Back to results
US 10,380,037 B2Granted
Secure data transfer with compute stick
AssigneeIntel Corporation
InventorsRajesh Poornachandran, Ned M. Smith
Life of this patent
Estimating the term…
Abstract
Systems, apparatus and methods may provide for creating a communication path through a secure data interface that includes an electronic device control channel between a small form factor computing apparatus such as a compute stick and an external display. A second communication path may be established between a trusted execution environment region of the external display and a trusted execution environment region of the compute stick such that data may be securely transmitted between the compute stick and the external display through the first and second communication paths.
Claims21
A system comprising:
- a compute stick having a compute stick trusted execution environment hardware region providing an area within the compute stick that is secure from any area within the compute stick and outside of the compute stick trusted execution environment hardware region;
- an external display having an external display trusted execution environment hardware region providing an area within the external display that is secure from any area within the external display and outside of the external display trusted execution environment hardware region;
- a secure data interface that includes an electronic device control channel communicating between the compute stick and the external display;
- and
- a communication path between the compute stick trusted execution environment hardware region and the external display trusted execution environment hardware region;
- wherein input/output peripherals associated with the external display are to be determined via communication between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region by a receipt of a discovery message at the external display trusted execution environment hardware region from the compute stick trusted execution environment hardware region and a send of an available peripheral list to the compute stick trusted execution environment hardware region from the external display trusted execution environment hardware region;
- wherein the compute stick trusted execution environment hardware region includes run-time and storage technology using a storage root key only revealed to the compute stick trusted execution environment hardware region as the compute stick trusted execution environment hardware region executes;
- and
- wherein the communication path comprises a secure end-to-end data tunnel between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region to drive input data from the external display to the compute stick.
6 more elements
A method comprising:
- creating a first communication path through a secure data interface that includes an electronic device control channel between a compute stick and an external display;
- creating a second communication path between an external display trusted execution environment hardware region providing an area within the external display that is secure from any area within the external display and outside of the external display trusted execution environment hardware region and a compute stick trusted execution environment hardware region providing an area within the compute stick that is secure from any area within the compute stick and outside of the compute stick trusted execution environment hardware region;
- transmitting data between the compute stick and the external display through the first and second communication paths;
- and
- determining input/output peripherals associated with the external display via communication between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region, wherein determining the input/output peripherals includes receiving a discovery message at the external display trusted execution environment hardware region from the compute stick trusted execution environment hardware region and sending an available peripheral list to the compute stick trusted execution environment hardware region from the external display trusted execution environment hardware region;
- wherein the compute stick trusted execution environment hardware region includes run-time and storage technology using a storage root key only revealed to the compute stick trusted execution environment hardware region as the compute stick trusted execution environment hardware region executes;
- and
- wherein the second communication path comprises a secure end-to-end data tunnel between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region to drive input data from the external display to the compute stick.
5 more elements
A computer readable storage medium comprising a set of instructions, which, when executed by a processor, cause a computer to:
- create a first communication path through a secure data interface that includes an electronic device control channel between a compute stick and an external display;
- create a second communication path between an external display trusted execution environment hardware region providing an area within the external display that is secure from any area within the external display and outside of the external display trusted execution environment hardware region and a compute stick trusted execution environment region providing an area within the compute stick that is secure from any area within the compute stick and outside of the compute stick trusted execution environment hardware region;
- transmit data between the compute stick and the external display through the first and second communication paths;
- and
- determine input/output peripherals associated with the external display via communication between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region by a receipt of a discovery message at the external display trusted execution environment hardware region from the compute stick trusted execution environment hardware region and a send of an available peripheral list to the compute stick trusted execution environment hardware region from the external display trusted execution environment hardware region;
- wherein the compute stick trusted execution environment hardware region includes run-time and storage technology using a storage root key only revealed to the compute stick trusted execution environment as the compute stick trusted execution environment hardware region executes;
- and
- wherein the second communication path comprises a secure end-to-end data tunnel between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region to drive input data from the external display to the compute stick.
5 more elements
A system comprising:
- a compute stick having a compute stick trusted execution environment hardware region providing an area within the compute stick that is secure from any area within the compute stick and outside of the compute stick trusted execution environment hardware region;
- an external display having an external display trusted execution environment hardware region providing an area within the external display that is secure from any area within the external display and outside of the external display trusted execution environment hardware region;
- a secure data interface that includes an electronic device control channel communicating between the compute stick and the external display;
- and
- a communication path between the compute stick trusted execution environment hardware region and the external display trusted execution environment hardware region;
- wherein input/output peripherals associated with the external display are to be determined via communication between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region by a send of a discovery message to the external display trusted execution environment hardware region from the compute stick trusted execution environment hardware region and a receipt of an available peripheral list at the compute stick trusted execution environment hardware region from the external display trusted execution environment hardware region;
- wherein the compute stick trusted execution environment hardware region includes run-time and storage technology using a storage root key only revealed to the compute stick trusted execution environment hardware region as the compute stick trusted execution environment hardware region executes;
- and
- wherein the communication path comprises a secure end-to-end data tunnel between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region to drive input data from the external display to the compute stick.
6 more elements
A method comprising:
- creating a first communication path through a secure data interface that includes an electronic device control channel between a compute stick and an external display;
- creating a second communication path between an external display trusted execution environment hardware region providing an area within the external display that is secure from any area within the external display and outside of the external display trusted execution environment hardware region and a compute stick trusted execution environment hardware region providing an area within the compute stick that is secure from any area within the compute stick and outside of the compute stick trusted execution environment hardware region;
- transmitting data between the compute stick and the external display through the first and second communication paths;
- and
- determining input/output peripherals associated with the external display via communication between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region, wherein determining the input/output peripherals includes sending a discovery message to the external display trusted execution environment hardware region from the compute stick trusted execution environment hardware region and receiving an available peripheral list at the compute stick trusted execution environment hardware region from the external display trusted execution environment hardware region;
- wherein the compute stick trusted execution environment hardware region includes run-time and storage technology using a storage root key only revealed to the compute stick trusted execution environment hardware region as the compute stick trusted execution environment hardware region executes;
- and
- wherein the second communication path comprises a secure end-to-end data tunnel between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region to drive input data from the external display to the compute stick.
5 more elements
A computer readable storage medium comprising a set of instructions, which, when executed by a processor, cause a computer to:
- create a first communication path through a secure data interface that includes an electronic device control channel between a compute stick and an external display;
- create a second communication path between an external display trusted execution environment hardware region providing an area within the external display that is secure from any area within the external display and outside of the external display trusted execution environment hardware region and a compute stick trusted execution environment region providing an area within the compute stick that is secure from any area within the compute stick and outside of the compute stick trusted execution environment hardware region;
- transmit data between the compute stick and the external display through the first and second communication paths;
- and
- determine input/output peripherals associated with the external display via communication between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region by a send of a discovery message to the external display trusted execution environment hardware region from the compute stick trusted execution environment hardware region and a receipt of an available peripheral list at the compute stick trusted execution environment hardware region from the external display trusted execution environment hardware region;
- wherein the compute stick trusted execution environment hardware region includes run-time and storage technology using a storage root key only revealed to the compute stick trusted execution environment as the compute stick trusted execution environment hardware region executes;
- and
- wherein the second communication path comprises a secure end-to-end data tunnel between the external display trusted execution environment hardware region and the compute stick trusted execution environment hardware region to drive input data from the external display to the compute stick.
5 more elements
Dependencies are inferred from the claim text.