公开(公告)号：US20180060609A1

公开(公告)日：2018-03-01

申请号：US15790542

申请日：2017-10-23

Applicant: Google LLC

Inventor： Benjamin David Poiesz ,  Andrew Abramson ,  Neel Rao ,  Shawn Willden ,  Andres Guillermo Morales ,  James Brooks Miller

IPC: G06F21/72 ,  G06F21/62 ,  H04L9/32 ,  G06F21/53 ,  H04L9/08 ,  G06F21/74

CPC classification number: G06F21/72 ,  G06F21/53 ,  G06F21/629 ,  G06F21/74 ,  G06F2221/034 ,  G06F2221/2141 ,  H04L9/088 ,  H04L9/3247

Abstract: A computing device executes one or more trusted execution environment (TEE) processes in a TEE of a processor. The one or more TEE processes cryptographically protect a secret and a policy. The policy specifies a plurality of conditions on usage of the secret. A particular non-TEE process generates a request whose fulfillment involves an action requiring use of the secret. Responsive to the request, one or more non-TEE processes determine whether a first subset of the plurality of conditions is satisfied. Responsive to the first subset of the plurality of conditions being satisfied, the one or more TEE processes determine that a second, different subset of the plurality of conditions is satisfied. Responsive to determining the second subset of the plurality of conditions is satisfied, the one or more TEE processes use the secret to perform the action.