Techniques for shared private data objects in a trusted execution environment
AssigneeIntel Corporation
InventorsMic Bowman, Andrea Miele, James P. Held, Anand Rajan
Life of this patent
Estimating the term…
Abstract
Techniques for sharing private data objects in a trusted execution environment using a distributed ledger are described. The techniques described herein may enable sharing of data objects, referred to herein as private data objects (PDOs), between individuals and organizations with access and update policies mediated by execution of code (referred to herein as a “smart contract”) carried with the PDO in a secure enclave. A distributed ledger may serve as a “public commit log” to ensure that there is a single, authoritative instance of the object and provide a means of guaranteeing atomicity of updates across interacting objects.
Claims25
A computer-implemented method for sharing private data objects, comprising:
- provisioning one or more contract enclaves from a plurality of contract enclaves;
- preparing a contract and initial state for a private data object (PDO);
- receiving an encrypted and signed PDO and signature from one or more of the provisioned contract enclaves;
- verifying the received signature;
- and
- communicating the PDO and verified signature to a distributed ledger.
A system for sharing private data objects, comprising:
- a plurality of contract enclaves;
- and
- a client device including one or more processor circuits, the client device configured to:
- provision one or more contract enclaves from the plurality of contract enclaves;
- prepare a contract and initial state for a private data object (PDO);
- receive an encrypted and signed PDO and signature from one or more of the provisioned contract enclaves;
- verify the received signature;
- and
- communicate the PDO and verified signature to a distributed ledger.
An article comprising a non-transitory computer-readable storage medium that stores instructions for execution by processing circuitry of a client device, the instructions to cause the client device to:
- provision one or more contract enclaves from a plurality of contract enclaves;
- prepare a contract and initial state for a private data object (PDO);
- receive an encrypted and signed PDO and signature from one or more of the provisioned contract enclaves;
- verify the received signature;
- and
- communicate the PDO and verified signature to a distributed ledger.
Dependencies are inferred from the claim text.