Provisioning federated computation on distributed private data

An apparatus comprising:

• a processor;
• and
• a computer readable memory comprising instructions which, when executed by the processor, cause the processor to:
• receive in a governor device, from a plurality of data owner devices, metadata for one or more datasets maintained by the plurality of data owner devices;
• register the one or more datasets with the governor device;
• in response to a request from an aggregator, provide at least a portion of the metadata for the one or more datasets to the aggregator;
• receive, from the aggregator, a compute plan to be implemented by the plurality of data owner devices;
• distribute at least a portion of the compute plan to the plurality of data owner devices;
• in response to a receipt, from the plurality of data owner devices, of a verification report and a certification for an enclave, bind the enclave to a host device;
• and
• provide the compute plan to the plurality of data owner devices.

One or more computer-readable storage media comprising instructions stored thereon that, in response to being executed, cause a computing device to:

• receive in a governor device, from a plurality of data owner devices, metadata for one or more datasets maintained by the plurality of data owner devices;
• register the one or more datasets with the governor device;
• in response to a request from an aggregator, provide at least a portion of the metadata for the one or more datasets to the aggregator;
• receive, from the aggregator, a compute plan to be implemented by the plurality of data owner devices;
• distribute at least a portion of the compute plan to the plurality of data owner devices;
• in response to a receipt, from the plurality of data owner devices, of a verification report and a certification for an enclave, bind the enclave to a host device;
• and
• provide the compute plan to the plurality of data owner devices.

The one or more computer-readable storage media of claim 16, wherein the compute plan specifies:

• a set of data owner devices from the plurality of data owner devices that are to execute the compute plan;
• one or more pieces of software to be executed in the compute plan;
• and
• one or more data files to be used in the compute plan.