The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Sep. 17, 2019

Filed:

Jan. 26, 2017
Applicant:

Microsoft Technology Licensing, Llc, Redmond, WA (US);

Inventor:

Mark F. Novak, Newcastle, WA (US);

Assignee:
Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 9/14 (2006.01); H04L 9/08 (2006.01); G06F 21/60 (2013.01); H04L 9/32 (2006.01);
U.S. Cl.
CPC ...
H04L 63/0428 (2013.01); G06F 21/602 (2013.01); H04L 9/0822 (2013.01); H04L 9/0825 (2013.01); H04L 9/0861 (2013.01); H04L 9/14 (2013.01); H04L 9/3263 (2013.01); G06F 2221/2105 (2013.01);
Abstract

Methods, systems, and devices are described herein for delivering protected data to a nested trusted execution environment (TrEE) associated with an untrusted requestor. The nested TrEE may include a trustlet running on top of secure kernel. In one aspect, a targeting protocol head, or other intermediary between a requestor and a key management system or other store of protected data, may receive a request for protected data from a potentially untrusted requestor, an attestation statement of the secure kernel, and a key certification statement. The key certification statement may bind a trustlet public encryption key and a trustlet ID. The targeting protocol head may retrieve the protected data, and encrypt the protected data with the trustlet public encryption key. The targeting protocol head may then send the encrypted protected data to the requestor.


Find Patent Forward Citations

Loading…