FlexTEE: ARM TrustZone 執行期間安全記憶體動態擴充之架構;FlexTEE: A Secure Runtime Memory Expansion Framework for ARM TrustZone

NCU Institutional Repository > 資訊電機學院 > 資訊工程研究所 > 博碩士論文 > Item 987654321/98490

請使用永久網址來引用或連結此文件: https://ir.lib.ncu.edu.tw/handle/987654321/98490

題名:	FlexTEE: ARM TrustZone 執行期間安全記憶體動態擴充之架構;FlexTEE: A Secure Runtime Memory Expansion Framework for ARM TrustZone
作者:	楊子毅;Yang, Tzu-Yi
貢獻者:	資訊工程學系
關鍵詞:	可信執行環境;ARM TrustZone;OP-TEE;Trusted Execution Environments;ARM TrustZone;OP-TEE
日期:	2025-08-04
上傳時間:	2025-10-17 12:50:31 (UTC+8)
出版者:	國立中央大學
摘要:	隨著 ARM TrustZone 技術因其安全性優勢而被廣泛應用於物聯網與嵌入式裝置，越來越多人工智慧應用也逐漸整合至此類平台。常見應用包括影像辨識、語音處理與智慧感測等，需在終端裝置上即時執行推論任務，以提升效率並保障資料隱私。然而，此類裝置常受限於系統資源，尤其在隔離執行環境中，記憶體空間相對不足，對 AI 推論等高資源需求的應用構成挑戰。為此，我們提出 FlexTEE，一套支援執行期記憶體擴充的安全機制，可於系統運行期間，將富執行環境中的空閒記憶體動態分配給 TEE，並透過記憶體存取權限的嚴格管理，確保整體系統的安全性。FlexTEE 可與 OP-TEE 無縫整合，TA 無需額外修改即可使用擴充後的安全記憶體。最後，我們在 Raspberry Pi 3 開發板上實作 FlexTEE，並實際運行 DNN 模型以測試其性能開銷。;With the growing adoption of ARM TrustZone technology in IoT and em bedded systems due to its security advantages, an increasing number of AI applications are being integrated into such platforms. Common use cases in clude image recognition, speech processing, and smart sensing, which require real-time inference on edge devices to improve efficiency and protect data privacy. However, these devices are often limited in system resources, espe cially within the Trusted Execution Environment (TEE), where constrained memory capacity poses challenges for resource-intensive workloads such as AI inference. To address this issue, we propose FlexTEE, a secure runtime memory expansion mechanism that dynamically allocates unused memory from the Rich Execution Environment (REE) to the TEE during system oper ation, while enforcing strict access control to ensure overall system security. FlexTEE integrates seamlessly with OP-TEE, allowing Trusted Applications (TAs) to utilize the expanded secure memory without any code modifications. Finally, we implement FlexTEE on a Raspberry Pi 3 development board and evaluate its performance overhead by running a deep neural network (DNN) model in practice.
顯示於類別:	[資訊工程研究所] 博碩士論文

文件中的檔案:

檔案	描述	大小	格式	瀏覽次數
index.html		0Kb	HTML	18	檢視/開啟

在NCUIR中所有的資料項目都受到原著作權保護.

社群 sharing

資料載入中.....