US 2021/0232676 A1 · Uniform Enclave Interface

Abstract

A uniform enclave interface is provided for creating and operating enclaves across multiple different types of backends and system configurations. For instance, an enclave manager may be created in an untrusted environment of a host computing device. The enclave manager may include instructions for creating one or more enclaves. An enclave may be generated in memory of the host computing device using the enclave manager. One or more enclave clients of the enclave may be generated by the enclave manager such that the enclave clients configured to provide one or more entry points into the enclave. One or more trusted application instances may be created in the enclave.

Claims21

Dependent claims

A method for creating trusted applications stored in memory of a host computing device, the method comprising:

creating, by one or more processors of the host computing device, an enclave manager in an untrusted environment of the host computing device, the enclave manager including instructions for creating one or more enclaves;
generating, by the one or more processors, an enclave in memory of the host computing device using the enclave manager;
generating, by the one or more processors, one or more enclave clients of the enclave by the enclave manager such that the one or more enclave clients configured to provide one or more entry points into the enclave;
and
creating, by the one or more processors, one or more trusted application instances in the enclave.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application

17/046,593Filed 18 Jul 2018

Priority

30 Apr 2018

Published

29 Jul 2021

Term ends

Not estimatedThe source records don’t support an estimate.

Classification14 codes

G06F 21/53
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by executing in a restricted environment, e.g.…
G06F 21/109
Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]: by using…
G06F 21/12
Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]: protecting…
G06F 21/57
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: certifying or…

Uniform Enclave Interface

Life of this patent

Uniform Enclave Interface

Life of this patent

Abstract

Claims21