Computing device for establishing a trusted execution environment

A computer implemented method of operating a trusted execution environment, the method comprising:

• initializing an execution engine as part of the trusted execution environment and configuring said execution engine for executing application code;
• providing a storage module as part of the trusted execution environment, the storage module being configured to load the application code and to provide read-only access to the execution engine for accessing the application code;
• providing a management module as part of the trusted execution environment;
• the management module receiving execution request(s) from a requestor to execute the application code;
• the management module instructing the execution engine to load the application code from the storage module and to execute the application code according to the execution request;
• the management module bundling requested data input, response data output to and from the execution engine into input data stream(s) and output data stream(s), respectively;
• the management module actively terminating the execution engine immediately after execution of the application code;
• the management module creating an execution record of execution of the application code by the execution engine comprising data indicative of said input data stream(s) and output data stream(s);
• and
• the management module transmitting the execution record to the requestor.

A computer program product comprising one or more memory devices having stored thereon computer-executable instructions which, when executed by one or more processors of a computing device causes the computing device to perform a method comprising:

• initializing an execution engine as part of the trusted execution environment and configuring said execution engine for executing application code;
• providing a storage module as part of the trusted execution environment, the storage module being configured to load the application code and to provide read-only access to the execution engine for accessing the application code;
• providing a management module as part of the trusted execution environment;
• receiving, by the management module, execution request(s) from a requestor to execute the application code;
• instructing, by the management module, the execution engine to load the application code from the storage module and to execute the application code according to the execution request;
• bundling, by the management module, requested data input, response data output to and from the execution engine into input data stream(s) and output data stream(s), respectively;
• actively terminating, by the management module, the execution engine immediately after execution of the application code;
• creating, by the management module, an execution record of execution of the application code by the execution engine comprising data indicative of said input data stream(s) and output data stream(s);
• and
• transmitting, by the management module, the execution record to the requestor.