Back to results
US 11,775,652 B2Granted
Platform security mechanism
AssigneeIntel Corporation
InventorsBaiju Patel, Prashant Dewan
Life of this patent
Estimating the term…
Abstract
An apparatus to facilitate security within a computing system is disclosed. The apparatus includes a storage drive, a controller, comprising a trusted port having one or more key slots to program one or more cryptographic keys and an encryption engine to receive the cryptographic keys via the one or more key slots, encrypt data written to the storage drive using the cryptographic keys and decrypt data read from the storage drive using the cryptographic keys.
Claims19
An apparatus, comprising:
- a non-volatile memory, including:
- a storage drive;
- a host controller, comprising a trusted port having one or more key slots to program one or more cryptographic keys;
- an encryption engine to receive the cryptographic keys via the one or more key slots, encrypt data written to the storage drive using the cryptographic keys and decrypt data read from the storage drive using the cryptographic keys;
- and
- a security controller to write the one or more cryptographic keys into the host controller via the one or more key slots, wherein the one or more cryptographic keys are inaccessible by the security controller upon being written into the one or more key slots.
3 more elements
A method comprising:
- receiving one or more cryptographic keys at a host controller included in a non-volatile memory via one or more key slots;
- programming the one or more cryptographic keys into the host controller;
- and
- preventing access to the one or more key slots by rendering the one or more cryptographic keys inaccessible upon being written into the one or more key slots.
1 more element
A computing device comprising:
- a processor;
- a memory device;
- a fabric interface coupled between the processor and the memory device;
- and
- a non-volatile memory, coupled to the fabric interface, including:
- a storage drive;
- a host controller, comprising a trusted port having one or more key slots to program one or more cryptographic keys;
- an encryption engine to receive the cryptographic keys via the one or more key slots, encrypt data written to the storage drive using the cryptographic keys and decrypt data read from the storage drive using the cryptographic keys;
- and
- a security controller to write the one or more cryptographic keys into the host controller via the one or more key slots, wherein the one or more cryptographic keys are inaccessible by the security controller upon being written into the one or more key slots.
7 more elements
Dependencies are inferred from the claim text.