Multi-device remote attestation

A network device in a network including an application provider entity and an application platform executing an application including the enclave, the network device comprising:

• one or more processors;
• and a memory storing instructions, which when executed by the one or more processors cause the network device to:
• receive, by a first device of the at least one device, proof information from the application provider entity that the enclave is secure, wherein the proof information includes a public part, Ga, of information used by the enclave to derive a Diffie-Hellman key in a key generation process with the application provider entity, wherein the first device is remote from the application provider entity and the application platform, and wherein the first device does not trust either the application provider entity or the application platform;
• process, by the first device, the proof information to verify that the enclave is secure and ensuring that Ga is authentic and/or valid;
• derive, by the first device, a new Diffie-Hellman key, K, based on Ga and x, wherein x is a private part of information used by the first device to derive the new Diffie-Hellman key, K;
• and
• send, by the first device, a message including Ga and a public part, Gx, of the information used by the first device to derive the new Diffie-Hellman key, K, to the enclave, to enable the enclave to derive the key, K, based on Gx and a private part, a, of the information used by the enclave to derive the Diffie-Hellman key in the key generation process with the application provider entity.

A tangible, non-transitory computer-readable medium having instructions thereon which, upon being executed by one or more processors, alone or in combination, provide for execution of a method of attesting an enclave and provisioning secret information in a network including an application provider entity, at least one device and an application platform executing an application including the enclave, the method comprising:

• receiving, by a first device of the at least one device, proof information from the application provider entity that the enclave is secure, wherein the proof information includes a public part, Ga, of information used by the enclave to derive a Diffie-Hellman key in a key generation process with the application provider entity, wherein the first device is remote from the application provider entity and the application platform, and wherein the first device does not trust either the application provider entity or the application platform;
• processing, by the first device, the proof information to verify that the enclave is secure and ensuring that Ga is authentic and/or valid;
• deriving, by the first device, a new Diffie-Hellman key, K, based on Ga and x, wherein x is a private part of information used by the first device to derive the new Diffie-Hellman key, K;
• and
• sending, by the first device, a message including Ga and a public part, Gx, of the information used by the first device to derive the new Diffie-Hellman key, K, to the enclave, to enable the enclave to derive the key, K, based on Gx and a private part, a, of the information used by the enclave to derive the Diffie-Hellman key in the key generation process with the application provider entity.