Encoded inline capabilities

US10860709B2 · kind B2 · utility

Assignee

• Intel Corporation · US

Inventors

• Michael LeMay · Hillsboro, US
• David M. Durham · Beaverton, US
• Michael E. Kounavis · Portland, US
• Barry E. Huntley · Hillsboro, US
• Vedvyas Shanbhogue · Austin, US
• Jason W. Brandt · Austin, US
• Josh Triplett · Hillsboro, US
• Gilbert Neiger · Hillsboro, US
• Karanvir S. Grewal · Hillsboro, US
• Baiju V. Patel · Portland, US
• Ye Zhuang · Portland, US
• Jr-Shian Tsai · Beaverton, US
• Vadim Sukhomlinov · Santa Clara, US
• Ravi L. Sahita · Portland, US
• Mingwei Zhang · Zhejiang, CN
• James C. Farwell · Portland, US
• Amitabh Das · Hillsboro, US
• Krishna Bhuyan · Sammamish, US

Key dates

• Filing date: Jun 29, 2018
• Grant date: Dec 8, 2020
• Expiry date: May 20, 2039

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2209/127
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Disclosed embodiments relate to encoded inline capabilities. In one example, a system includes a trusted execution environment (TEE) to partition an address space within a memory into a plurality of compartments each associated with code to execute a function, the TEE further to assign a message object in a heap to each compartment, receive a request from a first compartment to send a message block to a specified destination compartment, respond to the request by authenticating the request, generating a corresponding encoded capability, conveying the encoded capability to the destination compartment, and scheduling the destination compartment to respond to the request, and subsequently, respond to a check capability request from the destination compartment by checking the encoded capability and, when the check passes, providing a memory address to access the message block, and, otherwise, generating a fault, wherein each compartment is isolated from other compartments.