FIELD: information protection.
SUBSTANCE: system is made with the possibility to accept a request for protected data from a requesting party associated with nested TrEE, a conclusion on the certification of a secure core and a conclusion on the certification of a key, while nested TrEE contains a trusted application executed on top of the secure core, wherein the conclusion on the certification of the key connects a public encryption key of the trusted application and ID of the trusted application; extract protected data from the mentioned system, in which secrets are stored, in response to this request; encrypt protected data using the public encryption key of the trusted application and send encrypted protected data to the requesting party.
EFFECT: increased security.
20 cl, 14 dwg
