公开(公告)号：EP3877854A1

公开(公告)日：2021-09-15

申请号：EP19882848.5

申请日：2019-04-16

申请人： INTEL Corporation

发明人： HAGHIGHAT, Mohammad R. ,  DOSHI, Kshitij ,  HERDRICH, Andrew J. ,  MOHAN, Anup ,  IYER, Ravishankar R. ,  SUN, Mingqiu ,  BHUYAN, Krishna ,  GOH, Teck Joo ,  KUMAR, Mohan J. ,  PRINKE, Michael ,  LEMAY, Michael ,  PELED, Leeor ,  TSAI, Jr-Shian ,  DURHAM, David M. ,  CHAMBERLAIN, Jeffrey D. ,  SUKHOMLINOV, Vadim A. ,  DAHLEN, Eric J. ,  BAGHSORKHI, Sara ,  SANE, Harshad ,  MELIK-ADAMYAN, Areg ,  SAHITA, Ravi ,  BABOKIN, Dmitry Yurievich ,  STEINER, Ian M. ,  BACHMUTSKY, Alexander ,  RAO, Anil ,  ZHANG, Mingwei ,  JAIN, Nilesh K. ,  FIROOZSHAHIAN, Amin ,  PATEL, Baiju V. ,  HUANG, Wenyong ,  RAGHURAM, Yeluri

IPC分类号： G06F9/50 ,  G06F11/30

公开(公告)号：EP3588360A1

公开(公告)日：2020-01-01

申请号：EP19176635.1

申请日：2019-05-24

申请人： INTEL Corporation

发明人： LEMAY, Michael ,  DURHAM, David M. ,  KOUNAVIS, Michael E. ,  HUNTLEY, Barry E. ,  SHANBHOGUE, Vedvyas ,  BRANDT, Jason W. ,  TRIPLETT, Josh ,  NEIGER, Gilbert ,  GREWAL, Karanvir ,  PATEL, Baiju V. ,  ZHUANG, Ye ,  TSAI, Jr-Shian ,  SUKHOMLINOV, Vadim ,  SAHITA, Ravi ,  ZHANG, Mingwei ,  FARWELL, James C. ,  DAS, Amitabh ,  BHUYAN, Krishna

IPC分类号： G06F21/74 ,  G06F12/14 ,  G06F9/455 ,  G06F21/53

摘要： Disclosed embodiments relate to encoded inline capabilities. In one example, a system includes a trusted execution environment (TEE) to partition an address space within a memory into a plurality of compartments each associated with code to execute a function, the TEE further to assign a message object in a heap to each compartment, receive a request from a first compartment to send a message block to a specified destination compartment, respond to the request by authenticating the request, generating a corresponding encoded capability, conveying the encoded capability to the destination compartment, and scheduling the destination compartment to respond to the request, and subsequently, respond to a check capability request from the destination compartment by checking the encoded capability and, when the check passes, providing a memory address to access the message block, and, otherwise, generating a fault, wherein each compartment is isolated from other compartments.