TEE Collaboration Engine for Provable Document Traceability

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems lack effective traceability mechanisms for collaborative document editing, leading to disputes over authorship and contributions, especially in multi-enterprise projects, where accurate attribution of changes is crucial for patent ownership, employee performance evaluation, and legal purposes.

Innovation Solution

A system utilizing a trusted execution environment (TEE) with a collaboration engine that provides secure traceability through a protected audio-video path (PAVP), where changes to documents are logged with cryptographic hashes and metadata, ensuring provable authorship and integrity, even in real-time collaborative editing scenarios.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional collaborative editing systems are used, then ease of operation is improved, but reliability of traceability deteriorates

Engineering Contradiction:
Improvecollaborative editingVSAvoidtraceability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a Trusted Execution Environment (TEE) as an intermediary component that mediates between the collaborative editing application and the underlying system. The TEE creates a protected environment that cryptographically verifies the integrity of editing operations and maintains an immutable ledger of changes, thereby ensuring reliable traceability without interfering with the ease of collaborative editing operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system combines multiple technological components into a composite architecture: traditional collaborative editing software layered over a TEE, which itself rests on cryptographic primitives (hash functions, digital signatures) and an immutable ledger structure. This composite approach enables both ease of operation at the application level and reliability of traceability at the system level.

Inventive Principle:
Principle #40Composite materials

2Reliability

If protected audio-video path (PAVP) is implemented, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidsystem architecture
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the security-critical functions (traceability verification, integrity checking, ledger maintenance) into a separate Trusted Execution Environment component. This isolation allows the main collaborative editing system to remain relatively simple while the TEE handles the complex security operations independently, managing device complexity through functional separation.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If cryptographic hashing and ledger logging are applied to every change, then reliability of traceability is improved, but productivity decreases

Engineering Contradiction:
ImprovetraceabilityVSAvoidediting speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system applies cryptographic hashing and ledger logging selectively rather than to every single character change. The TEE identifies and logs only significant editing events (insertions, deletions, formatting changes) while allowing minor edits to proceed without full cryptographic processing, thereby maintaining reliability for important traceability while preserving editing productivity.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS10318746B2Provable traceability
Publication Date: 2019.06.11 MCAFEE LLC
  • US10318746B2 patent drawing
  • US10318746B2 patent drawing
  • US10318746B2 patent drawing

AI summary

There is disclosed in an example, a computing apparatus, including: a trusted execution environment (TEE); and one or more logic elements providing a collaboration engine within the TEE, operable to: receive a change to a secured document via a trusted channel; apply a change to the secured document; log the change to a ledger; and display the document to a client device via a protected audio-video path (PAVP). There is also disclosed a method of providing a collaboration engine, and a computer-readable medium having stored thereon executable instructions for providing a collaboration engine.