US 12,585,756 B2 · Apparatus for reinforcing security of mobile trusted execution environment

Abstract

The present invention relates to an apparatus for reinforcing security of a mobile trusted execution environment, and relates to an apparatus for reinforcing security of a mobile trusted execution environment for constructing a general-purpose trusted execution environment. According to an embodiment of the present invention, a technology available for a general purpose in a mobile device operating on the basis of an ARM architecture has effects of configuring a trusted execution environment for guaranteeing safe execution of an application without depending on an existing commercial security technology, and of configuring a mobile trusted execution environment by using a write area execution prevention function and a debugging watchpoint, which are general-purpose hardware functions.

Claims7

Dependent claims

An apparatus for reinforcing security of a trusted execution environment in a mobile device, the apparatus comprising:

a hypervisor configured to separate regions into a privileged region and a non-privileged region;
a region switch configured to perform switching between the privileged region and the non-privileged region by controlling a watchpoint and memory execution area write protection;
and
a mode switch configured to perform switching between OS kernel mode and hypervisor mode by trapping by branch based on an exception occurrence privilege in order to protect vector integrity.

1 more element

Dependencies are inferred from the claim text.

Facts

Application

18/261,461Filed 14 Jun 2021

Priority

KR 10-2021-000560114 Jan 2021

Published

US 2024/0078307 A17 Mar 2024

Granted

24 Mar 2026

Term ends

Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06F 21/53
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by executing in a restricted environment, e.g.…
G06F 21/54
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by adding security routines or objects to programs
G06F 21/57
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: certifying or…
G06F 21/78
Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer: to…

Apparatus for reinforcing security of mobile trusted execution environment

Life of this patent

Apparatus for reinforcing security of mobile trusted execution environment

Life of this patent

Abstract

Claims7