公开(公告)号：US12244582B2

公开(公告)日：2025-03-04

申请号：US18428700

申请日：2024-01-31

Applicant: Google LLC

Inventor： Anna Sapek ,  Uday Ramesh Savagaonkar ,  Jeffrey Thomas Andersen ,  Thomas Michael Roeder

IPC: H04L9/40 ,  G06Q30/018 ,  H04L9/08

Abstract: Aspects of the disclosure provide various methods relating to enclaves. For instance, a method of authentication for an enclave entity with a second entity may include receiving, by one or more processors of a host computing device of the enclave entity, a request and an assertion of identity for the second entity, the assertion including identity information for the second identity; using an assertion verifier of the enclave entity to determine whether the assertion is valid; when the assertion is valid, extracting the identity information; authenticating the second entity using an access control list for the enclave entity to determine whether the identity information meets expectations of the access control list; when the identity information meets the expectations of the access control list, completing the request.

公开(公告)号：US20240171560A1

公开(公告)日：2024-05-23

申请号：US18428700

申请日：2024-01-31

Applicant: Google LLC

Inventor： Anna Sapek ,  Uday Ramesh Savagaonkar ,  Jeffrey Thomas Andersen ,  Thomas Michael Roeder

IPC: H04L9/40 ,  H04L9/08

CPC classification number: H04L63/08 ,  H04L9/0844 ,  H04L63/0428 ,  H04L63/101 ,  G06Q30/0185

Abstract: Aspects of the disclosure provide various methods relating to enclaves. For instance, a method of authentication for an enclave entity with a second entity may include receiving, by one or more processors of a host computing device of the enclave entity, a request and an assertion of identity for the second entity, the assertion including identity information for the second identity; using an assertion verifier of the enclave entity to determine whether the assertion is valid; when the assertion is valid, extracting the identity information; authenticating the second entity using an access control list for the enclave entity to determine whether the identity information meets expectations of the access control list; when the identity information meets the expectations of the access control list, completing the request.

公开(公告)号：US11962576B2

公开(公告)日：2024-04-16

申请号：US17973664

申请日：2022-10-26

Applicant: Google LLC

Inventor： Anna Sapek ,  Uday Savagaonkar ,  Jeffrey Thomas Andersen ,  Thomas Michael Roeder

IPC: H04L9/40 ,  G06Q30/018 ,  H04L9/08

CPC classification number: H04L63/08 ,  H04L9/0844 ,  H04L63/0428 ,  H04L63/101 ,  G06Q30/0185

Abstract: Aspects of the disclosure provide various methods relating to enclaves. For instance, a method of authentication for an enclave entity with a second entity may include receiving, by one or more processors of a host computing device of the enclave entity, a request and an assertion of identity for the second entity, the assertion including identity information for the second identity; using an assertion verifier of the enclave entity to determine whether the assertion is valid; when the assertion is valid, extracting the identity information; authenticating the second entity using an access control list for the enclave entity to determine whether the identity information meets expectations of the access control list; when the identity information meets the expectations of the access control list, completing the request.

公开(公告)号：US20230039096A1

公开(公告)日：2023-02-09

申请号：US17973664

申请日：2022-10-26

Applicant: Google LLC

Inventor： Anna Sapek ,  Uday Savagaonkar ,  Jeffrey Thomas Andersen ,  Thomas Michael Roeder

IPC: H04L9/40 ,  H04L9/08

Abstract: Aspects of the disclosure provide various methods relating to enclaves. For instance, a method of authentication for an enclave entity with a second entity may include receiving, by one or more processors of a host computing device of the enclave entity, a request and an assertion of identity for the second entity, the assertion including identity information for the second identity; using an assertion verifier of the enclave entity to determine whether the assertion is valid; when the assertion is valid, extracting the identity information; authenticating the second entity using an access control list for the enclave entity to determine whether the identity information meets expectations of the access control list; when the identity information meets the expectations of the access control list, completing the request.

公开(公告)号：US11509643B2

公开(公告)日：2022-11-22

申请号：US17046547

申请日：2018-07-18

Applicant: Google LLC

Inventor： Anna Sapek ,  Uday Savagaonkar ,  Jeffrey Thomas Andersen ,  Thomas Michael Roeder

IPC: H04L9/40 ,  H04L9/08 ,  G06Q30/00

Abstract: Aspects of the disclosure provide various methods relating to enclaves. For instance, a method of authentication for an enclave entity with a second entity may include receiving, by one or more processors of a host computing device of the enclave entity, a request and an assertion of identity for the second entity, the assertion including identity information for the second identity; using an assertion verifier of the enclave entity to determine whether the assertion is valid; when the assertion is valid, extracting the identity information; authenticating the second entity using an access control list for the enclave entity to determine whether the identity information meets expectations of the access control list; when the identity information meets the expectations of the access control list, completing the request.

公开(公告)号：US20210037001A1

公开(公告)日：2021-02-04

申请号：US17046547

申请日：2018-07-18

Applicant: Google LLC

Inventor： Anna Sapek ,  Uday Savagaonkar ,  Jeffrey Thomas Andersen ,  Thomas Michael Roeder

IPC: H04L29/06 ,  H04L9/08

Abstract: Aspects of the disclosure provide various methods relating to enclaves. For instance, a method of authentication for an enclave entity with a second entity may include receiving, by one or more processors of a host computing device of the enclave entity, a request and an assertion of identity for the second entity, the assertion including identity information for the second identity; using an assertion verifier of the enclave entity to determine whether the assertion is valid; when the assertion is valid, extracting the identity information; authenticating the second entity using an access control list for the enclave entity to determine whether the identity information meets expectations of the access control list; when the identity information meets the expectations of the access control list, completing the request.