Trust Execution Environment for Secure Image Data Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Face recognition data security is compromised during transmission and processing due to potential tampering or leakage in image acquisition devices and channels, which undermines the accuracy and integrity of facial feature information.
Innovation Solution
A data security processing terminal and system that employs a Trust Execution Environment (TEE) for secure data transmission and encryption, using a processor to encrypt image data with a stored key and verify its integrity through image verification auxiliary information, ensuring confidentiality and integrity within the TEE, and a server decrypts the data using the same key for secure recognition.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If face data is transmitted through conventional channels, then transmission speed is maintained, but data security and integrity deteriorate due to potential tampering or leakage
Solution Approach 1:
The system divides the execution environment into two distinct segments: a Rich Execution Environment (REE) for general operations and a Trust Execution Environment (TEE) for security-critical operations. The TEE is further segmented into secure storage for keys and secure processing for encryption/decryption operations. This segmentation isolates sensitive operations from potential attacks in the REE, thereby improving data security without requiring complete system redesign.
Solution Approach 2:
The patent introduces a secure channel as an intermediary between the image acquisition device and the processing terminal, and another secure channel between the terminal and server. These intermediaries establish encrypted communication paths that prevent eavesdropping and tampering during data transmission, addressing security concerns without compromising transmission functionality.
2Reliability
If encryption is performed on image data, then data confidentiality is improved, but processing time increases due to encryption/decryption operations
Solution Approach 1:
The system performs encryption operations in advance within the TEE before data leaves the terminal, and the server performs decryption in advance before processing. By completing these security operations beforehand rather than during normal processing flows, the patent minimizes the time impact on overall system performance while ensuring data confidentiality throughout transmission and storage.
3Reliability
If a Trust Execution Environment is implemented, then data integrity is improved, but device complexity increases due to additional security modules
Solution Approach 1:
The patent implements the TEE as a nested secure environment within the terminal device, with the TEE containing secure storage and secure processing components. This nested structure allows the security subsystem to be embedded within the existing device architecture rather than requiring a completely separate system, thereby improving data integrity while limiting the increase in overall device complexity.
Data Source
AI summary
The application provides a data security processing terminal, system and method, and is related to a field of data processing. The data security processing terminal includes: an image acquisition device configured to acquire image data and transmit the image data to a Trust Execution Environment through a secure channel; an image acquisition driver operating in the Trust Execution Environment and configured to drive, in response to a drive instruction from a processor, the image acquisition device to acquire the image data; the processor operating in the Trust Execution Environment and configured to send the drive instruction to the image acquisition driver, obtain the image data, encrypt the image data using a stored first key to obtain image ciphertext data, and output the image ciphertext data. The technical solution of the present applicant can be used to ensure the security of image data.