Scalable secure execution

Patent metadata

Field	Value
Publication number	US-9536100-B2
Application number	US-201213977416-A
Country	US
Kind code	B2
Filing date	Apr 16, 2012
Priority date	Apr 16, 2012
Publication date	Jan 3, 2017
Grant date	Jan 3, 2017

Abstract

In one embodiment a controller comprises logic configured to establish a pairing with a remote processor in a second electronic device, create a first secure communication channel with the remote processor, transmit a first portion of a processing task to the remote processor via the first secure channel, receive, via a second communication channel, an input from the first portion of the processing task, and complete at least a second portion of the processing task using the input. Other embodiments may be described.

First claim

What is claimed is:

1. A controller for a first electronic device comprising:
processing circuitry defining logic configured to:
establish a pairing with a remote processor in a second electronic device;
create a first secure communication channel with the remote processor, wherein the first secure communication channel is secured at least in part by a shared secret developed between the controller and the remote device;
generate a confirmation code;
transmit the confirmation code and a confirmation page to the remote processor via the first secure channel;
receive, via a second communication channel, a bitmap for a login screen, wherein the bitmap is encrypted using the shared secret and comprises one or more coordinates for user input;
present the bitmap on a display module coupled to the controller;
receive a login input from the display module at a location corresponding to the one or more coordinates on the bitmap; and
initiate a communication session between the controller and a remote device when the login input received from the display module indicates that the login is authorized.

2. The controller of claim 1 , wherein the logic comprises a near field wireless communication interface to communicate with the remote processor.

3. The controller of claim 1 , further comprising a local processor coupled to the controller, and wherein the local processor comprises logic configured to:
receive, from the remote processor, an output of the first portion of the processing task; and
present the output on a display coupled to the local controller.

4. The controller of claim 3 , wherein the local processor further comprises logic configured to:
receive an input from an input device; and
pass the input to the controller.

5. The controller of claim 1 , further comprising logic configured to validate the input.

6. An electronic device, comprising:
a processor which is to implement an untrusted computing environment; and
a controller, comprising:
processing circuitry defining logic configured to:
establish a pairing with a remote processor in a second electronic device;
create a first secure communication channel with the remote processor, wherein the first secure communication channel is secured at least in part by a shared secret developed between the controller and the remote device;
generate a confirmation code;
transmit the confirmation code and a confirmation page to the remote processor via the first secure channel;
receive, via a second communication channel, a bitmap for a login screen, wherein the bitmap is encrypted using the shared secret and comprises one or more coordinates for user input;
present the bitmap on a display module coupled to the controller;
receive a login input from the display module at a location corresponding to the one or more coordinates on the bitmap; and
initiate a communication session between the controller and a remote device when the login input received from the display module indicates that the login is authorized.

7. The electronic device of claim 6 , wherein the logic comprises a near field wireless communication interface to communicate with the remote processor.

8. The electronic device of claim 6 , further comprising a local processor coupled to the controller, and wherein the local processor comprises logic configured to: receive, from the remote processor, an output of the first portion of the processing task; and present the output on a display coupled to the local controller.

9. The electronic device of claim 8 , wherein the local processor further comprises logic configured to:
receive an input from an input device; and
pass the input to the controller.

10. The electronic device of claim 6 , further comprising logic configured to validate the input.

11. A method, comprising:
establishing a pairing between a controller in a first electronic device and a remote processor in a second electronic device;
creating a first communication channel between the controller and the remote processor, wherein the first secure communication channel is secured at least in part by a shared secret developed between the controller and the remote device;
generating a confirmation code;
transmitting the confirmation code and a confirmation page to the remote processor via the first secure channel;
receiving, via a second communication channel, a bitmap for a login screen, wherein the bitmap is encrypted using the shared secret and comprises one or more coordinates for user input; presenting the bitmap on a display module coupled to the controller;
receiving a login input from the display module at a location corresponding to the one or more coordinates on the bitmap; and
initiating a communication session between the controller and a remote device when the login input received from the display module indicates that the login is authorized.

12. The method of claim 11 , further comprising adding a confirmation code to the first portion of the processing task.

13. The method of claim 11 , further comprising: receiving, in the local processor, an input from an input device; and passing the input from the local processor to the controller.

14. The method of claim 11 , further comprising validating the input.

15. A computer program product comprising logic instructions stored on non-transitory computer readable medium which, when executed by a controller, configure the controller to:
establish a pairing with a remote processor in a second electronic device;
create a first secure communication channel with the remote processor, wherein the first secure communication channel is secured at least in part by a shared secret developed between the controller and the remote device;
generate a confirmation code;
transmit the confirmation code and a confirmation page to the remote processor via the first secure channel;
receive, via a second communication channel, a bitmap for a login screen, wherein the bitmap is encrypted using the shared secret and comprises one or more coordinates for user input;
present the bitmap on a display module coupled to the controller;
receive a login input from the display module at a location corresponding to the one or more coordinates on the bitmap; and
initiate a communication session between the controller and a remote device when the login input received from the display module indicates that the login is authorized.

16. The computer program product of claim 15 , wherein the logic comprises a near field wireless communication interface to communicate with the remote processor.

Assignees

• Phegade Vinay
• Bakshi Sanjay
• Intel Corp

Inventors

• Phegade Vinay
• Bakshi Sanjay

Classifications

• G06F9/54

  Interprogram communication · CPC title

• G06F21/606 Primary

  by securing the transmission between two devices or processes · CPC title

• H04W12/06

  Authentication · CPC title

• H04W12/08

  Access security · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title