US 12,289,301 B2
Protecting data transfer between a secure application and networked devices
Luis Kida, Beaverton, OR (US); and Reshma Lal, Portland, OR (US)
Assigned to INTEL CORPORATION, Santa Clara, CA (US)
Filed by Intel Corporation, Santa Clara, CA (US)
Filed on Jan. 18, 2024, as Appl. No. 18/416,569.
Application 18/416,569 is a continuation of application No. 18/453,970, filed on Aug. 22, 2023, granted, now 12,149,513.
Application 18/453,970 is a continuation of application No. 17/549,014, filed on Dec. 13, 2021, granted, now 11,784,990, issued on Oct. 10, 2023.
Prior Publication US 2024/0236058 A1, Jul. 11, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); G06F 9/50 (2006.01); G06F 13/28 (2006.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/0485 (2013.01) [G06F 9/5044 (2013.01); G06F 9/5083 (2013.01); G06F 13/28 (2013.01); H04L 9/0825 (2013.01); H04L 9/085 (2013.01); H04L 9/3242 (2013.01); H04L 63/0435 (2013.01); H04L 63/061 (2013.01); H04L 63/123 (2013.01)] 20 Claims
OG exemplary drawing
 
1. An apparatus comprising:
processor hardware circuitry to provide a trusted execution environment (TEE) to run an application, wherein the processor hardware circuitry is to:
generate, via the application in the TEE, encrypted data, wherein the encrypted data comprises a payload;
copy, via the application in the TEE, the encrypted data to a local buffer on a host platform hosting the processor hardware circuitry and the local buffer;
interface, using the application in the TEE, with a source network interface controller (NIC) communicably coupled to the processor hardware circuitry on the host platform to initiate a copy over a network of the encrypted data from the local buffer to a remote buffer of a remote platform; and
communicate, after completing the copy over the network of the encrypted data, at least one message with the remote platform to indicate that the encrypted data is available and to enable the remote platform to verify integrity of the encrypted data, wherein the at least one message comprises an authentication tag calculated over the payload using a shared secret key.