Trusted Execution Environment for Secure Credential Delegation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing credential delegation methods expose users' credentials to risk when shared with third-parties, as there is no guarantee that the third-party deletes the credentials after use, potentially leading to theft or exposure.
Innovation Solution
Establishing a secure tunnel within a trusted execution environment (TEE) on an intermediate device to receive and transmit credentials securely, ensuring that credentials are only accessible within the TEE and are deleted after use, thereby preventing exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If user credentials are provided to a third-party via endpoint device for accessing remote resources, then the third-party can perform actions on behalf of the user, but the credentials are exposed to theft or leakage at the third-party node
Solution Approach 1:
The patent introduces a trusted intermediary service that acts as a mediator between the user's endpoint device and the remote resource. The intermediary receives credentials from the user, establishes secure connections to remote resources on the user's behalf, and performs delegated actions without exposing credentials to the third-party. This intermediary architecture allows third-party functionality while eliminating credential exposure risks.
Solution Approach 2:
The patent extracts the credential handling function from the third-party endpoint device and relocates it to a trusted intermediary service. By taking out the sensitive credential management operations from the untrusted third-party environment and concentrating them in a controlled intermediary, the system enables third-party access capabilities while securing credentials against exposure.
2Adaptability or versatility
If credentials are transmitted through an intermediate device, then third-party access is enabled, but credentials may be intercepted or stolen during transmission and storage
Solution Approach 1:
The patent creates a secure, isolated execution environment (trusted intermediary) that acts as an inert atmosphere for credential handling. Within this controlled environment, credentials are processed without exposure to external threats. The intermediary establishes secure, encrypted communication channels and performs operations in a protected context that prevents interception or theft during transmission and processing.
Solution Approach 2:
The patent implements temporary, session-based credential handling where credentials are transmitted only when needed for specific delegated operations and are then discarded. The intermediary uses short-lived secure connections and does not persist credentials long-term, reducing the window of vulnerability. Each credential transmission is purpose-specific and time-limited, minimizing exposure risk while maintaining delegated access functionality.
Data Source
Figure 1
Figure 2
Figure 3A
AI summary
Methods and systems for providing an endpoint device with access to a remote resource are disclosed. A first secure tunnel with the endpoint device is established from an intermediate device, the first tunnel terminating within a trusted execution environment (TEE) in the intermediate device. At least one credential is received within the TEE and via the first secure tunnel from the endpoint device. The at least one credential is transmitted from the intermediate device to the remote resource via a second secure tunnel, the second tunnel located between the remote resource and the intermediate device and originating within the TEE. In response to the at least one credential being accepted by the remote resource, communications between the endpoint device and the remote resource via the TEE in the intermediate device through the first and second secure tunnels are enabled.