Back to results
US 2019/0102539 A1Published application
Installing and manipulating a secure virtual machine image through an untrusted hypervisor
AssigneeIntel Corporation
InventorsDavid M. Durham, Karanvir S. Grewal, Sergej Deutsch, Michael Lemay
Life of this patent
Estimating the term…
Abstract
Systems, apparatuses and methods may provide for technology that associates a key domain of a plurality of key domains with a customer boot image, receives the customer boot image from the customer, and verifies the integrity of the customer boot image that is to be securely installed at memory locations determined from an untrusted privileged entity (e.g., a virtual machine manager).
Claims24
A system comprising:
- a system agent;
- memory;
- and
- a semiconductor hardware device provided between the system agent and the memory, the semiconductor hardware device comprising:
- a substrate;
- and
- logic coupled to the substrate, wherein the logic is implemented at least partly in one or more of configurable logic or fixed-functionality hardware logic, the logic coupled to the substrate to:
- associate a key domain of a plurality of key domains with a customer boot image;
- receive the customer boot image from the customer, wherein receiving the customer boot image comprises partitioning the customer boot image as a sequence of protocol data units (PDUs) and loading each PDU of the sequence of PDUs consecutively into a sequential page of the memory;
- and
- verify integrity of the customer boot image that is to be installed in the key domain.
8 more elements
A semiconductor package apparatus comprising:
- a substrate;
- and
- logic coupled to the substrate, wherein the logic is implemented at least partly in one or more of configurable logic or fixed-functionality hardware logic, the logic coupled to the substrate to:
- associate a key domain of a plurality of key domains with a customer boot image;
- receive the customer boot image from a customer, wherein receiving the customer boot image comprises partitioning the customer boot image as a sequence of protocol data units (PDUs) and loading each PDU of the sequence of PDUs consecutively into a sequential page in a memory;
- and
- verify an integrity of the customer boot image that is to be installed in the key domain.
4 more elements
A method comprising:
- associating a key domain of a plurality of key domains with a customer boot image;
- receiving the customer boot image from a customer, the receiving the customer boot image comprising partitioning the customer boot image as a sequence of protocol data units (PDUs) and loading each PDU of the sequence of PDUs consecutively into a sequential page of a memory;
- and
- verifying an integrity of the customer image that is to be installed in the key domain.
1 more element
Dependencies are inferred from the claim text.