Method and Apparatus for Protected Code Execution on Clients
AssigneeIntel Corporation
InventorsYasser Rasheed, Steve Grobman
Life of this patent
Estimating the term…
Abstract
In one embodiment of the invention, a server may send encrypted material to a client. The client processor may decrypt and process the material, encrypt the results, and send the results back to the server. This sequence of events may occur while the execution or processing of the material is restricted to the client processor. Any material outside the client processor, such as material located in system memory, will be encrypted.
Claims20
A method comprising:
- a client receiving encrypted material from a server;
- a processor included in the client (a) decrypting the encrypted material to produce unencrypted material, (b) processing the unencrypted material to produce unencrypted results, (c) encrypting the unencrypted results to produce encrypted results, and (d) communicating the encrypted results to the server;
- and
- excluding the unencrypted material and the unencrypted results from storage in a system memory included in the client.
An article comprising a medium storing instructions that enable a processor-based client to:
- receive encrypted material from a computing node during a first session, the client and the computing node to each be included in a distributed computing network;
- within a processor included in the client, (a) decrypt the encrypted material to produce unencrypted material, (b) process the unencrypted material to produce unencrypted results, (c) encrypt the unencrypted results to produce encrypted results, and (d) communicate the encrypted results to the computing node;
- and
- exclude the unencrypted results from storage in a memory included in the client but not included in the processor.
An apparatus comprising:
- a memory to receive encrypted material from a computing node;
- a processor, coupled to the memory but not including the memory, to (a) decrypt the encrypted material, (b) process the unencrypted material to produce results, (c) encrypt the results to produce encrypted results, and (d) communicate the encrypted results to the computing node;
- wherein the unencrypted results are to be excluded from storage in the memory.
The apparatus of 19, wherein the processor includes a unique key based on direct anonymous technology (DAA).
Dependencies are inferred from the claim text.