Trusted launch of secure enclaves in virtualized environments

US10353831B2 · kind B2 · utility

Assignee

• Intel Corporation · US

Inventors

• Scott H. Robinson · Portland, US
• Ravi L. Sahita · Portland, US
• Mark W. Shanahan · Raleigh, US
• Karanvir S. Grewal · Hillsboro, US
• Nitin V. Sarangdhar · Portland, US
• Carlos V. Rozas · Portland, US
• Bo Zhang · Raleigh, US
• Shanwei Cen · Portland, US

Key dates

• Filing date: Dec 24, 2015
• Grant date: Jul 16, 2019
• Expiry date: Mar 27, 2037

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/034
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Systems, apparatuses and methods may provide for verifying, from outside a trusted computing base of a computing system, an identity an enclave instance prior to the enclave instance being launched in the trusted computing base, determining a memory location of the enclave instance and confirming that the memory location is local to the computing system. In one example, the enclave instance is a proxy enclave instance, wherein communications are conducted with one or more additional enclave instances in the trusted computing base via the proxy enclave instance and an unencrypted channel.