The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 07, 2020

Filed:

Oct. 20, 2016
Applicant:

Intel Corporation, Santa Clara, CA (US);

Inventors:

Kapil Sood, Beaverton, OR (US);

Somnath Chakrabarti, Portland, OR (US);

Wei Shen, Hillsboro, OR (US);

Carlos V. Rozas, Portland, OR (US);

Mona Vij, Hillsboro, OR (US);

Vincent R. Scarlata, Beaverton, OR (US);

Assignee:

Intel Corporation, Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/53 (2013.01); G06F 9/4401 (2018.01); G06F 9/455 (2018.01); G06F 21/79 (2013.01); G06F 12/1036 (2016.01); G06F 12/109 (2016.01); G06F 12/14 (2006.01); G06F 21/57 (2013.01); G06F 8/61 (2018.01); H04L 12/24 (2006.01);
U.S. Cl.
CPC ...
G06F 21/53 (2013.01); G06F 9/4406 (2013.01); G06F 9/45558 (2013.01); G06F 12/109 (2013.01); G06F 12/1036 (2013.01); G06F 12/1425 (2013.01); G06F 21/79 (2013.01); G06F 8/61 (2013.01); G06F 21/575 (2013.01); G06F 2009/45587 (2013.01); G06F 2212/1052 (2013.01); H04L 41/5041 (2013.01);
Abstract

Methods and apparatus for implemented trusted packet processing for multi-domain separatization and security. Secure enclaves are created in system memory of a compute platform configured to support a virtualized execution environment including a plurality of virtual machines (VMs) or containers, each secure enclave occupying a respective protected portion of the system memory, wherein software code external from a secure enclave cannot access code or data within a secure enclave, and software code in a secure enclave can access code and data both within the secure enclave and external to the secure enclave. Software code for implementing packet processing operations is installed in the secure enclaves. The software in the secure enclaves is then executed to perform the packet processing operations. Various configurations of secure enclaves and software code may be implemented, including configurations supporting service chains both within a VM or contain or across multiple VMs or containers, as well a parallel packet processing operations.


Find Patent Forward Citations

Loading…