TEE Interface Protection Modules Against Reverse Engineering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing confidential computing technologies are vulnerable to reverse engineering, allowing malicious users to circumvent hardware-based protections and compromise sensitive applications, particularly in industrial settings, which can lead to integration failures and operational risks.
Innovation Solution
Implementing additional protection modules at the input and output interfaces of trusted execution environments (TEEs) to control and filter data, including rate limiting, verification of sources, encoding semantics, and output encryption, to raise the barrier against reverse engineering.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If confidential computing is implemented using TEE with hardware-based protection, then data confidentiality and IP protection are improved, but the system becomes vulnerable to reverse engineering through input/output analysis
Solution Approach 1:
The patent introduces protection modules as intermediary components between the TEE and external interfaces. These modules act as mediators that filter, transform, and control all input/output data flows, preventing direct observation of internal application behavior while maintaining functional connectivity. The protection modules include input data filters, output data transformers, and rate limiters that collectively block reverse engineering attempts.
Solution Approach 2:
The system is segmented into distinct functional components: the core TEE containing the protected application, and external protection modules that handle security functions. This segmentation allows the confidential application to remain isolated and unchanged while security mechanisms are implemented externally, preventing contamination of the protected environment with security-related code or data.
2Object-affected harmful factors
If protection modules are added to the TEE interface, then reverse engineering resistance is improved, but device complexity increases
Solution Approach 1:
The protection modules are designed as universal components that can be applied to any TEE interface regardless of the specific application or data type. The same module structure handles different protection tasks (filtering, rate limiting, transformation) through configurable parameters rather than requiring separate specialized components for each function, thereby reducing overall system complexity.
Solution Approach 2:
By placing protection modules as external intermediaries rather than integrating them deeply into the TEE architecture, the patent avoids complicating the core trusted execution environment. The modules operate at the interface boundary, providing protection without requiring modifications to the TEE hardware or kernel, thus maintaining architectural simplicity.
3Object-affected harmful factors
If data flows through protection modules with filtering and rate limiting, then statistical reverse engineering is prevented, but processing time and data throughput are reduced
Solution Approach 1:
The protection modules apply partial filtering and rate limiting only to suspicious or excessive data flows rather than uniformly to all legitimate traffic. The system monitors input/output patterns and applies stronger protection measures only when reverse engineering behavior is detected, allowing normal operational throughput to remain high while preventing statistical analysis attacks.
Solution Approach 2:
The protection level and processing parameters are dynamically adjusted based on the observed data flow characteristics. During normal operation, the modules use permissive settings that minimize impact on throughput. When anomalous patterns suggesting reverse engineering are detected, the parameters change to apply stricter filtering and rate limiting, thereby adapting productivity impact to the actual security threat level.
Data Source
AI summary
A method for protecting an application within a trusted execution environment, TEE, against reverse-engineering in industrial plants comprises equipping the TEE or an interface of the TEE with at least one protection module; and directing data related to the application to go through the at least one protection module.