The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Oct. 04, 2022
Filed:
Dec. 20, 2018
Intel Corporation, Santa Clara, CA (US);
Ido Ouziel, Ein Carmel, IL;
Arie Aharon, Haifa, IL;
Dror Caspi, Kiryat Yam, IL;
Baruch Chaikin, D.N. Misagv, IL;
Jacob Doweck, Haifa, IL;
Gideon Gerzon, Zichron Yaakov, IL;
Barry E. Huntley, Hillsboro, OR (US);
Francis X. McKeen, Portland, OR (US);
Gilbert Neiger, Portland, OR (US);
Carlos V. Rozas, Portland, OR (US);
Ravi L. Sahita, Portland, OR (US);
Vedvyas Shanbhogue, Austin, TX (US);
Assaf Zaltsman, Tel Aviv, IL;
Hormuzd M. Khosravi, Portland, OR (US);
Intel Corporation, Santa Clara, CA (US);
Abstract
Implementations described provide hardware support for the co-existence of restricted and non-restricted encryption keys on a computing system. Such hardware support may comprise a processor having a core, a hardware register to store a bit range to identify a number of bits, of physical memory addresses, that define key identifiers (IDs) and a partition key ID identifying a boundary between non-restricted and restricted key IDs. The core may allocate at least one of the non-restricted key IDs to a software program, such as a hypervisor. The core may further allocate a restricted key ID to a trust domain whose trust computing base does not comprise the software program. A memory controller coupled to the core may allocate a physical page of a memory to the trust domain, wherein data of the physical page of the memory is to be encrypted with an encryption key associated with the restricted key ID.