The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Sep. 21, 2021

Filed:

Dec. 21, 2018
Applicant:

Nec Laboratories Europe Gmbh, Heidelberg, DE;

Inventors:

Claudio Soriente, Madrid, ES;

Ghassan Karame, Heidelberg, DE;

Wenting Li, Heidelberg, DE;

Assignee:

NEC CORPORATION, Tokyo, JP;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/53 (2013.01); G06F 21/57 (2013.01); G06F 21/60 (2013.01); G06F 9/54 (2006.01); H04L 9/08 (2006.01); G06F 21/12 (2013.01); G06F 21/44 (2013.01); H04L 29/06 (2006.01); G06F 21/30 (2013.01); H04L 9/32 (2006.01);
U.S. Cl.
CPC ...
G06F 21/12 (2013.01); G06F 9/545 (2013.01); G06F 21/305 (2013.01); G06F 21/44 (2013.01); G06F 21/53 (2013.01); G06F 21/57 (2013.01); G06F 21/577 (2013.01); G06F 21/606 (2013.01); H04L 9/085 (2013.01); H04L 9/0844 (2013.01); H04L 9/0897 (2013.01); H04L 9/3247 (2013.01); H04L 63/0281 (2013.01); H04L 2209/76 (2013.01);
Abstract

A method for executing a trusted execution environment (TEE) based application in a cloud computing system. The method includes executing a proxied attestation procedure with a client to enable the client to attest that an enclave management layer (EML) application provided by the cloud computing system runs on a TEE-enabled platform. The method also includes receiving, by the cloud computing system from the client, application code corresponding to the TEE-based application and receiving, by the EML application from the client, application parameters corresponding to the TEE-based application. In addition, the method includes writing, by the EML, application to a secure storage layer, the application parameters corresponding to the TEE-based application and creating, by the cloud computing system, an enclave configured to execute the TEE-based application. Furthermore, the method includes attesting, by the EML application, the enclave and executing, by the enclave configured to execute the TEE-based application, the TEE-based application.


Find Patent Forward Citations

Loading…