TEE Security Domain Notification Service for Event Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security domain management in Trusted Execution Environments (TEE) lacks efficient mechanisms for sharing minimum information between isolated security domains, leading to incomplete service provision during events like terminal changes or security domain migrations.
Innovation Solution
A method and apparatus for managing security domains in a TEE that involves obtaining property information, registering with a notification service, and notifying other domains of events through a TEE kernel-provided information channel, using identifiers, group identifiers, and valid period information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security domains are strictly isolated to prevent mutual information exchange, then security reliability is improved, but service completeness deteriorates
Solution Approach 1:
The patent introduces a notification service as an intermediary component that enables controlled information exchange between security domains. The notification service acts as a mediator that receives events from one domain and delivers them to other domains through a standardized interface, allowing strict isolation to be maintained while enabling necessary service communication. This resolves the contradiction by providing a secure bridge between isolated domains without compromising either security or service completeness.
2Object-affected harmful factors
If security domains are strictly isolated, then information security is improved, but event recognition capability deteriorates
Solution Approach 1:
The notification service serves as an intermediary that preserves information security while enabling event recognition. It receives events from source domains and selectively delivers them to target domains based on domain identifiers and group identifiers, ensuring that only authorized domains receive relevant events. This maintains the security barrier while providing necessary event recognition capability across domain boundaries.
Solution Approach 2:
The notification service implements a universal event delivery mechanism that can serve multiple security domains simultaneously. Through the use of domain identifiers and group identifiers, a single notification infrastructure can support multiple domains and their relationships, enabling event recognition across the entire TEE without requiring domain-specific custom implementations.
3Adaptability or versatility
If minimum information sharing is implemented, then service coordination is improved, but device complexity increases
Solution Approach 1:
The notification service acts as a centralized intermediary that manages information sharing between security domains. Instead of requiring domains to implement complex peer-to-peer communication protocols, the notification service provides a simplified interface where domains only need to register their identifiers and group memberships. This reduces the complexity burden on individual domains while enabling coordinated service across the TEE.
Solution Approach 2:
The patent segments the information sharing function into a separate notification service component, isolating the complexity of event routing and domain management from the individual security domains. Each domain only needs to implement basic registration and event publishing functions, while the notification service handles the complex tasks of event matching, filtering, and delivery based on identifiers and group relationships.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A security domain management method and apparatus for managing at least one security domain in a trusted execution environment (TEE) including at least one security domain is provided. The method includes obtaining information related to an event for an arbitrary security domain when the event for the arbitrary security domain is generated; and transmitting the information related to the event to at least one other security domain, wherein the information related to the event is sent via a TEE kernel.