Patents by Inventor Nadav Nesher

Nadav Nesher has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 10169574
    Abstract: An embodiment includes a processor coupled to memory to perform operations comprising: creating a first trusted execution environment (TXE), in protected non-privileged user address space of the memory, which makes a first measurement for at least one of first data and first executable code and which encrypts the first measurement with a persistent first hardware based encryption key while the first measurement is within the first TXE; creating a second TXE, in the non-privileged user address space, which makes a second measurement for at least one of second data and second executable code; creating a third TXE in the non-privileged user address space; creating a first secure communication channel between the first and third TXEs and a second secure communication channel between the second and third TXEs; and communicating the first measurement between the first and third TXEs via the first secure communication channel. Other embodiments are described herein.
    Type: Grant
    Filed: February 28, 2018
    Date of Patent: January 1, 2019
    Assignee: Intel Corporation
    Inventors: Nadav Nesher, Alex Berenzon, Baruch Chaikin
  • Publication number: 20180189482
    Abstract: An embodiment includes a processor coupled to memory to perform operations comprising: creating a first trusted execution environment (TXE), in protected non-privileged user address space of the memory, which makes a first measurement for at least one of first data and first executable code and which encrypts the first measurement with a persistent first hardware based encryption key while the first measurement is within the first TXE; creating a second TXE, in the non-privileged user address space, which makes a second measurement for at least one of second data and second executable code; creating a third TXE in the non-privileged user address space; creating a first secure communication channel between the first and third TXEs and a second secure communication channel between the second and third TXEs; and communicating the first measurement between the first and third TXEs via the first secure communication channel. Other embodiments are described herein.
    Type: Application
    Filed: February 28, 2018
    Publication date: July 5, 2018
    Inventors: Nadav Nesher, Alex Berenzon, Baruch Chaikin
  • Patent number: 9940456
    Abstract: An embodiment includes a processor coupled to memory to perform operations comprising: creating a first trusted execution environment (TXE), in protected non-privileged user address space of the memory, which makes a first measurement for at least one of first data and first executable code and which encrypts the first measurement with a persistent first hardware based encryption key while the first measurement is within the first TXE; creating a second TXE, in the non-privileged user address space, which makes a second measurement for at least one of second data and second executable code; creating a third TXE in the non-privileged user address space; creating a first secure communication channel between the first and third TXEs and a second secure communication channel between the second and third TXEs; and communicating the first measurement between the first and third TXEs via the first secure communication channel. Other embodiments are described herein.
    Type: Grant
    Filed: December 16, 2014
    Date of Patent: April 10, 2018
    Assignee: Intel Corporation
    Inventors: Nadav Nesher, Alex Berenzon, Baruch Chaikin
  • Publication number: 20160171248
    Abstract: An embodiment includes a processor coupled to memory to perform operations comprising: creating a first trusted execution environment (TXE), in protected non-privileged user address space of the memory, which makes a first measurement for at least one of first data and first executable code and which encrypts the first measurement with a persistent first hardware based encryption key while the first measurement is within the first TXE; creating a second TXE, in the non-privileged user address space, which makes a second measurement for at least one of second data and second executable code; creating a third TXE in the non-privileged user address space; creating a first secure communication channel between the first and third TXEs and a second secure communication channel between the second and third TXEs; and communicating the first measurement between the first and third TXEs via the first secure communication channel. Other embodiments are described herein.
    Type: Application
    Filed: December 16, 2014
    Publication date: June 16, 2016
    Inventors: Nadav Nesher, Alex Berenzon, Baruch Chaikin
  • Patent number: 7546599
    Abstract: A method, apparatus and system for a virtual machine to issue an instruction to a virtual device, such virtual device being monitored by a management core of a virtual machine monitor. The virtual machine may instruct the virtual device to enter into for example a chat mode, a statistic mode, a file transfer mode or to execute or perform other functions. A management core of a virtual machine monitor may for example collect, channel, route or direct such instructions to a host, one or more other virtual machines or other components in a host network.
    Type: Grant
    Filed: December 20, 2004
    Date of Patent: June 9, 2009
    Assignee: Intel Corporation
    Inventors: Nadav Nesher, Ke Yu
  • Publication number: 20060136934
    Abstract: A method, apparatus and system for a virtual machine to issue an instruction to a virtual device, such virtual device being monitored by a management core of a virtual machine monitor. The virtual machine may instruct the virtual device to enter into for example a chat mode, a statistic mode, a file transfer mode or to execute or perform other functions. A management core of a virtual machine monitor may for example collect, channel, route or direct such instructions to a host, one or more other virtual machines or other components in a host network.
    Type: Application
    Filed: December 20, 2004
    Publication date: June 22, 2006
    Inventors: Nadav Nesher, Ke Yu