公开(公告)号：US20180096137A1

公开(公告)日：2018-04-05

申请号：US15283357

申请日：2016-10-01

Applicant: Intel Corporation

Inventor： Jonathan Trostle ,  Paritosh Saxena ,  Ernie Brickell ,  Thomas J. Barnes

IPC: G06F21/53 ,  G06F21/44 ,  G06F21/34 ,  G06F21/33

CPC classification number: G06F21/53 ,  G06F21/33 ,  G06F21/34 ,  G06F21/44 ,  G06F2221/2103

Abstract: A method, apparatus, and computer-readable medium are provided to determine whether to enroll a computing device as a provider of a secure application enclave for a secure an application. The following information is obtained from a second computing device: a device identifier for a first computing device, application information, and data for a shared secret. The first computing device is configured to provide a secure application enclave to support execution of a secure the application associated with the application information, and the shared secret is shared between the secure application enclave and a user of the first computing device. A determination is made whether to enroll the first computing device as a provider of the secure application enclave for the secure application using the device identifier, the application information, and the data for the shared secret. The secure application enclave may be notified whether the enrollment of the first computing device is successful.

公开(公告)号：US10437985B2

公开(公告)日：2019-10-08

申请号：US15283357

申请日：2016-10-01

Applicant: Intel Corporation

Inventor： Jonathan Trostle ,  Paritosh Saxena ,  Ernie Brickell ,  Thomas J. Barnes

IPC: G06F21/53 ,  G06F21/34 ,  G06F21/44 ,  G06F21/33

Abstract: A method, apparatus, and computer-readable medium are provided to determine whether to enroll a computing device as a provider of a secure application enclave for an application. The following information is obtained from a second computing device: a device identifier for a first computing device, application information, and data for a shared secret. The first computing device is configured to provide a secure application enclave to support execution of the application associated with the application information, and the shared secret is shared between the secure application enclave and a user of the first computing device. A determination is made whether to enroll the first computing device as a provider of the secure application enclave for the application using the device identifier, the application information, and the data for the shared secret. The secure application enclave may be notified whether the enrollment of the first computing device is successful.