Entry/Exit Architecture for Protected Device Modules

摘要

The entry/exit architecture may be a critical component of a protection framework using a secure enclaves-like trust framework for coprocessors. The entry/exit architecture describes steps that may be used to switch securely into a trusted execution environment (entry architecture) and out of the trusted execution environment (exit architecture), at the same time preventing any secure information from leaking to an untrusted environment.

主权项

1. A method comprising:
executing a command that takes a pointer to a device thread control structure belonging to an enclave-device-module; entering the enclave-device-module; and fetching commands from a buffer inside the enclave-device-module.