Performance of distributed system functions using a trusted execution environment

An apparatus for securely executing a function of a distributed system, the apparatus being a node of a plurality of nodes of the distributed system, the apparatus comprising at least one processor, a communications interface configured for communicating via at least one network, and at least one memory storing computer program code, the apparatus comprising at least one partition defining a trusted execution environment, the at least one memory and the computer program code configured to, with the processor, cause the apparatus to at least:

• responsive to processing a function request identifying a function of the distributed system, access application program code corresponding to the function within the trusted execution environment;
• based on data stored in a secured shared resource maintained by the distributed system, execute the application program code to generate a result within the trusted execution environment;
• generate a new entry comprising the result and encrypt at least a portion of the new entry using an encryption key, within the trusted execution environment;
• and
• post the encrypted new entry to the secure ledger;
• wherein the function request comprises user identifying information and the computer program code is further configured to, with the processor, cause the apparatus to at least:
• validate the user identifying information and user permissions corresponding to a user identified by the user identifying information;
• and
• responsive to validating the user identifying information and user permissions, identify the trigger corresponding to the function;
• wherein, responsive to determining that the user permissions do not permit a user requesting the function to perform the function, performing a modified function that is permitted by the user permissions to generate the result.

A computer program product for securely executing a function of a distributed system, the computer program product comprising at least one non-transitory computer-readable storage medium having computer-executable program code instructions stored therein, the computer-executable program code instructions comprising program code instructions configured to, when executed by a processor of a node computing entity of a plurality of node computing entities of the distributed system, cause the node computing entity to:

• responsive to processing a function request identifying a function of the distributed system, access application program code corresponding to the function within a trusted execution environment, wherein the node computing entity (a) comprises the processor, a memory, and a communication interface and (b) comprises one or more partitions defining the trusted execution environment;
• based on data stored in a secured shared resource maintained by the distributed system, execute the application program code to generate a result within the trusted execution environment;
• generate a new entry comprising the result and encrypt at least a portion of the new entry using an encryption key, within the trusted execution environment;
• and
• post the encrypted new entry to the secure ledger;
• wherein the function request comprises user identifying information and the computer program code is further configured to, with the processor, cause the apparatus to at least:
• validate the user identifying information and user permissions corresponding to a user identified by the user identifying information;
• and
• responsive to validating the user identifying information and user permissions, identify the trigger corresponding to the function;
• wherein, responsive to determining that the user permissions do not permit a user requesting the function to perform the function, performing a modified function that is permitted by the user permissions to generate the result.