Processor extensions for execution of secure embedded containers

摘要

Methods and apparatus relating to processor extensions for execution of secure embedded containers are described. In an embodiment, a scalable solution for manageability function is provided, e.g., for UMPC environments or otherwise where utilizing a dedicated processor or microcontroller for manageability is inappropriate or impractical. For example, in an embodiment, an OS (Operating System) or VMM (Virtual Machine Manager) Independent (generally referred to herein as “OI”) architecture involves creating one or more containers on a processor by dynamically partitioning resources (such as processor cycles, memory, devices) between the HOST OS/VMM and the OI container. Other embodiments are also described and claimed.

主权项

1. An apparatus comprising:
a storage unit having a plurality of partitions, wherein a first partition from the plurality of partitions is to store an Operating System (OS) independent partition, having an execution environment that is independent of, and unaffected by operating systems and virtual machine managers, and a second partition from the plurality of partitions is to store an OS; and an OS Independent (OI) Resource Manager (OIRM) to couple the plurality of partitions to a processor, wherein the OIRM is to dynamically partition cycles of the processor between the first partition and the second partition, and wherein an application running on the processor from the second partition can obtain a key blob from the OIRM to access data in the first partition.