The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Jun. 27, 2023
Filed:
Sep. 15, 2017
Intel Corporation, Santa Clara, CA (US);
Ravi L. Sahita, Portland, OR (US);
Baiju V. Patel, Portland, OR (US);
Barry E. Huntley, Hillsboro, OR (US);
Gilbert Neiger, Hillsboro, OR (US);
Hormuzd M. Khosravi, Portland, OR (US);
Ido Ouziel, Ein Carmel, IL;
David M. Durham, Beaverton, OR (US);
Ioannis T. Schoinas, Portland, OR (US);
Siddhartha Chhabra, Portland, OR (US);
Carlos V. Rozas, Portland, OR (US);
Gideon Gerzon, Zichron Yaakov, IL;
Intel Corporation, Santa Clara, CA (US);
Abstract
Implementations describe providing isolation in virtualized systems using trust domains. In one implementation, a processing device includes a memory ownership table (MOT) that is access-controlled against software access. The processing device further includes a processing core to execute a trust domain resource manager (TDRM) to manage a trust domain (TD), maintain a trust domain control structure (TDCS) for managing global metadata for each TD, maintain an execution state of the TD in at least one trust domain thread control structure (TD-TCS) that is access-controlled against software accesses, and reference the MOT to obtain at least one key identifier (key ID) corresponding to an encryption key assigned to the TD, the key ID to allow the processing device to decrypt memory pages assigned to the TD responsive to the processing device executing in the context of the TD, the memory pages assigned to the TD encrypted with the encryption key.