Secure element enforcing a security policy for device peripherals

A method, comprising:

• executing a secure element (SE) application on a SE hardware processor comprised in a physical SE component, wherein:
• (a) the physical SE component is coupled via a first bus to a first controller comprised in a same computing device as the physical SE component, and (b) the physical SE component is coupled via a second bus to a first peripheral component comprised in the same computing device,
• wherein the SE hardware processor executes one or more secure element applications within a secure execution environment, wherein the SE application is configured to perform authentication through one or more secure channels with at least one device that is remote from the SE hardware processor;
• receiving, by a second controller implemented by the SE hardware processor, a first message from the first controller via the first bus;
• applying, by the SE hardware processor, a security policy to the first message to generate a first validated message;
• and
• transmitting, by the second controller, the first validated message to the first peripheral component via the second bus.

One or more non-transitory computer-readable media comprising instructions that, when executed by one or more hardware processors, cause performance of operations comprising:

• executing a secure element (SE) application on a SE hardware processor comprised in a physical SE component, wherein:
• (a) the physical SE component is coupled via a first bus to a first controller comprised in a same computing device as the physical SE component, and (b) the physical SE component is coupled via a second bus to a first peripheral component comprised in the same computing device,
• wherein the SE hardware processor executes one or more secure element applications within a secure execution environment, wherein the SE application is configured to perform authentication through one or more secure channels with at least one device that is remote from the SE hardware processor;
• receiving, by a second controller implemented by the SE hardware processor, a first message from the first peripheral component via the first bus;
• applying, by the SE hardware processor, a security policy to the first message to generate a first validated message;
• and
• transmitting, by the second controller, the first validated message to the first controller.

One or more non-transitory computer-readable media comprising instructions that, when executed by one or more hardware processors, cause performance of operations comprising:

• executing a secure element (SE) application on a SE hardware processor comprised in a physical SE component, wherein:
• (a) the physical SE component is coupled via a first bus to a first controller comprised in a same computing device as the physical SE component, and (b) the physical SE component is coupled via a second bus to a first peripheral component comprised in the same computing device,
• wherein the SE hardware processor executes one or more secure element applications within a secure execution environment, wherein the SE application is configured to perform authentication through one or more secure channels with at least one device that is remote from the SE hardware processor;
• receiving, by a second controller implemented by the SE hardware processor, a first message from the first controller via the first bus;
• applying, by the SE hardware processor, a security policy to the first message to generate a first validated message;
• and
• transmitting, by the second controller, the first validated message to the first peripheral component via the second bus.

A system comprising:

• at least one device including a hardware processor;
• the system being configured to perform operations comprising:
• executing a secure element (SE) application on a SE hardware processor comprised in a physical SE component, wherein:
• (a) the physical SE component is coupled via a first bus to a first controller comprised in a same computing device as the physical SE component, and (b) the physical SE component is coupled via a second bus to a first peripheral component comprised in the same computing device,
• wherein the SE hardware processor executes one or more secure element applications within a secure execution environment, wherein the SE application is configured to perform authentication through one or more secure channels with at least one device that is remote from the SE hardware processor;
• receiving, by a second controller implemented by the SE hardware processor, a first message from the first peripheral component via the first bus;
• applying, by the SE hardware processor, a security policy to the first message to generate a first validated message;
• and
• transmitting, by the second controller, the first validated message to the first controller.

A system comprising:

• at least one device including a hardware processor
• the system being configured to perform operations comprising:
• executing a secure element (SE) application on a SE hardware processor comprised in a physical SE component, wherein:
• (a) the physical SE component is coupled via a first bus to a first controller comprised in a same computing device as the physical SE component, and (b) the physical SE component is coupled via a second bus to a first peripheral component comprised in the same computing device,
• wherein the SE hardware processor executes one or more secure element applications within a secure execution environment, wherein the SE application is configured to perform authentication through one or more secure channels with at least one device that is remote from the SE hardware processor;
• receiving, by a second controller implemented by the SE hardware processor, a first message from the first controller via the first bus;
• applying, by the SE hardware processor, a security policy to the first message to generate a first validated message;
• and
• transmitting, by the second controller, the first validated message to the first peripheral component via the second bus.