A TEE (Trusted Environment Execution) structure which comprises: a. a main domain defining a domain of operation for a main OS which is divided into a user space section and a kernel space section; b. a privileged trusted domain defining a domain of operation for a trusted domain OS which is divided into a user space section and a kernel space section; c. a low level hypervisor which is separate from both of said main OS and said trusted domain OS, said hypervisor is used for: (i) receiving packets from a network; (ii) examining an address included in each of said received packets; and (iii) based on the examined address in each of said packets, targeting the packet to either said main OS or to said trusted domain OS; d. a first conventional channel extending from the user space of said main OS to the kernel space of said trusted domain OS; and e. a second conventional channel extending from the kernel space of said main OS to the kernel space of said trusted domain OS, wherein a service request is conveyed from said main OS to said trusted domain OS over said first conventional channel or said second conventional channel, wherein said TEE structure comprises a secured channel extending between said low level hypervisor and said trusted domain OS in addition to said first conventional channel and said second conventional channel, wherein said low level hypervisor directly conveys packets received from an external entity over said secured channel to said trusted domain OS while avoiding any interaction whatsoever with said main OS. a. a main domain defining a domain of operation for a main OS which is divided into a user space section and a kernel space section; b. a privileged trusted domain defining a domain of operation for a trusted domain OS which is divided into a user space section and a kernel space section; c. a low level hypervisor which is separate from both of said main OS and said trusted domain OS, said hypervisor is used for: (i) receiving packets from a network; (ii) examining an address included in each of said received packets; and (iii) based on the examined address in each of said packets, targeting the packet to either said main OS or to said trusted domain OS; (i) receiving packets from a network; (ii) examining an address included in each of said received packets; and (iii) based on the examined address in each of said packets, targeting the packet to either said main OS or to said trusted domain OS; d. a first conventional channel extending from the user space of said main OS to the kernel space of said trusted domain OS; and e. a second conventional channel extending from the kernel space of said main OS to the kernel space of said trusted domain OS, wherein a service request is conveyed from said main OS to said trusted domain OS over said first conventional channel or said second conventional channel, wherein said TEE structure comprises a secured channel extending between said low level hypervisor and said trusted domain OS in addition to said first conventional channel and said second conventional channel, wherein said low level hypervisor directly conveys packets received from an external entity over said secured channel to said trusted domain OS while avoiding any interaction whatsoever with said main OS.