US 2022/0103349 A1 · RESOURCE SHARING FOR TRUSTED EXECUTION ENVIRONMENTS

Abstract

The technology disclosed herein enables resource sharing for trusted execution environments. An example method can include: establishing a first trusted execution environment (TEE) in a first computing device; establishing, by the first TEE, a set of shell TEEs, where each shell TEE is configured in view of one or more configuration parameters associated with the set of shell TEEs; receiving, by the first TEE, a request from a tenant computing device to establish a second TEE; determining, by the first TEE, whether the configuration parameters associated with the set of shell TEEs satisfy one or more request parameters for the second TEE; and responsive to determining that the configuration parameters associated with the set of shell TEEs satisfy the one or more request parameters for the second TEE, establishing, by the first TEE, the second TEE to satisfy the request, wherein the second TEE is selected from the set of shell TEEs, and causing, by the first TEE, the second TEE to communicate with tenant computing device.

Claims20

Dependent claims

A method comprising:

establishing, by a processing device of a first computing device, a first trusted execution environment (TEE) in the first computing device;
establishing, by the first TEE, a set of shell TEEs, wherein each shell TEE is configured in view of one or more configuration parameters associated with the set of shell TEEs;
receiving, by the first TEE, a request from a second computing device to establish a second TEE, wherein the request comprises one or more request parameters for the second TEE in the first computing device;
determining, by the first TEE, whether the configuration parameters associated with the set of shell TEEs satisfy the one or more request parameters for the second TEE;
and
responsive to determining that the configuration parameters associated with the set of shell TEEs satisfy the one or more request parameters for the second TEE,
establishing, by the first TEE, the second TEE to satisfy the request, wherein the second TEE is selected from the set of shell TEEs;
and
causing, by the first TEE, the second TEE to communicate with the second computing device.

6 more elements

A non-transitory computer readable medium storing instructions which, when executed by a processing device, cause the processing device to:

establish a first trusted execution environment (TEE) in a first computing device;
establish, by the first TEE, a set of shell TEEs, wherein each shell TEE is configured in view of one or more configuration parameters associated with the set of shell TEEs;
receive, by the first TEE, a request from a tenant computing device to establish a second TEE, wherein the request comprises one or more request parameters for the second TEE in the first computing device;
determine, by the first TEE, whether the configuration parameters associated with the set of shell TEEs satisfy the one or more request parameters for the second TEE;
and
responsive to determining that the configuration parameters associated with the set of shell TEEs satisfy the one or more request parameters for the second TEE,
select a shell TEE from the set of shell TEEs to satisfy the request;
establish the second TEE in view of the selected shell TEE;
and
cause, by the first TEE, the second TEE to communicate with the tenant computing device.

7 more elements

Dependencies are inferred from the claim text.

Resource sharing for trusted execution environments

Life of this patent

Resource sharing for trusted execution environments

Life of this patent

Abstract

Claims20