The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 18, 2020

Filed:

Dec. 24, 2015
Applicant:

Intel Corporation, Santa Clara, CA (US);

Inventors:

Jiewen Yao, Shanghai, CN;

Vincent J. Zimmer, Federal Way, WA (US);

Wei Li, San Jose, CA (US);

Rajesh Poornachandran, Portland, OR (US);

Giri P. Mudusuru, Portland, OR (US);

Assignee:

INTEL CORPORATION, Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/57 (2013.01); G06F 21/44 (2013.01); G06F 21/53 (2013.01); G06F 9/4401 (2018.01); G06F 9/54 (2006.01);
U.S. Cl.
CPC ...
G06F 21/575 (2013.01); G06F 21/44 (2013.01); G06F 21/53 (2013.01); G06F 21/57 (2013.01); G06F 21/572 (2013.01); G06F 9/4406 (2013.01); G06F 9/547 (2013.01);
Abstract

Techniques for providing and maintaining protection of firmware routines that form part of a chain of trust through successive processing environments. An apparatus may include a first processor component (); a volatile storage () coupled to the first processor component; an enclave component to, in a pre-OS operating environment, generate a secure enclave within a portion of the volatile storage to restrict access to a secured firmware loaded into the secure enclave; a first firmware driver () to, in the pre-OS operating environment, provide a first API to enable unsecured firmware to call a support routine of the secured firmware from outside the secure enclave; and a second firmware driver () to, in an OS operating environment that replaces the pre-OS operating environment, provide a second API to enable an OS of the OS operating environment to call the support routine from outside the secure enclave.


Find Patent Forward Citations

Loading…