SYSTEMS AND METHODS FOR COMPUTING WITH PRIVATE HEALTHCARE DATA

    公开(公告)号:EP4407492A2

    公开(公告)日:2024-07-31

    申请号:EP24179988.1

    申请日:2020-06-22

    申请人: nference, inc.

    IPC分类号: G06F21/53

    摘要: A computer-implemented method, a computing device, a computer program and a computer-readable medium for providing secure data processing in one or more secure enclaves is provided. The method includes: constructing an isolated memory partition that forms a secure enclave, wherein the secure enclave is available to one or more processors for running one or more application computing processes in isolation from one or more unauthorized computing processes running on the one or more processors; and pre-provisioning software within the secure enclave, wherein the pre-provisioned software is configured to execute instructions of the one or more application computing processes on the one or more processors by: receiving at least one of input data or the instructions for the one or more application computing processes in an encrypted form; loading the input data into the secure enclave; loading one or more programs for analyzing the input data into the secure enclave; running the one or more programs for analyzing the input data using the secure enclave; decrypting the at least one of input data or instructions using one or more cryptographic keys; executing the one or more application computing processes based on the decrypted at least one of input data or instructions to generate output data; generating a proof of execution that proves that the one or more instructions of the one or more application computing processes operated on the received input data; encrypting the output data using the one or more cryptographic keys; and providing external access to the encrypted output data and the proof of execution.

    SYSTEMS AND METHODS FOR COMPUTING WITH PRIVATE HEALTHCARE DATA

    公开(公告)号:EP4407492A3

    公开(公告)日:2024-10-16

    申请号:EP24179988.1

    申请日:2020-06-22

    申请人: nference, inc.

    摘要: A computer-implemented method, a computing device, a computer program and a computer-readable medium for providing secure data processing in one or more secure enclaves is provided. The method includes: constructing an isolated memory partition that forms a secure enclave, wherein the secure enclave is available to one or more processors for running one or more application computing processes in isolation from one or more unauthorized computing processes running on the one or more processors; and pre-provisioning software within the secure enclave, wherein the pre-provisioned software is configured to execute instructions of the one or more application computing processes on the one or more processors by: receiving at least one of input data or the instructions for the one or more application computing processes in an encrypted form; loading the input data into the secure enclave; loading one or more programs for analyzing the input data into the secure enclave; running the one or more programs for analyzing the input data using the secure enclave; decrypting the at least one of input data or instructions using one or more cryptographic keys; executing the one or more application computing processes based on the decrypted at least one of input data or instructions to generate output data; generating a proof of execution that proves that the one or more instructions of the one or more application computing processes operated on the received input data; encrypting the output data using the one or more cryptographic keys; and providing external access to the encrypted output data and the proof of execution.