Invention Grant
- Patent Title: Zero-knowledge verifiably attestable transaction containers using secure processors
-
Application No.: US15484298Application Date: 2017-04-11
-
Publication No.: US10587411B2Publication Date: 2020-03-10
- Inventor: James R. Kraemer , Jeb R. Linton
- Applicant: International Business Machines Corporation
- Applicant Address: US NY Armonk
- Assignee: International Business Machines Corporation
- Current Assignee: International Business Machines Corporation
- Current Assignee Address: US NY Armonk
- Agency: Fleit Intellectual Property Law
- Agent Jon Gibbons
- Main IPC: G06F15/177
- IPC: G06F15/177 ; H04L9/32 ; G06F9/4401 ; G06F21/57 ; G09C1/00

Abstract:
A method, system and computer program product for providing an attestation of an operating environment. The method begins with booting, with a secure boot process with attestation, at least one processor with secure processor technology that allows user-level code to allocate private regions of memory which are protected from processes running at higher privilege levels. Next, one or more operating system containers are loaded in a server or a virtual machine. Each of the one or more operating system containers use each of their own process space and network space in order to operate on a single operating system kernel without creating separate virtual machines. If a set of one or more conditions of booting and loading has been satisfied using zero-knowledge verifiable computing then an attestation is sent calculated using a zero-knowledge verifiable computing technique to a second processor-based device.
Public/Granted literature
- US20180294962A1 ZERO-KNOWLEDGE VERIFIABLY ATTESTABLE TRANSACTION CONTAINERS USING SECURE PROCESSORS Public/Granted day:2018-10-11
Information query