Back to results
US 2004/0003273 A1Published application
Sleep protection
AssigneeIntel Corporation
InventorsDavid W. Grawrock, David I. Poisner
Life of this patent
Estimating the term…
Abstract
Methods, apparatus and machine-readable medium are described that attempt to protect secrets from sleep attacks. In some embodiments, the secrets are encrypted and a security enhanced environment dismantled prior to entering a sleep state. Some embodiments further re-establish a security enhanced environment and decrypt the secrets in response to a wake event.
Claims29
A method comprising
- detecting a probable sleep attack, and
- invoking a sleep attack response that protects secrets from the probable sleep attack.
A chipset comprising
- sleep attack detection logic to detect a sleep attack and to invoke an attack response in response to a detected sleep attack.
A system comprising an operating system and a more privileged monitor,
- the operating system to receive a sleep event and to transfer processing of the sleep event to the monitor, and
- the monitor, in response to the sleep request, to encrypt one or more pages of a memory and to indicate that the memory contains no unencrypted secrets.
A system comprising
- volatile memory comprising security enhanced regions,
- a secrets store to indicate whether the volatile memory might contain unencrypted secrets,
- a sleep enable store to invoke entry into a sleep state,
- a processor to encrypt the security enhanced regions in response to a sleep event and to update the secrets store to indicate that the volatile memory contains no unencrypted secrets in response to encrypting the security enhanced regions, and
- sleep attack detection logic to invoke a sleep attack response in response to the sleep enable store being updated to invoke entry into sleep state and the secrets store indicating that the volatile memory might contain unencrypted secrets.
2 more elements
A machine-readable medium comprising a plurality of instructions that in response to being executed, result in a system
- encrypting contents of a memory in response to a sleep event, and
- generating a contents attestation that attests to the contents of the memory.
Dependencies are inferred from the claim text.