Binary translation of a trusted binary with input tagging

US9996690B2 · kind B2 · utility

Assignee

• McAfee, LLC · US

Inventors

• Ned M. Smith · Beaverton, US
• Dmitri Rubakha · San Jose, US
• Samir Vasantbhai Shah · Kirkland, US
• Jason Martin · Beaverton, US
• Micah J. Sheller · Hillsboro, US
• Somnath Chakrabarti · Portland, US
• Bin Xing · Hillsboro, US

Key dates

• Filing date: Dec 27, 2014
• Grant date: Jun 12, 2018
• Expiry date: Dec 27, 2034

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/033
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

In an example, a computing device includes a trusted execution environment (TEE), including an enclave. The enclave may include both a binary translation engine (BTE) and an input verification engine (IVE). In one embodiment, the IVE receives a trusted binary as an input, and analyzes the trusted binary to identify functions, classes, and variables that perform input/output operations. To ensure the security of these interfaces, those operations may be performed within the enclave. The IVE tags the trusted binary and provides the binary to the BTE. The BTE then translates the trusted binary into a second format, including designating the tagged portion for execution within the enclave. The BTE may also sign the new binary in the second format and export it out of the enclave.