System and method for providing a privacy layer to secure client data in a network

A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a computing device, cause the computing device to:
• instantiate a virtualized environment in a trusted execution environment,
• wherein the trusted execution environment includes one or more hardware resources, isolating data stored or processed in the trusted execution environment from a rich execution environment associated with the computing device, and
• wherein the computing device is associated with a unique identity mapped to a hardware security module in communication with the computing device;
• cause the hardware security module to obtain one or more keys by communicating with a secure element of a client device according to one or more permissions granted to the unique identity using a blockchain controlled by the client device,
• wherein the blockchain is configured to limit writing of entries of transactions to the client device;
• and
• secure communication between a local operating system executing on the client device and the virtualized environment using the one or more keys, for establishing a chain of trust and regulating interactions between the secure element, the hardware security module, and the trusted execution environment,
• wherein the one or more instructions, that cause the computing device to secure the communication between the local operating system executing on the client device and the virtualized environment, cause the computing device to:
• pass ciphertext data to the hardware security module for decryption into cleartext data using the one or more keys;
• and
• process the cleartext data in the trusted execution environment.

A device, comprising:

• one or more processors configured to:
• instantiate a virtualized environment in a trusted execution environment,
• wherein the trusted execution environment includes one or more hardware resources, isolating data stored or processed in the trusted execution environment from a rich execution environment associated with the device, and
• wherein the device is associated with a unique identity mapped to a hardware security module in communication with the device;
• cause the hardware security module to obtain one or more keys by communicating with a secure element of a client device according to one or more permissions granted to the unique identity using a blockchain controlled by the client device,
• wherein the blockchain is configured to limit writing of entries of transactions to the client device;
• and
• secure communication between a local operating system executing on the client device and the virtualized environment using the one or more keys, for establishing a chain of trust and regulating interactions between the secure element, the hardware security module, and the trusted execution environment,
• wherein the one or more processors, to secure the communication between the local operating system executing on the client device and the virtualized environment, are configured to:
• pass ciphertext data to the hardware security module for decryption into cleartext data using the one or more keys;
• and
• process the cleartext data in the trusted execution environment.