Patent ID: 9667628
Date: 2017-05-30
CPC Classifications: G06F,H04L

Claim:
1. At least one device, comprising: communication circuitry to interact with at least a client device; and secure workspace configurator circuitry to: receive a secure workspace data structure from the client device; wherein the secure workspace is a secure enclave and wherein the secure workspace data structure includes enclave hash information concerning the secure enclave, the enclave hash information being generated by a signor of the secure enclave; generate an execution container, wherein the execution container is to initialize the secure workspace based on the secure workspace data structure, initialization of the secure workspace including measuring a hash value of a public key in the secure workspace data structure; and cause a secure workspace including at least one executable program to be included within the execution container, wherein the secure workspace stores at least a portion of the secure workspace data structure received from the client device, wherein the secure workspace data structure comprises data pertaining to the secure workspace and the public key, wherein the secure workspace further comprises ownership determination circuitry to: receive a signed message including at least a request to take ownership of the secure workspace and the public key from the client device via the communication circuitry; and determine whether the client device is authorized to take ownership of the secure workspace based at least on the signed message and the secure workspace data structure, wherein the ownership determination circuitry to determine whether the client device is authorized to take ownership of the secure workspace comprises the ownership determination circuitry being to further: verify the signature of the signed message utilizing the public key received with the signed message; determine a hash value for the public key received with the signed message by measuring the public key; verify ownership of the secure workspace by comparing the hash of the public key received with the signed message to the hash of the public key determined when the secure workspace was initialized; and grant ownership of the secure workspace to the client device if the hash of the public key received with the signed message matches the hash of the public key determined when the secure workspace was initialized.