Patent ID: 9722775
Date: 2017-08-01
CPC Classifications: H04L

Claim:
1. A method, comprising: executing, at a device, a first application that performs unsecure processing of first data; using one or more first secure Application Programming Interface (API) calls to request secure processing of at least a portion of the first data by a second application within a Trusted Execution Environment (TEE) of the device, wherein the one or more first secure API calls include sending the at least a portion of the first data to the TEE; obtaining, at the device, a first public encryption key and a first private encryption key of a first public/private key pair associated with the device; obtaining a second public encryption key, of a second public/private encryption key pair, associated with a destination device that is different than the device; storing, at the device, the first public encryption key, the first private encryption key, and the second public encryption key in a secure memory of the TEE; executing the second application, as a secure, trusted application within the TEE, to perform the secure processing of the at least a portion of the first data using the stored second public encryption key or the first private encryption key, wherein the first application comprises an email application, wherein the second application comprises a Public Key Infrastructure (PKI) applet within the TEE, wherein the at least a portion of the first data comprises an unencrypted email message or an encrypted email message, and wherein the secure processing comprises: sending, from the TEE, the decrypted email message to a display of the device via a secure, dedicated hardware path, wherein a rich operating system (OS) of the device does not interact with the decrypted email message.