Sichere Verschlüsselungsschlüsselverwaltung in Vertrauensdomänen

Details

Veröffentlichungs-Nr.

EP3671522

Aktenzeichen

EP19203719

Anmeldetag

17. Oktober 2019

Veröffentlichung

17. Januar 2024

Erteilung

17. Januar 2024

Rechtsraum

EP

IPC

G06F21/79G06F21/60G06F12/14G06F9/455G06F12/0875

Abstract

Implementations describe providing secure encryption key management in trust domains. In one implementation, a processing device includes a key ownership table (KOT) that is protected against software access. The processing device further includes a processing core to execute a trust domain resource manager (TDRM) to create a trust domain (TD) and a randomly-generated encryption key corresponding to the TD, the randomly-generated encryption key identified by a guest key identifier (GKID) and protected against software access from at least one of the TDRM or other TDs, the TDRM is to reference the KOT to obtain at least one unassigned host key identifier (HKID) utilized to encrypt a TD memory, the TDRM is to assign the HKID to the TD by marking the HKID in the KOT as assigned, and configure the randomly-generated encryption key on the processing device by associating the randomly-generated encryption key with the HKID.

Anmelder

Firma

INTEL Corporation

Land

🇺🇸 USA

Fachgebiete