Trusted cyber physical system

A computing device configured as a secure terminal operating on a network, comprising:

• a central processing unit (CPU);
• and
• one or more processing cores in the CPU,
• in which the computing device is configured for filtering transmissions received from a host device comprising
• implementing a trusted execution environment (TEE) on the secure terminal using at least a trusted portion of the one or more processor cores of the central processing unit (CPU) of the secure terminal that is separate from public portions of the one or more processor cores,
• receiving a transmission from the host device destined for a remote device,
• decrypting the received transmission inside the TEE such that the decrypted received transmission is not exposed to the public portions of the one or more processor cores,
• applying a policy to the decrypted transmission,
• determining whether the decrypted transmission is authorized based on satisfaction or failure of the policy, and
• in response to the transmission being authorized, encrypting and forwarding the transmission over the network to the remote device.

One or more hardware-based computer-readable memory devices storing instructions which, when executed by a central processing unit (CPU) disposed in a computing device configured as a secure terminal operating on a network, cause the computing device to filter transmissions received from a host device comprising:

• implementing a trusted execution environment (TEE) on the secure terminal using at least a trusted portion of one or more processor cores of the CPU of the secure terminal that is separate from public portions of the one or more processor cores;
• receiving a transmission from the host device destined for a remote device;
• decrypting the received transmission inside the TEE such that the decrypted received transmission is not exposed to the public portions of the one or more processor cores;
• applying a policy to the decrypted transmission;
• determining whether the decrypted transmission is authorized based on satisfaction or failure of the policy;
• and
• in response to the transmission being authorized, encrypting and forwarding the transmission over the network to the remote device.