Key distribution system
AssigneeNVIDIA Corporation
InventorsRon Keidar, Akash Singh, DurgaPrasad Potnuru
Life of this patent
Estimating the term…
Abstract
Systems and methods are directed toward key distribution systems and methods. A key distribution system may include a policy table and a key table to develop different policy regions for various associated managers and then map memory address locations to table locations for the policy regions. The policy regions may be established using different parameters and then locked after activation to prevent further editing or modification after creation. When activated, users and owners may then access the associated memory addresses associated with authorized active policy regions.
Claims20
A processor comprising:
- one or more circuits to:
- receive one or more policy parameters for a key policy associated with access to a key;
- receive a request to access the key from a user, the request including at least one of a region identification for a region associated with the key, an entry in a key table for the region, and a user identification;
- determine, based at least on the key policy and the request, that the user is permitted to access the key;
- and
- provide, responsive to the request and to the determination, the key to the user.
A computer-implemented method, comprising:
- receiving a request to configure a region for key distribution;
- determining an available region location;
- receiving one or more policy parameters for the region location;
- allocating, for the region location and in accordance with the one or more policy parameters, a logical region associated with a memory location;
- locking the region location from further editing;
- and
- storing a key in the logical region.
A processor comprising:
- one or more circuits to:
- allocate, a logical region associated with a memory location associated with a policy region;
- lock, the policy region from further editing;
- store a received key within the logical region;
- receive a request for the received key;
- determine a requestor is authorized to access the received key;
- and
- provide the key within the logical region, to the requestor.
Dependencies are inferred from the claim text.