SYSTEM AND METHOD FOR SHARING DATA SECURELY

摘要

Embodiments of systems and methods disclosed herein provide simple and effective methods for secure processes to share selected data with other processes, either secure or not, in a safe and secure manner. More specifically, in certain embodiments, systems and methods are disclosed that enable a secure data cache system to write certain data to main memory unencrypted. In other embodiments, systems and methods are disclosed that enable a secure data cache system to write encrypted data from one secure process to main memory, and to enable the decryption of the data by another secure process. In other embodiments, the ownership of data lines in a secure data cache is selectively changed from one process to another, effectively allowing different secure processes to share data.

主权项

1. A system, comprising:
a processor; a memory; a secret key stored in hardware; a cache having a data line comprising data of a process executed on the processor in a secure mode; a secure execution controller configured to symmetrically encrypt the data using an encryption key and store the encrypted data in the cache; and wherein the secure execution controller is configured to symmetrically encrypt the data a second time using the encryption key and storing the twice symmetrically encrypted data in the memory.