Patent ID: 11954198
Assignee: VMWARE LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 12:
13. A computer system comprising:
memory; and
at least one processor configured to:
transmit an enclave command using a universal application programming interface (API) to a virtual secure enclave device running in a virtualized environment in the computer system from a software process running in the computer system, including inserting the enclave command into a command queue in the virtual secure enclave device;
in response to the enclave command received at the virtual secure enclave device, retrieve the enclave command from the virtual secure device, including emulating the command queue in the virtual secure enclave device to retrieve the enclave command in the command queue of the virtual secure enclave device;
parse the retrieved enclave command to extract a description of an enclave operation to be executed from the retrieved enclave command;
request a TEE backend module to interact with a particular hardware TEE mechanism among different hardware TEE mechanisms that is included in the computer system so that the enclave operation for the software process is executed by the particular hardware TEE mechanism, wherein the TEE backend module is configured to interact with each of the different hardware TEE mechanisms using commands specific to each of the different hardware TEE mechanisms; and
translate the retrieved enclave command from the universal API to a particular API selected from a plurality of APIs depending on the particular hardware TEE mechanism in the computer system so that the enclave operation for the software process is executed by the particular hardware TEE mechanism.