Ali Cloud Link TEE is a trusted computing framework for IoT devices.


Link TEE series products provide a general security infrastructure, which can provide security application support for a variety of industries. They are widely used in Internet of vehicles security, fingerprint identification, identity authentication, electronic payment, TEE-SIM, smart lock and other security scenarios to build security enhanced services for customers.

At present, Alicloud Link TEE has three configurations: TEE Pro (supporting ARM V7/V8-A and C-Sky and other application processor architectures) TEE Air (supporting ARM V8-M and C-Sky and other microprocessor architectures) and TEE Cap (cross-platform, cross-operating system general computing architecture).

Link TEE focuses on four core security capabilities: First, general security capabilities: for example, secure storage, which can support secure encryption and persistent storage of user data to prevent privacy and sensitive data leakage. Second, password algorithm and key management: provide a variety of encryption and decryption, signature check, hardware acceleration algorithm support, including the state secret standard SM2/SM3/SM4, support key hierarchy structure and management, etc. Third, secure application support: it provides a secure environment to run customer-sensitive applications, such as fingerprint, payment, communication, etc., in accordance with GP TEE specification, and protects the safe operation of private code, and prevents counter-debugging, disassembly and data snooping. Fourth, multiple security design: version anti-rollback, resist rollback attacks of data and software version, multi-level security isolation, prevent illegal data flow interaction between secure applications.

Ali Cloud Link TEE is deeply engaged in the field of vehicle-mounted security and innovated the “Link TEE for Car” vehicle-mounted security solution to provide comprehensive and reliable V2X security guarantee for intelligent vehicles and help engineers of oaS to develop and deploy high-security services and applications quickly and easily. At present, the scheme has been successfully applied to the leading enterprises of new energy vehicles: zero-run vehicles and singularity vehicles.

Link TEE provides trusted and multi-level security services for blockchain on IoT devices. It can seamlessly connect with Aliyun BaaS enterprise blockchain service to escort the security of IoT applications of enterprise blockchain and solve the credibility problems before blockchain on data.

“Link TEE for Smart Vending Machine solution” protects the terminal security of smart vending machines and the operation security of merchants’ APPS, and ensures the safe storage of sensitive data. Tens of thousands of cainiao smart containers have been successfully deployed.

Ali Cloud IoT jointly launched the “Link TEE+eSIM” security technology solution with Zhongtian Micro, Guotong Technology and ZTE Micro. The solution realized SIM function based on TEE. The SIM card information was embedded in the microprocessor, and the operator’s NB-iot network could be independently connected without inserting the card. Help the rapid commercialization of consumer electronics products such as sharing devices, smart meter reading, wearable devices and smart door locks. This solution is also the first product to pass the teE-ESIM safety test standard of Theil Laboratory of the Ministry of Industry and Information Technology in China.

Click on the understanding of “Internet of things the trusted execution environment – Link TEE” product iot.aliyun.com/products/te… Click to know ali cloud launch promotion.aliyun.com/ntms/act/cl…