Microsoft Technology Licensing, LLC

Taylor James Stark

Hari R Pulapaka

Benjamin M Schultz

Frederick Justus Smith

Giridhar Viswanathan

Amber Tianqi Guo

Deepu Chandy Thomas

Maxwell Christopher Renke

Memory is partitioned and isolated in container-based memory enclaves. The container-based memory enclaves have attestable security guarantees. During provisioning of the container-based memory enclaves from a container image, a purported link in the container to a memory address of the enclave is modified to verifiably link to an actual memory address of the host, such as partitioned memory enclave. In some instances, enclave attestation reports can be validated without transmitting corresponding attestation requests to remote attestation services, based on previous attestation of one or more previous container attestation reports from a similar container and without requiring end-to-end attestation between the container and remote attestation service for each new attestation request.

Using secure memory enclaves from the context of process containers

Growing community of inventors

Redmond, WA, United States of America

Taylor James Stark