Technologies for expanded trusted domains
AssigneeIntel Corporation
InventorsFrancesc Guim Bernat, Karthik Kumar, Ravi L. Sahita, Marcos E. Carranza
Life of this patent
Estimating the term…
Abstract
Techniques for expanded trusted domains are disclosed. In the illustrative embodiment, a trusted domain can be established that includes hardware components from a processor as well as an off-load device. The off-load device may provide compute resources for the trusted domain. The trusted domain can be expanded and contracted on-demand, allowing for a flexible approach to creating and using trusted domains.
Claims20
A processor comprising:
- attestation circuitry to determine whether a compute resource of an offload device connected to the processor by an interconnect is trusted;
- and
- secure arbitration mode (SEAM) arbitration circuitry to:
- receive an instruction to form a trusted domain for a virtual machine that includes the compute resource of the offload device;
- and
- provision the trusted domain for the virtual machine that includes the processor and the compute resource.
An offload device comprising:
- attestation circuitry to determine whether a processor connected to the offload device by an interconnect is trusted;
- and
- secure arbitration mode (SEAM) arbitration circuitry to:
- receive parameters of a trusted domain that includes the processor and a compute resource of the offload device;
- and
- operate the compute resource in the trusted domain.
One or more computer-readable media comprising a plurality of instructions stored thereon that, when executed, causes a processor to:
- determine whether a compute resource of an offload device connected to the processor by an interconnect is trusted;
- receive an instruction to form a trusted domain for a virtual machine that includes the compute resource of the offload device;
- and
- provision the trusted domain for the virtual machine that includes the processor and the compute resource.
Dependencies are inferred from the claim text.