Securing data integrity for an application
AssigneeFortanix, Inc.
InventorsNehal Bandi, Andrew Leiserson
Life of this patent
Estimating the term…
Abstract
A request to provide an application at a secure enclave of a server may be received. A hash value of the application may be generated. Application data that is to be used with the application at the secure enclave of the server may be identified. Another hash value of the application data that is to be used with the application at the secure enclave of the server may be generated. The hash value of the application and the other hash value of the application data may be signed where the signed hash value and other hash are being used to execute the application with the application data at the secure enclave of the server.
Claims20
A method comprising:
- receiving a request to provide an application at a secure enclave of a server;
- generating a hash value of the application;
- identifying an application data that is to be used with the application at the secure enclave of the server;
- generating another hash value of the application data that is to be used with the application at the secure enclave of the server;
- and
- signing, by a processor, the hash value of the application and the another hash value of the application data, the signed hash value and another hash value being used to execute the application with the application data at the secure enclave of the server.
A system comprising:
- a memory;
- and
- a processor, operatively coupled with the memory, to:
- receive a request to provide an application at a secure enclave of a server;
- generate a hash value of the application;
- identify an application data that is to be used with the application at the secure enclave of the server;
- generate another hash value of the application data that is to be used with the application at the secure enclave of the server;
- and
- sign the hash value of the application and the another hash value of the application data, the signed hash value and another hash value being used to execute the application with the application data at the secure enclave of the server.
A non-transitory computer readable medium comprising data that, when accessed by a processor, cause the processor to perform operations comprising:
- receiving a request to provide an application at a secure enclave of a server;
- generating a hash value of the application;
- identifying an application data that is to be used with the application at the secure enclave of the server;
- generating another hash value of the application data that is to be used with the application at the secure enclave of the server;
- and
- signing the hash value of the application and the another hash value of the application data, the signed hash value and another hash value being used to execute the application with the application data at the secure enclave of the server.
Dependencies are inferred from the claim text.