System and method for cross-architecture trusted execution environment migration

A non-transitory computer-readable storage medium containing program instructions for managing migration of trusted execution environments (TEEs) based on migration policies, wherein execution of the program instructions by one or more processors of a computer system causes the one or more processors to perform steps comprising:

• receiving a request to migrate a source TEE in a source host computer to another host computer at the source host computer;
• in response to the request, transmitting migration policy data of the source TEE to a destination migration agent in a destination host computer from a source migration agent in the source host computer;
• determining whether the destination host computer satisfies migration policies specified in the migration policy data at the destination migration agent in the destination host computer;
• creating a destination TEE in the destination host computer in response to a determination that the destination host computer satisfies the migration policies specified in the migration policy data;
• transmitting memory pages of the source TEE to the destination TEE in the destination host computer;
• and
• restoring the memory pages at the destination TEE for execution.

A computer system comprising:

• memory;
• and
• at least one processor configured to:
• receive a request to migrate a source TEE in a source host computer to another host computer at the source host computer;
• in response to the request, transmit migration policy data of the source TEE to a destination migration agent in a destination host computer from a source migration agent in the source host computer;
• determine whether the destination host computer satisfies migration policies specified in the migration policy data at the destination migration agent in the destination host computer;
• create a destination TEE in the destination host computer in response to a determination that the destination host computer satisfies the migration policies specified in the migration policy data;
• transmit memory pages of the source TEE to the destination TEE in the destination host computer;
• and
• restore the memory pages at the destination TEE for execution.