TEE Hardware Power Control for Privacy-Sensitive Device Modules
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional electronic device privacy protection methods relying on software control are inadequate, as malicious programs can bypass software instructions, leading to unauthorized module activation and user privacy leakage.
Innovation Solution
Implementing privacy mode control through hardware power-on and power-off of modules via a trusted execution environment (TEE) module, ensuring modules like cameras and microphones are physically disabled when not in use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software control is used to disable modules in privacy mode, then the electronic device can reduce information leakage risk, but malicious programs can bypass software instructions and illegally activate modules
Solution Approach 1:
The patent replaces the software-based control mechanism with a hardware-based control mechanism. Specifically, a hardware switch controlled by a Trusted Execution Environment (TEE) module is introduced to physically disconnect the camera module from the system bus. This hardware-level control cannot be bypassed by malicious software, thereby resolving the contradiction between privacy protection reliability and control mechanism complexity.
Solution Approach 2:
The patent introduces a TEE module as an intermediary between the software system and hardware modules. The TEE module receives software instructions and translates them into hardware control signals that activate or deactivate physical switches. This intermediary layer ensures that software cannot directly control hardware modules, preventing bypass attacks while maintaining software controllability.
2Reliability
If hardware power-off is implemented for privacy protection, then module activation is strictly controlled, but the device complexity increases due to additional hardware components
Solution Approach 1:
The patent designs the hardware switch to serve multiple functions: it acts as a privacy protection mechanism, a power control switch, and a physical isolation component. By making the switch multi-functional, the patent reduces the need for additional separate hardware components, thereby mitigating the increase in device complexity while maintaining high control security.
Solution Approach 2:
The patent combines the privacy control function with the existing power management infrastructure. The hardware switch is integrated into the power control circuitry, and the TEE module leverages existing communication protocols to control the switch. This merging approach minimizes additional hardware components while achieving strict module control.
3Ease of operation
If software instructions are used to control module activation, then the control process is simple, but the instructions can be intercepted and executed by malicious programs
Solution Approach 1:
The patent replaces software instructions with hardware control signals. The TEE module generates hardware-level control signals that directly activate or deactivate the physical switch, bypassing the software layer entirely. This substitution eliminates the vulnerability to malicious program interference while maintaining control process simplicity through automated TEE management.
Solution Approach 2:
The patent creates an inert control environment by isolating the hardware control path from the software system. The TEE module operates in a secure, isolated environment that is inaccessible to malicious programs. Control signals are generated and transmitted within this protected environment, preventing interception or manipulation by external malicious factors.
Data Source
Figure 1~2
Figure 3
Figure 4(a)
AI summary
Embodiments of this application are applicable to the field of terminal technologies, and provide an electronic device control method and an electronic device. Based on the method, when receiving information that a target event occurs, a trusted execution environment module in the electronic device may send a power-off instruction to a driver module, to drive to turn off a control switch of a target module, thereby powering off the target module. Both the control switch of the target module and the driver module may be configured or installed in the trusted execution environment module. In this way, both a process in which the driver module receives the power-off instruction and a process in which the driver module drives to turn off the control switch of the target module may be completed in the trusted execution environment module, so that security of a processing process is improved. In addition, turning off the control switch of the target module to power off the target module is control at a physical level. Compared with stopping use of the target module in a form of a software instruction, this greatly improves security of a control process, and further reduces a possibility of user privacy leakage.