Secure computing systems and methods
AssigneeIntertrust Technologies Corporation
InventorsW. Knox Carey, Jarl A. Nilsson, Bart Grantham
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to systems and methods for facilitating trusted handling of genomic and/or other sensitive information. Certain embodiments may use a virtualized execution environment to execute code and/or programs that wish to access and/or otherwise use genomic and/or other sensitive information. In some embodiments, data requests from the code and/or programs may be routed through a transparent data access proxy configured to transform requests and/or associated responses to protect the integrity of the genomic and/or other sensitive information.
Claims19
A method for performing trusted computations on sensitive data performed within a protected execution environment of a first system, the first system comprising a processor and a non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the first system to perform the method, the method comprising:
- receiving, from an application executing in an execution environment different than the protected execution environment, a request to access a sensitive data set managed by the protected execution environment;
- transforming the request using execution context information associated with the application to generate a secure request to access the sensitive data set;
- sending the generated secure request to access the sensitive data set to a data store storing the sensitive data set, the data store being associated with the protected execution environment;
- receiving a secure response to the secure request from the data store associated with the protected execution environment;
- transforming the secure response using the execution context information to generate a response to the request to access the sensitive data set;
- transmitting the generated response to the application;
- generating an audit record comprising information associated with at least one of the transformation of the request and the transformation of the secure response;
- and
- storing the audit record within storage associated with the protected execution environment.
Dependencies are inferred from the claim text.