Trusted Execution Module Secure Data Exchange via Encrypted Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current electronic devices with Trusted Execution Environments (TEEs) do not allow direct data exchange between trusted applications, leading to security risks as data transmitted through non-trusted channels can be intercepted or misrouted.
Innovation Solution
A method and electronic device configuration that encrypts data from a first trusted application, transmits it to a general application in a non-trusted execution module, and then to a second trusted application in a trusted execution module, ensuring secure data exchange between trusted applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is transmitted through a general App in the non-trusted execution environment, then data exchange between trusted Apps is enabled, but security is compromised as data can be intercepted or copied
Solution Approach 1:
The patent introduces an encrypted data package as an intermediary carrier. Instead of transmitting raw data directly through the general App, the data is wrapped in an encrypted package that the general App cannot access or interpret. This intermediary structure enables the general App to forward data between trusted Apps while maintaining security isolation.
Solution Approach 2:
The patent changes the state of data from plaintext to encrypted form before transmission. By applying encryption transformation, the data parameter changes its accessibility - it becomes unreadable and unusable to the general App while remaining transmittable through the same communication channel. This parameter change resolves the contradiction by making the data secure yet still transferable.
2Reliability
If direct data exchange between trusted Apps is implemented, then security is improved, but device complexity increases due to additional encryption and decryption operations
Solution Approach 1:
The patent applies encryption as a preliminary action before data transmission. The data is encrypted once at the source trusted App, and this encrypted form is maintained throughout transmission and storage. The decryption happens only at the destination trusted App. This preliminary encryption action eliminates the need for continuous security checks during transmission, reducing overall system complexity.
Solution Approach 2:
The patent creates an encrypted copy of the original data. The general App receives and transmits this encrypted copy without needing to understand or process the actual data content. This copying approach allows the general App to function as a simple data pipe, reducing its complexity while maintaining security through the encrypted copy.
Data Source
AI summary
A method of operating data security and an electronic device supporting the same are provided. The method includes executing a general Application (App) based on a non-trusted execution module; executing a first trusted App related to the execution of the general App based on a trusted execution module; generating a message by encrypting data generated in the first trusted App; transmitting the encrypted message to the general App; and transmitting the encrypted message to a second trusted App related to the execution of the general App and executed based on the trusted execution module.