Mobile device having trusted execution environment

A mechanism for securing a mobile app for execution on a mobile device. The mechanism includes loading a non-trusted portion of the mobile app from a non-trusted application provider onto the mobile device, operating a key provisioning server to generate keys associated with a trusted execution environment, transmitting the keys associated with the trusted execution environment to the mobile device and to a key directory server, authenticate the mobile device, and upon authenticating the mobile device, transmitting a trusted portion of the mobile app including a trusted application to the mobile device, and installing the trusted portion of the mobile app on the mobile device thereby providing a trusted execution environment. Other systems and methods are disclosed. 种用于保护用于在移动设备上执行的移动应用程序的机制。机制包括将来自不可信应用提供者的移动应用程序的不可信部分加载到移动设备上，操作密钥供应服务器以生成与可信执行环境相关联的密钥，将与可信执行环境相关联的密钥传输到移动设备并且传输到密钥目录服务器，对移动设备认证，并且在对移动设备认证后，将包括可信应用的移动应用程序的可信部分传输到移动设备，以及将移动应用程序的可信部分安装在移动设备上，由此提供可信执行环境。公开了其他系统和方法。