Creating secure channels between a protected execution environment and fixed-function endpoints

    公开(公告)号:US09852301B2

    公开(公告)日:2017-12-26

    申请号:US14582797

    申请日:2014-12-24

    申请人: Intel Corporation

    IPC分类号: G06F21/60 G06F21/62 H04L9/08

    摘要: Embodiments of an invention for establishing secure channels between a protected execution environment and fixed-function endpoints are disclosed. In one embodiment, and system includes an architecturally protected memory, a processing core communicatively coupled to the architecturally protected memory, and a key distribution engine. The processing core is to implement an architecturally-protected execution environment by performing at least one of executing instructions residing in the architecturally protected memory and preventing an unauthorized access to the architecturally protected memory. The key distribution engine is to provide a secure channel between an application executing within the architecturally-protected execution environment and a fixed-function endpoint by generating a decrypted content encryption key by decrypting an encrypted content encryption key using a key wrapping key shared between the processing core and the key distribution engine and providing the decrypted content encryption key to the fixed-function endpoint.