logo

For the Inventor, By the Inventor

The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Patent No.:

US 11328111 B1

PDFFull Text
Date of Patent:
May. 10, 2022

Filed:

Dec. 21, 2020

Broadcast remote sealing for scalable trusted execution environment provisioning

Applicant:

Intel Corporation, Santa Clara, CA (US);

Inventors:

Steffen Schulz, Darmstadt, DE;

Alpa Trivedi, Portland, OR (US);

Patrick Koeberl, Alsbach-Haenlein, DE;

Assignee:

INTEL CORPORATION, Santa Clara, CA (US);

Attorney:

Jaffery Watson Mendonsa & Hamilton LLP

Primary Examiner:

John B King

Int. Cl.
CPC ...
G06F 21/00 (2013.01); G06F 30/398 (2020.01); G06N 3/04 (2006.01); H04L 9/00 (2022.01); H04L 9/08 (2006.01); G06F 9/30 (2018.01); G06F 9/50 (2006.01); G06F 15/177 (2006.01); G06F 15/78 (2006.01); H04L 29/06 (2006.01); G06N 20/00 (2019.01); G06F 11/07 (2006.01); G06F 30/331 (2020.01); G06F 9/38 (2018.01); G06F 119/12 (2020.01); G06F 21/76 (2013.01); G06N 3/08 (2006.01); G06F 21/85 (2013.01); G06F 111/04 (2020.01); G06F 30/31 (2020.01); G06F 21/30 (2013.01); G06F 21/53 (2013.01); G06F 21/57 (2013.01); G06F 21/73 (2013.01); G06F 21/74 (2013.01); G06F 21/71 (2013.01); G06F 21/44 (2013.01);
U.S. Cl.
CPC ...
G06F 30/398 (2020.01); G06F 9/30101 (2013.01); G06F 9/3877 (2013.01); G06F 9/505 (2013.01); G06F 11/0709 (2013.01); G06F 11/0751 (2013.01); G06F 11/0772 (2013.01); G06F 11/0793 (2013.01); G06F 15/177 (2013.01); G06F 15/7825 (2013.01); G06F 15/7867 (2013.01); G06F 30/331 (2020.01); G06N 3/04 (2013.01); G06N 20/00 (2019.01); H04L 9/008 (2013.01); H04L 9/0841 (2013.01); H04L 9/0877 (2013.01); H04L 63/0442 (2013.01); H04L 63/12 (2013.01); H04L 63/20 (2013.01); G06F 21/30 (2013.01); G06F 21/44 (2013.01); G06F 21/53 (2013.01); G06F 21/57 (2013.01); G06F 21/575 (2013.01); G06F 21/71 (2013.01); G06F 21/73 (2013.01); G06F 21/74 (2013.01); G06F 21/76 (2013.01); G06F 21/85 (2013.01); G06F 30/31 (2020.01); G06F 2111/04 (2020.01); G06F 2119/12 (2020.01); G06F 2221/034 (2013.01); G06N 3/08 (2013.01);
Abstract

An apparatus to facilitate broadcast remote sealing for scalable trusted execution environment provisioning is disclosed. The apparatus includes one or more processors to: request a group status report to confirm a status of a group of trusted execution platforms from a cloud service provider (CSP) providing scalable runtime validation for on-device design rule checks; validate, by a tenant, a minimum trusted computing base (TCB) declared with the group status report; determine, based on validation of the minimum TCB, whether a set of group members of the group of trusted execution platforms satisfies security requirements of the tenant; responsive to the set of group members satisfying the security requirement, utilize a group public key to encrypt a workload of the tenant; and send the encrypted workload to the CSP for storage by the CSP and subsequent execution by an execution platform of the group using a private group key.

Find Patent Forward Citations

Loading…