	US 12,093,367 B2
	System and method for providing provable end-to-end guarantees on commodity heterogeneous interconnected computing platforms
Amit Vasudevan, Pittsburgh, PA (US)
Assigned to Carnegie Mellon University, Pittsburgh, PA (US)
Filed by Carnegie Mellon University, Pittsburgh, PA (US)
Filed on Mar. 1, 2022, as Appl. No. 17/683,786.
Claims priority of provisional application 63/274,051, filed on Nov. 1, 2021.
Claims priority of provisional application 63/214,345, filed on Jun. 24, 2021.
Claims priority of provisional application 63/183,291, filed on May 3, 2021.
Prior Publication US 2022/0350876 A1, Nov. 3, 2022
Int. Cl. G06F 21/44 (2013.01); G06F 9/48 (2006.01); G06F 11/36 (2006.01); G06F 21/60 (2013.01)

CPC G06F 21/44 (2013.01) [G06F 9/4812 (2013.01); G06F 11/3608 (2013.01); G06F 21/602 (2013.01); G06F 2221/2141 (2013.01)]

32 Claims

1. A method for providing provable end-to-end guarantees in a computing system comprising two or more heterogeneous interconnected computing platforms, the method comprising:

identifying the heterogeneous interconnected computing platforms and associated system objects that contribute to one or more of the provable end-to-end guarantees;

creating a modular provable object or a collection of modular provable objects to protect and control access to the system objects on the identified heterogeneous interconnected computing platforms; and

creating a prime modular provable object or a collection of prime modular provable objects acting as roots-of-trust to protect and report on the system objects on the identified heterogeneous interconnected computing platforms at runtime.