Secure zone for secure transactions
An apparatus according to the present disclosure may comprise a secure zone configured to execute a task having a subtask. The task and subtask may have respective executable code and may be digitally signed by respective code providers. The secure zone may be further configured to apply respective sets of permissions while the respective executable code of the task and subtask are executed. The respective set of permissions for the task may be based on at least one of information associated with the signed task and information in a digital certificate of the respective code provider for the task. The respective set of permissions for the subtask may be based on at least one of information associated with the signed subtask and information in a digital certificate of the respective code provider for the subtask.
1. An apparatus, comprising:
a memory configured to store data;
a secure zone comprising an interface and configured to execute a task comprising a subtask that communicates one or more data packets over a network, wherein the memory is cleared of data related to the subtask after executing the subtask; and
a non-secure zone coupled to the secure zone via the interface, wherein the secure zone is configured to use network capabilities of the non-secure zone to communicate the one or more data packets over the network according to the subtask, and wherein the network capabilities of the non-secure zone receive the data packets communicated from the secure zone via the interface.
2. The apparatus of claim 1 , wherein the network capabilities of the non-secure zone include a TCP/IP stack.
3. An apparatus, comprising:
a secure zone comprising an interface and configured to execute a task comprising a subtask that communicates one or more data packets over a network, and
a non-secure zone coupled to the secure zone via the interface, wherein the secure zone is configured to use network capabilities of the non-secure zone to communicate the one or more data packets over the network according to the subtask, and wherein the network capabilities of the non-secure zone receive the data packets communicated from the secure zone via the interface, wherein the task and the subtask have respective executable code, and the task and the subtask are digitally signed by respective code providers, and
wherein the secure zone is configured to apply respective sets of permissions while the respective executable code of the task and subtask are executed, wherein the respective set of permissions for the task are based on at least one of information associated with the signed task and information in a digital certificate of the respective code provider for the task, and wherein the respective set of permissions for the subtask are based on at least one of information associated with the signed subtask and information in a digital certificate of the respective code provider for the subtask.
4. A method, comprising:
receiving a task at a secure zone of an apparatus coupled to a non-secure of the apparatus via an interface;
executing a subtask of the task by the secure zone, wherein execution of the subtask comprises communicating one or more data packets over a network using network capabilities provided by the non-secure zone, and wherein the network capabilities of the non-secure zone receive the data packets communicated from the secure zone via the interface; and
clearing a memory of data related to the subtask after executing the subtask.
5. The method of claim 4 , wherein the network capabilities of the non-secure zone include a TCP/IP stack.
6. A method, comprising:
receiving a task at a secure zone of an apparatus coupled to a non-secure of the apparatus via an interface;
executing a subtask of the task by the secure zone, wherein execution of the subtask comprises communicating one or more data packets over a network using network capabilities provided by the non-secure zone, and wherein the network capabilities of the non-secure zone receive the data packets communicated from the secure zone via the interface; and
applying respective sets of permissions while the respective executable code of the task and subtask are executed, wherein the task and the subtask have respective executable code, and the task and the subtask are digitally signed by respective code providers, wherein the respective set of permissions for the task are based on at least one of information associated with the signed task and information in a digital certificate of the respective code provider for the task, and wherein the respective set of permissions for the subtask are based on at least one of information associated with the signed subtask and information in a digital certificate of the respective code provider for the subtask.