US 12,033,005 B2
Disaggregated computing for distributed confidential computing environment
Reshma Lal, Portland, OR (US); Pradeep Pappachan, Tualatin, OR (US); Luis Kida, Beaverton, OR (US); Soham Jayesh Desai, Hillsboro, OR (US); Sujoy Sen, Beaverton, OR (US); Selvakumar Panneer, Portland, OR (US); and Robert Sharp, Austin, TX (US)
Assigned to Intel Corporation, Santa Clara, CA (US)
Filed by Intel Corporation, Santa Clara, CA (US)
Filed on Nov. 22, 2021, as Appl. No. 17/532,562.
Application 17/532,562 is a continuation of application No. 17/133,066, filed on Dec. 23, 2020.
Claims priority of provisional application 63/083,565, filed on Sep. 25, 2020.
Prior Publication US 2022/0100583 A1, Mar. 31, 2022
Int. Cl. G06F 9/50 (2006.01); G06F 9/38 (2018.01); G06T 1/20 (2006.01); G06T 1/60 (2006.01)
CPC G06F 9/5083 (2013.01) [G06F 9/3814 (2013.01); G06F 9/5027 (2013.01); G06T 1/20 (2013.01); G06T 1/60 (2013.01)] 20 Claims
OG exemplary drawing
 
1. An apparatus comprising:
a programmable integrated circuit (IC) comprising secure device manager (SDM) hardware circuitry to:
receive, from a computing device of a tenant, a tenant bitstream and a tenant use policy for utilization of the programmable IC via the tenant bitstream, wherein the tenant use policy is cryptographically bound to the tenant bitstream by a cloud service provider (CSP) authorizing entity and signed with a signature of the CSP authorizing entity;
in response to successfully verifying the signature of the CSP authorizing entity, extract the tenant use policy to provide to a policy manager of the programmable IC for verification;
in response to the policy manager verifying the tenant bitstream based on the tenant use policy, configure a partial reconfiguration (PR) region of the programmable IC using the tenant bitstream;
associate a slot identifier (ID) of the PR region with the tenant use policy; and
store the tenant use policy and the slot ID as a policy-slot ID pair in the programmable IC to enable configuration of internal states of the programmable IC and enforcement of the tenant use policy on the PR region of the tenant.