Microsoft Technology Licensing, LLC

Prasang Upadhyaya

Ramarathnam R Venkatesan

Donald Kossmann

Arvind Arasu

Ravishankar Ramamurthy

Kenneth Hiroshi Eguro

Shriraghav Kaushik

Manas Rajendra Joglekar

Spyridon Blanas

Methods, systems, and computer-readable media are directed towards receiving, at an untrusted component, a query for a data store. The query includes a plurality of data operations. The data store is accessible by the untrusted component. A first proper subset of data operations is determined from the plurality of data operations that do not access sensitive data within the data store. A second proper subset of data operations is determined from the plurality of data operations that access sensitive data within the data store. The first proper subset of data operations is executed, at the untrusted component, to create first results. The second proper subset of data operations is sent to a trusted component for execution. Second results based on the sending the second proper subset of data operations are received from the trusted component. Results to the query are returned based on the first results and the second results.

Secure data processing on sensitive data using trusted hardware

Growing community of inventors

Seattle, WA, United States of America

Prasang Upadhyaya