Apparatus and Method for Protecting Shared Objects

A method implemented by a computing device, wherein the method comprises:

• loading, within a rich execution environment, a shared object into a user memory, wherein the shared object comprises an encrypted segment, a metadata, and a constructor routine;
• sending from the rich execution environment, a request for decryption to a trusted execution environment, wherein the request for decryption comprises the metadata and the encrypted segment;
• decrypting within the trusted execution environment and based on the metadata and a predetermined platform key, the encrypted segment to produce an unencrypted segment;
• send, from the trusted execution environment, a decryption response comprising the decrypted segment to the rich execution environment;
• receiving, within the rich execution environment, the decryption response from the trusted execution environment;
• writing the decrypted segment into the shared object;
• setting, during executing at a second privilege level, a memory segment occupied by the shared object to execute only;
• and
• accessing, at a first privilege level, the shared object from a user application, wherein the first privilege level is more restrictive than the second privilege level.

A program product comprising computer-executable instructions that are stored on a non-transitory computer readable medium and that, when executed by a processor, cause a device to:

• load, within a rich execution environment, a shared object into a user memory, wherein the shared object comprises an encrypted segment, a metadata, and a constructor routine;
• send from the rich execution environment, a request for decryption to a trusted execution environment, wherein the request for decryption comprises the metadata and the encrypted segment;
• decrypt, within the trusted execution environment, the encrypted segment to produce an unencrypted segment, wherein the decryption is based on the metadata and a predetermined platform key;
• receive, within the rich execution environment, a decryption response from the trusted execution environment, wherein the decryption response comprises a decrypted segment;
• write the decrypted segment into the shared object;
• set, during executing at a second privilege level, a memory segment occupied by the shared object to execute only;
• and
• access, at a first privilege level, the shared object from a user application, wherein the first privilege level is more restrictive than the second privilege level.