公开(公告)号：WO2013180736A1

公开(公告)日：2013-12-05

申请号：PCT/US2012/040597

申请日：2012-06-01

Applicant: INTEL CORPORATION ,  GOFFMAN, Sergei ,  BERENZON, Alex ,  LENZ, Oron ,  DEVOR, Tevi ,  ZHANG, Bo ,  ZAHAVI, Yoram ,  MAOR, Moshe

Inventor： GOFFMAN, Sergei ,  BERENZON, Alex ,  LENZ, Oron ,  DEVOR, Tevi ,  ZHANG, Bo ,  ZAHAVI, Yoram ,  MAOR, Moshe

IPC: G06F21/22 ,  G06F9/44

CPC classification number: G06F21/602 ,  G06F21/125 ,  G06F21/53 ,  G06F21/54

Abstract: Embodiments of apparatus, computer-implemented methods, systems, devices, and computer-readable media are described herein for identifying and encrypting a subset of a plurality of instructions, for execution in a more secure execution environment, In various embodiments, the subset may include a single entry point and a single exit point. In various embodiments, one or more instructions of the plurality of instructions that precede or follow the subset may be executed in a first execution environment with a first security level. In various embodiments, the subset may be executed in a second execution environment with a second security level that is more secure than the first security level.

Abstract translation: 本文描述了装置，计算机实现的方法，系统，设备和计算机可读介质的实施例，用于识别和加密多个指令的子集，以在更安全的执行环境中执行。在各种实施例中，子集可以包括 单个入口点和单个出口点。 在各种实施例中，可以在具有第一安全级别的第一执行环境中执行在子集之前或之后的多个指令中的一个或多个指令。 在各种实施例中，子集可以在具有比第一安全级别更安全的第二安全级别的第二执行环境中执行。

公开(公告)号：WO2014105161A1

公开(公告)日：2014-07-03

申请号：PCT/US2013/047339

申请日：2013-06-24

Applicant: INTEL CORPORATION ,  LESLIE-HURD, Rebekah ,  ROZAS, Carlos V. ,  SCARLATA, Vincent R. ,  JOHNSON, Simon P. ,  SAVAGAONKAR, Uday R. ,  HUNTLEY, Barry E. ,  SHANBHOGUE, Vedvyas ,  ANATI, Ittai ,  MCKEEN, Francis X. ,  GOLDSMITH, Michael A. ,  ALEXANDROVICH, Ilya ,  BERENZON, Alex ,  SMITH, Wesley H. ,  NEIGER, Gilbert

Inventor： LESLIE-HURD, Rebekah ,  ROZAS, Carlos V. ,  SCARLATA, Vincent R. ,  JOHNSON, Simon P. ,  SAVAGAONKAR, Uday R. ,  HUNTLEY, Barry E. ,  SHANBHOGUE, Vedvyas ,  ANATI, Ittai ,  MCKEEN, Francis X. ,  GOLDSMITH, Michael A. ,  ALEXANDROVICH, Ilya ,  BERENZON, Alex ,  SMITH, Wesley H. ,  NEIGER, Gilbert

IPC: G06F12/14 ,  G06F12/08

CPC classification number: G06F9/3004 ,  G06F9/30047 ,  G06F9/30076 ,  G06F9/44 ,  G06F12/084 ,  G06F12/0875 ,  G06F12/1483 ,  G06F2212/452

Abstract: Embodiments of an invention for memory management in secure enclaves are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first instruction and a second instruction. The execution unit is to execute the first instruction, wherein execution of the first instruction includes allocating a page in an enclave page cache to a secure enclave. The execution unit is also to execute the second instruction, wherein execution of the second instruction includes confirming the allocation of the page.

Abstract translation: 公开了用于安全飞行器中的存储器管理的发明的实施例。 在一个实施例中，处理器包括指令单元和执行单元。 指令单元接收第一指令和第二指令。 执行单元执行第一指令，其中第一指令的执行包括将飞地页面缓存中的页面分配到安全飞地。 执行单元还执行第二指令，其中第二指令的执行包括确认页的分配。

公开(公告)号：WO2014105159A1

公开(公告)日：2014-07-03

申请号：PCT/US2013/047322

申请日：2013-06-24

Applicant: INTEL CORPORATION ,  MCKEEN, Francis X. ,  GOLDSMITH, Michael A. ,  HUNTLEY, Barry E. ,  JOHNSON, Simon P. ,  LESLIE-HURD, Rebekah ,  ROZAS, Carlos V. ,  SAVAGAONKAR, Uday R. ,  SCARLATA, Vincent R. ,  SHANBHOGUE, Vedvyas ,  SMITH, Wesley H. ,  ANATI, Ittai ,  ALEXANDROVICH, Ilya ,  BERENZON, Alex ,  NEIGER, Gilbert

Inventor： MCKEEN, Francis X. ,  GOLDSMITH, Michael A. ,  HUNTLEY, Barry E. ,  JOHNSON, Simon P. ,  LESLIE-HURD, Rebekah ,  ROZAS, Carlos V. ,  SAVAGAONKAR, Uday R. ,  SCARLATA, Vincent R. ,  SHANBHOGUE, Vedvyas ,  SMITH, Wesley H. ,  ANATI, Ittai ,  ALEXANDROVICH, Ilya ,  BERENZON, Alex ,  NEIGER, Gilbert

IPC: G06F12/14

CPC classification number: G06F12/0804 ,  G06F9/30047 ,  G06F12/0875 ,  G06F12/1408 ,  G06F2212/1052 ,  G06F2212/402

Abstract: Embodiments of an invention for paging in secure enclaves are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first instruction. The execution unit is to execute the first instruction, wherein execution of the first instruction includes evicting a first page from an enclave page cache.

Abstract translation: 公开了用于在安全飞行器中寻呼的发明的实施例。 在一个实施例中，处理器包括指令单元和执行单元。 指令单元接收第一条指令。 执行单元执行第一指令，其中第一指令的执行包括从飞地页面缓存中逐出第一页。