The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 17, 2020

Filed:

Jun. 28, 2016
Applicant:

Intel Corporation, Santa Clara, CA (US);

Inventors:

Rajesh Poornachandran, Portland, OR (US);

Vincent J. Zimmer, Federal Way, WA (US);

Mingqiu Sun, Beaverton, OR (US);

Gopinatth Selvaraje, Portland, OR (US);

Assignee:

Intel Corporation, Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/57 (2013.01); H04L 9/32 (2006.01); G06F 21/74 (2013.01); G06F 21/53 (2013.01); H04L 9/08 (2006.01); G06F 9/44 (2018.01); G06F 9/4401 (2018.01);
U.S. Cl.
CPC ...
G06F 21/575 (2013.01); G06F 21/53 (2013.01); G06F 21/74 (2013.01); H04L 9/0897 (2013.01); H04L 9/3268 (2013.01); G06F 9/44 (2013.01); G06F 9/4401 (2013.01); G06F 2221/034 (2013.01);
Abstract

Technologies for configuring a launch enclave include a computing device having a processor with secure enclave support. A trusted execution environment (TEE) of the computing device stores a launch enclave hash in a launch enclave hash table in secure storage and provisions the launch enclave hash to platform firmware at runtime. The TEE may receive the launch enclave hash via trusted I/O. The platform firmware sets a configure enclave launch bit and resets the computing device. On reset, the TEE determines whether the launch enclave hash is allowed for launch. The TEE may evaluate one or more launch configuration policies and may select a launch enclave hash based on the launch configuration policies. If allowed, the platform firmware writes the launch enclave hash to a model-specific register of the processor, and the launch enclave may be loaded and verified with the launch enclave hash. Other embodiments are described and claimed.


Find Patent Forward Citations

Loading…