Methods, systems, and devices for trusted execution environments and secure data processing and storage environments

A method comprising:

• receiving, at a secure access port of a secure environment from a user via a login node, a request associated with target data;
• processing the request in accordance with one or more data access policies to provide a response by identifying one or more data processing operations from a set of data processing operations based on both a time associated with the request and a pattern associated with different requests submitted prior to the request;
• determining, using a secure processing hardware of the secure environment, if the one or more data processing operations should be implemented based on the received request, wherein the secure access port comprises a container execution environment in which the one or more data access policies are applied to the request to determine if the processing operations should be implemented, and wherein the processing device comprises a trusted execution environment and in which the one or more data processing operations implemented, wherein the secure processing hardware corresponds to one or more central processing units (CPUs), wherein the trusted execution environment configured to apply, to the response, one or more output policies configured to permit output of statistical results derived from the target data after randomized noise from within a bounded range is added to the statistical results to obfuscate the target data;
• and
• initiating, by the trusted execution environment, communication with an encrypted data repository responsive to the determining, the encrypted data repository being communicatively coupled to the secure environment.

A device comprising:

• a secure access port communicatively coupled to a login node and configured to receive, from a user separate from the login node, a request associated with target data, the secure access port comprising a container execution environment configured to process the request in accordance with one or more data access policies by identifying one or more data processing operations from a set of data processing operations based on both a time associated with the request and a pattern associated with different requests submitted prior to the request;
• and
• a secure processing hardware communicatively coupled to the secure access port and comprising an encrypted portion configured to implement the one or more data processing operations and directly provide a response to the user without communicating through the login node, the secure processing hardware being communicatively coupled to an encrypted data repository, wherein the encrypted portion of the secure processing hardware comprises a trusted execution environment and wherein the one or more data processing operations are executed within the trusted execution environment configured to apply, to the response, one or more output policies configured to permit output of statistical results derived from the target data after randomized noise from within a bounded range is added to the statistical results to obfuscate the target data, and wherein the trusted execution environment brokers access to the encrypted data repository, wherein the secure processing hardware corresponds to one or more central processing units (CPUs).