Poster: Integrating a Secure Processing Environment in an IoT Operating System

Trusted Execution Environments (TEE) and secure enclaves with hardware support are promising concepts for enhancing security in constrained environments. These approaches provide protected processing areas within a SOC, in which security-critical applications can execute, and at the same time prevent unauthorized access to sensitive data and program code. New microcontrollers with the Armv8-M architecture offer Trustzone-M, a hardware feature to protect memory and support TEEs. To facilitate adoption, Arm provides an open source reference implementation for a secure processing environment (Trusted Firmware-M). In this poster, we present how we integrated this secure firmware in an IoT operating system and measure the overhead cost in memory and execution time.