Device, method and system to protect communications with a resource of a trusted execution environment

A system comprising:

• a processor core;
• an input/output (IO) device;
• and
• a root complex coupled between the processor core and the IO device;
• wherein one of the IO device or the root complex comprises an integrated circuit (IC) comprising:
• a detector to receive an indication of a timeout of a completion message via an integrity and data encryption (IDE) protected channel in a trusted execution environment (TEE), wherein the IDE protected channel is to extend to each of the IO device and one of the processor core or another IO device;
• an evaluation unit coupled to the detector, wherein, based on the indication, the evaluation unit is to identify a tag which corresponds to the timeout;
• and
• a prevented tag list coupled to the evaluation unit, wherein the evaluation unit is further to add the tag to the prevented tag list to prevent an availability of the tag with respect to communication via the IDE protected channel.

An integrated circuit (IC) comprising:

• first circuitry to participate in communications while the IC is coupled to a root complex, the communications via an integrity and data encryption (IDE) protected channel in a trusted execution environment (TEE), with one of a TEE security manager (TSM) or a device security manager (DSM), wherein the IDE protected channel is to extend to each of an input/output (IO) device and one of a processor core or another IO device;
• and
• second circuitry coupled to the first circuitry, the second circuitry to:
• send a request to flush the IDE protected channel;
• and
• receive, in response to the request, a message from the one of the TSM or the DSM, wherein the message is to indicate that a flush of the IDE protected channel has completed.