-
公开(公告)号:US11770368B2
公开(公告)日:2023-09-26
申请号:US17677584
申请日:2022-02-22
Applicant: INTEL CORPORATION
Inventor: Mic Bowman , Andrea Miele , James P. Held , Anand Rajan
CPC classification number: H04L63/0428 , G06F21/57 , G06F21/6218 , H04L9/0822 , H04L9/3234 , H04L9/3236 , H04L63/123 , H04L9/50
Abstract: Techniques for sharing private data objects in a trusted execution environment using a distributed ledger are described. The techniques described herein may enable sharing of data objects, referred to herein as private data objects (PDOs), between individuals and organizations with access and update policies mediated by execution of code (referred to herein as a “smart contract”) carried with the PDO in a secure enclave. A distributed ledger may serve as a “public commit log” to ensure that there is a single, authoritative instance of the object and provide a means of guaranteeing atomicity of updates across interacting objects.
-
公开(公告)号:US11271910B2
公开(公告)日:2022-03-08
申请号:US16723564
申请日:2019-12-20
Applicant: INTEL CORPORATION
Inventor: Mic Bowman , Andrea Miele , James P. Held , Anand Rajan
Abstract: Techniques for sharing private data objects in a trusted execution environment using a distributed ledger are described. The techniques described herein may enable sharing of data objects, referred to herein as private data objects (PDOs), between individuals and organizations with access and update policies mediated by execution of code (referred to herein as a “smart contract”) carried with the PDO in a secure enclave. A distributed ledger may serve as a “public commit log” to ensure that there is a single, authoritative instance of the object and provide a means of guaranteeing atomicity of updates across interacting objects.
-
公开(公告)号:US20190058696A1
公开(公告)日:2019-02-21
申请号:US15721723
申请日:2017-09-29
Applicant: INTEL CORPORATION
Inventor: Mic Bowman , Andrea Miele , James P. Held , Anand Rajan
CPC classification number: H04L63/0428 , G06F21/57 , G06F21/6218 , H04L9/0822 , H04L9/3234 , H04L9/3236 , H04L63/123 , H04L2209/38
Abstract: Techniques for sharing private data objects in a trusted execution environment using a distributed ledger are described. The techniques described herein may enable sharing of data objects, referred to herein as private data objects (PDOs), between individuals and organizations with access and update policies mediated by execution of code (referred to herein as a “smart contract”) carried with the PDO in a secure enclave. A distributed ledger may serve as a “public commit log” to ensure that there is a single, authoritative instance of the object and provide a means of guaranteeing atomicity of updates across interacting objects.
-
公开(公告)号:US20230396593A1
公开(公告)日:2023-12-07
申请号:US18234593
申请日:2023-08-16
Applicant: INTEL CORPORATION
Inventor: Mic Bowman , Andrea Miele , James P. Held , Anand Rajan
CPC classification number: H04L63/0428 , H04L9/3234 , G06F21/57 , H04L9/0822 , H04L63/123 , H04L9/3236 , G06F21/6218 , H04L9/50
Abstract: Techniques for sharing private data objects in a trusted execution environment using a distributed ledger are described. The techniques described herein may enable sharing of data objects, referred to herein as private data objects (PDOs), between individuals and organizations with access and update policies mediated by execution of code (referred to herein as a “smart contract”) carried with the PDO in a secure enclave. A distributed ledger may serve as a “public commit log” to ensure that there is a single, authoritative instance of the object and provide a means of guaranteeing atomicity of updates across interacting objects.
-
公开(公告)号:US20200244628A1
公开(公告)日:2020-07-30
申请号:US16723564
申请日:2019-12-20
Applicant: INTEL CORPORATION
Inventor: Mic Bowman , Andrea Miele , James P. Held , Anand Rajan
Abstract: Techniques for sharing private data objects in a trusted execution environment using a distributed ledger are described. The techniques described herein may enable sharing of data objects, referred to herein as private data objects (PDOs), between individuals and organizations with access and update policies mediated by execution of code (referred to herein as a “smart contract”) carried with the PDO in a secure enclave. A distributed ledger may serve as a “public commit log” to ensure that there is a single, authoritative instance of the object and provide a means of guaranteeing atomicity of updates across interacting objects.
-
公开(公告)号:US10540652B2
公开(公告)日:2020-01-21
申请号:US15355918
申请日:2016-11-18
Applicant: Intel Corporation
Inventor: Karla Saur , Mic Bowman , Andrea Miele , James P. Held
IPC: G06Q20/38
Abstract: An automated method to verify a block record for a digital ledger involves a first validation node (FVN) which receives a block record from a second validation node (SVN). The block record comprises a digital signature for the block record. In response to receiving the block record, the FVN automatically obtains a node identifier for the SVN, based on the digital signature for the block record. The first validator node uses the node identifier for the SVN to determine whether the SVN belongs to a validation group that comprises the FVN. The FVN uses an attestation service to determine whether the node identifier for the SVN belongs to a node with a trusted processor. The FVN determines whether the digital signature for the block record was created with a private key that corresponds to the node identifier for the SVN.
-
公开(公告)号:US20180145836A1
公开(公告)日:2018-05-24
申请号:US15355918
申请日:2016-11-18
Applicant: Intel Corporation
Inventor: Karla Saur , Mic Bowman , Andrea Miele , James P. Held
Abstract: An automated method to verify a block record for a digital ledger involves a first validation node (FVN) which receives a block record from a second validation node (SVN). The block record comprises a digital signature for the block record. In response to receiving the block record, the FVN automatically obtains a node identifier for the SVN, based on the digital signature for the block record. The first validator node uses the node identifier for the SVN to determine whether the SVN belongs to a validation group that comprises the FVN. The FVN uses an attestation service to determine whether the node identifier for the SVN belongs to a node with a trusted processor. The FVN determines whether the digital signature for the block record was created with a private key that corresponds to the node identifier for the SVN. Other embodiments are described and claimed.
-
公开(公告)号:US12086155B2
公开(公告)日:2024-09-10
申请号:US17547711
申请日:2021-12-10
Applicant: Intel Corporation
Inventor: Mic Bowman , Andrea Miele
Abstract: Various embodiments are generally directed to an apparatus, system, and other techniques for shared, trusted token generation for a token-bucket flow control policy implemented in a distributed ledger. Tokens may be generated by blocks in the distributed ledger, which may be a blockchain system. Trusted execution hardware may be used as a proof algorithm to ensure that a token exists, and that client has legitimately acquired or accumulated the token prior to using it to submit a transaction.
-
公开(公告)号:US20220182365A1
公开(公告)日:2022-06-09
申请号:US17677584
申请日:2022-02-22
Applicant: Intel Corporation
Inventor: Mic Bowman , Andrea Miele , James P. Held , Anand Rajan
Abstract: Techniques for sharing private data objects in a trusted execution environment using a distributed ledger are described. The techniques described herein may enable sharing of data objects, referred to herein as private data objects (PDOs), between individuals and organizations with access and update policies mediated by execution of code (referred to herein as a “smart contract”) carried with the PDO in a secure enclave. A distributed ledger may serve as a “public commit log” to ensure that there is a single, authoritative instance of the object and provide a means of guaranteeing atomicity of updates across interacting objects.
-
公开(公告)号:US20200067694A1
公开(公告)日:2020-02-27
申请号:US16665524
申请日:2019-10-28
Applicant: INTEL CORPORATION
Inventor: Mic Bowman , Andrea Miele
Abstract: Techniques for securely provisioning a set of enclaves are described. A contract owner may register with a shared registry. A subset of enclaves may be selected to be provisioned from among a plurality of enclaves. A keyshare may be requested from one or more provisioning services for each of the subset of enclaves to be provisioned. The requested keyshares may be received from each provisioning service for each of the subset of enclaves to be provisioned. For each of the selected enclaves, the received keyshares may be sent for verification by the enclave. Each of the selected enclaves may send an authenticated and encrypted key derived from the received keyshares.
-
-
-
-
-
-
-
-
-