Virtual machine bound scheduling of trusted execution environment entities

An apparatus for accessing execution environments, the apparatus comprising:

• at least one memory;
• and
• at least one processor coupled to the at least one memory and configured to:
• call, by a first object, a second object, wherein the first object is associated with a first virtual machine (VM) of a plurality of VMs, wherein the first object is executing in a scheduling context of the first VM, wherein the second object is registered with a trusted execution environment (TEE), and wherein the second object is associated with a second VM of the plurality of VMs;
• receive, by the second object, a call from the first object;
• switch the scheduling context to the scheduling context of the second VM based on the received call from the first object;
• and
• execute code associated with the second object in the scheduling context of the second VM.

A non-transitory computer-readable medium having stored thereon instructions that, when executed by at least one processor, cause the at least one processor to:

• call, by a first object, a second object, wherein the first object is associated with a first virtual machine (VM) of a plurality of VMs, wherein the first object is executing in a scheduling context of the first VM, wherein the second object is registered with a trusted execution environment (TEE), and wherein the second object is associated with a second VM of the plurality of VMs;
• receive, by the second object, a call from the first object;
• switch the scheduling context to the scheduling context of the second VM based on the received call from the first object;
• and
• execute code associated with the second object in the scheduling context of the second VM.