Container-to-Memory Authentication Using Process-Derived Keys

The patent extracts the key pair generation and authentication functionality from the hypervisor and relocates it to the secure enclave. The secure enclave now independently generates its own key pairs and manages authentication with non-volatile memory, removing the burden of key management from the hypervisor while maintaining centralized security control within the enclave boundary.

The system segments authentication responsibilities by creating distinct security domains: the secure enclave handles key generation and authentication logic, the non-volatile memory stores encrypted data, and the hypervisor focuses on resource management. This segmentation allows each component to specialize in its function without unnecessary complexity.

Each secure enclave instance now autonomously generates its own key pairs and manages its own authentication credentials without requiring hypervisor intervention for key management. The enclave self-adapts to different authentication requirements by generating unique cryptographic identities, eliminating the need for hypervisor updates to accommodate different authentication rules.

The system changes the parameter of authentication management from centralized hypervisor control to distributed enclave autonomy. Each enclave can independently adjust its cryptographic parameters and authentication methods without requiring system-wide updates, enabling flexible adaptation to different security requirements.