Secure operation of processors

A non-transitory processor readable medium having embodied therein executable instructions that when executed implement a method for securely operating a host device having a host processor and one or more additional processor elements, wherein each additional processor element includes an additional processing unit and a local memory exclusively associated with the additional processor, the method comprising:

• a) allocating one or more of the processor additional processor elements to encrypted contents;
• b) blocking off external access to the local memory of the one or more allocated processor additional processor elements except for a window portion through which data or code suitable for unsecure transmission may be transferred into or out of a particular allocated co additional processor element;
• c) loading trusted code into the window portion of the local memory of the one or more allocated additional processor elements;
• d) loading the encrypted contents into the local memory of a particular allocated co-processor element, wherein the encrypted contents are loaded into the window portion of the particular allocated additional processor element;
• e) decrypting the encrypted contents using the trusted code;
• and
• f) executing code obtained by decrypting the encrypted contents with the particular allocated processor additional processor element or operating on data obtained by decrypting the encrypted contents with the particular allocated additional processor element.

A host device having a host processing unit and one or more additional processor elements, wherein each additional processor element includes an additional processing unit and a local memory exclusively associated with the additional processor, wherein the host processor and processor element are configured to:

• a) receive encrypted contents from a client device;
• b) allocate one or more co-processor elements to the encrypted contents;
• c) block off external access to the local memory of the one or more allocated additional processor elements except for a window portion through which data or code suitable for unsecure transmission may be transferred into or out of a particular allocated additional processor element of the host device;
• d) load trusted code into the window portion of the local memory of the one or more allocated additional processor elements;
• e) load the encrypted contents into the local memory of the particular allocated co-processor element, wherein the encrypted contents are loaded into the window portion of the particular additional processor element;
• f) decrypt the encrypted contents using the trusted code;
• and
• g) execute code obtained by decrypting the encrypted contents with the particular allocated additional processor element or operate on data obtained by decrypting the encrypted contents with the particular allocated co-processor element.