Architecture for virtual security module
AssigneeMicron Technology, Inc.
InventorsDennis M. O'Connor, John P. Brizek
Life of this patent
Estimating the term…
Abstract
A device supports the processing of multiple active applications in a processor through a mapping system that securely identifies and differentiates commands issued by clients. An entity selection signal is generated by the mapping system to signal the processor to process an algorithm and provide services for a specific client using the commands identified for that client and data permitted by a client tracking system for that client. Other data accesses and commands identified for other clients are restricted when processing the algorithm.
Claims21
A processing system, comprising:
- a mapping device to receive a command issued by a client and to generate a dedicated signal that is separate from the command, the dedicated signal to uniquely identify the client;
- and
- a processing device to receive the command and the dedicated signal to verify the identity of the client, and, upon verification of the identity of the client, the processing device to enable access to stored data and secure services, the processing device further to restrict the client to data and services attached with rights previously assigned to the client.
A system, comprising:
- a processor to receive a command issued by a client;
- a platform trust module coupled to the processor to create an association between the client and data attached with rights previously assigned to the client;
- a mapping system to generate an entity selection signal and map the command issued by the client with the entity selection signal;
- and
- a client number mapping device coupled to a system memory and the mapping system to receive the command and the entity selection signal to authenticate the client.
A method of accessing secure data, the method comprising:
- receiving a first set of commands issued by a first client and a second set of commands issued by a second client;
- identifying the first set of commands as being associated with the first client and the second set of commands as being associated with the second client;
- generating a first entity selection signal associated with the first client and a second entity selection signal associated with the second client to identify uniquely the first client and the second client, respectively;
- communicating the first set of commands, the second set of commands, the first entity selection signal, and the second entity selection signal to a client number mapping device to authenticate the first client and the second client;
- and
- separately maintaining the association between the first client and the second client and respective data associated with each client for all subsequent commands until the association is canceled.
A method of accessing secure data, the method comprising:
- receiving a command issued by a first client;
- generating a dedicated signal associated with the first client, the dedicated signal being separate from the command;
- communicating the command and the dedicated signal to a device to access data associated with the first client;
- upon authentication of the first client, restricting access only to data associated with the first client based on rights previously assigned to the first client;
- and
- supporting multiple active applications for the first client without checking authorization for subsequent commands after the first command is verified against the dedicated signal.
Dependencies are inferred from the claim text.