Techniques for shared private data objects in a trusted execution environment
AssigneeIntel Corporation
InventorsMic Bowman, Andrea Miele, James P. Held, Anand Rajan
Life of this patent
Estimating the term…
Abstract
Techniques for sharing private data objects in a trusted execution environment using a distributed ledger are described. The techniques described herein may enable sharing of data objects, referred to herein as private data objects (PDOs), between individuals and organizations with access and update policies mediated by execution of code (referred to herein as a “smart contract”) carried with the PDO in a secure enclave. A distributed ledger may serve as a “public commit log” to ensure that there is a single, authoritative instance of the object and provide a means of guaranteeing atomicity of updates across interacting objects.
Claims21
A computer-implemented method, comprising:
- registering a contract identifier with a distributed ledger;
- selecting one or more of a plurality of contract enclaves;
- requesting a provisioning secret for the one or more of the plurality of contract enclaves;
- and
- sending an information element comprising an indication of private data to at least one of the one or more of the plurality of contract enclaves.
An apparatus comprising:
- processing circuitry;
- and
- memory coupled to the processing circuitry, the memory comprising instructions that when executed by the processing circuitry, causes the processing circuitry to:
- register a contract identifier with a distributed ledger;
- select one or more of a plurality of contract enclaves;
- request a provisioning secret for the one or more of the plurality of contract enclaves;
- and
- send an information element comprising an indication of private data to at least one of the one or more of the plurality of contract enclaves.
A memory device, comprising a non-transitory computer-readable storage medium that stores instructions for execution by processing circuitry of a contract owner device, the instructions to cause the contract owner device to:
- register a contract identifier with a distributed ledger
- select one or more of a plurality of contract enclaves;
- request a provisioning secret for the one or more of the plurality of contract enclaves;
- and
- send an information element comprising an indication of private data to at least one of the one or more of the plurality of contract enclaves.
Dependencies are inferred from the claim text.