Secure direct memory access
AssigneeIntel Corporation
InventorsJayant Mangalampalli, Venkat R. Gokulrangan
Life of this patent
Estimating the term…
Abstract
Examples are disclosed for establishing a secure destination address range responsive to initiation of a direct memory access (DMA) operation. The examples also include allowing decrypted content obtained as encrypted content from a source memory to be placed at a destination memory based on whether destination memory addresses for the destination memory fall within the secure destination address range.
Claims31
An apparatus comprising:
- a secure processor coupled to a central processing unit (CPU), the secure processor to:
- establish a secure destination address based on a scatter-gather list generated by an application executed by the CPU;
- receive a destination address from the application executed by the CPU through a portion of a memory shared by the application and the secure processor;
- determine whether the destination address corresponds to the secure destination address;
- and
- place decrypted content in a memory location corresponding to the destination address based on a determination that the destination address corresponds to the secure destination address.
A system comprising:
- a central processing unit (CPU);
- a memory coupled to the CPU;
- and
- a secure processor coupled to a central processing unit (CPU), the secure processor to:
- establish a secure destination address based on a scatter-gather list generated by an application executed by the CPU;
- receive a destination address from the application executed by the CPU through a portion of a memory shared by the application and the secure processor;
- determine whether the destination address corresponds to the secure destination address;
- and
- place decrypted content in a memory location corresponding to the destination address based on a determination that the destination address corresponds to the secure destination address.
A computer-implemented method, comprising:
- establishing a secure destination address based on a scatter-gather list generated by an application executed by a central processing unit (CPU) communicatively coupled to a secure processing (SEP) system;
- receiving, at the SEP system, a destination address from the application through a portion of a memory shared between the SEP system and the application;
- determining whether the destination address corresponds to the secure destination address;
- and
- placing decrypted content in a memory location corresponding to the destination address based on a determination that the destination address corresponds to the secure destination address.
One or more a non-transitory computer-readable storage medium containing instructions, which when executed by a secure processor, cause the secure processor to:
- establish a secure destination address based on a scatter-gather list generated by an application executed by a central processing unit (CPU) communicatively coupled to the secure processor;
- receive a destination address from the application through a portion of a memory shared between the secure processor and the application;
- determining whether the destination address corresponds to a secure destination address;
- and
- placing decrypted content in a memory location corresponding to the destination address based on a determination that the destination address corresponds to the secure destination address.
Dependencies are inferred from the claim text.