developed that includes encrypting target privacy data based on protocol information, digitally signing it with a private key, and encapsulating it with attestation information into a data transmission unit, allowing secure and efficient transmission across different TEE environments without requiring channel interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing data transmission methods are used, then transmission simplicity is maintained, but privacy security cannot be ensured
Solution Approach 1:
The patent segments the data transmission process into distinct components: data encapsulation with encryption, digital signing for authentication, and structured packet formatting. Each component handles a specific security function, allowing the system to achieve comprehensive privacy security through modular security measures rather than a single complex mechanism.
Solution Approach 2:
The patent applies preliminary actions by performing encryption and digital signing before data transmission. The data is pre-processed with security measures (encryption keys are exchanged and established beforehand through key management protocols), ensuring that privacy security is built into the transmission process from the start rather than added as an afterthought.
2Reliability
If a new data transmission protocol is designed for better privacy security, then privacy security is improved, but application scenario compatibility is limited
Solution Approach 1:
The patent achieves universality by designing a data transmission protocol that can operate across multiple TEE scenarios (inter-TEE, intra-TEE, TEE-to-non-TEE communication). The protocol uses standardized encapsulation formats and supports different key management modes, enabling it to adapt to various application scenarios while maintaining consistent privacy security guarantees.
Solution Approach 2:
The patent enables parameter changes by allowing flexible configuration of encryption algorithms, key lengths, and protocol versions within the transmission framework. This adaptability in parameters allows the same core protocol to serve different security requirements and application scenarios, from high-security financial transactions to standard data exchange operations.
3Reliability
If encryption and digital signing are applied to data, then privacy security is enhanced, but data transmission processing time increases
Solution Approach 1:
The patent reduces processing time during actual transmission by performing encryption and digital signing as preliminary actions before data is sent. The heavy computational work of cryptographic operations is completed in advance, allowing the actual data transmission to proceed quickly without real-time encryption delays.
Solution Approach 2:
The patent uses digital signatures that create compact cryptographic copies of authentication information rather than transmitting the actual private keys or repeated authentication data. This copying approach minimizes the amount of data that needs to be processed and transmitted while maintaining strong security verification capabilities.
Data Source
AI summary
This specification provide computer-implemented methods, and apparatuses for data transmission protocol execution and data storage. Execution of a data transmission protocol includes an initiator and a receiver. In an example execution process, a first application serving as the initiator encapsulates protocol information related to a transmission handshake protocol, ciphertext data obtained by encrypting target privacy data using an encryption method determined based on the protocol information, signature information obtained by digitally signing the ciphertext data and the protocol information using a private key, field content of an attestation field, and the like into a data transmission unit. The attestation field is used to fill a remote attestation report that includes public key information of the initiator. A second application serving as the receiver decapsulates the data transmission unit, and uses the target privacy data after verifying the signature information and the like in the decapsulated data transmission unit.