Back to results
US 2019/0319789 A1Published application
Device ID for Memory Protection
AssigneeIntel Corporation
InventorsSiddhartha Chhabra, Prashant Dewan
Life of this patent
Estimating the term…
Abstract
There is disclosed in one example a computing system, including: a processor; a memory; and a memory encryption engine (MEE) including circuitry and logic to: allocate a protected isolated memory region (IMR); encrypt the protected IMR; set an access control policy to allow access to the IMR by a device identified by a device identifier; and upon receiving a memory access request directed to the IMR, enforce the access control policy.
Claims20
A computing system, comprising:
- a processor;
- a memory;
- and
- a memory encryption engine (MEE) comprising circuitry and logic to:
- allocate a protected isolated memory region (IMR);
- encrypt the protected IMR;
- set an access control policy to allow access to the IMR by a device identified by a device identifier;
- and
- upon receiving a memory access request directed to the IMR, enforce the access control policy.
6 more elements
An integrated circuit, comprising:
- a memory encryption engine (MEE) module comprising circuitry to encrypt all or a portion of a main memory, and to identify within the encrypted memory a range of memory as an isolated memory region (IMR);
- a memory policy set module comprising circuitry to receive an authorized device identifier, and to associate the authorized device identifier with the IMR as a device authorized to access the IMR;
- and
- a memory policy enforcement module comprising circuitry to receive an access request directed to a memory location within the range of the IMR, including a requesting device identifier, and to allow the access request only if the requesting device identifier matches the authorized device identifier.
1 more element
A microprocessor, comprising:
- one or more cores;
- and
- a register file including one or more memory policy registers configured to hold a memory range for an encrypted memory region, and at least one authorized device identifier authorized to access the encrypted memory region;
- and
- logic to program a memory encryption engine (MEE) with a memory access policy according to the range for the encrypted memory region and the at least one authorized device identifier.
2 more elements
Dependencies are inferred from the claim text.