Publication

Self-secured devices: high performance and secure I/O access in TrustZone-based systems

View document

Bibliographic Details
Summary:Arm TrustZone is a hardware technology that adds significant value to the ongoing security picture. TrustZone-based systems typically consolidate multiple environments into the same platform, requiring resources to be shared among them. Currently, hardware devices on TrustZone-enabled system-on-chip (SoC) solutions can only be configured as secure or non-secure, which means the dual-world concept of TrustZone is not spread to the inner logic of the devices. The traditional passthrough model dictates that both worlds cannot use the same device concurrently. Furthermore, existing shared device access methods have been proven to cause a negative impact on the overall system in terms of security and performance.This work introduces the concept of self-secured devices, a novel approach for shared device access in TrustZone-based architectures. This concept extends the TrustZone dual-world model to the device itself, providing a secure and non-secure logical interface in a single device instance. The solution was deployed and evaluated on the LTZVisor, an open-source and lightweight TrustZone-assisted hypervisor. The obtained results are encouraging, demonstrating that our solution requires only a few additional hardware resources when compared with the native device implementation, while providing a secure solution for device sharing.
Main Authors:Pinto, Sandro
Other Authors:Machado, Pedro Miguel Silvestre; Oliveira, Daniel José Cunha; Cerdeira, David Martins; Gomes, Tiago Manuel Ribeiro
Subject:TrustZone Security Virtualization TEE Self-secured devices
Year:2021
Country:Portugal
Document type:article
Access type:open access
Associated institution:Universidade do Minho
Language:English
Origin:RepositóriUM - Universidade do Minho

Similar Items

Funded activities

No funded projects found.

Similar Items