White Paper: TEE System Architecture v1.3

A GlobalPlatform TEE meets both security certification and functionality compliance, defined by the GlobalPlatform Protection Profiles and functional specifications. This document summarises aspects of both of these areas to give the reader an overview of the security and potential capabilities of a GlobalPlatform TEE.

In the latest release we add :

• Material covering further remote TEE management technologies and bridging techniques
• Informative review of security considerations hosting multiple TEEs
• Future looking discussion of enabling a TA to better identify the calling application in a complex hypervisor-based device
• More clarification of security design considerations that need to be met to meet the defining Protection Profiles