Authenticated data feed for blockchains

A method for implementing a trusted bridge on a processing platform between one or more data sources and a data consuming device, the method comprising:

• implementing at least one secure enclave component of the trusted bridge, each such secure enclave component including a hardware-based execution environment;
• configuring a relay component of the trusted bridge to communicate over one or more networks via respective network interfaces of the processing platform;
• and
• authenticating data obtained from a given one of the data sources via the relay component of the trusted bridge to obtain authenticated data, wherein the authenticating comprises:
• establishing a transport layer security channel with the given data source via the relay component to obtain the data from the given data source;
• applying a designated function to at least a portion of the obtained data;
• and
• generating, in the hardware-based execution environment of the at least one secure enclave component, an attestation of the obtained data based at least in part on:
• (i) a result of the application of the designated function, and (ii) cryptographic information exchanged with the given data source as part of the establishment of the transport layer security channel;
• wherein information based at least in part on the authenticated data is provided to the data consuming device via the relay component;
• and
• wherein the processing platform comprises at least one processing device having a processor coupled to a memory, said at least one processing device implementing the at least one secure enclave component and the relay component.

A computer program product for implementing a trusted bridge on a processing platform between one or more data sources and a data consuming device, the computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device of the processing platform, the at least one processing device comprising a processor coupled to a memory, causes said at least one processing device:

• to implement at least one secure enclave component of the trusted bridge, each such secure enclave component including a hardware-based execution environment;
• to configure a relay component of the trusted bridge to communicate over one or more networks via respective network interfaces of the processing platform;
• and
• to authenticate data obtained from a given one of the data sources via the relay component of the trusted bridge to obtain authenticated data, wherein the authenticating comprises:
• establishing a transport layer security channel with the given data source via the relay component to obtain the data from the given data source;
• applying a designated function to at least a portion of the obtained data;
• and
• generating, in the hardware-based execution environment of the at least one secure enclave component, an attestation of the obtained data based at least in part on:
• (i) a result of the application of the designated function, and (ii) cryptographic information exchanged with the given data source as part of the establishment of the transport layer security channel;
• wherein information based at least in part on the authenticated data is provided to the data consuming device via the relay component.