Trusted Execution Environment for Secure Mobile Data Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic techniques for secure data exchange between computers often rely on trusted third parties and shared connections, which increase complexity and security vulnerabilities, and may not be available or preferred in all situations.
Innovation Solution
The use of a Trusted Execution Environment (TEE) in a data exchange device for secure data transfer between computing devices, where the TEE executes processes with hardware-based encryption, isolating data from other processes and allowing secure distribution and retrieval of protected content without exposing it to the operating system, even if the system is compromised.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic techniques use trusted third parties and shared connections for secure data exchange, then security is improved, but device complexity and security vulnerabilities increase
Solution Approach 1:
The patent extracts the trusted third party dependency from the data exchange system by implementing a direct peer-to-peer communication model. Each device generates its own cryptographic key pairs and establishes secure connections independently, removing the need for external trusted intermediaries while maintaining security through cryptographic protocols
Solution Approach 2:
The patent segments the cryptographic functionality into modular components including key generation modules, encryption/decryption modules, and authentication modules. This segmentation allows each component to be independently implemented and verified, reducing overall system complexity while maintaining security
2Reliability
If cryptographic techniques use trusted third parties and shared connections for secure data exchange, then security is improved, but security vulnerabilities increase
Solution Approach 1:
The patent introduces cryptographic protocols as intermediaries that mediate all data exchanges between devices. These protocols include encryption, digital signatures, and key exchange mechanisms that protect data without requiring the participating devices to trust each other directly, thereby eliminating vulnerabilities associated with trusted third parties
Solution Approach 2:
Each device autonomously generates its own cryptographic key pairs, manages its own certificate authorities, and establishes secure connections independently. This self-service approach eliminates dependency on external trusted third parties and reduces the attack surface by removing potential vulnerability points in centralized trust management
Data Source
AI summary
The technology disclosed herein enables a computing device to use a trusted execution environment in an untrusted mobile device to distribute protected content to computing devices at different locations. An example method may include: establishing, by a processor of a mobile device, a trusted execution environment in the mobile device, wherein the trusted execution environment uses memory encryption; loading data of a computing device into the trusted execution environment in the mobile device, wherein the data comprises protected content and comprises executable code to control access to the protected content; receiving, by the mobile device, authentication data from a set of computing devices; and executing, by the mobile device, the executable code in the trusted execution environment to analyze the authentication data and to provide one or more of the computing devices of the set with access to the protected content.