Intel Corporation

Nadav Nesher

Baruch Chaikin

Alex Berenzon

Ke Yu

An embodiment includes a processor coupled to memory to perform operations comprising: creating a first trusted execution environment (TXE), in protected non-privileged user address space of the memory, which makes a first measurement for at least one of first data and first executable code and which encrypts the first measurement with a persistent first hardware based encryption key while the first measurement is within the first TXE; creating a second TXE, in the non-privileged user address space, which makes a second measurement for at least one of second data and second executable code; creating a third TXE in the non-privileged user address space; creating a first secure communication channel between the first and third TXEs and a second secure communication channel between the second and third TXEs; and communicating the first measurement between the first and third TXEs via the first secure communication channel. Other embodiments are described herein.

Using trusted execution environments for security of code and data

A method, apparatus and system for a virtual machine to issue an instruction to a virtual device, such virtual device being monitored by a management core of a virtual machine monitor. The virtual machine may instruct the virtual device to enter into for example a chat mode, a statistic mode, a file transfer mode or to execute or perform other functions. A management core of a virtual machine monitor may for example collect, channel, route or direct such instructions to a host, one or more other virtual machines or other components in a host network.

Growing community of inventors

Shmishit, Israel

Nadav Nesher