Trusted indicators to secure visual outputs
An example apparatus includes: memory; instructions in the apparatus; and at least one processor to execute the instructions to: check for proof of trust information in one or more pre-determined positions in a trusted digital image, the proof of trust information including a secure output marker, the secure output marker indicative of information corresponding to a trusted output area of the trusted digital image; decrypt the secure output marker using one or more security keys from a trusted execution environment (TEE), the TEE isolated from a computing application; and enable activation of a trusted output indicator in response to a match between first data corresponding to the secure output marker and second data corresponding to the trusted output area of the trusted digital image.
1. A method comprising:
checking for proof of trust information at a pixel position in a trusted digital image, the proof of trust information including a secure output marker, the secure output marker including location display coordinates of a trusted output area of the trusted digital image, an area size of the trusted output area, and a hash value, the hash value based on content of the trusted output area;
decrypting the secure output marker using one or more security keys from a trusted execution environment (TEE), the TEE isolated from a computing application; and
enabling activation of a trusted output indicator after a match between first data corresponding to the secure output marker of the trusted digital image and second data corresponding to the trusted output area of the trusted digital image.
2. The method of claim 1 , wherein the TEE is a secure enclave to prevent the computing application or a software stack from accessing the one or more security keys.
3. The method of claim 1 , further including illuminating the trusted output indicator.
4. The method of claim 1 , wherein the proof of trust information encodes position information in the trusted digital image.
5. The method of claim 1 , wherein the decrypting is to lookup the hash value indicated by the secure output marker to determine the second data corresponding to the trusted output area of the trusted digital image.
6. The method of claim 1 , further including enabling deactivation of the trusted output indicator after a change in the proof of trust information.
7. An apparatus comprising:
memory;
instructions in the apparatus; and
processor circuitry, the instructions to cause the processor circuitry to:
check for proof of trust information at a pixel position in a trusted digital image, the proof of trust information including a secure output marker, the secure output marker including location display coordinates of a trusted output area of the trusted digital image, an area size of the trusted output area, and a hash value, the hash value based on content of the trusted output area;
decrypt the secure output marker using one or more security keys from a trusted execution environment (TEE), the TEE isolated from a computing application; and
enable activation of a trusted output indicator after a match between first data corresponding to the secure output marker of the trusted digital image and second data corresponding to the trusted output area of the trusted digital image.
8. The apparatus of claim 7 , wherein the TEE is a secure enclave, the TEE to prevent the computing application or a software stack from accessing the one or more security keys.
9. The apparatus of claim 7 , further including one or more light emitting diodes in the trusted output indicator.
10. The apparatus of claim 7 , further including a highlightable border disposed outside of a display area of a display device, the highlightable border to implement the trusted output indicator.
11. The apparatus of claim 7 , wherein the proof of trust information encodes position information in the trusted digital image.
12. The apparatus of claim 7 , wherein the processor circuitry is to execute the instructions to lookup the hash value indicated by the secure output marker to determine the second data corresponding to the trusted output area of the trusted digital image.
13. A storage device or storage disk comprising instructions to cause processor circuitry to at least:
check for proof of trust information at a pixel position in a trusted digital image, the proof of trust information including a secure output marker, the secure output marker including location display coordinates of a trusted output area of the trusted digital image, an area size of the trusted output area, and a hash value, the hash value based on content of the trusted output area;
decrypt the secure output marker using one or more security keys from a trusted execution environment (TEE), the TEE isolated from a computing application; and
enable activation of a trusted output indicator after a match between first data corresponding to the secure output marker of the trusted digital image and second data corresponding to the trusted output area of the trusted digital image.
14. The storage device or storage disk of claim 13 , wherein the instructions are to cause the processor circuitry to enable activation of the trusted output indicator by enabling activation of one or more light emitting diodes.
15. The storage device or storage disk of claim 13 , wherein the instructions are to cause the processor circuitry to enable activation of the trusted output indicator by enabling highlighting of a border disposed outside of a display area of a display device.
16. The storage device or storage disk of claim 13 , wherein the instructions are to cause the processor circuitry to decode position information in the trusted digital image from the proof of trust information.
17. The storage device or storage disk of claim 13 , wherein the instructions are to cause the processor circuitry to lookup the hash value indicated by the secure output marker to determine the second data corresponding to the trusted output area of the trusted digital image.