Technologies for providing secure utilization of tenant keys
AssigneeIntel Corporation
InventorsKapil Sood, Seosamh O'Riordain, Ned M. Smith, Tarun Viswanathan
Life of this patent
Estimating the term…
Abstract
Technologies for providing secure utilization of tenant keys include a compute device. The compute device includes circuitry configured to obtain a tenant key. The circuitry is also configured to receive encrypted data associated with a tenant. The encrypted data defines an encrypted image that is executable by the compute device to perform a workload on behalf of the tenant in a virtualized environment. Further, the circuitry is configured to utilize the tenant key to decrypt the encrypted data and execute the workload without exposing the tenant key to a memory that is accessible to another workload associated with another tenant.
Claims18
A compute device comprising:
- communication circuitry;
- and
- circuitry to:
- obtain a tenant key from a key server using a unified extensible firmware interface of the compute device prior to booting an operating system;
- receive encrypted data associated with a tenant, wherein the encrypted data defines an encrypted image that is executable by the compute device to perform a workload on behalf of the tenant in a virtualized environment;
- and
- utilize the tenant key to decrypt the encrypted data and execute the workload without exposing the tenant key to a memory that is accessible to another workload associated with another tenant.
A method comprising:
- obtaining, by a compute device, a tenant key from a key server using a unified extensible firmware interface of the compute device prior to booting an operating system;
- receiving, by the compute device, encrypted data associated with a tenant, wherein the encrypted data defines an encrypted image that is executable by the compute device to perform a workload on behalf of the tenant in a virtualized environment;
- and
- utilizing, by the compute device, the tenant key to decrypt the encrypted data and execute the workload without exposing the tenant key to a memory that is accessible to another workload associated with another tenant.
A compute device comprising:
- means for obtaining a tenant key from a key server using a unified extensible firmware interface of the compute device prior to booting an operating system;
- means for receiving encrypted data associated with a tenant, wherein the encrypted data defines an encrypted image that is executable by the compute device to perform a workload on behalf of the tenant in a virtualized environment;
- and
- means for utilizing the tenant key to decrypt the encrypted data and execute the workload without exposing the tenant key to a memory that is accessible to another workload associated with another tenant.
Dependencies are inferred from the claim text.