Wireless Controller Byte Stream Parser Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Trusted Execution Environments (TEEs) in computing systems face vulnerabilities as data transmitted between input devices and TEEs can be stolen by malware, particularly due to the lack of secure communication protocols for wireless connectivity, which leaves decrypted data susceptible to attacks within the computing device.
Innovation Solution
Implementing a byte stream parser (BSP) and cryptographic engine (CE) within a wireless controller to securely parse and encrypt data payloads while keeping packet headers in the clear, enabling end-to-end secure communication with confidentiality, integrity, and authenticity for input/output data from/to wireless devices, thereby reducing the Trusted Computing Base (TCB) and minimizing power and processing requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is transmitted between wireless devices and TEEs using conventional protocols, then communication compatibility is maintained, but data security is compromised due to susceptibility to malware attacks
Solution Approach 1:
The patent segments the communication protocol into distinct functional modules: a byte stream parser that handles data segmentation and identification, and a cryptographic engine that performs encryption/decryption operations. This modular segmentation allows security functions to be isolated and managed independently, improving data security while maintaining protocol compatibility through standardized interfaces.
Solution Approach 2:
The patent introduces an intermediary trusted execution environment (TEE) that acts as a mediator between wireless devices and the host system. The TEE includes a byte stream parser and cryptographic engine that securely handle data transmission, providing an intermediate secure layer that protects against malware attacks while maintaining compatibility with existing communication protocols.
2Reliability
If cryptographic encryption is applied to all data packets, then data confidentiality is improved, but processing overhead and power consumption increase
Solution Approach 1:
The patent applies local quality by selectively encrypting only the payload portion of data packets rather than the entire packet. The byte stream parser identifies and extracts the payload portion, and the cryptographic engine applies encryption only to this specific segment. This localized approach maintains data confidentiality for the critical information while reducing overall processing overhead and power consumption compared to full-packet encryption.
3Reliability
If a comprehensive secure communication protocol is implemented, then data integrity and authenticity are improved, but the trusted computing base size increases
Solution Approach 1:
The patent extracts security-critical functions into a separate trusted execution environment (TEE) that is isolated from the main host system. The byte stream parser and cryptographic engine are implemented within the TEE, extracting these security functions from the general-purpose processor. This extraction reduces the trusted computing base size on the host system while maintaining data integrity and authenticity through the isolated secure environment.
Data Source
AI summary
In one embodiment, an apparatus includes a wireless controller, which may include a byte stream parser to receive a stream of data from one or more wireless devices and parse the stream of data to identify a first data packet associated with a first channel identifier associated with a trusted application, and a cryptographic engine coupled to the byte stream parser to encrypt a payload portion of the first data packet in response to the identification of the first data packet associated with the first channel identifier. Other embodiments are described and claimed.