Secure data access methods and apparatus

A method for securely accessing data in the context of a data transaction, the method being performed in a system that includes multiple platform entities, and comprising the steps of:

• allocating a memory partition to the data transaction;
• a first platform entity writing access permissions information into at least one binding register associated with the memory partition;
• permitting a second platform entity to access data stored in a data block of the memory partition when the second platform entity is identified in the access permissions information, wherein the first platform entity and the second platform entity may be a same platform entity or different platform entities ;
• and
• the second platform entity accessing the data.

A system for securely accessing data in the context of a data transaction, the system comprising:

• a memory block, within which a memory partition may be allocated to the data transaction, wherein the memory partition includes a data storage block and at least one binding register, and wherein the data block is adapted to store data, and wherein the at least one binding register is adapted to store binding information, wherein the binding information includes information provided by a set of platform entities that are permitted to participate in the data transaction;
• the set of platform entities, wherein each of the set of platform entities includes one or more hardware blocks adapted to perform one or more functions;
• an access control block, adapted to determine whether a particular platform entity is permitted to access the data and whether the particular platform entity is permitted to write a portion of the binding information;
• and
• a cipher/binding function adapted to encrypt the data, using the binding information, for storage on an unsecured memory device, and to decrypt encrypted data, using the binding information, which is retrieved from the unsecured memory device.

A system for securely accessing data in the context of a data transaction, the system comprising:

• a memory block, within which a memory partition may be allocated to the data transaction, wherein the memory partition includes a data storage block and at least one binding register, and wherein the data block is adapted to store data, and wherein the at least one binding register is adapted to store access permissions information;
• the set of platform entities, wherein each of the set of platform entities includes one or more hardware blocks adapted to perform one or more functions;
• an access control block, adapted to determine whether a particular platform entity is permitted to access the data based at least in part on the access permissions information;
• and
• a cipher/binding function adapted to encrypt the data, using at least the access permissions information, for storage on an unsecured memory device, and to decrypt encrypted data, using at least the access permissions information, which is retrieved from the unsecured memory device.