Nokia Technologies Oy

Wenxiu Ding

Zheng Yan

Wei Sun

Example embodiments of the present disclosure relate to verifiability for execution in a trusted execution environment (TEE). According to a method, a request for execution of a task is transmitted by a first apparatus and to a second apparatus, the task comprising a plurality of functions to be executed. A first validation key is generated from identification information of the plurality of functions based on an expected execution plan in at least one trusted execution environment of the second apparatus. An execution result for the task and a second validation key are received from the second apparatus. Correctness of the execution result is determined by comparing the first validation key with the second validation key. Through the solution, it is possible to provide the verifiability of the correctness of the execution result returned by the remote apparatus and achieves high performance on security, trust, and privacy.

Verifiability for execution in trusted execution environment

Method and apparatus are disclosed for homomorphic re-encryption schemes in a system comprising a cloud service provider (CSP), a third authorized party (TAP), a data requestor (DR) and a plurality of data providers (DPs). According to an embodiment, a method implemented at a CSP comprises: in response to a request from a TAP, obtaining from a plurality of DPs cipher texts of their respective data, based on the request, wherein each DP is able to homomorphically encrypt its data; analyzing the cipher texts; and sending the analyzing result to the TAP, wherein the TAP is able to re-encrypt the analyzing result, such that a DR can decrypt the re-encrypted analyzing result with the DR's secret key. According to another embodiment, a method implemented at a CSP comprises: collecting from a plurality of DPs cipher texts of their respective data, wherein each DP is able to homomorphically encrypt its data; analyzing the cipher texts; in response to a request from a TAP, encrypting the analyzing result; and sending the encrypted analyzing result to the TAP, wherein the TAP is able to re-encrypt the encrypted analyzing result, such that a DR can decrypt the re-encrypted analyzing result with the DR's secret key.

Growing community of inventors

Xi'an, China

Wenxiu Ding