MICRO-ENCLAVES FOR INSTRUCTION-SLICE-GRAINED CONTAINED EXECUTION OUTSIDE SUPERVISORY RUNTIME

    公开(公告)号:US20220222337A1

    公开(公告)日:2022-07-14

    申请号:US17711768

    申请日:2022-04-01

    IPC分类号: G06F21/53

    摘要: The present disclosure describes a micro-enclave (μenclave) framework including μenclave operations, which are library functions that split off from normal code execution. The μenclaves contain a mix of stateful and stateless operations, including such steps as reading or writing various hardware registers or resource counters in operating system, timer setup, deferring preemption events by a small value within a threshold set by the operating system, and the like. The operations in a μenclave, even though performed at a user level privilege, are compiled by a separate compilation sequence and installed unforgeably as static and unforgeable procedure collections that do not yield control to an operating system scheduler.

    TAG CHECKING PROCEDURE CALLS
    53.
    发明申请

    公开(公告)号:US20220222077A1

    公开(公告)日:2022-07-14

    申请号:US17709824

    申请日:2022-03-31

    IPC分类号: G06F9/30 G06K7/00

    摘要: System and techniques for tag checking procedure calls include specifying a value for a color in a program-counter relative (PC-relative) call instruction from a call site to a call target. A pointer is provided to steer the PC-relative call instruction to the call target based on the color. A function call is generated to the call target based on the pointer. Other systems, methods and apparatuses are also described.

    DECENTRALIZED KEY GENERATION AND MANAGEMENT

    公开(公告)号:US20210328783A1

    公开(公告)日:2021-10-21

    申请号:US17358474

    申请日:2021-06-25

    IPC分类号: H04L9/08

    摘要: System and techniques for decentralized key generation and management are described herein. An information centric network (ICN) node receives a first ICN interest packet for public encryption parameters of an identity based encryption (IBE) key generation center (KGC). Public encryption parameters for the KGC are received in a first ICN data packet in response to the first ICN interest packet. The public encryption parameters are cached and used to respond a second ICN interest packet for the public parameters. A third ICN data packet may be received from the KGC in response to a key generation request. Here, the third data packet includes an indication that the third ICN data packet is part of a one-time session. Then, the third ICN data packet is transmitted without caching the third ICN data packet content based on the indication.