Secure Data Transmission via Dedicated Signal Processor and TEE
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile terminal security is compromised due to system vulnerabilities, as malware can intercept data during transmission between the application processor and communication peripherals, despite the use of firewalls and anti-virus software, because the communication channel between these components is insecure.
Innovation Solution
A secure data transmission apparatus and method that employs a dedicated communication signal processor and an application processor, using shared memory and security interrupts to establish a secure channel, with the trusted execution environment providing higher security than the rich execution environment, ensuring that only the trusted application can access sensitive information and peripherals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firewalls and anti-virus software are used to protect application software, then security protection is provided, but the protection is not thorough due to frequent system updates and ever-emerging malware
Solution Approach 1:
The execution environment is divided into two mutually independent parts: a rich execution environment (REE) for running general applications and a trusted execution environment (TEE) for running security-critical applications. This segmentation isolates sensitive operations from the main system, preventing malware in the REE from accessing or intercepting data in the TEE, thereby providing thorough security protection that adapts to emerging threats.
2Reliability
If a trusted execution environment is created with isolated software code, then security is improved, but data transmission channels between the application processor and communication peripherals remain open and insecure
Solution Approach 1:
A dedicated communication signal processor is introduced as an intermediary component between the application processor and communication peripherals. This processor includes a dedicated communication interface that only accepts signals from the TEE, acting as a secure gateway. The intermediary blocks direct access between the REE and communication peripherals, preventing data interception while maintaining functional connectivity.
3Object-affected harmful factors
If the communication channel between the application processor and communication peripheral is made secure, then data leakage is prevented, but the system complexity increases due to additional processors and isolation mechanisms
Solution Approach 1:
The dedicated communication signal processor integrates multiple functions including signal processing, security verification, and communication interface management into a single component. By merging these functions, the system achieves secure data transmission without proportionally increasing complexity. The integrated design reduces the number of separate isolation mechanisms needed while maintaining the secure channel between the TEE and communication peripherals.
Data Source
AI summary
A secure data transmission apparatus includes: a dedicated communication signal processor, configured to send a first security interrupt to an application processor; and the application processor, configured to execute rich execution environment (REE) software, execute trusted execution environment (TEE) software under a trigger of the first security interrupt, and obtain first information from a shared memory of the dedicated communication signal processor and the application processor based on the first security interrupt. The dedicated communication signal processor is further configured to receive a second security interrupt sent by the application processor, and obtain second information from the shared memory. The application processor is further configured to send the second security interrupt to the dedicated communication signal processor.