Trusted Execution Environment Property Migration for RISC-V Compliance

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing trusted execution environments face challenges in migrating to new instruction sets like RISC-V while satisfying regulatory requirements, leading to inefficiencies in construction and reusability due to lack of security function migration and completeness detection.

Innovation Solution

A method and apparatus for constructing a trusted execution environment that involves obtaining regulatory requirement information, parsing it to obtain atomized security function information, performing formal parsing to generate a security solution, and using a property migration mechanism to construct an environment that satisfies regulatory requirements in a target scenario, leveraging formal semantics and axiomatic transformations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If existing trusted execution environment instances (SGX or TrustZone) are migrated to RISC-V instruction set, then the adaptability to new platforms is improved, but the difficulty of satisfying regulatory requirements increases

Engineering Contradiction:

Improveplatform migration capabilityVSAvoidregulatory compliance complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The regulatory requirement information is parsed into atomized security function information, dividing complex regulatory requirements into discrete, manageable security functions that can be independently verified and mapped to specific implementation components

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The property migration mechanism creates a universal framework that can migrate trusted execution environments across different instruction sets (x86, ARM, RISC-V) while maintaining consistent regulatory compliance verification, making the solution applicable to multiple platforms simultaneously

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If formal parsing processing is performed on security function information, then the reliability of security solution verification is improved, but the time consumption increases

Engineering Contradiction:

Improvesecurity solution verification reliabilityVSAvoidconstruction time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

Test cases are generated in advance based on axioms of the security solution during the formal parsing phase, so that when the trusted execution environment is constructed, verification can proceed efficiently without time-consuming ad-hoc test case creation

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The property migration mechanism copies verified security properties from the formal security solution to the constructed trusted execution environment, avoiding the need to re-verify all properties from scratch and significantly reducing construction time while maintaining verification reliability

Inventive Principle:

Principle #26Copying

3Reliability

If comprehensive security function information is obtained from regulatory requirements, then the completeness of security coverage is improved, but the device complexity increases

Engineering Contradiction:

Improvesecurity coverage completenessVSAvoidconstruction process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The construction process is divided into distinct modular steps: obtaining regulatory requirements, parsing to atomized security functions, formal parsing to security solutions, generating test cases, and constructing the environment. Each module handles a specific aspect, making the overall complex process manageable and maintainable

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The property migration mechanism acts as an intermediary that translates and maps security properties from the formal security solution to the constructed trusted execution environment, ensuring comprehensive security coverage while simplifying the construction process through automated property transfer

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12632536B2Trusted execution environment construction methods, apparatuses, and devices

Publication Date: 2026.05.19 ALIPAY (HANGZHOU) INFORMATION TECH CO LTD

AI summary

Trusted execution environment construction is described and includes obtaining regulatory requirement information of a trusted execution environment. The regulatory requirement information is parsed to obtain atomized security function information applied to the trusted execution environment. Formal parsing processing is performed on the security function information to obtain a security solution of the trusted execution environment to prove that it satisfies the regulatory requirement information and generating a test case corresponding to the security solution based on an axiom of the security solution. Using a predetermined property migration mechanism based on the security solution and the test case corresponding to the security solution, a trusted execution environment is constructed that has same property information as the security solution and the test case with respect to a predetermined property item in a target scenario.