Trusted Execution Environment Pipeline for Verified Data Collaboration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for secure data collaboration between distinct users rely on human trust and legal agreements, lack technical verification of security, are computationally expensive, and expose digital assets to cloud service provider access, limiting scalability and confidentiality.
Innovation Solution
Implementing a system that uses trusted execution environments (TEEs) with remote attestation protocols to establish and maintain confidentiality, ensuring secure collaboration through hardware-enforced security mechanisms, using technologies like Intel SGX, AMD SEV-SNP, and Intel TDX, and erasing data and computation states from volatile memory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If human trust and legal agreements are used for secure data collaboration, then implementation is simple, but security verification is lacking and scalability is limited
Solution Approach 1:
The patent replaces human trust and legal agreements with a technical security system based on Trusted Execution Environments (TEEs). TEEs use hardware-enforced security mechanisms to create isolated execution spaces that guarantee data confidentiality and integrity, eliminating the need for human trust while providing verifiable security through cryptographic attestation.
Solution Approach 2:
The patent introduces TEEs as intermediary components between data owners and data processing function owners. These TEEs act as secure intermediaries that execute data processing functions while maintaining isolation and confidentiality, enabling trustless collaboration without requiring direct trust between parties.
2Productivity
If cloud service providers access customer data for processing, then data processing capability is improved, but confidentiality of digital assets deteriorates
Solution Approach 1:
The patent segments the data processing environment into isolated Trusted Execution Environments. Each TEE is a separate execution space with its own memory and processing resources, physically isolating data from the cloud service provider's other systems. This segmentation allows the provider to access data for processing while preventing unauthorized access to other customers' data or the provider's own systems.
Solution Approach 2:
TEEs serve as intermediary execution spaces between the cloud service provider and the data. The provider can issue commands and receive results through the TEE interface, but the actual data processing occurs in the isolated TEE environment where the data remains confidential and inaccessible to the provider's general systems.
3Reliability
If remote attestation procedures are implemented, then trust verification is improved, but computational cost increases
Solution Approach 1:
The patent performs trust verification through remote attestation before data processing begins. The TEE proves its security properties and identity in advance, allowing the data owner to verify trustworthiness before sharing data. This preliminary verification ensures security is established once and for all, avoiding the need for continuous expensive verification during data processing operations.
Data Source
AI summary
A computer-implemented method comprising: receiving, at a data processing pipeline comprising a trusted execution environment: a data-processing function from a data-processing function owner; a raw-data set from the data owner; generating, in the data processing pipeline, analysis results, based on the raw-data set, by using the data-processing function; providing the analysis results to an output; and erasing the data-processing function, the raw-data set, and the analysis results, from the data processing pipeline. Wherein: the raw-data set is provided by the data owner in response to satisfaction of first-user trustworthiness-criteria determined by the trusted execution environment using a first-user remote-attestation-procedure; and the data-processing function is provided by the data-processing function owner in response to satisfaction of second-user trustworthiness-criteria determined by the trusted execution environment using a second-user remote-attestation-procedure.