Intel Corporation

Matthew Eldon Hoekstra

Reshma Lal

Ned M Smith

David J Harriman

Kapil Sood

Baiju V Patel

John I Garney

Ioannis T Schoinas

Raghunandan Makaram

David A Koufaty

Micah James Sheller

Nathan Heldt-Sheller

Ronald Perez

James R Trethewey

Yasser Rasheed

Uma M Gadamsetty

Ulhas S Warrier

Yu-Yuan Chen

Dhananjay V Keskar

Manoj B Agnihotri

Stephen J Tolopka

Bin Xing

Krystof C Zmudzinski

Jason Martin

Mona Vij

Maynard C Falconer

Somnath Chakrabarti

John L Manferdelli

Craig Langfahl

In one embodiment, an apparatus comprises a processor to: receive a request to configure a secure execution environment for a first workload; configure a first set of secure execution enclaves for execution of the first workload, wherein the first set of secure execution enclaves is configured on a first set of processing resources, wherein the first set of processing resources comprises one or more central processing units and one or more accelerators; configure a first set of secure datapaths for communication among the first set of secure execution enclaves during execution of the first workload, wherein the first set of secure datapaths is configured over a first set of interconnect resources; configure the secure execution environment for the first workload, wherein the secure execution environment comprises the first set of secure execution enclaves and the first set of secure datapaths.

Composable trusted execution environments

Composable trustworthy execution environments

A computer system for executing one or more software applications includes a host computer device configured to execute the one or more software applications. The computer system further includes one or more memory devices configured to cryptographically protect volatile memory of the one or more memory devices. The one or more memory devices are configured to provide access to the cryptographically protected volatile memory for the one or more software applications. The host computer device is configured to execute the one or more software applications by executing a portion of the one or more software applications associated with the cryptographically protected volatile memory using a processor of the one or more memory devices.

Computer system and method for executing one or more software applications, host computer device and method for a host computer device, memory device and method for a memory device and non-transitory computer readable medium

Technologies for supporting and implementing multiple digital rights management protocols on a client device are described. In some embodiments, the technologies include a client device having an architectural enclave which may function to identify one of a plurality of digital rights management protocols for protecting digital information to be received from a content provider or a sensor. The architectural enclave select a preexisting secure information processing environment (SIPE) to process said digital information, if a preexisting SIPE supporting the DRM protocol is present on the client. If a preexisting SIPE supporting the DRM protocol is not present on the client, the architectural enclave may general a new SIPE that supports the DRM protocol on the client. Transmission of the digital information may then be directed to the selected preexisting SIPE or the new SIPE, as appropriate.

Technologies for supporting multiple digital rights management protocols on a client device

An approach for managing the privacy and disclosure of location information associated with a computer system. For one aspect, a request is received from a requestor for a location property associated with a location of a computer system. It is then determined whether a privacy preference associated with the requestor has been specified. If not, a user may be prompted to supply privacy preferences associated with the requestor. The privacy preferences are then applied to determine whether or not to provide the requested information. A user setting, such as a basic input-output system memory location setting, may also be implemented to enable and/or disable location-aware computing.

Method and apparatus for managing the privacy and disclosure of location information

Methods and apparatus for a secure sleep state are disclosed. An example method includes, in response to an initiation of a sleep state of a computing platform, encrypting a memory of the computing platform; and decrypting the memory when resuming the computing platform from the sleep state, wherein placing the computing platform in the sleep state includes powering down a portion of the computing platform and preserving a state of the computing platform.

Methods and apparatus for a secure sleep state

An embodiment includes a method executed by at least one processor comprising: initializing first and second secure enclaves each comprising a trusted software execution environment that prevents software executing outside the first and second secure enclaves from having access to software and data inside the first and second secure enclaves; the first secure enclave (a)(i) inspecting a policy, (a)(ii) authenticating the second secure enclave in response to inspecting the policy; and (a)(iii) communicating encrypted content to the second secure enclave in response to authenticating the second secure enclave; and the second secure enclave (b)(i) decrypting the encrypted content to produce decrypted content, and (b)(ii) inspecting the decrypted content. Other embodiments are described herein.

Policy-based trusted inspection of rights managed content

Embodiments of apparatuses, methods for partitioning systems, and partitionable and partitioned systems are disclosed. In one embodiment, a system includes processors and a partition manager. The partition manager is to allocate a subset of the processors to a first partition and another subset of the processors to a second partition. The first partition is to execute first operating system level software and the second partition is to execute second operating system level software.

System partitioning to present software as platform level functionality via inter-partition bridge including reversible mode logic to switch between initialization, configuration, and execution mode

Various embodiments are generally directed to the provision and use of a secure enclave defined within a storage of a computing device by a processor element thereof to store executable instructions of an OTP component implementing logic to generate and use one-time passwords (OTPs) to enable access to services provided by another computing device. An apparatus includes a storage; a first processor element; and first logic to receive a one-time password (OTP) routine, store the OTP routine within a first secure enclave defined by the first processor element within the storage, obtain a measure of the contents of the first secure enclave with the OTP routine stored therein, transmit the first measure to a computing device, and receive an OTP seed. Other embodiments are described and claimed.

Techniques for securing use of one-time passwords

Embodiments of apparatuses, methods for partitioning systems, and partitionable and partitioned systems are disclosed. In one embodiment, a system includes processors and a partition manager. The partition manager is to allocate a subset of the processors to a first partition and another subset of the processors to a second partition. The first partition is to execute first operating system level software and the second partition is to execute second operating system level software. The first operating system level software is to manage the processors in the first partition as resources individually accessible to the first operating system level software, and the second operating system level software is to manage the processors in the second partition as resources individually accessible to the second operating system level software. The partition manager is also to present the second partition, including the second operating system level software, to the first operating system level software as platform level functionality embedded in the system.

System partitioning to present software as platform level functionality including mode logic to maintain and enforce partitioning in first and configure partitioning in second mode

An approach for managing the privacy and disclosure of location information associated with a computer system. For one aspect, a request is received from a requestor for a location property associated with a location of a computer system. It is then determined whether a privacy preference associated with the requestor has been specified. If not, a user may be prompted to supply privacy preferences associated with the requester. The privacy preferences are then applied to determine whether or not to provide the requested information. A user setting, such as a basic input-output system memory location setting, may also be implemented to enable and/or disable location-aware computing.

A system, apparatus and method are provided for using an imaging device for surveillance. According to one embodiment, a sensor is triggered when a situation occurs, the triggered sensor is detected, the imaging device is turned in the direction of the triggered sensor, and the imaging device is activated to capture an image.

Using an imaging device for security/emergency applications

A problem-resolution software system is organized into a &ldquo;solution cube&rdquo; which interacts with a problem-resolution framework consisting of a production-system engine. The solution cube incorporates production-system rules, &ldquo;solution interpreters&rdquo; for implementing chosen solutions, and a common interface mechanism for standardizing the interaction between the solution interpreters and the production system. The solution cube may also incorporate &ldquo;information providers&rdquo; for obtaining information from specific information sources, and another common interface mechanism for standardizing the interaction between the information providers and the production system. Each solution cube, which is a uniquely identifiable problem-resolution object, is organized into sub-units of one or more &ldquo;knowledge elements,&rdquo; each of which may be reusable by other solution cubes. The knowledge elements operate to add semantic information to the CIM data model which defines the components of a computing environment in terms of objects. The knowledge elements, by using the production system rules to set restrictions and dependencies on the properties of CIM objects, specify the &ldquo;preferred state&rdquo; of a given computer system and performs necessary actions based on the rules to maintain the preferred state, which rules may request additional information for the purpose of clarifying the context of the initial CIM data model by using heuristics and reasoning. &ldquo;Information providers,&rdquo; each of which is a provider module that retrieves information from a specific information source, facilitate a streamlined channeling of information to the production system by sharing a common interface with the production system, thereby allowing implementation of a generalized query mechanism in the production system regardless of the actual physical implementation of the information source. In addition, &ldquo;solution providers&rdquo; are provided to interpret a requested solution, perform it, and notify the production system when the solution has completed, as well as notify the production system of any results. Because a common interface is used to request any one of the available solutions, the common interface allows developers to implement a generalized solution mechanism in the production system regardless of the actual physical implementation of the solution provider.

Software-based problem-resolution production system with standardized information providers & solution interpreters

A method, apparatus, and storage medium for registering a first application with one or more task applications. According to one embodiment, a set of first application characterization data is provided. Map data for the one or more task applications is stored in a database. The set of first application characterization data is mapped, in accordance with the map data, into a mapped set of first application data for each of the one or more task applications.

Growing community of inventors

Forest Grove, OR, United States of America

Matthew Eldon Hoekstra