Secure processing systems and methods
AssigneeIntertrust Technologies Corporation
InventorsGilles Boccon-Gibod, Gary F. Ellison
Life of this patent
Estimating the term…
Abstract
This disclosure relates to systems and methods for enabling the use of secret digital or electronic information without exposing the sensitive information to unsecured applications. In certain embodiments, the methods may include invoking, by a client application executing in an open processing domain, a secure abstraction layer configured to interface with secret data protected by a secure processing domain. Secure operations may be securely performed on the secret data by the secure abstraction layer in the secure processing domain based on an invocation from a client application running in the open processing domain.
Claims19
A non-transitory computer-readable storage medium storing instructions that, when executed by at least one processor of a system, cause the system to perform a method comprising:
- invoking, by a first processing domain of the system, a secure abstraction layer of the system, the secure abstraction layer being configured to interact with a secure processing domain of the system to perform one or more operations using secret data within said secure processing domain, the secure processing domain being different, at least in part, than the first processing domain;
- generating, by the first processing domain, one or more requests, the one or more requests comprising a data value and being configured to cause the secure processing domain to:
- encrypt a secret value using a first key to generate a protected data item, and
- generate a first digital signature using a second key, the first digital signature comprising a hash of the data value;
- issuing, by the first processing domain, the one or more requests to the secure abstraction layer;
- and
- receiving, by the first processing domain from the secure abstraction layer in response to the one or more requests, the protected data item and the first digital signature.
Dependencies are inferred from the claim text.