The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Dec. 13, 2022
Filed:
Jul. 03, 2019
Microsoft Technology Licensing, Llc, Redmond, WA (US);
David Thomas Chisnall, Cambridge, GB;
CĂ©dric Alain Marie Fournet, Cambridge, GB;
Manuel Costa, Cambridge, GB;
Samuel Alexander Webster, Cambridge, GB;
Sylvan Clebsch, Cambridge, GB;
Kapil Vaswani, Cambridge, GB;
Microsoft Technology Licensing, LLC, Redmond, WA (US);
Abstract
A computer system has a separation mechanism which enforces separation between at least two execution environments such that one execution environment is a gatekeeper which interposes on all communications of the other execution environment. The computer system has an attestation mechanism which enables the gatekeeper to attest to properties of the at least two execution environments. A first one of the execution environments runs application specific code which may contain security vulnerabilities. The gatekeeper is configured to enforce an input output policy on the first execution environment by interposing on all communication to and from the first execution environment by forwarding, modifying or dropping individual ones of the communications according to the policy. The gatekeeper provides evidence of attestation both for the application specific code and the policy.