Patent ID: 9058494
Filing Date: 2015-06-16
Classification: G06F

Abstract:
1. An apparatus to provide secure operation comprising: at least one processor; at least one memory, the at least one memory comprising instructions that when executed by the processor, cause the apparatus to perform, at least, the following: an enclave dynamic linker comprising instructions that when executed by the processor, cause the apparatus to perform, at least, the following: wherein the enclave-loadable non-enclave shared object is a trampoline shared object; wherein, when the shared object dependency corresponds to the non-enclave shared object, the instructions, when executed, cause the apparatus to invoke the trampoline shared object in response to invocation of the shared object dependency; wherein invocation of the trampoline shared object comprises replication of data associated with a function call associated with the trampoline shared object from at least one enclave memory to at least one non-enclave memory; wherein invocation of the trampoline shared object causes transfer of operation from the enclave to a non-enclave-loadable shared object associated with the trampoline shared object; and wherein causation of transfer of operation to the non-enclave-loadable shared object comprises invocation of an enclave proxy, the enclave proxy to send a directive that identifies the non-enclave-loadable shared object to the enclave loader.