Secure data processing on sensitive data using trusted hardware

A non-transitory machine-readable storage device having instructions for execution by a processor of a machine to cause the processor to perform operations to perform a method, the operations comprising:

• sending from a client device to an untrusted component, a query for a data store, the query comprising a plurality of data operations, wherein the data store is accessible by an untrusted component and by a trusted hardware component, wherein the query comprises encrypted data, and wherein the untrusted component does not have a key to decrypt the encrypted data;
• wherein the data operations are operable to:
• access data within the data store that is not sensitive by generating and executing a first proper subset of the data operations from the plurality of data operations via the untrusted component to generate first results;
• and
• access encrypted sensitive data within the data store by executing a second proper subset of the data operations via the trusted hardware component to generate second results, wherein the second proper subset of data operations is translated into a first set of data primitives and provided to the trusted hardware component by the untrusted component;
• receiving from the untrusted component, the first results;
• and
• receiving from the untrusted component, the second results.

A device comprising:

• a processor;
• and
• a memory device coupled to the processor and having a program stored thereon for execution by the processor to perform operations comprising:
• sending from a client device to an untrusted component, a query for a data store, the query comprising a plurality of data operations, wherein the data store is accessible by an untrusted component and by a trusted hardware component, wherein the query comprises encrypted data, and wherein the untrusted component does not have a key to decrypt the encrypted data;
• wherein the data operations are operable to:
• access data within the data store that is not sensitive by generating and executing a first proper subset of the data operations from the plurality of data operations via the untrusted component to generate first results;
• and
• access encrypted sensitive data within the data store by executing a second proper subset of the data operations via the trusted hardware component to generate second results, wherein the second proper subset of data operations is translated into a first set of data primitives and provided to the trusted hardware component by the untrusted component;
• receiving from the untrusted component, the first results;
• and
• receiving from the untrusted component, the second results.