US 10,592,661 B2Granted

Package processing

AssigneeMicrosoft Technology Licensing, LLC

InventorsSylvan Wesley Clebsch, Marc Manuel Johannes Brockschmidt, Syed Samin Ishtiaq, Jade Ella Carla Alglave, Matthew John Parkinson, Andrew Madison Kent

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

In various examples, there is a computer-implemented method for providing packages for processing on a computer system. The method creates a secure connection to an enclave and retrieves a quote to verify that the enclave is genuine and that it contains a predetermined process. The predetermined process is configured to create an enclave for itself and determine that an initial state of the computer system is equivalent to a predetermined state based on a quote retrieved from a security module. The predetermined process is further configured to receive a package to be processed by the computer system and cause the processor to process the package outside of the enclave. In response to verifying the enclave, the method provides a package to be processed by the computer system.

Claims20

Dependent claims

A system comprising:

a hardware processor;
and
a security module arranged to store data representing measurements of each of a plurality of code modules which are to be executed by the hardware processor as part of a boot process for the system;
wherein, the system is configured to cause the hardware processor to execute an initial process after completion of the boot process and before any subsequent processes, the initial process being operable to:
create an enclave for the initial process, wherein a state of the enclave is remotely verifiable and processing performed by the initial process is performed from within the enclave;
retrieve a quote from the security module, the quote comprising a representation of the measurements of the plurality of code modules executed by the hardware processor during the boot process;
determine that an initial state of the system is equivalent to a predetermined state based on the retrieved quote;
and
receive a package comprising code or data or both to be processed by the system;
and
cause the hardware processor to process the package outside of the enclave.

8 more elements

A computer-implemented method for providing packages for processing on a computer system, the method comprising:

creating a secure connection to an enclave on the computer system;
requesting an enclave quote from the enclave;
verifying, using the enclave quote, that the enclave is a genuine enclave and that the process running in the enclave is a predetermined process which is configured to determine that the initial state of the computer system is equivalent to a predetermined state, the predetermined state comprising the predetermined process being executed as an initial process after completion of a boot process and before any subsequent processes for the computer system, and receive one or more packages for processing and cause the one or more packages to be processed outside of the enclave;
and
in response to verifying that the enclave is a genuine enclave and the process running in the enclave is the predetermined process:
provide a package comprising code or data or both to be processed by the computer system using the secure connection.

3 more elements

A non-transitory computer-readable medium comprising a plurality of computer-instructions which, when executed by a computer system cause the computer system to:

create an enclave for a process in which the computer-instructions are to be executed, wherein processing performed by the process is performed from within the enclave;
retrieve a quote from a security module of the computer system, the quote comprising a representation of the measurements stored by the security module of a plurality of code modules executed by a hardware processor during a boot process of the computer system;
determine that an initial state of the computer system is equivalent to a predetermined state based on the retrieved quote, wherein the predetermined state of the computer system includes the process being executed as an initial process after completion of the boot process and before any subsequent processes;
instruct the security module to store arbitrary data as one or more additional measurements;
and
receive a package comprising code or data or both to be processed by the system;
and
cause the hardware processor to process the package outside of the enclave.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/823,435Filed 27 Nov 2017
Published: US 2019/0163898 A130 May 2019
Granted: 17 Mar 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

G06F 21/53
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by executing in a restricted environment, e.g.…
G06F 21/12
Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]: protecting…
G06F 21/51
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: at application…
H04L 9/3263
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…