Trust Domain Extensions Memory Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computing systems face challenges in protecting data from replay attacks and unauthorized access, particularly in cloud and server environments where multiple customer workloads are supported simultaneously, as existing cryptographic mechanisms are not sufficient to prevent confidentiality and integrity breaches.
Innovation Solution
The implementation of Trust Domain Extensions (TDX) and Multi-Key Total Memory Encryption (MK-TME) technology, which uses memory ownership bits (MOBs) to tag cache lines and enforce secure access control, ensuring that only authorized entities can access encrypted data by checking key IDs and returning poison bits for unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If disk encryption and memory encryption are used to protect data, then data confidentiality is improved, but the system becomes vulnerable to replay attacks and unauthorized access through memory scanning
Solution Approach 1:
The patent segments memory encryption into multiple independent keys (MK-TME), where each customer workload has its own encryption key. This segmentation prevents attackers from accessing other customers' data even if they compromise one key, and enables fine-grained access control through ownership bits associated with each memory page.
Solution Approach 2:
The patent introduces ownership bits as an intermediary mechanism between the encryption system and access control. These bits are stored in hardware (MSRs or memory metadata) and act as a mediator that verifies whether a accessing entity is authorized to access specific encrypted memory pages, preventing replay attacks without affecting encryption performance.
2Productivity
If multiple customer workloads are supported simultaneously on the same server, then resource utilization and productivity are improved, but security requirements become more complex and difficult to enforce
Solution Approach 1:
The patent creates a universal security framework that handles multiple customer workloads through a common architecture. The ownership bit mechanism and MK-TME work together to provide a unified approach to access control that works across all customers and workloads, simplifying security enforcement despite the complexity of supporting multiple tenants.
Solution Approach 2:
The system enables self-service security where each customer workload automatically receives appropriate encryption and access control protection without requiring manual configuration. The hardware automatically manages key assignment and ownership bit verification, reducing the operational complexity of enforcing security across multiple customers.
3Reliability
If encryption keys are stored in memory to enable disk encryption, then data protection capability is improved, but attackers can retrieve keys through memory scanning techniques
Solution Approach 1:
The patent applies local quality by associating specific encryption keys with specific memory pages through ownership bits. Instead of using a single global encryption key, each memory page has its own access control attributes, allowing the system to protect sensitive key storage locations while permitting access to other areas, thereby preventing memory scanning attacks from compromising the entire system.
Data Source
AI summary
Detailed herein are embodiments which allow for integrity protected access control to provide defense against deterministic software attacks. Software attacks such as rowhammer attacks which target the TD bit itself are defended against using cryptographic integrity which the data itself is protected by the TD-bit alone. As such, software is reduced to performing only non-deterministic attacks (e.g., random corruption), but all the deterministic attacks are defended against. Additionally, integrity-protected access control bits are protected against simple hardware attacks where the adversary with physical access to the machine can flip TD bits to get ciphertext access in software which can break confidentiality.