TEE Internal Core API Specification – Public Review v1.2.1.31 19 / 366
Copyright
2011-2020 GlobalPlatform, Inc. All Rights Reserved.
The technology provided or described herein is subject to updates, revisions, and extensions by GlobalPlatform. Use of this
information is governed by the GlobalPlatform license agreement and any use inconsistent with that agreement is strictly
prohibited.
Property An immutable value identified by a name.
Property Set Any of the following:
• The configuration properties of a Trusted Application
• Properties associated with a Client Application by the Regular
Execution Environment
• Properties describing characteristics of a TEE implementation
Protection Profile (PP)
A document according to the Common Criteria, as described in
[ISO 15408], used as part of the security certification process; defines
the specific set of security features required of a technology to claim
compliance.
REE Time A time value that is as trusted as the REE.
Regular Execution
Environment (REE)
An Execution Environment comprising at least one Regular OS and all
other components of the device (SoCs, other discrete components,
firmware, and software) which execute, host, and support the Regular
OS (excluding any Secure Components included in the device).
From the viewpoint of a Secure Component, everything in the REE is
considered untrusted, though from the Regular OS point of view there
may be internal trust structures.
(Formerly referred to as a Rich Execution Environment (REE).)
Contrast Trusted Execution Environment (TEE).
Regular OS
An OS executing in a Regular Execution Environment. May be anything
from a large OS such as Linux down to a minimal set of statically linked
libraries providing services such as a TCP/IP stack.
(Formerly referred to as a Rich OS or Device OS.)
Contrast Trusted OS.
Secure Component
GlobalPlatform terminology to represent either a Secure Element or a
Trusted Execution Environment.
Secure Element
A tamper-resistant secure hardware component which is used in a
device to provide the security, confidentiality, and multiple application
environment required to support various business models. May exist in
any form factor, such as embedded or integrated SE, SIM/UICC,
smart card, smart microSD, etc.
Security Domain
An on-device representative of an Authority in the TEE Management
Framework security model. Security Domains are responsible for the
control of administration operations. SDs are used to perform the
provisioning of TEE properties and to manage the life cycle of Trusted
Applications and SDs associated with them.
Session
Logically connects multiple commands invoked on a Trusted Application
or a Security Domain.
Simple Symmetric Key Type
In the context of this specification, any of a set of object types defined in
Table 5-10.
Single Instance Trusted
Application
Denotes a Trusted Application for which all sessions opened by clients
are directed to a single TA instance.