Privacy-preserving command processing on communal electronic devices

A communal electronic device comprising:

• a memory device to store instructions;
• and one or more processors to execute the instructions stored on the memory device, the instructions to cause the one or more processors to:
• receive a command at the communal electronic device;
• analyze the command using natural language processing at the communal electronic device to determine whether the command requires programmatic access to personal data that is specific to a particular user of a plurality of users of the communal electronic device and that is stored on a personal electronic device of the particular user;
• in response to a determination that the command requires programmatic access to the personal data:
• identify, at the communal electronic device, a personal electronic device associated with the particular user;
• send, from the communal electronic device, a request to the identified personal electronic device to process at least a portion of the command that accesses the personal data;
• receive, at the communal electronic device, a cryptographically signed assertion from the identified personal electronic device that indicates the particular user has authenticated and authorized release of the personal data to the communal electronic device;
• and upon verification of the cryptographically signed assertion at the communal electronic device, receive, at the communal electronic device, personal data returned from the identified personal electronic device and use the personal data to fulfill the command;
• and in response to a determination that the command does not require programmatic access to the personal data, process the command locally on the communal electronic device without sending the command to the personal electronic device.

A non-transitory machine readable medium comprising instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• receiving a command at a communal electronic device;
• analyzing the command using natural language processing at the communal electronic device to determine whether the command requires programmatic access to personal data that is specific to a particular user of a plurality of users of the communal electronic device and that is stored on a personal electronic device of the particular user;
• in response to a determination that the command requires programmatic access to the personal data:
• identifying, at the communal electronic device, a personal electronic device associated with the particular user;
• sending, from the communal electronic device, a request to the identified personal electronic device to process at least a portion of the command that accesses the personal data;
• receiving, at the communal electronic device, a cryptographically signed assertion from the identified personal electronic device that indicates the particular user has authenticated and authorized release of the personal data to the communal electronic device;
• and upon verification of the cryptographically signed assertion at the communal electronic device, receiving, at the communal electronic device, personal data returned from the identified personal electronic device and using the personal data to fulfill the command;
• and in response to a determination that the command does not require programmatic access to the personal data, processing the command locally on the communal electronic device without sending the command to the personal electronic device.