Heterogeneous TEE Output Merging Against Platform-Specific Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing TEE implementations are vulnerable to platform-specific attacks, compromising the security of sensitive data and operations, such as Digital Rights Management and Private Key Management.
Innovation Solution
Implementing a TEE system with multiple heterogeneous platforms, such as Intel SGX and ARM TrustZone, and using cryptographic methods to merge outputs, ensuring that vulnerabilities in one platform do not compromise the overall system by leveraging different application logic and cryptographic protocols like MuSig or Threshold ECDSA.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single TEE implementation is used, then device complexity is reduced, but security is compromised due to platform-specific vulnerabilities
Solution Approach 1:
The system divides the TEE functionality across multiple heterogeneous platforms (e.g., Intel SGX, ARM TrustZone, IBM Secure Execution). Each platform implements a separate TEE instance that processes portions of the cryptographic operations, thereby segmenting the security function to eliminate single-point vulnerabilities while maintaining overall system security through distributed architecture
Solution Approach 2:
The patent combines multiple different TEE implementations from various hardware platforms into a composite security system. Each TEE instance contributes its unique security properties, and their combined output through the merging unit creates a security mechanism that is stronger than any individual component, analogous to composite materials that combine different substances for enhanced properties
2Reliability
If multiple heterogeneous TEE platforms are implemented, then security is enhanced against platform-specific attacks, but device complexity increases
Solution Approach 1:
The merging unit serves as a universal component that handles multiple TEE outputs from different platforms. It implements a unified cryptographic merging mechanism that can process results from various TEE instances regardless of their underlying hardware platform, thereby managing the complexity of heterogeneous systems through a standardized interface
Solution Approach 2:
The merging unit acts as an intermediary between the multiple heterogeneous TEE platforms and the final output. It receives encrypted results from different TEE instances, performs the cryptographic merging operation, and produces the final decrypted output, thereby mediating the complexity of coordinating multiple platforms
3Reliability
If cryptographic merging of multiple TEE outputs is performed, then security against vulnerabilities is improved, but computational overhead increases
Solution Approach 1:
The system performs cryptographic operations partially across multiple TEE platforms rather than completing entire operations in a single TEE. Each platform performs a portion of the cryptographic work (e.g., partial decryption or key generation), and the results are merged, thereby distributing the computational energy consumption while maintaining security through the collaborative cryptographic process
Data Source
Figure 1
Figure 2
AI summary
A TEE system that includes a first platform that runs a first TEE, a second platform that runs a second TEE, and a merging unit that is adapted to merge a first output from the first TEE of the first platform, with a second output from the second TEE of the second platform, so as to form an output of the TEE system. The first TEE and the second TEE are based on different implementations. In this way, the security of the system is improved, as a malicious actor even be able to access "t" machines, still would not be able to retrieve the secret unless there are multiple exploitable TEE vulnerabilities on all executing TEE platforms at the same time.