公开(公告)号：US20230396449A1

公开(公告)日：2023-12-07

申请号：US17810952

申请日：2022-07-06

Applicant: Micron Technology, Inc.

Inventor： Alessandro ORLANDO ,  Niccolò IZZO ,  Danilo CARACCIO

IPC: H04L9/32 ,  H04L9/08

CPC classification number: H04L9/3265 ,  H04L9/0825

Abstract: Implementations described herein relate to a device identifier composition engine (DICE) 3-layer architecture. In some implementations, a device may include a secure computing environment including a hardware root of trust (HRoT) DICE component. The secure computing environment may include a DICE layer 0 component configured to derive a DICE identity key. The secure computing environment may include a DICE layer 1 component configured to derive a DICE alias key based on the DICE identity key. The secure computing environment may include a controller configured to receive an update to firmware of a component. The controller may be configured to update the firmware of the component based on receiving the update. The controller may be configured to update one or more keys of the component or one or more keys of one or more components above the component in a layer stack.

公开(公告)号：US20240184929A1

公开(公告)日：2024-06-06

申请号：US18489625

申请日：2023-10-18

Applicant: Micron Technology, Inc.

Inventor： Alessandro ORLANDO ,  Danilo CARACCIO ,  Niccolò IZZO

IPC: G06F21/73 ,  G06F21/60 ,  G06F21/64

CPC classification number: G06F21/73 ,  G06F21/602 ,  G06F21/64

Abstract: Implementations described herein relate to an immutable certificate for a device identifier composition engine (DICE). In some implementations, a device may include a secure computing environment. The secure component environment may include a hardware root of trust (HRoT) DICE component, a DICE layer 0 (L0) component configured to derive a DICE identity key, wherein the DICE L0 component is above the HRoT DICE component in a layer stack, a DICE layer 1 (L1) component configured to derive a DICE alias key based on the DICE identity key, wherein the DICE L1 component is above the DICE L0 component in the layer stack, wherein the DICE L1 component and the DICE L0 component are implemented as mutable code, and a controller. The controller may be configured to generate a set of certificates based on a compound device identifier (CDI).

公开(公告)号：US20230394140A1

公开(公告)日：2023-12-07

申请号：US17811770

申请日：2022-07-11

Applicant: Micron Technology, Inc.

Inventor： Alessandro ORLANDO ,  Niccolò IZZO ,  Federica CRESCI ,  Angelo Alberto ROVELLI ,  Craig A. JONES ,  Danilo CARACCIO ,  Luca CASTELLAZZI

IPC: G06F21/55

CPC classification number: G06F21/554 ,  G06F2221/034

Abstract: In some implementations, a system includes a set of servers configured to establish a set of virtual machines to provide a computing environment; a set of compute express link (CXL) interface components configured to communicate with the set of servers via a set of CXL interconnects; and a controller configured to at least one of: encrypt protocol data against a CXL interposer security threat associated with the set of CXL interconnects or a malicious extension security threat, provide a secure handshake verification of an identity of the set of CXL interface components, enforce a chain of trust rooted in hardware of the set of CXL interface components; restrict access to an area of memory of the set of CXL interface components that stores security data for verified or secured processes; or perform a security check and set up a set of security features of the set of CXL interface components.