Computer-implemented method for improving data security in a computing device

A computer-implemented method for improving data security in a computing, the computing device including a computer system with a processor for executing computer instructions and a physical memory accessible to the processor, the computer system being configured as an implementation of a computer architecture suitable for switching between a trusted execution environment for executing a trusted computing process and a rich execution environment for executing a client computing process corresponding to the trusted computing process, wherein an access of the rich execution environment on the trusted execution environment is restricted and/or secured, wherein the rich execution environment and the trusted execution environment respectively are switchable between a user mode in which execution of one or more selected computer instructions for accessing the physical memory is restricted and/or secured, and a kernel mode in which execution of said computer instructions is unrestricted and/or unsecured, wherein the rich execution environment and the trusted execution environment commonly use a shared memory of the physical memory, the shared memory providing a communication channel including related process data for communication between the client computing process and the trusted computing process, the method comprising:

• a) by the computing device, providing a restricted memory, wherein the access to the restricted memory is restricted and/or secured with respect to the processor;
• b) by the computer system, upon receiving a computer instruction for switching from the user mode to the kernel mode inside the rich execution, triggering the computing device to perform the following:
• α) transferring the related process data from the shared memory into the restricted memory by clearing the related process data in the shared;
• and
• c) by the computing device, performing step α).