Intel Corporation

Anjo Lucas Vahldiek-Oberwagner

Vincent R Scarlata

Ravi L Sahita

Reshma Lal

Mona Vij

Alpa Narendra Trivedi

Haidong Xia

Michael Steiner

Marcela S Melara

David M Durham

Kshitij Arun Doshi

Vedvyas Shanbhogue

Francis X Mckeen

Krystof C Zmudzinski

Rameshkumar G Illikkal

Anna Trikalinou

Dror Caspi

Michael D LeMay

Samuel Ortiz

Andrzej Kuriata

Teck Joo Goh

Sudha Krishnakumar

Mourad Cherfaoui

Dayeol Lee

Dmitrii Kuvaiskii

Thomas Knauth

Attestation of operations by tool chains is described. An example of a storage medium includes instructions for receiving source code for processing of a secure workload of a tenant; selecting at least a first compute node to provide computation for the workload; processing the source code by an attestable tool chain to generate machine code for the first compute node, including performing one or more conversions of the source code by one or more convertors to generate converted code and generating an attestation associated with each code conversion, and receiving machine code for the first compute node and generating an attestation associated with the first compute node; and providing each of the attestations from the first stage and the second stage for verification.

Attestation of operations by tool chains

In function-as-a-service (FaaS) environments, a client makes use of a function executing within a trusted execution environment (TEE) on a FaaS server. Multiple tenants of the FaaS platform may provide functions to be executed by the FaaS platform via a gateway. Each tenant may provide code and data for any number of functions to be executed within any number of TEEs on the FaaS platform and accessed via the gateway. Additionally, each tenant may provide code and data for a single surrogate attester TEE. The client devices of the tenant use the surrogate attester TEE to attest each of the other TEEs of the tenant and establish trust with the functions in those TEEs. Once the functions have been attested, the client devices have confidence that the other TEEs of the tenant are running on the same platform as the gateway.

Scalable attestation for trusted execution environments

An apparatus comprising a processor unit comprising circuitry to generate, for a first network host, a request for an object of a second network host, wherein the request comprises an address comprising a routable host ID of the second network host and an at least partially encrypted object ID, wherein the address uniquely identifies the object within a distributed computing domain; and a memory element to store at least a portion of the object.

Cryptographic computing including enhanced cryptographic addresses

Scalable cloning and replication for trusted execution environments is described. An example of a computer-readable storage medium includes instructions for receiving a selection of a point to capture a snapshot of a baseline trust domain (TD) or secure enclave, the TD or secure enclave being associated with a trusted execution environment (TEE) of a processor utilized for processing of a workload; initiating cloning of the TD or secure enclave from a source platform to an escrow platform; generating an escrow key to export the snapshot to the escrow platform; and exporting a state of the TD or secure enclave to the escrow platform, the state being sealed with a sealing key.

Scalable cloning and replication for trusted execution environments

Growing community of inventors

Portland, OR, United States of America

Anjo Lucas Vahldiek-Oberwagner