Patent ID: 11888972
Assignee: RED HAT, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A system comprising:
a memory;
an application trusted execution environment (“TEE”) instance;
an escrow TEE instance different from the application TEE instance; and
a server configured to:
launch the escrow TEE instance provisioned with a secret, wherein the secret is initially accessible from a first location until the escrow TEE instance is provisioned,
and wherein accessibility to the secret in the first location is restricted after provisioning the escrow TEE instance with the secret, and
receive a request to start the application TEE instance, and
wherein the escrow TEE instance is configured to:
validate the application TEE instance, and
upon a successful validation of the application TEE instance, provide the secret from a second location to the application TEE instance, wherein the providing of the secret to the application TEE instance allows the application TEE instance to complete the launch;
upon the receipt of the secret by the application TEE instance, create, by the application TEE instance, a clone TEE instance of the application TEE instance;
provide the secret to the clone TEE instance by the application TEE instance, wherein the clone TEE instance comprises a service to launch additional clone TEE instances, wherein the clone TEE instance is configured to provide the secret to the additional clone TEE instances; and
disable at least one of the escrow TEE, the application TEE instance, or the clone TEE instance based upon a security breach of at least one of the escrow TEE instance, the application TEE instance, or the clone TEE instance.