Addressing a trusted execution environment using clean room provisioning

A method for delivering protected data to a trusted execution environment (TrEE) associated with an untrusted requestor, the method comprising:

• registering, by a targeting protocol head, a public encryption key of a TrEE that corresponds to a private encryption key held by the TrEE, the TrEE comprising a trustlet, the public encryption key comprising a trustlet public encryption key that corresponds to a trustlet private encryption key held by the trustlet;
• receiving, by the targeting protocol head, a key certification statement that binds the trustlet public encryption key and a trustlet ID;
• receiving, by the targeting protocol head, a request for protected data from a requestor associated with the TrEE;
• looking up the public encryption key to be used in delivering a response to the request for the protected data based on receipt of the request for the protected data and further based on the registered public encryption key of the TrEE and an identity of the requestor that requests the protected data;
• generating targeted protected data by encrypting the protected data with the public encryption key that is looked up based on the registered public encryption key of the TrEE and the identity of the requestor that requests the protected data;
• and
• sending the targeted protected data to the requestor.

A computer readable storage device comprising instructions for enabling a processor-based system to perform operations to deliver protected data to a trusted execution environment (TrEE) associated with a potentially untrusted requestor, the operations comprising:

• register a symmetric encryption key of a TrEE, the TrEE comprising a trustlet, the symmetric encryption key comprising a symmetric trustlet encryption key of the trustlet;
• receive a key certification statement that binds the symmetric trustlet encryption key and a trustlet ID;
• receive a request for protected data from a requestor associated with the TrEE;
• look up the symmetric encryption key to be used in delivering a response to the request for the protected data based on receipt of the request for the protected data and further based on the registered symmetric encryption key of the TrEE and an identity of the requestor that requests the protected data;
• generate targeted protected data by encrypting the protected data with the symmetric encryption key that is looked up based on the registered symmetric encryption key of the TrEE and the identity of the requestor that requests the protected data;
• and
• send the targeted protected data to the requestor.