Ava Labs, Inc.

K7 Design Group Corporation

Enclave Markets Inc.

Michael Edmond Kaplan

Bernard Wong

Nicholas Mussallem

Emin Gun Sirer

Conor Leary

Stephen Buttolph

Aaron Buchwald

Patrick Robert O'grady

Alexander Dunn

Daniel Laine

Cameron John Schultz

Emin Gün Sirer

Emre Kanatli

Patrick O'Grady

Kevin Sekniqi

Yuqun Chen

Xander Dunn

David Wells

Oliver Hopcroft

Stephen Bezek

Phil Wirtjes

Ted Yin

A system for providing an exchange in a trusted execution environment can include an exchange program that is configured to provide a digital exchange for digital assets and a computer system with a secure enclave that is configured to provide the trusted execution environment within which processing of programs is secure from observation and manipulation by other operations outside of the secure enclave. Execution of the exchange program in the secure enclave can include loading the exchange program into secure memory within the secure enclave, performing an attestation operation on the exchange program loaded into the secure memory within the secure enclave, the attestation operation configured to validate the exchange program, and outputting results of the attestation operation to identify whether the exchange program loaded in the secure enclave is valid.

Secure and trustworthy computing environments for exchanges

Various aspects of the subject technology relate to systems, methods, and machine-readable media for providing an application trusted execution environment. Various aspects may include performing attestation of each application enclave of a plurality of application enclaves for a plurality of applications. Aspects may also include receiving a request from a client. Aspects may also include selecting a load balancer to forward the request to the application enclaves. Aspects may also include determining a sensitivity level of the request that is associated with a secured environment parameter. Aspects may include routing, by an enclave server of the load balancer, the request to an application enclave according to the sensitivity level for execution of an application of the plurality of applications in the application trusted execution environment.

Scaled trusted execution environment for application services

A secure module can be configured to: provide the trusted execution environment; and load secure-software for processing in the trusted execution environment to perform operations. The operations can include generating a private key and a corresponding public key; maintaining the private key in the trusted execution environment; receiving at least one attestation request from at least one attestation server; responding to the received attestation requests with attestation responses generated with the private key; initiating encrypted connections with client devices using the private key, the encrypted connections having an endpoint within the trusted execution environment such that contents of the encrypted connections are secure from observation and manipulation by other operations outside of the secure module and outside of the client devices; and communicating data with the client devices through the encrypted connections.

Secure computing environments with key management for private communication over data networks

Various aspects of the subject technology relate to systems, methods, and machine-readable media for cross-chain communication in a blockchain platform. Various aspects may include accepting, at a first blockchain, a first transaction including a message and a message payload. Aspects may also include validating, at the first blockchain, the message by signing the message using signature keys of one or more validators in a first set of validators of the first blockchain. Aspects may also include generating an aggregate signature based on the signature keys of the one or more validators in a first set of validators. Aspects may also include submitting a second transaction on to a second blockchain, the second transaction including the message and the aggregate signature. Aspects may include validating, at the second blockchain, the second transaction based on a shared registry.

Authenticated cross-subnet communication

Described herein are systems and methods for providing the secure transfer of assets between blockchain networks. The system can include a secure-execution server configured to execute a bridge program to cause the secure-execution server to perform operations may include: determining to initiate a migration; receiving a portion of the first master secret; receiving a listing of first and/or second assets generating a second master secret; generating corresponding second portions; deriving address information; generating second transaction-data and first transaction-data; generating a migration-prepared data-object; generating a migration-prepared instruction; sending the corresponding migration-prepared instruction; sending the second portion of the second master secret; and sending a complete migration request.

Secure and trustworthy bridge for transferring assets across different networks with an updating pool of wardens

In one implementation, a system to provide a secure crossing network for trading digital blockchain assets outside of an exchange can include a crossing network program that is configured to provide a crossing network for the digital blockchain assets and a computer system with a secure enclave that is configured to provide the trusted execution environment within which processing of programs is secure from observation and manipulation by other operations outside of the secure enclave. The execution of the crossing network program in the secure enclave receiving, from client devices, crossing network orders to trade assets within the crossing network; matching at least a portion of the crossing network orders in an order book; obtaining, using a pricing oracle, pricing information for transactions in the exchange; and determining a reference price for the matched orders within the crossing network based on the pricing information from the exchange.

Secure and trustworthy crossing network for transferring assets outside of exchange

Described herein are systems and methods for providing the secure transfer of assets between blockchain networks. The system can include a storage device that can store a bridge program that is programmed to perform (i) lock operations that lock native assets from a first blockchain network and mint synthetic assets representing the native assets in a second blockchain network, and (ii) unlock operations that unlock the native assets by transferring the native assets to an address in the first blockchain network in response to the synthetic assets being returned or destroyed. The system can include a computer system that loads and executes the bridge program in a secure computing enclave that provides a trusted execution environment. The computer system can then perform the lock operations and the unlock operations to provide a bridge between the first blockchain network and the second blockchain network.

Secure and trustworthy bridge for transferring assets across different networks

Described herein is technology for providing the secure transfer of assets between blockchain networks. A secure-execution server can be configured to execute a bridge program in a secure execution environment to interact with a first pool of warden servers to facilitate secure transfer of assets between a first blockchain network and a second blockchain network. The bridge program may include instructions that, when executed by the secure execution environment, cause the secure-execution server to perform operations that may include performing lock operations that lock first assets from a contractless blockchain network and mint second assets representing the first assets in a contracting blockchain network, where the contracting blockchain network supports smart-contracts that are unsupported on the contractless blockchain network; and performing unlock operations that unlock the first assets by transferring the first assets in the first blockchain network in response to the second assets being returned or destroyed.

Secure and trustworthy bridge for transferring assets across networks with different data architecture

Lip balm container

Lip balm dispenser

Growing community of inventors

Brooklyn, NY, United States of America

Michael Edmond Kaplan