Trusted Execution Environment Side-Channel Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Side-channel attacks in multi-core processors allow malicious code to infer sensitive information by observing effects on shared resources, which conventional trusted execution environments fail to adequately protect against, while also hindering efficient communication with remote devices.
Innovation Solution
Implementing a trusted execution environment with direct memory access capabilities through a memory mapping established by the operating system, enabling secure and efficient communication between the trusted execution environment and remote computing devices, and ensuring atomic execution within the trusted environment to prevent side-channel attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional trusted execution environments are used to protect sensitive code, then security against direct attacks is improved, but side-channel attacks can still infer sensitive information through shared resources
Solution Approach 1:
The patent segments the execution environment into distinct trusted regions isolated from shared processor resources. By creating separate execution contexts with dedicated resource access paths, the invention prevents malicious code in shared resources from observing or interfering with sensitive code execution, thereby blocking side-channel attack vectors while maintaining security guarantees.
Solution Approach 2:
The patent introduces an intermediary mechanism that mediates access between trusted execution environments and shared processor resources. This intermediary layer controls and monitors resource access, preventing direct observation of sensitive code effects on shared resources while allowing controlled communication, thus eliminating side-channel vulnerabilities without compromising security.
2Reliability
If strict isolation is implemented to prevent side-channel attacks, then security is improved, but communication efficiency with remote devices deteriorates
Solution Approach 1:
The patent introduces a controlled intermediary mechanism that mediates access between trusted execution environments and shared processor resources. This intermediary layer controls and monitors resource access, preventing direct observation of sensitive code effects on shared resources while allowing controlled communication, thus eliminating side-channel vulnerabilities without compromising security.
Solution Approach 2:
The patent applies different security isolation levels to different code regions and execution contexts. Sensitive code executes in highly isolated trusted regions with strict access controls, while non-sensitive code can utilize shared resources with relaxed constraints. This differentiated approach maintains security for critical operations while preserving communication efficiency for non-critical functions.
Data Source
AI summary
In various examples there is a computing device in communication with at least one other computing device via a communications network. The computing device has a memory and a central processing unit having a trusted execution environment comprising trusted regions of the memory. The computing device has an operating system configured to create a memory mapping between a virtual address space of the memory and a memory of the at least one other computing device and to provide details of the memory mapping to the trusted execution environment. The trusted execution environment is configured to execute an application which is able to communicate with the other computing device directly using the memory mapping provided by the operating system.