Intel Corporation

Rajesh Banginwar

Ravi L Sahita

Sumanth Naropanth

Vivek Thakkar

Jyothi Nayak

Royston A Pinto

Sunil K Notalapati Prabhakara

Surendra K Singh

Arvind Mohan

Rahil Malhotra

Aman Bakshi

Vasudevarao Kamma

Taeho Kgil

Riccardo Mariani

Jayant Mangalampalli

Nabajit Deka

Ninad Kothari

Asad Azam

Venkat R Gokulrangan

Sasikanth Avancha

Ramkumar Jayaraman

Jayant Mangalam-Palli

Sasikanth Avanch

Wenjun Zhang

Methods and apparatus relating to enhancing diagnostic capabilities of computing systems by combining variable patrolling Application Program Interface (API) and comparison mechanism of variables are described. In one embodiment, a first processor core executes a first instance of a workload to generate a first set of safety variables. A second processor core executes a second instance of the workload to generate a second set of safety variables. A third processor core generates a signal in response to comparison of the first set of safety variables and the second set of safety variables. Other embodiments are also disclosed and claimed.

Enhancing diagnostic capabilities of computing systems by combining variable patrolling API and comparison mechanism of variables

A data processing system (DPS) uses platform protection technology (PPT) to protect some or all of the code and data belonging to certain software modules. The PPT may include a virtual machine monitor (VMM) to enable an untrusted application and a trusted application to run on top of a single operating system (OS), while preventing the untrusted application from accessing memory used by the trusted application. The VMM may use a first extended page table (EPT) to translate a guest physical address (GPA) into a first host physical address (HPA) for the untrusted application. The VMM may use a second EPT to translate the GPA into a second HPA for the trusted application. The first and second EPTs may map the same GPA to different HPAs. Other embodiments are described and claimed.

Virtualization-based platform protection technology

An apparatus of a System on Chip (SoC) to implement a one out of two diagnostics (1oo2D) safety system comprises a memory comprising firmware to provide monitoring of the SoC and a second SoC, and a communication interface to provide cross-monitoring between the SoC and the second SoC. The firmware and the communication interface enable the SoC and the second SoC to implement the 1oo2D safety system without significant hardware or software external to the SoC.

SoC architecture to integrate with one out of two diagnostics platforms

A receiver includes a first interface to receive content, a second interface to be coupled to a device, and a processor to determine whether the device is a compliant device and to prevent decryption of at least a portion of the content received through the first interface when the device is determined to be a non-compliant device.

System and method for controlling access to protected content

In an embodiment of the present invention, a processor includes content storage logic to parse digital content into portions and to cause each portion to be stored into a corresponding page of a memory. The processor also includes protection logic to receive a write instruction having a destination address within the memory, and if the destination address is associated with a memory location stores a portion of the digital content, erase the page associated with the memory location. If the destination address is associated with another memory location that does not store any of the digital content, the protection logic is to permit execution of the write instruction. Other embodiments are described and claimed.

Apparatus and method to protect digital content

Systems and methods of delivering data from a range of input devices may involve detecting an availability of data from an input device, wherein the input device is associated with a default input path of a mobile platform. An input device driver can be invoked in a security engine in response to the availability of the data if a hardware component in the default input path is in a secure input mode, wherein the security engine it associated with a secure input path of the mobile platform. Additionally, the input device driver may be used to retrieve the data from the input device into the security engine.

Delivering data from a range of input devices over a secure path to trusted services in a secure element

Methods and systems may include a computing system having a display, a display controller with a decryption module, and a security element with security logic. The security logic can be configured to establish a secure path between the secure element and the display in response to a secure output mode request, wherein the secure path includes the display controller. In addition, the security logic may be configured to prevent the decryption module from being bypassed, and transmit encrypted data from the secure element to the display via the secure path.

Delivering data from a secure execution environment to a display controller

Growing community of inventors

Bengaluru, India

Rajesh Banginwar