WO2010057065A3 - Procédé et appareil assurant une exécution d'application sécurisée - Google Patents

Procédé et appareil assurant une exécution d'application sécurisée Download PDF

Info

Publication number
WO2010057065A3
WO2010057065A3 PCT/US2009/064493 US2009064493W WO2010057065A3 WO 2010057065 A3 WO2010057065 A3 WO 2010057065A3 US 2009064493 W US2009064493 W US 2009064493W WO 2010057065 A3 WO2010057065 A3 WO 2010057065A3
Authority
WO
WIPO (PCT)
Prior art keywords
application execution
secure application
provide secure
application
data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2009/064493
Other languages
English (en)
Other versions
WO2010057065A2 (fr
Inventor
Frank Mckeen
Uday Savagaonkar
Carlos V. Rozas
Michael A. Goldsmith
Howard C. Herbert
Asher Altman
Gary Graunke
David Durham
Simon P. Johnson
Michael E. Kounavis
Vincent R. Scarlata
Joseph Cihula
Stalinselvaraj Jeyasingh
Bernard Lint
Gil Neiger
Dion Rodgers
Ernie Brickell
Jianguo Li
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Intel Corp
Original Assignee
Intel Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Intel Corp filed Critical Intel Corp
Priority to JP2011536548A priority Critical patent/JP2012508938A/ja
Publication of WO2010057065A2 publication Critical patent/WO2010057065A2/fr
Publication of WO2010057065A3 publication Critical patent/WO2010057065A3/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/30—Arrangements for executing machine instructions, e.g. instruction decode
    • G06F9/30003—Arrangements for executing specific machine instructions
    • G06F9/3004—Arrangements for executing specific machine instructions to perform operations on memory
    • G06F9/30043—LOAD or STORE instructions; Clear instruction
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/30—Arrangements for executing machine instructions, e.g. instruction decode
    • G06F9/30003—Arrangements for executing specific machine instructions
    • G06F9/30007—Arrangements for executing specific machine instructions to perform operations on data operands
    • G06F9/30032—Movement instructions, e.g. MOVE, SHIFT, ROTATE, SHUFFLE

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Storage Device Security (AREA)
  • Multi Processors (AREA)
  • Memory System Of A Hierarchy Structure (AREA)
  • Retry When Errors Occur (AREA)

Abstract

L'invention concerne une technique qui permet de sécuriser l'intégrité des données et des applications à l'intérieur d'un système d'ordinateur. Dans un mode de réalisation, une ou plusieurs enclaves sécurisées sont établies dans lesquelles une application et des données peuvent être stockées et exécutées.
PCT/US2009/064493 2008-11-14 2009-11-14 Procédé et appareil assurant une exécution d'application sécurisée Ceased WO2010057065A2 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
JP2011536548A JP2012508938A (ja) 2008-11-14 2009-11-14 セキュアなアプリケーション実行方法および装置

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US19931808P 2008-11-14 2008-11-14
US61/199,318 2008-11-14
US59076709A 2009-11-13 2009-11-13
US12/590,767 2009-11-13

Publications (2)

Publication Number Publication Date
WO2010057065A2 WO2010057065A2 (fr) 2010-05-20
WO2010057065A3 true WO2010057065A3 (fr) 2010-08-19

Family

ID=42170755

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2009/064493 Ceased WO2010057065A2 (fr) 2008-11-14 2009-11-14 Procédé et appareil assurant une exécution d'application sécurisée

Country Status (2)

Country Link
JP (1) JP2012508938A (fr)
WO (1) WO2010057065A2 (fr)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9448950B2 (en) 2013-12-24 2016-09-20 Intel Corporation Using authenticated manifests to enable external certification of multi-processor platforms
US9501668B2 (en) 2013-09-25 2016-11-22 Intel Corporation Secure video ouput path
US9705892B2 (en) 2014-06-27 2017-07-11 Intel Corporation Trusted time service for offline mode

Families Citing this family (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9087200B2 (en) 2009-12-22 2015-07-21 Intel Corporation Method and apparatus to provide secure application execution
US8181176B2 (en) * 2010-06-21 2012-05-15 Intel Corporation Uniform storage device access using partial virtual machine executing within a secure enclave session
US20140189807A1 (en) 2011-10-18 2014-07-03 Conor P. Cahill Methods, systems and apparatus to facilitate client-based authentication
US9323686B2 (en) * 2012-12-28 2016-04-26 Intel Corporation Paging in secure enclaves
US9747102B2 (en) 2012-12-28 2017-08-29 Intel Corporation Memory management in secure enclaves
US9189411B2 (en) * 2012-12-28 2015-11-17 Intel Corporation Logging in secure enclaves
US9177353B2 (en) 2013-03-15 2015-11-03 Intel Corporation Secure rendering of display surfaces
US9430384B2 (en) * 2013-03-31 2016-08-30 Intel Corporation Instructions and logic to provide advanced paging capabilities for secure enclave page caches
US9355262B2 (en) 2013-12-27 2016-05-31 Intel Corporation Modifying memory permissions in a secure processing environment
US9606940B2 (en) 2015-03-27 2017-03-28 Intel Corporation Methods and apparatus to utilize a trusted loader in a trusted computing environment
US10552344B2 (en) 2017-12-26 2020-02-04 Intel Corporation Unblock instruction to reverse page block during paging

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5224166A (en) * 1992-08-11 1993-06-29 International Business Machines Corporation System for seamless processing of encrypted and non-encrypted data and instructions
US20040143748A1 (en) * 2003-01-21 2004-07-22 Kabushiki Kaisha Toshiba Data access control method for tamper resistant microprocessor using cache memory
US20050100163A1 (en) * 2003-11-10 2005-05-12 Broadcom Corporation System and method for securing executable code
US20080072004A1 (en) * 2006-09-20 2008-03-20 Arm Limited Maintaining cache coherency for secure and non-secure data access requests

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4263976B2 (ja) * 2003-09-24 2009-05-13 株式会社東芝 オンチップマルチコア型耐タンパプロセッサ
JP4945200B2 (ja) * 2006-08-29 2012-06-06 株式会社日立製作所 計算機システム及びプロセッサの制御方法

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5224166A (en) * 1992-08-11 1993-06-29 International Business Machines Corporation System for seamless processing of encrypted and non-encrypted data and instructions
US20040143748A1 (en) * 2003-01-21 2004-07-22 Kabushiki Kaisha Toshiba Data access control method for tamper resistant microprocessor using cache memory
US20050100163A1 (en) * 2003-11-10 2005-05-12 Broadcom Corporation System and method for securing executable code
US20080072004A1 (en) * 2006-09-20 2008-03-20 Arm Limited Maintaining cache coherency for secure and non-secure data access requests

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9501668B2 (en) 2013-09-25 2016-11-22 Intel Corporation Secure video ouput path
US9448950B2 (en) 2013-12-24 2016-09-20 Intel Corporation Using authenticated manifests to enable external certification of multi-processor platforms
US9705892B2 (en) 2014-06-27 2017-07-11 Intel Corporation Trusted time service for offline mode

Also Published As

Publication number Publication date
JP2012508938A (ja) 2012-04-12
WO2010057065A2 (fr) 2010-05-20

Similar Documents

Publication Publication Date Title
WO2010057065A3 (fr) Procédé et appareil assurant une exécution d'application sécurisée
GB2481563A (en) Method and apparatus to provide secure application execution
WO2012082410A3 (fr) Technique pour prendre en charge de multiples enclaves sécurisées
EP2487639A4 (fr) Dispositif de gestion d'informations, procédé de traitement de données associé et programme informatique
TWI369613B (en) Control device, data processing device and method thereof
EP2266039A4 (fr) Procédé d'actualisation de données, système mémoire et dispositif à mémoire
EP2358277A4 (fr) Appareil de traitement d'information, procédé de traitement d'information, programme, et support de stockage
EP2375360A4 (fr) Système d'échange d'informations personnelles, appareil de fourniture d'informations personnelles, son procédé de traitement de données et son programme informatique
EP2495698A4 (fr) Dispositif de traitement d'informations biométriques, procédé de traitement d'informations biométriques et programme d'ordinateur pour traitement d'informations biométriques
EP2058783A4 (fr) Dispositif de conversion de données, procédé de conversion de données et programme informatique
EP2299711A4 (fr) Dispositif de sortie de données, dispositif de fourniture de données, système de sortie de données, procédé de commande pour dispositif de sortie de données et procédé de commande pour dispositif de fourniture de données
IL212380A0 (en) Method and system for incorporating physiologic data in a gaming environment
EP2058781A4 (fr) Dispositif de codage, procédé de codage et programme informatique
EP2283428A4 (fr) Procédé et système pour le traitement de données de grand volume
GB0802989D0 (en) System, method and computer program for selecting an information provider
PL2332313T3 (pl) Sposób zapisywania danych, produkt w postaci programu komputerowego, token id i system komputerowy
EP2177993A4 (fr) Système d'ordinateur, dispositif de gestion, et procédé de gestion de système d'ordinateur
WO2011017658A3 (fr) Système de mise en page de document
EP2300913A4 (fr) Procédés et systèmes pour le développement, le débogage et l'exécution d'applications d'intégration de données
EP2232375A4 (fr) Système et procédé pour stocker code et données de programme dans un centre d'hébergement d'application
WO2010051298A3 (fr) Instruction et logique de réalisation d’une détection de distance
EP2336889A4 (fr) Dispositif de génération de règles de détection, procédé de génération de règles de détection et programme informatique
EP2044522A4 (fr) Systèmes, procédés et produits-programmes informatiques pour effectuer une mémorisation de données à distance pour des dispositifs clients
EP2505357A4 (fr) Dispositif de génération de données d'impression, procédé de génération de données d'impression, et programme de génération de données d'impression
GB2463419B (en) Method, programme and computer system for conciliating hydrocarbon reservervoir model data

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 09826885

Country of ref document: EP

Kind code of ref document: A2

WWE Wipo information: entry into national phase

Ref document number: 2011536548

Country of ref document: JP

Ref document number: 2340/DELNP/2011

Country of ref document: IN

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 09826885

Country of ref document: EP

Kind code of ref document: A2