View source for 18419359. PERIPHERAL DEVICE simplified abstract (Microsoft Technology Licensing, LLC)

=PERIPHERAL DEVICE=


==Organization Name==

[[:Category:Microsoft Technology Licensing, LLC|Microsoft Technology Licensing, LLC]]


[[Category:Microsoft Technology Licensing, LLC]]

==Inventor(s)==

[[:Category:Stavros Volos of Cambridge (GB)|Stavros Volos of Cambridge (GB)]][[Category:Stavros Volos of Cambridge (GB)]]

[[:Category:David Thomas Chisnall of Cambridge (GB)|David Thomas Chisnall of Cambridge (GB)]][[Category:David Thomas Chisnall of Cambridge (GB)]]

[[:Category:Saurabh Mohan Kulkarni of Redmond WA (US)|Saurabh Mohan Kulkarni of Redmond WA (US)]][[Category:Saurabh Mohan Kulkarni of Redmond WA (US)]]

[[:Category:Kapil Vaswani of Bangalore (IN)|Kapil Vaswani of Bangalore (IN)]][[Category:Kapil Vaswani of Bangalore (IN)]]

[[:Category:Manuel Costa of Cambridge (GB)|Manuel Costa of Cambridge (GB)]][[Category:Manuel Costa of Cambridge (GB)]]

[[:Category:Samuel Alexander Webster of Cambridge (GB)|Samuel Alexander Webster of Cambridge (GB)]][[Category:Samuel Alexander Webster of Cambridge (GB)]]

[[:Category:Cédric Alain Marie Fournet of Cambridge (GB)|Cédric Alain Marie Fournet of Cambridge (GB)]][[Category:Cédric Alain Marie Fournet of Cambridge (GB)]]

[[:Category:Richard Osborne of Bristol (GB)|Richard Osborne of Bristol (GB)]][[Category:Richard Osborne of Bristol (GB)]]

[[:Category:Daniel John Pelham Wilkinson of Bristol (GB)|Daniel John Pelham Wilkinson of Bristol (GB)]][[Category:Daniel John Pelham Wilkinson of Bristol (GB)]]

[[:Category:Graham Bernard Cunningham of Chippenham (GB)|Graham Bernard Cunningham of Chippenham (GB)]][[Category:Graham Bernard Cunningham of Chippenham (GB)]]

==PERIPHERAL DEVICE - A simplified explanation of the abstract==


This abstract first appeared for US patent application 18419359 titled 'PERIPHERAL DEVICE

==Simplified Explanation==

The abstract describes a peripheral device that includes compute elements, a security module, and encryption units to process sensitive data in a trusted execution environment.

* The peripheral device has one or more compute elements for processing data.
* A security module creates a trusted execution environment for processing sensitive data using sensitive code.
* The encryption unit encrypts and decrypts data transferred between the trusted execution environment and a trusted computing entity.
* The security module sends an attestation to the trusted computing entity to confirm that the sensitive code is in the trusted execution environment.

== Potential Applications ==
This technology could be applied in secure communication devices, data processing systems, and IoT devices where sensitive data needs to be protected.

== Problems Solved ==
This technology addresses the issue of securing sensitive data and code during processing, preventing unauthorized access and tampering.

== Benefits ==
The benefits of this technology include enhanced security for sensitive data, protection against cyber threats, and assurance of code integrity within the trusted execution environment.

== Potential Commercial Applications ==
A potential commercial application of this technology could be in the financial industry for secure transactions and data processing.

== Possible Prior Art ==
One possible prior art could be secure enclaves in computing systems that provide a trusted execution environment for sensitive data processing.

=== Unanswered Questions ===

=== How does the security module ensure the integrity of the sensitive code within the trusted execution environment? ===
The security module uses cryptographic techniques to verify the authenticity and integrity of the sensitive code before executing it in the trusted environment.

=== What measures are in place to prevent unauthorized access to the sensitive data during processing? ===
The encryption units ensure that data transferred between the trusted execution environment and the trusted computing entity is encrypted, preventing unauthorized access.


==Original Abstract Submitted==

A peripheral device, for use with a host, comprises one or more compute elements a security module and at least one encryption unit. The security module is configured to form a trusted execution environment on the peripheral device for processing sensitive data using sensitive code. The sensitive data and sensitive code are provided by a trusted computing entity which is in communication with the host computing device. The at least one encryption unit is configured to encrypt and decrypt data transferred between the trusted execution environment and the trusted computing entity via the host computing device. The security module is configured to compute and send an attestation to the trusted computing entity to attest that the sensitive code is in the trusted execution environment.



[[Category:G06F21/85]]
[[Category:G06F21/60]]
[[Category:H04L9/30]]
[[Category:H04L9/32]]