Source: https://patents.google.com/patent/US10031759B2/en
Timestamp: 2019-04-24 16:05:55+00:00

Document:
This application is a Continuation of U.S. patent application Ser. No. 14/222,939 entitled “SYSTEM AND METHOD FOR EXECUTION OF A SECURED ENVIRONMENT INITIALIZATION INSTRUCTION” filed on Mar. 24, 2014. Ser. No. 14/222,939 is a Continuation of U.S. patent application Ser. No. 13/835,997 filed on Mar. 15, 2013 entitled “SYSTEM AND METHOD FOR EXECUTION OF A SECURED ENVIRONMENT INITIALIZATION INSTRUCTION”. Ser. No. 13/835,997 is a Continuation of U.S. patent application Ser. No. 13/444,450, entitled “SYSTEM AND METHOD FOR EXECUTION OF A SECURED ENVIRONMENT INITIALIZATION INSTRUCTION” filed on Apr. 11, 2012, which is a continuation of U.S. patent application Ser. No. 12/455,844, filed on Jun. 8, 2009, entitled “SYSTEM AND METHOD FOR EXECUTION OF A SECURED ENVIRONMENT INITIALIZATION INSTRUCTION” which issued on Jun. 9, 2009, as U.S. Pat. No. 8,185,734, which is a continuation of U.S. patent application Ser. No. 11/096,618, filed on Mar. 31, 2005, entitled “SYSTEM AND METHOD FOR EXECUTION OF A SECURED ENVIRONMENT INITIALIZATION INSTRUCTION” which issued on Jun. 9, 2009, as U.S. Pat. No. 7,546,457, is a continuation of U.S. patent application Ser. No. 10/112,169, filed on Mar. 29, 2002, entitled “SYSTEM AND METHOD FOR EXECUTION OF A SECURED ENVIRONMENT INITIALIZATION INSTRUCTION” which issued on Jun. 27, 2006, as U.S. Pat. No. 7,069,442.
Chipset 240 may support standard I/O operations on I/O busses such as peripheral component interconnect (PCI), accelerated graphics port (AGP), universal serial bus (USB), low pin count (LPC) bus, or any other kind of I/O bus (not shown). An interface 290 may be used to connect chipset 240 with token 276, containing one or more platform configuration registers (PCR) 278, 279. In one embodiment, interface 290 may be the LPC bus (Low Pin Count (LPC) Interface Specification, Intel Corporation, rev. 1.0, 29 December 1997) modified with the addition of certain security enhancements. One example of such a security enhancement would be a locality confirming message, utilizing a previously-reserved message header and address information targeting a platform configuration register (PCR) 278 within token 276. In one embodiment, token 276 may contain special security features, and in one embodiment may include the trusted platform module (TPM) 281 disclosed in the Trusted Computing Platform Alliance (TCPA) Main Specification, version 1.1a, 1 December 2001, issued by the TCPA (available at the time of filing of the present application at www.trustedpc.com).
Meanwhile the ILP, in block 724, moves the public key of the chip set and the memory-resident copy of SINIT-AC into its own secure memory for secure execution. The ILP, in block 726, uses the key to validate the secure-memory-resident copy of SINIT-AC, and then executes it. The execution of SINIT-AC may perform tests of the system configuration and the SVMM copy, then registers the SVMM identity, and finally begins the execution of SVMM in block 728. As part of actions performed in block 728, the ILP SINIT code may configure device-access page table 248 and device-access logic 247 of memory and chipset to protect those memory pages used by the memory-resident copy of SVMM 282 from interference by non-processor devices, as shown in block 754.
the execution logic to validate a virtual machine monitor (VMM) and copy the VMM to a trusted system memory area within the secure execution environment.
2. The processor as in claim 1 wherein validation of the VMM by the execution unit is to include cryptographic authentication of the VMM.
4. The processor as in claim 3 wherein validation of the VMM by the execution unit is to include cryptographic authentication of the VMM.
"Information Display Technique for a Terminate Stay Resident Program," IBM Technical Disclosure Bulletin, TDB-ACC-No. NA9112156, vol. 34, Issue No. 7A, pp. 156-158, (Dec. 1, 1991).
Berg, C., "How Do I Create a Signed Applet?," Dr. Dobb's Journal, M&T Publ., Redwood City, CA, US, vol. 22, No. 8, Aug. 1997, pp. 109-111, 122.
Goldberg, "Survey of virtual machine research," IEEE Computer Magazine, vol. 27, No. 6, Jun. 1974, pp. 34-45.
IBM Corporation, "IBM ThinkPad 130 Notebooks", IBM Product Specification, Jul. 2, 2002, pp. 1-6.
Intel Corporation, "Inte1386 Dx Microprocessor 32-Bit CHMOS Microprocessor With Integrated Memory Management," Dec. 31, 1995, pp. 5-56.
Intel Corporation, "Intel 82802AB/82802AC Firmware Flub (FWH)", Intel Product Datasheet, Document No. 290658-004, Nov. 2000, pp. 1-6, 17-28.
Intel Corporation, "Intel IA-64 Architecture Software Developer's Manual-vol. 2: IA-64 System Architecture", Intel Product Manual, Order No. 245318-001, Jan. 2000, pp. i, ii, 5.1-5.3, 11.1-11.8, 1123-1126.
Intel Corporation, "Intel IA-64 Architecture Software Developer's Manual—vol. 2: IA-64 System Architecture", Intel Product Manual, Order No. 245318-001, Jan. 2000, pp. i, ii, 5.1-5.3, 11.1-11.8, 1123-1126.
IPEA/US, International Preliminary Examination Report on International Application No. PCT/US03/08762, 4 pages, dated Jan. 19, 2005.
Lawton, "Running Multiple Operating Systems Concurrently on an IA32 PC Using Virtualization Techniques", Nov. 29, 1999, pp. 1-31, available at: http://www.floobydust.com/virtualization/lawton_1999.txt.
Notice of Allowance from U.S. Appl. No. 15/402,661, dated Apr. 18, 2018, 69 pages.
Office Action and Search Report from foreign counterpart Chinese Patent Application No. 201510995651.3, dated Jan. 2, 2018, 11 pages.
Office Action received for Chinese Patent Application No. 03811454.2, mailed on Jul. 19, 2010, 5 pages of English Translation.
Office Action received for Chinese Patent Application No. 03811454.2, mailed on Nov. 20, 2009, 11 pages of Chinese Office Action including 6 pages of English Translation.
Office Action received for Chinese Patent Application No. 201010161984.3, dated Apr. 8, 2011, 8 pages of Chinese Office Action including 5 pages of English Translation.
Office Action received for Chinese patent application No. 201010161984.3, dated Dec. 16, 2011, 13 pages of English translation and 7 pages of Chinese Office action.
Office Action received for Chinese Patent Application No. 201210056872.0, dated Aug. 12, 2015, 6 pages of Office Action and 7 pages of English Translation.
Office Action received for Chinese Patent Application No. 201210159183.2, dated May 13, 2015, 4 pages of Office Action including 2 pages of English translation.
Office Action received for Chinese Patent Application No. 201210159237.5, dated Jun. 10, 2015, 5 pages of Office Action.
Office Action received for Chinese Patent Application No. 201210162765.6, dated Apr. 29, 2015, 3 pages of Office Action including 4 pages of English translation.
Office Action received for Japanese Patent Application No. 2011-155064, dated Apr. 30, 2013, 7 pages of Japanese Office Action and 7 pages of English translation.
Office Action received for Japanese Patent Application No. 2011-155064, dated Nov. 20, 2012, 6 pages of Japanese Office Action, 13 pages of Office Action including 7 pages of English translation.
Office Action received for Japanese Patent Application No. 2011-155064, dated Sep. 10, 2013, 5 pages of Japanese Office Action and 6 pages of English translation.
Office Action received for Japanese Patent Application No. 2011-155064, dated Sep. 2, 2014, 9 pages of Japanese Office Action and 6 pages of English translation.
Office Action received for Japanese Patent Application No. 2012-092142, dated Jul. 16, 2013, 5 pages of Japanese Office Action only.
Office Action received for Japanese Patent Application No. 2013-154700, dated Jul. 15, 2014, 4 pages of Japanese Office Action and 4 pages of English translation.
Office Action received for Japanese Patent Application No. 2014-003431, dated Apr. 14, 2015, 2 pages of Office Action including 2 pages of English translation.
Office Action received for Japanese Patent Application No. 2014-003431, dated Oct. 28, 2014, 10 pages of Japanese Office Action and 6 pages of English translation.
Office Action received for Japanese Patent Divisional Application No. 2010-179219, dated Jan. 29, 2013, 3 pages of English Translation and 3 pages of Japanese Office Action.
Office Action received for Japanese Patent Divisional Application No. 2010-179219, dated May 28, 2013, 2 pages of English Translation and 3 pages of Japanese Office Action.
Office Action Received for Taiwanese Patent Application No. 098118881, dated Jul. 15, 2013, 5 pages of Taiwanese Office Action and 4 pages of English Translation.
Office Action Received for Taiwanese Patent Application No. 103100721, dated May 29, 2015, 3 Pages of Taiwanese Office Action.
Office Action received for U.S. Appl. No. 12/413,655, dated Apr. 13, 2010, 15 pages of Office Action.
Office Action received for U.S. Appl. No. 12/413,655, dated Aug. 13, 2010, 12 Pages of Office Action.
Office Action received for U.S. Appl. No. 12/483,519, dated Jul. 20, 2010, 17 pages of Office Action.
Office Action Received for U.S. Appl. No. 14/277,939, dated Oct. 5, 2015, 5 pages.
Office Action received for United Kingdom Patent Application No. GB0422078.6, dated Oct. 6, 2005, 3 pages.
Office Action received in Chinese Patent Application No. 201010161984.3, dated Jul. 11, 2012, 9 pages of Office Action, including 6 pages of English translation.
Office Action received in Chinese Patent Application No. 201010161984.3, dated Nov. 22, 2012,7 pages of Office Action including 4 pages of English translation.
Office Action received in Chinese Patent Application No. 201110030876.7, dated Jul. 17, 2012, 9 pages of Office Action, including 6 pages of English translation.
Office Action received in Chinese Patent Application No. 201110030876.7, dated Nov. 29, 2012, 9 pages of Office Action including 5 pages of English translation.
Office Action received in Chinese Patent Application No. 201210056672.0, dated May 30, 2014, 3 pages of Office Action only.
Office Action received in Chinese Patent Application No. 201210056872.0, dated Jan. 19, 2015, 6 pages of Office Action including 7 pages of English translation.
Office Action received in Chinese Patent Application No. 201210159183.2, dated Nov. 9, 2015, 5 pages of Office Action including 6 pages of English translation.
Office Action received in Chinese Patent Application No. 201210159183.2, dated Sep. 16, 2014, 7 pages of Office Action including 13 pages of English translation.
Office Action received in Chinese Patent Application No. 201210159237.5, dated Oct. 31, 2014, 7 pages of Office Action including 7 pages of English translation.
Office Action received in Chinese Patent Application No. 201210162765.6, dated Oct. 31, 2014, 8 pages of Office Action including 12 pages of English translation.
Response to Office Action filed for U.S. Appl. No. 12/413,655, filed Jul. 9, 2010, 8 pages of Response to Office Action.
Response to Office Action, for U.S. Appl. No. 12/413,655, filed Oct. 11, 2010, 6 Pages of Office Action.
Sugerman et al., "Virtualization of I/O device in host-cooperative VMM", VMware Workstation, UNIX Magazine, ASCII, Jan. 1, 2002, pp. 158-175.
Sum, "System/370 Extended Architecture: Facilities for Virtual Machines", IBM Journal of Research and Development, vol. 27, No. 6, Nov. 1983, pp. 530-544.

References: Application No. 201510995651
 Application No. 03811454
 Application No. 03811454
 Application No. 201010161984
 application No. 201010161984
 Application No. 201210056872
 Application No. 201210159183
 Application No. 201210159237
 Application No. 201210162765
 Application No. 2011
 Application No. 2011
 Application No. 2011
 Application No. 2011
 Application No. 2012
 Application No. 2013
 Application No. 2014
 Application No. 2014
 Application No. 2010
 Application No. 2010
 Application No. 098118881
 Application No. 103100721
 Application No. 201010161984
 Application No. 201010161984
 Application No. 201110030876
 Application No. 201110030876
 Application No. 201210056672
 Application No. 201210056872
 Application No. 201210159183
 Application No. 201210159183
 Application No. 201210159237
 Application No. 201210162765