US 11,755,721 B2
Trusted workload execution
Angel Nunez Mencias, Stuttgart (DE); Nicolas Maeding, Holzgerlingen (DE); Peter Morjan, Boeblingen (DE); and Dirk Herrendoerfer, Sindelfingen (DE)
Assigned to International Business Machines Corporation, Armonk, NY (US)
Filed by International Business Machines Corporation, Armonk, NY (US)
Filed on Oct. 25, 2021, as Appl. No. 17/509,164.
Prior Publication US 2023/0128099 A1, Apr. 27, 2023
Int. Cl. G06F 21/00 (2013.01); G06F 21/53 (2013.01)
CPC G06F 21/53 (2013.01) [G06F 2221/033 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer implemented method comprising:
receiving encrypted secrets, the received encrypted secrets enabling access to resources by an application; and
executing a bootloader in a trusted execution environment of a host computer system, the executing comprising:
decrypting the received encrypted secrets using decryption keys of the bootloader;
storing the decrypted secrets in a storage accessible by the application;
creating a proof record indicating the application, the decrypted secrets and the trusted execution environment;
storing the proof record in the storage;
deleting the decryption keys;
executing the application in the trusted execution environment using the decrypted secrets; and
providing the proof record by the application for proving authenticity.