Granted Patent B2

US 12,493,685 · App. 17/689,988 · Granted Dec 9, 2025

Inventors: Fabiano Anemone (Stuttgart, DE); Alexei Karpov (Stuttgart, DE); Cederic Laumen (Stuttgart, DE); Stefan Rabin (Stuttgart, DE); Geoffrey Van Den Berge (Stuttgart, DE); Simon Gillet (Stuttgart, DE)

Assignee: SONY GROUP CORPORATION

G06F21/53G06F2221/034

Abstract

Claims (52)

1 . A method for testing a Device Under Test (DUT), the method comprising:

emulating a Trusted Execution Environment (TEE) of the DUT by means of a software emulator running on a device separate from the DUT in order to provide an emulated TEE;

intercepting, at the DUT, a call from a Rich Execution Environment (REE) of the DUT directed to and intended for the TEE of the DUT, the intercepting including augmenting a behavior of an OS, of one or more applications, of one or more functions, of one or more routines, or of another software component of the REE;

redirecting the call from the DUT to the emulated TEE running on the device separate from the DUT such that the call is processed by the emulated TEE; and

transmitting a response of the emulated TEE from the device separate from the DUT to the REE of the DUT, the response being based on the call.

2 . The method of claim 1 , wherein the emulated TEE running on the device separate from the DUT is based on extracted code of the TEE.

3 . The method of claim 2 , wherein the extracted code of the TEE is compiled code.

4 . The method of claim 1 , wherein the call is intercepted at the DUT by hooking.

5 . The method of claim 1 , wherein redirecting the call from the DUT to the emulated TEE running on the device separate from the DUT comprises:

receiving the call from the REE;

parsing the call in order to obtain input data in a predefined data format for the emulated TEE running on the device separate from the DUT; and

sending the input data to the emulated TEE running on the device separate from the DUT.

6 . The method of claim 5 , wherein redirecting the call from the DUT to the emulated TEE running on the device separate from the DUT further comprises:

packing the input data prior to sending the input data to the emulated TEE.

7 . The method of claim 1 , wherein transmitting the response of the emulated TEE from the device separate from the DUT to the REE of the DUT comprises:

receiving, from the emulated TEE running on the device separate from the DUT, output data related to the response in a predefined data format;

parsing the output data in order to obtain the response in a data format used by the REE; and

sending the response in the data format used by the REE to the REE.

8 . The method of claim 7 , wherein

the output data received from the emulated TEE running on the device separate from the DUT is packed, and

transmitting the response of the emulated TEE from the device separate from the DUT to the REE of the DUT further comprises:

unpacking the output data prior to parsing the output data.

9 . The method of claim 1 , wherein

the emulated TEE running on the device separate from the DUT emulates hardware of the TEE, and

the method further comprises:

monitoring a state of at least part of the emulated hardware of the TEE while the call is processed by the emulated TEE running on the device separate from the DUT.

10 . The method of claim 1 , wherein

the emulated TEE running on the device separate from the DUT emulates code of the TEE, and

the method further comprises:

modifying the emulated code of the TEE based on a user input such that the response is generated by processing the call with the modified emulated code; and

monitoring a state of the DUT in response to receiving the response of the emulated TEE running on the device separate from the DUT.

11 . The method of claim 10 , wherein modifying the emulated code of the TEE comprises hooking one or more functions of the emulated code.

12 . The method of claim 10 , wherein modifying the emulated code of the TEE comprises debugging the emulated code.

13 . The method of claim 10 , wherein modifying the emulated code of the TEE comprises introducing an artificial error into the emulated code of the TEE.

14 . A non-transitory machine-readable medium having stored thereon a program having a program code for performing the method according to claim 1 when the program is executed on a processor or a programmable hardware.

15 . An apparatus for testing a Device Under Test (DUT), the apparatus comprising:

interface circuitry that is separate from the DUT and that is for coupling to the DUT; and

processing circuitry that separate from the DUT, that is coupled to the interface circuitry, and that is configured to:

execute a software emulator for emulating a Trusted Execution Environment (TEE) of the DUT in order to provide an emulated TEE;

receive, via the interface circuitry, a call from a Rich Execution Environment (REE) of the DUT directed to and intended for the TEE of the DUT, the call having been intercepted at the DUT and redirected from the DUT to the interface circuitry, and the interception including augmenting a behavior of an OS, of one or more applications, of one or more functions, of one or more routines, or of another software component of the REE;

process the intercepted and redirected call by the emulated TEE; and

control the interface circuitry to transmit a response of the emulated TEE to the REE of the DUT, the response being based on the intercepted call.

16 . The apparatus of claim 15 , wherein the emulated TEE is based on extracted code of the TEE.

17 . The apparatus of claim 15 , wherein the call is intercepted at the DUT by hooking.

18 . The apparatus of claim 15 , wherein

the emulated TEE emulates hardware of the TEE, and

the processing circuitry is further configured to:

monitor a state of at least part of the emulated hardware of the TEE while the call is processed by the emulated TEE.

19 . The apparatus of claim 15 , wherein

the emulated TEE emulates code of the TEE, and

the processing circuitry is further configured to:

modify the emulated code of the TEE based on a user input such that the response is generated by processing the call with the modified emulated code.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (36)