Back to results
US 12,705,316 B2Granted
Geo-fencing of an application for a secure cryptographic environment
AssigneeFortanix, Inc.
InventorsAnand Kashyap, Ambuj Kumar
Life of this patent
Estimating the term…
Abstract
A request to execute an application at a secure cryptographic environment of a server may be received. A tag that has been assigned to the application may be received. An attribute of the server may be identified. A determination may be made as to whether the attribute of the server satisfies the tag that has been assigned to the application. In response to determining that the attribute of the server satisfies the tag that has been assigned to the application, an indication may be provided to execute the application at the secure cryptographic environment of the server.
Claims20
A method comprising:
- enrolling, at an enclave manager, a secure enclave of a server, wherein the enclave manager manages a plurality of enrolled secure enclaves, and wherein one or more secure enclaves of the plurality of enrolled secure enclaves are available for executing applications;
- receiving, via a graphical user interface of the enclave manager, a request to execute an application at the secure enclave of the server, wherein the graphical user interface comprises:
- a respective identifier of each of the plurality of enrolled secure enclaves,
- a respective identifier of each of one or more applications that are available to be executed by the one or more secure enclaves of the plurality of enrolled secure enclaves, and
- a respective geographical location tag corresponding to each of the one or more applications;
- receiving, via the graphical user interface, an indication of a geographical location tag associated with the application;
- determining whether an attribute of the server satisfies the geographical location tag associated with the application;
- and
- in response to determining that the attribute of the server satisfies the geographical location tag associated with the application, providing, by the enclave manager, an indication to execute the application at the secure enclave of the server.
6 more elements
A system comprising:
- a memory;
- and
- a processing device, operatively coupled with the memory, to perform operations comprising:
- enrolling, at an enclave manager, a secure enclave of a server, wherein the enclave manager manages a plurality of enrolled secure enclaves, and wherein one or more secure enclaves of the plurality of enrolled secure enclaves are available for executing applications;
- receiving, via a graphical user interface of the enclave manager, a request to execute an application at the secure enclave of the server, wherein the graphical user interface comprises:
- a respective identifier of each of the plurality of enrolled secure enclaves,
- a respective identifier of each of one or more applications that are available to be executed by the one or more secure enclaves of the plurality of enrolled secure enclaves, and
- a respective geographical location tag corresponding to each of the one or more applications;
- receiving, via the graphical user interface, an indication of a geographical location tag associated with the application;
- determining whether an attribute of the server satisfies the geographical location tag associated with the application;
- and
- in response to determining that the attribute of the server satisfies the geographical location tag associated with the application, providing, by the enclave manager, an indication to execute the application at the secure enclave of the server.
9 more elements
A non-transitory computer readable medium comprising data that, when accessed by a processing device, cause the processing device to perform operations comprising:
- enrolling, at an enclave manager, a secure enclave of a server, wherein the enclave manager manages a plurality of enrolled secure enclaves, and wherein one or more secure enclaves of the plurality of enrolled secure enclaves are available for executing applications;
- receiving, via a graphical user interface of the enclave manager, a request to execute an application at the secure enclave of the server, wherein the graphical user interface comprises:
- a respective identifier of each of the plurality of enrolled secure enclaves,
- a respective identifier of each of one or more applications that are available to be executed by the one or more secure enclaves of the plurality of enrolled secure enclaves, and
- a respective geographical location tag corresponding to each of the one or more applications;
- receiving, via the graphical user interface, an indication of a geographical location tag associated with the application;
- determining whether an attribute of the server satisfies the geographical location tag associated with the application;
- and
- in response to determining that the attribute of the server satisfies the geographical location tag associated with the application, providing, by the enclave manager, an indication to execute the application at the secure enclave of the server.
6 more elements
Dependencies are inferred from the claim text.