US 2026/0252499 A1 · METHOD AND ELECTRONIC DEVICE FOR IMPLEMENTING TRUSTED EXECUTION ENVIRONMENT

Abstract

An electronic device includes a volatile memory including a secure region, a system memory management module configured to manage access to the volatile memory, and a device security manager configured to communicate with a host security manager of a host device. The device security manager is further configured to perform an authentication procedure for the electronic device based on a security protocol, receive a request for a first virtual function (VF) from the host security manager, place a first page table manager managing a first page table associated with the first VF in a secure region of the system memory management module in response to receiving the request for the first VF, and store the first page table in the secure region of the volatile memory. An access authority to the secure region of the volatile memory is granted to a root of trust (RoT) of the electronic device.

Claims20

Dependent claims

An electronic device for implementing a trusted execution environment (TEE), comprising:

a volatile memory including a secure region;
a system memory management module configured to manage access to the volatile memory;
and
a device security manager (DSM) configured to communicate with a host security manager (HSM) of a host device,
wherein the device security manager is further configured to:
perform an authentication procedure for the electronic device based on a security protocol,
receive a request for a first virtual function (VF) from the host security manager,
place a first page table manager managing a first page table associated with the first VF in a secure region of the system memory management module in response to receiving the request for the first VF, and
store the first page table in a secure region of the volatile memory, and
wherein an access authority to the secure region of the volatile memory is granted to a root of trust (RoT) of the electronic device.

7 more elements

A method for implementing a trusted execution environment, performed by an electronic device, comprising:

performing, by a device security manager of the electronic device, an authentication procedure for the electronic device based on a security protocol;
receiving, by the device security manager, a request for a first virtual function (VF) from a host security manager of a host device, wherein the first VF corresponds to a first trusted execution environment virtual machine (TEE VM) included in the host device;
placing, by the device security manager, a first page table manager managing a first page table associated with the first VF in a secure region of a system memory management module in response to receiving the request for the first VF;
and
storing, by the device security manager, the first page table in a secure region of a volatile memory,
wherein an access authority to the secure region of the volatile memory is granted to a root of trust (RoT) of the electronic device.

3 more elements

Dependencies are inferred from the claim text.

Method and electronic device for implementing trusted execution environment

Life of this patent

Method and electronic device for implementing trusted execution environment

Life of this patent

Abstract

Claims20