Trusted Execution Environment for Smart TV Transaction Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart television systems lack robust security measures, making user information such as account numbers, passwords, and transaction data vulnerable to malicious software attacks due to their open and complex nature, leading to frequent security breaches.
Innovation Solution
Implementing a transaction processing method based on a trusted execution environment, where a client verifies a server, generates and encrypts a session key, and securely transmits transaction information within a secure environment, ensuring that only trusted codes can access sensitive data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software protection measures such as firewalls and antivirus software are used, then some protection against malicious programs is provided, but complete software protection cannot be achieved due to continuous emergence of new virus programs and frequent system updates
Solution Approach 1:
The system is divided into two distinct execution environments: a normal environment for running applications and a secure environment for executing trusted code. This segmentation isolates sensitive operations from malicious software, providing robust protection without requiring complex layered security measures in the normal environment.
Solution Approach 2:
A secure environment acts as an intermediary between the normal environment and sensitive data/operations. All security-critical operations (certificate verification, key generation, encryption) are performed within this intermediary secure environment, preventing direct access by potentially malicious software while maintaining system functionality.
2Reliability
If information is stored in insecure memory under existing technologies, then storage and access is simple and fast, but information can be easily stolen by malicious software
Solution Approach 1:
Memory is segmented into secure memory regions accessible only by the secure environment and normal memory regions accessible by the normal environment. Sensitive information (certificates, keys, encrypted data) is stored in secure memory, physically isolated from malicious software in the normal environment, while maintaining efficient access through dedicated memory interfaces.
Solution Approach 2:
Different memory regions have different security properties: secure memory has high security with restricted access, while normal memory has faster access but lower security. Data is placed in the appropriate memory region based on its security requirements, optimizing both security and performance for different types of information.
Data Source
AI summary
A transaction processing client based on a trusted execution environment is disclosed. The client verifies a server in a secure environment, obtains a public key of the server upon successful verification, generates a session key and encrypts the session key using the public key in the secure environment, transmits the encrypted session key to the server in a normal environment, encrypts pre-obtained transaction information using the session key in the secure environment, and transmits the encrypted transaction information to the server in the normal environment. The present disclosure effectively ensures the security of user login information and user private information.