Granted Patent B2

US 12,254,092 · App. 17/832,273 · Granted Mar 18, 2025

Inventors: Martin Schmatz (Rueschlikon, CH); Navaneeth Rameshan (Zurich, CH); Patricia M. Sagmeister (Adliswil, CH)

Assignee: International Business Machines Corporation

G06F21/57G06F21/64H04L9/0825

Abstract

Claims (61)

1. A computer-implemented method, comprising:

loading Application Programming Interface (API) code of a logic loader on a trusted execution environment (TEE);

performing an attestation of the logic loader API code, wherein the attestation is performed within the TEE;

receiving a request for the logic loader to load service logic code to the TEE;

in response to a determination that the logic loader API code passes attestation, performing an integrity check of the service logic code associated with the request; and

in response to the service logic code associated with the request passing the integrity check, allowing the logic loader to load the service logic code associated with the request to the TEE.

2. The computer-implemented method of claim 1 , comprising:

causing information to be provided to the logic loader, the information enabling performance of the integrity check of the service logic code.

3. The computer-implemented method of claim 2 , wherein the service logic code associated with the request is encrypted, wherein the information enables decryption of the service logic code in order for the integrity check of the service logic code to be performed, wherein the logic loader API code is configured to, when executed, cause loading of the service logic code.

4. The computer-implemented method of claim 2 , wherein the information is selected from the group consisting of: a fingerprint, a public encryption key, authenticated encryption information, and a private encryption key.

5. The computer-implemented method of claim 1 , comprising: allowing the service logic code associated with the request to be executed in response to the request being loaded to the TEE, wherein execution of the service logic code includes accessing information stored on a cloud service; and unloading the service logic code subsequent to the execution.

6. The computer-implemented method of claim 1 , comprising:

in response to the service logic code associated with the request not passing the integrity check, causing the logic loader to not load the service logic code associated with the request to the TEE; and

outputting a warning about the request,

wherein the warning specifies to execute a predetermined security protocol on the TEE for ensuring that the TEE has not been compromised by a fraudulent actor.

7. The computer-implemented method of claim 1 , comprising:

receiving an update for the service logic code associated with the request subsequent to the integrity check being performed;

updating the service logic code associated with the request; and

performing a subsequent integrity check on the updated service logic code prior to the updated service logic code being loaded to the TEE.

8. The computer-implemented method of claim 1 , comprising:

performing remote attestation for determining whether the request is received from a trustworthy service administrator device;

in response to a determination that the request is received from the trustworthy service administrator device, allowing performance of the integrity check of the service logic code associated with the request; and

in response to a determination that the request is not received from the trustworthy service administrator device, not allowing performance of the integrity check of the service logic code associated with the request.

9. A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions readable and/or executable by a computer to cause the computer to:

load Application Programming Interface (API) code of a logic loader on a trusted execution environment (TEE);

perform, by the computer, an attestation of the logic loader API code, wherein the attestation is performed within the TEE;

receive, by the computer, a request for the logic loader to load service logic code to the TEE;

in response to a determination that the logic loader API code passes attestation, perform, by the computer, an integrity check of the service logic code associated with the request; and

in response to the service logic code associated with the request passing the integrity check, allow, by the computer, the logic loader to load the service logic code associated with the request to the TEE.

10. The computer program product of claim 9 , the program instructions readable and/or executable by the computer to cause the computer to:

cause, by the computer, information to be provided to the logic loader, the information enabling performance of the integrity check of the service logic code.

11. The computer program product of claim 10 , wherein the service logic code associated with the request is encrypted, wherein the information enables decryption of the service logic code in order for the integrity check of the service logic code to be performed, wherein the logic loader API code is configured to, when executed, cause loading of the service logic code.

12. The computer program product of claim 10 , wherein the information is selected from the group consisting of: a fingerprint, a public encryption key, authenticated encryption information, and a private encryption key.

13. The computer program product of claim 9 , the program instructions readable and/or executable by the computer to cause the computer to: allow, by the computer, the service logic code associated with the request to be executed in response to the request being loaded to the TEE, wherein execution of the service logic code includes accessing information stored on a cloud service; and unload, by the computer, the service logic code subsequent to the execution.

14. The computer program product of claim 9 , the program instructions readable and/or executable by the computer to cause the computer to:

in response to the service logic code associated with the request not passing the integrity check, cause, by the computer, the logic loader to not load the service logic code associated with the request to the TEE; and

output, by the computer, a warning about the request,

wherein the warning specifies to execute a predetermined security protocol on the TEE for ensuring that the TEE has not been compromised by a fraudulent actor.

15. The computer program product of claim 9 , the program instructions readable and/or executable by the computer to cause the computer to:

receive, by the computer, an update for the service logic code associated with the request subsequent to the integrity check being performed;

update, by the computer, the service logic code associated with the request; and

perform, by the computer, a subsequent integrity check on the updated service logic code prior to the updated service logic code being loaded to the TEE.

16. The computer program product of claim 9 , the program instructions readable and/or executable by the computer to cause the computer to:

perform, by the computer, remote attestation for determining whether the request is received from a trustworthy service administrator device;

in response to a determination that the request is received from the trustworthy service administrator device, allow, by the computer, performance of the integrity check of the service logic code associated with the request; and

in response to a determination that the request is not received from the trustworthy service administrator device, not allow, by the computer, performance of the integrity check of the service logic code associated with the request.

17. A system, comprising:

a hardware processor; and

logic integrated with the hardware processor, executable by the hardware processor, or integrated with and executable by the hardware processor, the logic being configured to:

load Application Programming Interface (API) code of a logic loader on a trusted execution environment (TEE);

perform an attestation of the logic loader API code, wherein the attestation is performed within the TEE;

receive a request for the logic loader to load service logic code to the TEE;

in response to a determination that the logic loader API code passes attestation, perform an integrity check of the service logic code associated with the request; and

in response to the service logic code associated with the request passing the integrity check, allow the logic loader to load the service logic code associated with the request to the TEE.

18. The system of claim 17 , the logic being configured to:

cause information to be provided to the logic loader, the information enabling performance of the integrity check of the service logic code.

19. The system of claim 17 , the logic being configured to: allow the service logic code associated with the request to be executed in response to the request being loaded to the TEE, wherein execution of the service logic code includes accessing information stored on a cloud service; and unload the service logic code subsequent to the execution.

20. The system of claim 17 , the logic being configured to:

in response to the service logic code associated with the request not passing the integrity check, cause the logic loader to not load the service logic code associated with the request to the TEE; and

output a warning about the request,

wherein the warning specifies to execute a predetermined security protocol on the TEE for ensuring that the TEE has not been compromised by a fraudulent actor.

Assignments (1)

Continuity (1)

References Cited (47)