User Terminal Cloud-Based Trusted Execution via Server Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User terminal apparatuses with low specifications lack the capability to provide a trusted execution environment without additional hardware, posing a security risk for services that require secure processing.
Innovation Solution
A user terminal apparatus that communicates with a server to execute critical logic in a trusted execution environment, using mutual verification and hash value comparisons to ensure security, allowing non-critical logic to be executed locally while critical logic is processed remotely in a cloud-based trusted environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a trusted execution environment based on hardware is constructed, then security is improved, but device specification requirements increase and manufacturing cost increases
Solution Approach 1:
The patent introduces a server as an intermediary that provides trusted execution environment services externally. Instead of embedding hardware-based TEE in each user terminal, the server acts as a mediator that receives security-critical logic from terminals, executes it in its own hardware-based TEE, and returns results. This allows low-spec terminals to access TEE functionality through the intermediary server without requiring complex local hardware.
Solution Approach 2:
The patent extracts the trusted execution environment functionality from the user terminal apparatus and relocates it to a separate server system. The security-critical first logic is extracted from the terminal's execution environment and transferred to the server for execution. This separation allows terminals to remain simple while still utilizing hardware-based security capabilities through the external server infrastructure.
2Reliability
If security processing is performed locally in the user terminal, then security is improved, but device complexity and cost increase
Solution Approach 1:
The server provides a universal trusted execution environment service that can be accessed by multiple user terminals simultaneously. Instead of each terminal requiring its own hardware-based TEE, a single server infrastructure serves multiple clients, achieving economies of scale. The server's hardware TEE capability becomes a shared resource that provides security services to numerous terminals, reducing per-unit cost and complexity.
3Speed
If all logic is executed locally in the user terminal, then response speed is improved, but security is compromised
Solution Approach 1:
The patent segments the application logic into two distinct parts: second logic that does not require security processing and remains executed locally in the terminal for fast response, and first logic that requires security processing and is executed remotely on the server. This segmentation allows the system to maintain fast local execution for non-critical operations while outsourcing security-critical operations to the server's hardware TEE, achieving both speed and security through divided responsibilities.
Data Source
AI summary
A user terminal apparatus may include a communication unit for communicating with a server; a memory in which applications are stored; and a processor for executing an application including a first logic which requires security processing, performing mutual verification with the server, controlling the communication unit such that a request for executing the first logic on the server is sent to the server, and when the execution result of the first logic is received from the server, proceeding with the execution of the application by using the received execution result.