US 12,407,764 B2
Securely exposing an accelerator to privileged system components
Joshua Fender, East York (CA); Utkarsh Y. Kakaiya, Folsom, CA (US); Mohan Nair, Portland, OR (US); Brian Morris, Santa Clara, CA (US); and Pratik Marolia, Hillsboro, OR (US)
Assigned to Intel Corporation, Santa Clara, CA (US)
Filed by INTEL CORPORATION, Santa Clara, CA (US)
Filed on Nov. 30, 2022, as Appl. No. 18/072,368.
Application 18/072,368 is a continuation of application No. 16/912,076, filed on Jun. 25, 2020, abandoned.
Application 16/912,076 is a continuation of application No. 16/024,022, filed on Jun. 29, 2018, granted, now 10,762,244, issued on Sep. 1, 2020.
Prior Publication US 2023/0145856 A1, May 11, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/00 (2013.01); G06F 1/20 (2006.01); G06F 1/3206 (2019.01); G06F 1/324 (2019.01); G06F 11/14 (2006.01); G06F 21/54 (2013.01); G06F 21/74 (2013.01); H04L 67/562 (2022.01); H04L 69/12 (2022.01); G06F 1/3287 (2019.01); G06F 21/76 (2013.01)
CPC H04L 67/562 (2022.05) [G06F 1/206 (2013.01); G06F 1/3206 (2013.01); G06F 1/324 (2013.01); G06F 11/1441 (2013.01); G06F 21/54 (2013.01); G06F 21/74 (2013.01); H04L 69/12 (2013.01); G06F 1/3287 (2013.01); G06F 21/76 (2013.01); G06F 2221/2149 (2013.01)] 25 Claims
OG exemplary drawing
 
1. An apparatus, comprising:
an interface to receive, from a hardware accelerator, an instruction including an indication of a privileged component;
circuitry, the circuitry arranged to:
determine whether the instruction is invalid based on a configuration, the configuration to provide a set of security rules to determine whether the instruction complies with one or more security features of a system;
apply a restriction to the instruction based on a determination that the instruction is invalid;
determine a set of associated system management operations to restore the system to a secure operating state before receipt of the invalid instruction using state information stored in the configuration; and
perform the set of associated system management operations.