Entry/Exit Architecture for Protected Device Modules

摘要

The entry/exit architecture may be a critical component of a protection framework using a secure enclaves-like trust framework for coprocessors. The entry/exit architecture describes steps that may be used to switch securely into a trusted execution environment (entry architecture) and out of the trusted execution environment (exit architecture), at the same time preventing any secure information from leaking to an untrusted environment.

主权项

1. A method comprising:
constructing a protected portion, in a protected execution environment, of a workload running on a coprocessor; executing a command that takes a pointer to a device thread control structure belonging to the protected portion; entering the protected portion; and fetching commands from a buffer inside the protected portion.