公开(公告)号：US10511575B2

公开(公告)日：2019-12-17

申请号：US15707528

申请日：2017-09-18

Applicant: Huawei Technologies Co., Ltd.

Inventor： Nikolay Gigov ,  Yin Tan ,  Robert Lambert

IPC: H04L29/06

Abstract: Methods and systems for providing an endpoint device with access to a remote resource are disclosed. A first secure tunnel with the endpoint device is established from an intermediate device, the first tunnel terminating within a trusted execution environment (TEE) in the intermediate device. At least one credential is received within the TEE and via the first secure tunnel from the endpoint device. The at least one credential is transmitted from the intermediate device to the remote resource via a second secure tunnel, the second tunnel located between the remote resource and the intermediate device and originating within the TEE. In response to the at least one credential being accepted by the remote resource, communications between the endpoint device and the remote resource via the TEE in the intermediate device through the first and second secure tunnels are enabled.