US 12,407,519 B2
Trusted execution environment
James Seibel, Boston, MA (US); Kevin LaFlamme, Boston, MA (US); Fred Koschara, Boston, MA (US); Reinhard Schumak, Boston, MA (US); and Jeremy Debate, Boston, MA (US)
Assigned to Malikie Innovations Limited, Dublin (IE)
Filed by MALIKIE INNOVATIONS LIMITED, Dublin (IE)
Filed on Jul. 20, 2022, as Appl. No. 17/869,298.
Application 17/869,298 is a continuation of application No. 15/007,547, filed on Jan. 27, 2016, granted, now 11,424,931.
Prior Publication US 2022/0368530 A1, Nov. 17, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/32 (2006.01); G06F 21/53 (2013.01); G06F 21/60 (2013.01); H04L 9/40 (2022.01); H04L 67/10 (2022.01)
CPC H04L 9/3234 (2013.01) [G06F 21/53 (2013.01); G06F 21/606 (2013.01); H04L 63/061 (2013.01); H04L 63/0853 (2013.01); H04L 63/0876 (2013.01); H04L 67/10 (2013.01)] 19 Claims
OG exemplary drawing
 
1. A method of providing an execution environment in a computing device, comprising:
loading a plurality of trusted applications into a memory of the computing device;
maintaining, in the memory, a plurality of communication associations;
detecting an attempt to communicate with a recipient application by an originating application, the recipient application being selected from the plurality of trusted applications;
searching through the plurality of communication associations for a communication association comprising an identifier of the recipient application and an identifier of the originating application;
when the communication association comprising the identifier of the recipient application and the identifier of the originating application is not found, disallowing the communication; and
when the communication association comprising the identifier of the recipient application and the identifier of the originating application is found,
identifying a message for transmission between the originating application and the recipient application,
generating a key based on the identifier of the recipient application and a unique file-specific identifier of a file system,
writing the identified message to a file, the contents of the file encrypted using the generated key;
transmitting, using the generated key, the file with the identified message to the recipient application,
receiving the generated key at the recipient application for decrypting the message, and
reading the file and decrypting the message, by the recipient application, using the generated key.