Uniform Enclave Interface
    1.
    发明申请

    公开(公告)号:US20230077623A1

    公开(公告)日:2023-03-16

    申请号:US17950205

    申请日:2022-09-22

    Applicant: Google LLC

    Abstract: A uniform enclave interface is provided for creating and operating enclaves across multiple different types of backends and system configurations. For instance, an enclave manager may be created in an untrusted environment of a host computing device. The enclave manager may include instructions for creating one or more enclaves. An enclave may be generated in memory of the host computing device using the enclave manager. One or more enclave clients of the enclave may be generated by the enclave manager such that the enclave clients configured to provide one or more entry points into the enclave. One or more trusted application instances may be created in the enclave.

    Enclave fork support
    2.
    发明授权

    公开(公告)号:US10949547B2

    公开(公告)日:2021-03-16

    申请号:US16153039

    申请日:2018-10-05

    Applicant: Google LLC

    Abstract: A fork support is provided for duplicating an application running inside an enclave entity. In this regard, a request to duplicate an application running inside a first enclave may be received by one or more processors of a host computing device of the first enclave. A snapshot of the first enclave including the application may be generated. The snapshot may be encrypted with a snapshot key and copied to untrusted memory of the host. A second enclave may be generated. The snapshot key may be sent from the first enclave to the second enclave through a secure communication channel. The encrypted snapshot may be copied from the untrusted memory of the host into the second enclave. The encrypted snapshot may be decrypted inside the second enclave with the snapshot key.

    Untrusted Multi-Party Compute System

    公开(公告)号:US20240380595A1

    公开(公告)日:2024-11-14

    申请号:US18314933

    申请日:2023-05-10

    Applicant: Google LLC

    Abstract: A method includes obtaining a container associated with a first entity, the container executing a workload, the workload requiring access to private resources associated with a second entity. The method also includes obtaining encrypted resources including the private resources associated with the second entity. The method further includes generating a verifiable attestation. The method includes transmitting the verifiable attestation to an attestation service and, after transmitting the verifiable attestation, receiving, from an access policy verifier, a federated identity token. The method further includes generating a decrypt request including the federated identity token. The method includes transmitting, to a key management service, the decrypt request, and, after transmitting the decrypt request, receiving, from the key management service, a data encryption key. The method includes decrypting, using the data encryption key, the encrypted resources to access the private resources and providing the workload access to the private resources.

    Enclave Fork Support
    4.
    发明公开

    公开(公告)号:US20230297697A1

    公开(公告)日:2023-09-21

    申请号:US18200648

    申请日:2023-05-23

    Applicant: Google LLC

    CPC classification number: G06F21/602 G06F21/6245 H04L9/0861 H04L9/14 H04L9/30

    Abstract: A fork support is provided for duplicating an application running inside an enclave entity. In this regard, a request to duplicate an application running inside a first enclave may be received by one or more processors of a host computing device of the first enclave. A snapshot of the first enclave including the application may be generated. The snapshot may be encrypted with a snapshot key and copied to untrusted memory of the host. A second enclave may be generated. The snapshot key may be sent from the first enclave to the second enclave through a secure communication channel. The encrypted snapshot may be copied from the untrusted memory of the host into the second enclave. The encrypted snapshot may be decrypted inside the second enclave with the snapshot key.

    Uniform enclave interface
    5.
    发明授权

    公开(公告)号:US12235951B2

    公开(公告)日:2025-02-25

    申请号:US18428842

    申请日:2024-01-31

    Applicant: Google LLC

    Abstract: A uniform enclave interface is provided for creating and operating enclaves across multiple different types of backends and system configurations. For instance, an enclave manager may be created in an untrusted environment of a host computing device. The enclave manager may include instructions for creating one or more enclaves. An enclave may be generated in memory of the host computing device using the enclave manager. One or more enclave clients of the enclave may be generated by the enclave manager such that the enclave clients configured to provide one or more entry points into the enclave. One or more trusted application instances may be created in the enclave.

    Uniform enclave interface
    7.
    发明授权

    公开(公告)号:US11494485B2

    公开(公告)日:2022-11-08

    申请号:US17046593

    申请日:2018-07-18

    Applicant: Google LLC

    Abstract: A uniform enclave interface is provided for creating and operating enclaves across multiple different types of backends and system configurations. For instance, an enclave manager may be created in an untrusted environment of a host computing device. The enclave manager may include instructions for creating one or more enclaves. An enclave may be generated in memory of the host computing device using the enclave manager. One or more enclave clients of the enclave may be generated by the enclave manager such that the enclave clients configured to provide one or more entry points into the enclave. One or more trusted application instances may be created in the enclave.

Patent Agency Ranking