Push Message Routing via Security Level Indication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing push message transmission technologies ensure security during transmission but fail to protect sensitive information from malicious programs on terminals after the message is received, leading to potential information leakage.
Innovation Solution
A message push method that utilizes security level indication marks to determine whether the first push client in a terminal's Rich Execution Environment (REE) or Trusted Execution Environment (TEE) should process the message, ensuring that sensitive information is processed and decrypted only in the TEE for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If push messages are transmitted using conventional push services, then transmission security is ensured, but information leakage occurs after messages reach the terminal due to malicious programs
Solution Approach 1:
The terminal is divided into two distinct running environments: the Rich Execution Environment (REE) for general applications and the Trusted Execution Environment (TEE) for secure processing. Push messages are routed to appropriate environments based on security level, with sensitive messages processed exclusively in the isolated TEE to prevent malicious access
Solution Approach 2:
A push client in the TEE acts as an intermediary between the push server and sensitive applications. The TEE push client receives encrypted push messages, decrypts them within the secure environment, and forwards them to target applications, preventing direct exposure of sensitive data to the vulnerable REE
2Reliability
If all push messages are processed in the TEE, then information security is enhanced, but system complexity and processing overhead increase
Solution Approach 1:
Different security levels are assigned to different push messages based on their content and sensitivity. Non-sensitive messages are processed in the simpler REE, while only sensitive messages requiring higher security are routed to the TEE, optimizing the balance between security and complexity
3Productivity
If push messages are processed in the REE, then processing speed is maintained, but security protection against malicious programs is insufficient
Solution Approach 1:
The system dynamically routes push messages to appropriate processing environments based on real-time security level assessment. Messages are evaluated and directed to either REE or TEE processing paths, allowing the system to adapt processing security levels to message requirements rather than using a static approach
Data Source
AI summary
A message push method, where a first push client determines, based on a security level indication mark, whether the first push client needs to process the push message, and when the first push client does not need to process the push message, forwards the push message to a second push client for processing. In this way, a terminal can perform, based on security level indication marks, differentiated processing on push messages of different security levels such that security processing is performed on sensitive information of a relatively high security level. This avoids information leakage in a process of processing, by the terminal, the sensitive information of the relatively high security level, thereby resolving a push message security processing problem.