Downloaded 13 times
Uploaded bySierraware
Trustzone secure os tee for mips
SierraWare offers a secure OS and hypervisor solution tailored for MIPS IoT security and virtualization, providing a unified TEE and hypervisor implementation that adheres to global standards. Their products cater to various platforms, including residential gateways and automotive systems, and include features like virtualized multi-TEE architecture and easy deployment across regions. The solution supports compliance with industry standards and offers extensive professional services for integration and support.
More Related Content
![ZIPR_br[1]](https://cdn.slidesharecdn.com/ss_thumbnails/5bbef5d9-2ea2-4727-88d3-670c30945a19-161128033152-thumbnail.jpg?width=640&height=640&fit=bounds)
Trustzone secure os tee for mips
- 1. Secure OS andHypervisor - TEE for MIPS IoT Security and Virtualization
- 2. Sierraware Leading provider ofintegrated hypervisor and TEE ▪ Delivered as source code. Flexible and easy to customize ▪ Unified TEE and Hypervisor implementation. ▪ Adheres to Global Platform specifications ▪ Products – Residential gateways – Set-top boxes, – TVs – Mobile phones – Automotive and avionics – Industrial control
- 3. Easy to deployIsolated TEE Containers Only solution with Virtualized Multi-TEE ▪ Ability to launch secondary TEE on demand ▪ Hybrid TEE architecture. Each TEE SecureOS can be built on different API ▪ Easy to deploy across geographical regions ▪ POSIX APIs for Integrating with DRM like Google Widevine, Microsoft Playready ▪ Fully compliant Global Platform APIs MIPS - Hypervisor/Monitor LinuxKernel User Secure World Secondary TEE - China TaskletTaskletTasklets Secure World Primary TEE - GP TaskletTaskletTasklets Sierra Secure Driver
- 4. SierraTEE: Virtualized Environment MIPS CryptoEngine Secure Memory Secure External bus Secure Peripherals: Flash, Keyboard, Display Normal World OS Kernel Secure Driver Global Platform Client API Secure OS Dispatcher Kernel Unified Hypervisor and TEE Monitor HAL Secure Media Playback Crypto Display File System Device Manager Services Mgr Trustlet Secure Tasks Global Platform Internal API Secure UI and GP Apps
- 5. SierraTEE universal solution. ▪Simple and Elegant solution to solve Multi-TEE and TEE Containerization requirements. ▪ Available on all platforms. – ARM using Trustzone Monitor – MIPS using Virtualization ▪ Identical source code across all architectures ▪ GP API Trustlets will work across all platforms with no change in code.
- 6. Virtualized TEE Sierravisor Hypervisor VCPU Scheduler Memory Manager Hal Interrupt Distribution Event/Timer Task Manageme nttasks that can run directly on Drive rs Guest0 Kernel & Drivers Application Guest1 Kernel & Drivers Hyp Tasks Management tasks that can run directly on HV Drivers Backend drivers like Virtio, UART Primary Secure World SierraTEE TaskletTaskletTasklets Application
- 7. TEE Containers. ▪ SatisfyService provider compliance with multi-tee solution. ▪ Easy to deploy across geographical location. ▪ Primary TEE and Secondary TEE can have different API – Example: GP on Primary TEE and China Pay on Secondary TEE
- 8. DRM Media Playback SecureWorldNormal World DRM Decrypt Audio/Video Decoding 2 5 Media Player Framework Security Plugin (NULL, can be replaced with actual DRM) 2 3 4 Input Source (Streaming/File) 1
- 9. Linux IoT Management Solution DomainRelay Agent Application Provider Secure Communication GP Client API SecureOS/TEE Auth Manager ACL ACL System Loader ADDProtected Domain Manager D/B Domains/Apps
- 10. Professional Services ▪ Portingsoftware to processors ▪ Integrating TEE and SierraVisor with applications ▪ Developing drivers, encoders or apps ▪ Extensive experience with processors and kernel code ▪ Android, Linux, BSD, and VxWorks development ▪ Hardware & FPGA ▪ Phased approach from planning and development to testing & certification ▪ Carefully defined schedules and communication with customers to avoid surprises & delays Custom Services Design Expertise Project Management
- 11. Technical Support ▪ Telephoneand Email Support ▪ Online technical documentation ▪ Software updates for commercial products ▪ Previews of upcoming releases ▪ Ability to influence feature enhancements ▪ Commitment to Quality – Service Level Agreement (SLA) details support response times and escalation levels
- 12.