Carnegie Mellon University

Robert Boschgmbh

Amit Vasudevan

Adrian Perrig

Jonathan McCarrell McCune

Jorge Guajardo Merchan

Bryan Jeffrey Parno

Virgil Dorin Gligor

Ning Qu

Anupam Datta

James Duran Newsome, Jr

Emmanuel Kwame Owusu

Yanlin Li

James Newsome

Jorge Merchan

Jonathan Mccune

Emmanuel Owusu

Disclosed herein is a system architecture that structures commodity heterogeneous interconnected computing platforms around universal object abstractions, which are fundamental system abstractions and building blocks that provides practical and provable end-to-end guarantees of security, correctness, and timeliness for the platform.

System and method for providing provable end-to-end guarantees on commodity heterogeneous interconnected computing platforms

Disclosed herein is a system architecture that structures commodity heterogeneous interconnected computing platforms around universal object abstractions, which are a fundamental system abstraction and building block that provides practical and provable end-to-end guarantees of security, correctness, and timeliness for the platform.

A method for operating a computing system with a trusted processor include generating a secret cryptographic key based on a physically unclonable function in at least one hardware component in the trusted processor, generating a first public key and first private key using first secret cryptographic key, and executing instruction code corresponding to a first software program. The method further includes generating output data with the trusted processor during execution of the first software program, generating encrypted data corresponding to the output data using the first public key for at least a portion of the encryption, generating a signature of the encrypted data, and transmitting with an input/output (I/O) interface operatively connected to the trusted processor the encrypted data and the signature for storage in an untrusted memory.

Systems and methods for maintaining integrity and secrecy in untrusted computing platforms

A computer including a processor and a verification device. The processor in the computer performs the steps of authenticating a secure connection between a hypervisor and the verification device, measuring the identity of at least a portion of a select guest before the select guest executes any instruction, and sending a measurement of the identity of the select guest to the verification device. The verification device compares the policy stored in the verification device with the measurement of the select guest received by the verification device. The steps of authenticating, measuring, sending, and comparing are performed after receiving a signal indicative of a request to execute the select guest and without rebooting the computer.

Methods and apparatuses for user-verifiable execution of security-sensitive code

Growing community of inventors

Pittsburgh, PA, United States of America

Amit Vasudevan