公开(公告)号：WO2014105167A1

公开(公告)日：2014-07-03

申请号：PCT/US2013/047423

申请日：2013-06-24

Applicant: INTEL CORPORATION ,  HILDESHEIM, Gur ,  ANATI, Ittai ,  SHAIF, Hisham ,  RAIKIN, Shlomo ,  GERZON, Gideon ,  SAVAGAONKAR, Uday R. ,  ROZAS, Carlos V. ,  MCKEEN, Francis X. ,  GOLDSMITH, Michael A. ,  DEWAN, Prashant

Inventor： HILDESHEIM, Gur ,  ANATI, Ittai ,  SHAIF, Hisham ,  RAIKIN, Shlomo ,  GERZON, Gideon ,  SAVAGAONKAR, Uday R. ,  ROZAS, Carlos V. ,  MCKEEN, Francis X. ,  GOLDSMITH, Michael A. ,  DEWAN, Prashant

IPC: G06F21/78

CPC classification number: G06F12/145 ,  G06F12/084 ,  G06F12/1027 ,  G06F12/1483 ,  G06F21/53

Abstract: An apparatus and method for managing a protection table by a processor. For example, a processor according to one embodiment of the invention comprises: protection table management logic to manage a protection table, the protection table having an entry for each protected page or each group of protected pages in memory; wherein the protection table management logic prevents direct access to the protection table by user application program code and operating system program code but permits direct access by the processor.

Abstract translation: 一种用于由处理器管理保护表的装置和方法。 例如，根据本发明的一个实施例的处理器包括：保护表管理逻辑，用于管理保护表，所述保护表具有每个受保护页面的条目或存储器中的每组受保护页面; 其中保护表管理逻辑防止用户应用程序代码和操作系统程序代码直接访问保护表，但允许处理器直接访问。

公开(公告)号：WO2014105161A1

公开(公告)日：2014-07-03

申请号：PCT/US2013/047339

申请日：2013-06-24

Applicant: INTEL CORPORATION ,  LESLIE-HURD, Rebekah ,  ROZAS, Carlos V. ,  SCARLATA, Vincent R. ,  JOHNSON, Simon P. ,  SAVAGAONKAR, Uday R. ,  HUNTLEY, Barry E. ,  SHANBHOGUE, Vedvyas ,  ANATI, Ittai ,  MCKEEN, Francis X. ,  GOLDSMITH, Michael A. ,  ALEXANDROVICH, Ilya ,  BERENZON, Alex ,  SMITH, Wesley H. ,  NEIGER, Gilbert

Inventor： LESLIE-HURD, Rebekah ,  ROZAS, Carlos V. ,  SCARLATA, Vincent R. ,  JOHNSON, Simon P. ,  SAVAGAONKAR, Uday R. ,  HUNTLEY, Barry E. ,  SHANBHOGUE, Vedvyas ,  ANATI, Ittai ,  MCKEEN, Francis X. ,  GOLDSMITH, Michael A. ,  ALEXANDROVICH, Ilya ,  BERENZON, Alex ,  SMITH, Wesley H. ,  NEIGER, Gilbert

IPC: G06F12/14 ,  G06F12/08

CPC classification number: G06F9/3004 ,  G06F9/30047 ,  G06F9/30076 ,  G06F9/44 ,  G06F12/084 ,  G06F12/0875 ,  G06F12/1483 ,  G06F2212/452

Abstract: Embodiments of an invention for memory management in secure enclaves are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first instruction and a second instruction. The execution unit is to execute the first instruction, wherein execution of the first instruction includes allocating a page in an enclave page cache to a secure enclave. The execution unit is also to execute the second instruction, wherein execution of the second instruction includes confirming the allocation of the page.

Abstract translation: 公开了用于安全飞行器中的存储器管理的发明的实施例。 在一个实施例中，处理器包括指令单元和执行单元。 指令单元接收第一指令和第二指令。 执行单元执行第一指令，其中第一指令的执行包括将飞地页面缓存中的页面分配到安全飞地。 执行单元还执行第二指令，其中第二指令的执行包括确认页的分配。

公开(公告)号：WO2015013059A1

公开(公告)日：2015-01-29

申请号：PCT/US2014/046610

申请日：2014-07-15

Applicant: INTEL CORPORATION ,  SCARLATA, Vincent R. ,  ROZAS, Carlos V. ,  JOHNSON, Simon P. ,  SAVAGAONKAR, Uday R. ,  ANATI, Ittai ,  MCKEEN, Francis X. ,  GOLDSMITH, Michael A.

Inventor： SCARLATA, Vincent R. ,  ROZAS, Carlos V. ,  JOHNSON, Simon P. ,  SAVAGAONKAR, Uday R. ,  ANATI, Ittai ,  MCKEEN, Francis X. ,  GOLDSMITH, Michael A.

IPC: G06F21/00 ,  G06F9/06

CPC classification number: H04L9/3213 ,  G06F21/12 ,  G06F21/53 ,  H04L9/3263

Abstract: Embodiments of an invention for feature licensing in a secure processing environment are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction to initialize a secure enclave. The execution unit is to execute the instruction. Execution of the instruction includes determining whether a requested feature is licensed for use in the secure enclave.

Abstract translation: 公开了在安全处理环境中的特征许可的发明的实施例。 在一个实施例中，处理器包括指令单元和执行单元。 指令单元将接收初始化安全飞地的指令。 执行单元执行指令。 指令的执行包括确定所请求的特征是否被许可用于安全飞地。

公开(公告)号：WO2014105130A1

公开(公告)日：2014-07-03

申请号：PCT/US2013/046191

申请日：2013-06-17

Applicant: INTEL CORPORATION ,  XING, Bin ,  HOEKSTRA, Matthew E. ,  GOLDSMITH, Michael A. ,  ROZAS, Carlos V. ,  SCARLATA, Vincent R. ,  JOHNSON, Simon P. ,  SAVAGAONKAR, Uday R. ,  MCKEEN, Francis X. ,  TOLOPKA, Stephen J.

Inventor： XING, Bin ,  HOEKSTRA, Matthew E. ,  GOLDSMITH, Michael A. ,  ROZAS, Carlos V. ,  SCARLATA, Vincent R. ,  JOHNSON, Simon P. ,  SAVAGAONKAR, Uday R. ,  MCKEEN, Francis X. ,  TOLOPKA, Stephen J.

IPC: G06F21/52 ,  G06F9/44

CPC classification number: G06F21/53 ,  G06F21/71 ,  G06F2221/2101 ,  G06F2221/2149

Abstract: Embodiments of an invention for measuring applications loaded in secure enclaves at runtime are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive an instruction to extend a first measurement of a secure enclave with a second measurement. The execution unit is to execute the instruction after initialization of the secure enclave.

Abstract translation: 公开了用于在运行时测量加载在安全空间中的应用的发明的实施例。 在一个实施例中，处理器包括指令单元和执行单元。 指令单元将接收用于通过第二测量来扩展安全飞地的第一测量的指令。 执行单元将在安全飞地初始化后执行指令。