Building a Secure Scheme for a Trusted Hardware Sharing Environment

摘要: Trusted hardware sharing (THS) system can provide multiple trusted execution environments (TEE) via the (e.g., platform module virtualization) for stand-alone and isolation scenarios. However, function requests (TFRs) sent to are emitted by TEEs, which have be processed THS. Since different applications in TEEs security requirements, data TFRs need protected from being leaked or modified an unauthorized manner. To address this issue, we present a secure scheme THS systems based on information flow model that protects sensitive TFRs. Each TFR is assigned level according their owner, isolated with levels. We implement prototype conduct experiments both shared memory environments. The results indicate introduction of mechanisms lead more time consumption processing increase dimension degradation performance still acceptable mitigated real world, because intensive not as they experimental environment.