System and method for establishing trust between a virtual machine and a physical device

Abstract

A system includes at least one processor core supporting a virtual machine, an interface configured for communication between the processor core and a memory, a resource domain controller (RDC) configured to control access to the memory, and a secure enclave. The RDC is configured by the secure enclave. A method for controlling access to at least one of the memory or a device assigned to the virtual machine includes the secure enclave allocating at least one memory region of the memory to the virtual machine. The secure enclave assigns a domain identifier to at least one of the processor core supporting the virtual machine or the device. The secure enclave provides the domain identifier and information identifying the at least one memory region allocated to the virtual machine to the resource domain controller.

Dependencies are inferred from the claim text.