Secure count in cloud computing networks

One or more non-transitory computer-readable memory devices storing computer-executable instructions which, upon execution by one or more processors in a computing device, cause the computing device to:

• download a trusted plug-in from a service provider, in which the trusted plug-in includes a watchdog, and in which the trusted plug-in implements a trusted execution environment by using a cryptographic process to encrypt one or more messages that are communicated to the service provider from the computing device;
• download code from the service provider, in which the downloaded code is encrypted;
• decrypt the downloaded code in the trusted plug-in;
• execute the decrypted code in the trusted plug-in;
• utilize the executing code in the trusted plug-in to interoperate with the service provider using the encrypted messages to trigger remote performance of operations by the service provider in accordance with one of license, policy, or agreement;
• responsively to the performed operations being outside the one of license, policy, or agreement, disable the trusted plug-in by operations of the watchdog.

A method of operating a computer server on which a service operates, comprising:

• interoperating with a trusted plug-in that is installed on a computing device in accordance with predetermined terms, in which the trusted plug-in operates within a trusted execution environment by exchanging messages with the service that are encrypted by the trusted plug-in, and in which the trusted plug-in includes a watchdog;
• receiving an encrypted report of operating counts from the computing device, the operating counts being associated with utilization of the service by the computing device;
• providing additional operating counts to the watchdog in the trusted plug-in to continue interoperations with the service under the predetermined terms;
• and
• discontinuing provision of additional operating counts to the watchdog in the trusted plug-in to cause the watchdog to disable the trusted plug-in responsively to the computing device being outside the predetermined terms.