Back to results
US 11,698,980 B2Granted
System, devices and/or processes for secure computation on a virtual machine
AssigneeArm Limited
InventorsDominic Phillip Mulligan, Derek Del Miller, Shale Xiong
Life of this patent
Estimating the term…
Abstract
Briefly, example methods, apparatuses, and/or articles of manufacture are disclosed that may be implemented, in whole or in part, using one or more processing devices to facilitate and/or support participation in computing activities by multiple parties having limited mutual trust. In one embodiment, computation may occur in a secure processing environment (SPE) while one or more untrusted parties reside outside of the SPE.
Claims21
A method comprising:
- transmitting one or more messages over a communication network to at least one program provider entity comprising a first cryptographic attribute of at least a portion of system code on at least one computing device, the system code to include implementation of a virtual machine capable of hosting a program to be provided by the at least one program provider entity;
- and
- receiving one or more messages transmitted from the at least one program provider entity over the communication network comprising code of a program to be hosted by the virtual machine, the one or more messages having been transmitted over the communication network by the at least one program provider entity at least in part responsive to a comparison of the first cryptographic attribute with a first cryptographic expression to confirm that a version of system code is installed in a secure processing environment (SPE) to at least in part implement the virtual machine,
- wherein the system code to prevent disclosure of code of the program outside of the SPE.
1 more element
An apparatus comprising:
- a transceiver device to transmit messages to and receive messages from a physical transmission medium;
- and
- one or more processors to:
- initiate transmission of one or more messages through the transceiver device over a communication network to at least one program provider entity, the one or more transmitted messages to comprise a first cryptographic attribute of at least a portion of system code on the at least one computing device, the system code to include implementation of a virtual machine capable of hosting a program to be provided by the at least one program provider entity;
- and
- obtain one or more messages received at the transceiver device and transmitted from the at least one program provider entity over the communication network comprising code of a program to be hosted by the virtual machine, the one or more messages having been transmitted by the at least one program provider entity at least in part responsive to a comparison of the first cryptographic attribute with a first cryptographic expression to confirm that a version of system code is installed in a secure processing environment to at least in part implement the virtual machine,
- wherein the system code to prevent disclosure of the code of the program outside of a secure processing environment (SPE).
4 more elements
An article comprising:
- a non-transitory storage medium comprising computer-readable instructions stored thereon which executable by a computing device to:
- initiate transmission of one or more messages over a communication network to at least one program provider entity comprising a first cryptographic attribute of at least a portion of system code on the at least one computing device, the system code to include implementation of a virtual machine capable of hosting a program to be provided by the at least one program provider entity;
- and
- obtain from one or more received messages transmitted over the communication network from the at least one program provider entity comprising code of a program to be hosted by the virtual machine, having been transmitted from the at least one program provider entity at least in part responsive to a comparison of the first cryptographic attribute with a first cryptographic expression to confirm that a version of system code is installed in a secure processing environment to at least in part implement the virtual machine,
- wherein the system code to prevent disclosure of code of the program outside of a secure processing environment (SPE).
2 more elements
Dependencies are inferred from the claim text.