# US 12,475,212 B2 · Protocol and system for tee-based authenticating and editing of mobile-device captured visual and audio media

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,475,212 B2
- Document ID: US12475212B2
- Status: Granted
- Kind: B2
- Application number: 18/349,359
- Filed: 2023-07-10
- Published: 2023-11-02
- Granted: 2025-11-18
- Earliest claimed: 2020-09-08
- Assignees: TruePic Inc.
- Applicants: TruePic Inc.
- Inventors: Thomas Meng-Tao Zeng; Oliver Rice; Chi Shing Chan; Sherif Hanna
- Web page: https://patentgrep.com/patent/US12475212B2

## CPC

- G06F 21/50: Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F 21/00: Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
- G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures
- G06F 21/85: interconnection devices, e.g. bus-connected or in-line devices
- H04N 21/41407: {embedded in a portable device, e.g. video client on a mobile phone, PDA, laptop (constructional details of equipment or arrangements specially adapted for portable computer application G06F1/1626; arrangements specially adapted for mobile receivers in broadcast systems H04H20/57)}
- H04N 21/4223: Cameras (H04N23/00 takes precedence)
- H04N 21/44008: {involving operations for analysing video streams, e.g. detecting features or characteristics in the video stream (arrangements characterised by components specially adapted for monitoring, identification or recognition of video in broadcast systems H04H60/59)}
- H04N 21/64715: {Protecting content from unauthorized alteration within the network (verifying the information received for network security in communication control or processing H04L63/12; integrity in wireless network security H04W12/10)}
- H04N 21/8153: {comprising still images, e.g. texture, background image}
- H04N 21/835: Generation of protective data, e.g. certificates {(protecting software against unauthorised usage in a vending or licensing environment G06F21/10)}
- H04N 21/8352: involving content or source identification data, e.g. Unique Material Identifier [UMID]
- H04N 21/85406: {involving a specific file format, e.g. MP4 format}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION

## Abstract

In general, one aspect disclosed features a media asset capture and processing method, implemented via a computer-based state machine executing on a computer processor, the method comprising: implementing a first phase including media asset capture and frame processing limited to Rich Execution Environment (REE) read-only (RO) frame access; implementing a second phase including processing with REE read-write (RW) frame access; and implementing a third phase including processing with REE read-only (RO) frame access.

## Claims

### Claim 1

A media asset capture and processing method, implemented by an electronic device, the method comprising:
capturing a media asset in an electronic device;
storing frame buffer objects of the captured media asset in a Trusted Execution Environment (TEE) of the electronic device;
subsequent to storing the frame buffer objects, processing the media asset in a Rich Execution Environment (REE) of the electronic device in a first state with read-only (RO) access to the stored frame buffer objects and a second state with read-write (RW) access to the stored frame buffer objects;
controlling, in the TEE, the RO and RW access by the REE to the stored frame buffer objects during processing of the media asset; and
subsequent to processing the media asset, authenticating the processed media asset in the TEE.

### Claim 2 (depends on 1)

The method of claim 1, wherein controlling the RO and RW access by the REE to the stored frame buffer objects comprises:
receiving a first call sent by the REE to grant the RW access to the frame buffer objects to the REE; and
responsive to the first call, granting the RW access to the stored frame buffer objects to the REE.

### Claim 3 (depends on 2)

The method of claim 2, wherein granting the RW access to the stored frame buffer objects to the REE comprises:
updating a hardware page table attribute.

### Claim 4 (depends on 2)

The method of claim 2, wherein controlling the RO and RW access by the REE to the stored frame buffer objects further comprises:
receiving a second call sent by the REE to withdraw the RW access to the frame buffer objects from the REE; and
responsive to the second call, withdrawing the RW access to the stored frame buffer objects from the REE.

### Claim 5 (depends on 4)

The method of claim 4, wherein withdrawing the RW access to the stored frame buffer objects from the REE comprises:
updating a hardware page table attribute.

### Claim 6 (depends on 1)

The method of claim 1, wherein processing the media asset in the REE of the electronic device in a first state comprises:
generating earliest viable image (EVI) objects of the media asset.

### Claim 7 (depends on 6)

The method of claim 6, wherein authenticating the processed media asset in the TEE comprises:
generating thumbnail images of the EVI objects;
attaching individual ones of the thumbnail images to corresponding EVI objects; and
attaching metadata to the EVI objects, wherein the metadata comprises at least one of data, time, or depth information.

### Claim 8

A system, comprising:
one or more hardware processors; and
one or more non-transitory machine-readable storage media encoded with instructions that, when executed by the one or more hardware processors, cause the system to perform operations for media asset capture and processing, the operations comprising:
capturing a media asset in an electronic device;
storing frame buffer objects of the captured media asset in a Trusted Execution Environment (TEE) of the electronic device;
subsequent to storing the frame buffer objects, processing the media asset in a Rich Execution Environment (REE) of the electronic device in a first state with read-only (RO) access to the stored frame buffer objects and a second state with read-write (RW) access to the stored frame buffer objects;
controlling, in the TEE, the RO and RW access by the REE to the stored frame buffer objects during processing of the media asset; and
subsequent to processing the media asset, authenticating the processed media asset in the TEE.

### Claim 9 (depends on 8)

The system of claim 8, wherein controlling the RO and RW access by the REE to the stored frame buffer objects comprises:
receiving a first call sent by the REE to grant the RW access to the frame buffer objects to the REE; and
responsive to the first call, granting the RW access to the stored frame buffer objects to the REE.

### Claim 10 (depends on 9)

The system of claim 9, wherein granting the RW access to the stored frame buffer objects to the REE comprises:
updating a hardware page table attribute.

### Claim 11 (depends on 9)

The system of claim 9, wherein controlling the RO and RW access by the REE to the stored frame buffer objects further comprises:
receiving a second call sent by the REE to withdraw the RW access to the frame buffer objects from the REE; and
responsive to the second call, withdrawing the RW access to the stored frame buffer objects from the REE.

### Claim 12 (depends on 11)

The system of claim 11, wherein withdrawing the RW access to the stored frame buffer objects from the REE comprises:
updating a hardware page table attribute.

### Claim 13 (depends on 8)

The system of claim 8, wherein processing the media asset in the REE of the electronic device in a first state comprises:
generating earliest viable image (EVI) objects of the media asset.

### Claim 14 (depends on 13)

The system of claim 13, wherein authenticating the processed media asset in the TEE comprises:
generating thumbnail images of the EVI objects;
attaching individual ones of the thumbnail images to corresponding EVI objects; and
attaching metadata to the EVI objects, wherein the metadata comprises at least one of data, time, or depth information.

### Claim 15

One or more non-transitory machine-readable storage media encoded with instructions that, when executed by one or more hardware processors, cause a system to perform operations for media asset capture and processing, the operations comprising:
capturing a media asset in an electronic device;
storing frame buffer objects of the captured media asset in a Trusted Execution Environment (TEE) of the electronic device;
subsequent to storing the frame buffer objects, processing the media asset in a Rich Execution Environment (REE) of the electronic device in a first state with read-only (RO) access to the stored frame buffer objects and a second state with read-write (RW) access to the stored frame buffer objects;
controlling, in the TEE, the RO and RW access by the REE to the stored frame buffer objects during processing of the media asset; and
subsequent to processing the media asset, authenticating the processed media asset in the TEE.

### Claim 16 (depends on 15)

The media of claim 15, wherein controlling the RO and RW access by the REE to the stored frame buffer objects comprises:
receiving a first call sent by the REE to grant the RW access to the frame buffer objects to the REE; and
responsive to the first call, granting the RW access to the stored frame buffer objects to the REE.

### Claim 17 (depends on 16)

The media of claim 16, wherein granting the RW access to the stored frame buffer objects to the REE comprises:
updating a hardware page table attribute.

### Claim 18 (depends on 16)

The media of claim 16, wherein controlling the RO and RW access by the REE to the stored frame buffer objects further comprises:
receiving a second call sent by the REE to withdraw the RW access to the frame buffer objects from the REE; and
responsive to the second call, withdrawing the RW access to the stored frame buffer objects from the REE.

### Claim 19 (depends on 15)

The media of claim 15, wherein processing the media asset in the REE of the electronic device in a first state comprises:
generating earliest viable image (EVI) objects of the media asset.

### Claim 20 (depends on 19)

The media of claim 19, wherein authenticating the processed media asset in the TEE comprises:
generating thumbnail images of the EVI objects;
attaching individual ones of the thumbnail images to corresponding EVI objects; and
attaching metadata to the EVI objects, wherein the metadata comprises at least one of data, time, or depth information.