Abstract:With the rapid evolution of Internet-of-Things (IoT), billions of IoT devices have connected to the Internet, collecting information via tags and sensors. For an IoT device, the application code itself and data collected by sensors can be of great commercial value. It is challenging to protect them because IoT devices are prone to compromise due to the inevitable vulnerabilities of commodity OSes. Trusted Execution Environment (TEE) is one of the solutions that protects sensitive data by running security-sensitive workloads in a secure world. However, this solution does not work for most of the IoT devices that are limited in resources. In this paper, we propose Flash Controller-based Secure Execution Environment (FCSEE), an approach to protect security-sensitive code and data for IoT devices using the flash controller. Our approach constructs a secure execution environment on the target flash memory by modifying the execution logic of its controller, leveraging it as a co-processor to execute security-sensitive workloads of the host device. By extending the original functionality of the flash firmware, FCSEE also provides several much-needed security primitives to protect sensitive data. We constructed a prototype based on a Trans-Flash (TF) card and implemented proof of its confidentiality. Our evaluation results indicate that FCSEE can confidentially execute security-sensitive workloads from the host and efficiently protects its sensitive data.

Secure element (se) operating system and method

Design of Secure Operating System

Design Of Portable Infrared Business Card Exchange System On Chip

Apparatus and method for transparent, secure element-based mediation of on-board diagnostic operations

Apparatus and method for protection of critical embedded system components via hardware-isolated secure element-based monitor

A formal description of SECIMOS operating system

Design of device driver based on stream interface driver model under WinCE

A Remote Control System for Embedded Environment

An Enclave-based TEE for SE-in-SoC in RISC-V Industry

Mobile storage and charging device

The design and implement of a mobile security SoC

Security Memory System for Mobile Device or Computer Against Memory Attacks

A Configurable SoC Design for Information Security.

System Efficient ESD Design of IO ESD Protection

A High-Performance Platform-Based SoC for Information Security

Secure Design for Integrated Sensing and Semantic Communication System

The Design and Implementation of the Secure Mechanism for an Internet-Based Secure Electronic Commerce System

A Security Protocol for the Identification and Data Encrypt Key Management of Secure Mobile Devices

Implementation of a hardware security chip for mobile devices

Appareil et procédé de protection de composants système intégrés critiques au moyen d'un moniteur basé sur un élément sécurisé isolé du matériel

Flash controller-based secure execution environment for protecting code confidentiality