公开(公告)号：WO2013180736A1

公开(公告)日：2013-12-05

申请号：PCT/US2012/040597

申请日：2012-06-01

Applicant: INTEL CORPORATION ,  GOFFMAN, Sergei ,  BERENZON, Alex ,  LENZ, Oron ,  DEVOR, Tevi ,  ZHANG, Bo ,  ZAHAVI, Yoram ,  MAOR, Moshe

Inventor： GOFFMAN, Sergei ,  BERENZON, Alex ,  LENZ, Oron ,  DEVOR, Tevi ,  ZHANG, Bo ,  ZAHAVI, Yoram ,  MAOR, Moshe

IPC: G06F21/22 ,  G06F9/44

CPC classification number: G06F21/602 ,  G06F21/125 ,  G06F21/53 ,  G06F21/54

Abstract: Embodiments of apparatus, computer-implemented methods, systems, devices, and computer-readable media are described herein for identifying and encrypting a subset of a plurality of instructions, for execution in a more secure execution environment, In various embodiments, the subset may include a single entry point and a single exit point. In various embodiments, one or more instructions of the plurality of instructions that precede or follow the subset may be executed in a first execution environment with a first security level. In various embodiments, the subset may be executed in a second execution environment with a second security level that is more secure than the first security level.

Abstract translation: 本文描述了装置，计算机实现的方法，系统，设备和计算机可读介质的实施例，用于识别和加密多个指令的子集，以在更安全的执行环境中执行。在各种实施例中，子集可以包括 单个入口点和单个出口点。 在各种实施例中，可以在具有第一安全级别的第一执行环境中执行在子集之前或之后的多个指令中的一个或多个指令。 在各种实施例中，子集可以在具有比第一安全级别更安全的第二安全级别的第二执行环境中执行。