Distributed privacy-preserving computing on protected data

A system comprising:

• one or more data processors;
• and
• a non-transitory computer readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform actions including:
• receiving an algorithm and input data requirements associated with the algorithm, wherein the input data requirements include optimization and/or validation selection criteria for data assets to be run on the algorithm, and the algorithm and input data requirements are received from an algorithm developer;
• identifying the data assets as being available from a data host based on the optimization and/or validation selection criteria for the data assets, wherein the data host is a different entity from the algorithm developer;
• curating the data assets within a data storage structure that is within infrastructure of the data host;
• preparing the data assets within the data storage structure for processing by the algorithm;
• provisioning a secure capsule computing framework within a computing infrastructure of the infrastructure of the data host, wherein the secure capsule computing framework serves the algorithm to the data assets within the data storage structure in a secure manner that preserves privacy of the data assets and the algorithm;
• integrating the algorithm into the secure capsule computing framework, wherein the integrating comprises:
• depositing, by the algorithm developer, encrypted code for running the algorithm inside the secure capsule computing framework, and decrypting, by the algorithm developer, the encrypted code to obtain decrypted code for running the algorithm;
• and
• running the data assets through the algorithm, wherein the running comprises:
• passing the data assets from the data storage structure to the algorithm in the secure capsule computing framework via one or more secure application program interfaces, optimizing, validating, or computing inference with the algorithm using the data assets and the decrypted code, and passing results of the optimizing, validating, or computing inference to the algorithm developer or the data host via the one or more secure application program interfaces.

A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause one or more data processors to perform actions including:

• receiving an algorithm and input data requirements associated with the algorithm, wherein the input data requirements include optimization and/or validation selection criteria for data assets to be run on the algorithm, and the algorithm and input data requirements are received from an algorithm developer;
• identifying the data assets as being available from a data host based on the optimization and/or validation selection criteria for the data assets, wherein the data host is a different entity from the algorithm developer;
• curating the data assets within a data storage structure that is within infrastructure of the data host;
• preparing the data assets within the data storage structure for processing by the algorithm;
• provisioning a secure capsule computing framework within a computing infrastructure of the infrastructure of the data host, wherein the secure capsule computing framework serves the algorithm to the data assets within the data storage structure in a secure manner that preserves privacy of the data assets and the algorithm;
• integrating the algorithm into the secure capsule computing framework, wherein the integrating comprises:
• depositing, by the algorithm developer, encrypted code for running the algorithm inside the secure capsule computing framework, and decrypting, by the algorithm developer, the encrypted code to obtain decrypted code for running the algorithm;
• and
• running the data assets through the algorithm, wherein the running comprises:
• passing the data assets from the data storage structure to the algorithm in the secure capsule computing framework via one or more secure application program interfaces, optimizing, validating, or computing inference with the algorithm using the data assets and the decrypted code, and passing results of the optimizing, validating, or computing inference to the algorithm developer or the data host via the one or more secure application program interfaces.