Secure encrypted communication mechanism
AssigneeIntel Corporation
InventorsPradeep Pappachan, Luis Kida, Donald E. Wood, Tony Hurson, Reouven Elbaz, Reshma Lal
Life of this patent
Estimating the term…
Abstract
An apparatus comprising a first computing platform including a processor to execute a first trusted executed environment (TEE) to host a first plurality of virtual machines and a first network interface controller to establish a trusted communication channel with a second computing platform via an orchestration controller.
Claims20
An apparatus comprising:
- a first computing platform including:
- a processor to execute a first trusted executed environment (TEE) to host a first plurality of virtual machines;
- and
- a first network interface controller to establish a trusted communication channel with a second computing platform via an orchestration controller.
A method comprising:
- a first virtual machine hosted by a first TEE at a first computing platform requesting a first network interface controller at the computing platform to establish an Internet Protocol Security (IPsec) channel between the first computing platform and a second virtual machine hosted by a second computing platform;
- establishing the IPsec channel between the first computing platform and the second computing platform;
- the first virtual machine verifying with an orchestration controller whether the IPsec channel has been established;
- receiving an internet protocol (IP) address at the first virtual machine from the orchestration controller associated with a second network interface controller at the second computing platform;
- and
- transferring data between the first computing platform and the second virtual machine via the IPsec channel.
At least one computer readable medium having instructions stored thereon, which when executed by one or more processors, cause the processors to:
- request a first network interface controller at the computing platform to establish an Internet Protocol Security (IPsec) channel between the first computing platform and a second computing platform;
- establish the IPsec channel between the first computing platform and the second computing platform;
- verify with an orchestration controller whether the IPsec channel has been established;
- receive an internet protocol (IP) address from the orchestration controller associated with a second network interface controller at the second computing platform;
- and
- transfer data between the first computing platform via the IPsec channel.
A system comprising an orchestration controller to facilitate a trusted communication channel between the first computing platform and the second computing platform.
Dependencies are inferred from the claim text.