Secure processing systems and methods
AssigneeIntertrust Technologies Corporation
InventorsGilles Boccon-Gibod, Gary F. Ellison
Life of this patent
Estimating the term…
Abstract
This disclosure relates to systems and methods for enabling the use of secret digital or electronic information without exposing the sensitive information to unsecured applications. In certain embodiments, the methods may include invoking, by a client application executing in an open processing domain, a secure abstraction layer configured to interface with secret data protected by a secure processing domain. Secure operations may be securely performed on the secret data by the secure abstraction layer in the secure processing domain based on an invocation from a client application running in the open processing domain.
Claims20
A computer system enabling secure processing of data, said system comprising:
- a secure processing unit;
- a securely-stored master key, said master key protected against tampering, and said key is accessible to said secure processing unit;
- a secure processing domain, said secure processing domain protecting data stored and processed in the domain in a manner that is resistant to unauthorized access;
- an open processing domain, said open processing domain to allow an application executing within the open processing domain to call a secure abstraction layer software within the secure processing domain to perform one or more operations using said protected data;
- a software validation module, said module configured to- validate, in response to receiving the application call, said secure abstraction layer software said validation using said master key with a signature of the secure abstraction layer software;
- and
- said secure abstraction layer software configured-to execute within said secure processing domain and, after being successfully validated, access the protected data, and use the protected data to perform the one or more operations according to the application call.
Dependencies are inferred from the claim text.