Intel Corporation

Mic Bowman

Andrea Miele

Robert W Adams

James Paul Held

Robert Conrad Knauerhase

Anand Rajan

Paul Brett

Dhananjay V Keskar

Jose Paul Puthenkulam

Rita H Wouhaybi

Ignacio Javier Alvarez

Karla Saur

Rob Knauerhase

Dean J Sanvitale

Various embodiments are generally directed to an apparatus, system, and other techniques for shared, trusted token generation for a token-bucket flow control policy implemented in a distributed ledger. Tokens may be generated by blocks in the distributed ledger, which may be a blockchain system. Trusted execution hardware may be used as a proof algorithm to ensure that a token exists, and that client has legitimately acquired or accumulated the token prior to using it to submit a transaction.

SGX based flow control for distributed ledgers

Techniques for sharing private data objects in a trusted execution environment using a distributed ledger are described. The techniques described herein may enable sharing of data objects, referred to herein as private data objects (PDOs), between individuals and organizations with access and update policies mediated by execution of code (referred to herein as a 'smart contract') carried with the PDO in a secure enclave. A distributed ledger may serve as a “public commit log” to ensure that there is a single, authoritative instance of the object and provide a means of guaranteeing atomicity of updates across interacting objects.

Techniques for shared private data objects in a trusted execution environment

Techniques for sharing private data objects in a trusted execution environment using a distributed ledger are described. The techniques described herein may enable sharing of data objects, referred to herein as private data objects (PDOs), between individuals and organizations with access and update policies mediated by execution of code (referred to herein as a 'smart contract') carried with the PDO in a secure enclave. A distributed ledger may serve as a 'public commit log' to ensure that there is a single, authoritative instance of the object and provide a means of guaranteeing atomicity of updates across interacting objects.

Techniques for securely provisioning a set of enclaves are described. A contract owner may register with a shared registry. A subset of enclaves may be selected to be provisioned from among a plurality of enclaves. A keyshare may be requested from one or more provisioning services for each of the subset of enclaves to be provisioned. The requested keyshares may be received from each provisioning service for each of the subset of enclaves to be provisioned. For each of the selected enclaves, the received keyshares may be sent for verification by the enclave. Each of the selected enclaves may send an authenticated and encrypted key derived from the received keyshares.

Techniques for key provisioning in a trusted execution environment

An automated method to verify a block record for a digital ledger involves a first validation node (FVN) which receives a block record from a second validation node (SVN). The block record comprises a digital signature for the block record. In response to receiving the block record, the FVN automatically obtains a node identifier for the SVN, based on the digital signature for the block record. The first validator node uses the node identifier for the SVN to determine whether the SVN belongs to a validation group that comprises the FVN. The FVN uses an attestation service to determine whether the node identifier for the SVN belongs to a node with a trusted processor. The FVN determines whether the digital signature for the block record was created with a private key that corresponds to the node identifier for the SVN.

Technology for secure partitioning and updating of a distributed digital ledger

Various techniques for collection and processing of motor vehicle telematics data and establishing control over access to the telematics data are disclosed herein. In an example, a communication device (e.g., a computing device) operated by an owner or operator of a motor vehicle operates to receive telematics data from a telematics system, generate and transmit a derived indication of the telematics data (e.g., using a hash of the data), receive and process a request for information from the telematics data, and generate and transmit an answer and proof of the answer validity in response to the request for information. In an example, the proof of the answer validity may be provided as a zero knowledge proof. The proof may be verified using the derived indication of the telematics data, such as from an indication that is stored in a public distributed blockchain that is auditable and unalterable.

Trusted vehicle telematics using blockchain data analytics

In some embodiments, a client computer includes a memory, a client presence program adapted to be located in the memory, and a processor. The processor is coupled to the memory and is adapted to execute the client presence program to receive provider presence information from an instant messaging (IM) server and to store the provider presence information in the memory. The provider presence information includes at least a provider status for at least one service provider.

Provider presence information

In a method for automatically filtering communications, a networking request from an initiating party on an initiating communication device is received. The networking request pertains to a request for communication between the initiating communication device and a recipient communication device of a user over a communication channel. A determination is made of whether the communication channel to be used for the communication matches a communication channel for a previous communication between the initiating party and the user. It is automatically determined whether to grant the networking request, based at least in part on the determination of whether the communication channel for the communication matches the communication channel for the previous communication between the initiating party and the user. Other embodiments are described and claimed.

Peer discovery and connection management based on context sensitive social networks

Systems and methods for transporting physical objects from real physical life into virtual worlds. Briefly stated, the method includes receiving characteristic and structure data from an object constructed in the real world. The characteristic and structure data is obtained from the object using a plurality of sensors placed in the vicinity of the object to sense the characteristics and structure of the object. The characteristic and structure data of the object is used to produce code necessary to create an equivalent representation of the object in a virtual world.

Systems and methods for transporting physical objects from real physical life into virtual worlds

Methods and apparatuses enable creation of a virtual machine (VM) clone initiated through application or service logic. The application requests generation of a VM clone from within the runtime execution of the application. The request is serviced by a VM generator, which identifies a state of the VM to clone and identifies hardware resources on which to create the VM clone. Based on a determination of what resources on which to generate the VM clone, the VM generator creates the VM clone on the determined resources, having the identified state. In one embodiment, a use case of resource copy or reference copy is selected for each resource. In one embodiment, the VM generator considers a number of factors in determining where to instantiate the VM clone. The parameters may include hints or preference parameters sent by the application and/or resource loading or performance.

Growing community of inventors

Beaverton, OR, United States of America

Mic Bowman