Amazon Technologies, Inc.

Rolf Peter Neugebauer

Benjamin Charles Serebrin

Filippo Sironi

Jan Hendrik Schoenherr

Ioannis Aslanidis

Karimallah Ahmed Mohammed Raslan

Adrian Pearson

Milan Pandurov

An isolated accelerator management intermediary running at a virtualization host uses a management interface exposed by a hardware accelerator to perform a set of operations to enable access to the hardware accelerator from a guest virtual machine. The operations include configuring a guest-accessible interface of the accelerator. A virtualization management component of the host launches the guest virtual machine after the set of operations is completed.

Isolated accelerator management intermediaries for virtualization hosts

Described are techniques for write protecting a non-volatile memory (NVM) after the contents of the NVM have been set. In some examples, a computing device or system having an NVM also includes a Root of Trust (RoT) configured to generate a write protect command as an input to the NVM. The RoT generates the write protect command in response to detecting a write protect signal from an electronic controller. The write protect command sets one or more areas in the NVM to be read-only. Further, the write protect command can make the one or more areas read-only on a power-on basis so that write protection is maintained until the next power cycle. The electronic controller can be configured to assert the write protect signal each time the computing device or system is powered on, for instance during a reboot, thereby causing the RoT to renew the write protection.

Write protection using an immutable root of trust

Growing community of inventors

Cambridge, United Kingdom

Rolf Peter Neugebauer