Secure Enclave Measurement via Processor Instructions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing information processing systems face challenges in securely measuring and verifying the integrity of secure enclaves, which are critical for protecting confidential information from unauthorized access and tampering.

Innovation Solution

The implementation of specific processor instructions (ECREATE, EADD, EEXTEND, and EINIT) and hardware components (such as ECREATE hardware, EADD hardware, EEXTEND hardware, and EINIT hardware) within a processor architecture allows for the creation, measurement, and initialization of secure enclaves, using cryptographic hashes to ensure the identity and integrity of enclave content.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If secure enclaves are established to protect confidential information, then security and integrity of data are improved, but device complexity and difficulty of measuring/verifying enclave integrity increase

Engineering Contradiction:
Improveintegrity of secure enclaveVSAvoidcomplexity of measuring enclave
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a measurement register as an intermediary component that automatically captures and stores cryptographic measurements of enclave content. This measurement register acts as a mediator between the enclave execution environment and the verification system, eliminating the need for complex external measurement mechanisms while providing reliable integrity verification capability.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The secure enclave measurement system performs self-measurement through automated cryptographic hashing of enclave content that is stored in the measurement register. The system serves itself by automatically generating and maintaining integrity measurements without requiring external intervention, thereby reducing device complexity while maintaining high reliability.

Inventive Principle:
Principle #25Self-service

2Reliability

If cryptographic measurements are implemented to verify enclave identity, then security verification capability is improved, but loss of time for measurement and verification processes increases

Engineering Contradiction:
Improveverification of enclave identityVSAvoidtime for measurement
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The measurement register is initialized with a baseline measurement value before enclave execution begins. This preliminary setup allows the system to perform incremental measurements during enclave operations rather than requiring complete re-measurement, significantly reducing the time loss for verification while maintaining cryptographic security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The measurement register continuously updates enclave measurements in real-time during execution, maintaining an ongoing record of enclave integrity. This continuous measurement approach eliminates the need for discrete, time-consuming verification interruptions, allowing security verification to proceed without significant time loss while maintaining high reliability.

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentEP3025266B1Measuring a secure enclave
Publication Date: 2019.09.11 INTEL CORP
  • EP3025266B1 patent drawingFigure 1
  • EP3025266B1 patent drawingFigure 2
  • EP3025266B1 patent drawingFigure 3

AI summary

Embodiments of an invention for measuring a secure enclave are disclosed. In one embodiment, a processor includes an instruction unit and an execution unit. The instruction unit is to receive a first, a second, and a third instruction. The execution unit is to execute the first, the second, and the third instruction. Execution of the first instruction includes initializing a measurement field in a control structure of a secure enclave with an initial value. Execution of the second instruction includes adding a region to the secure enclave. Execution of the third instruction includes measuring a subregion of the region.