The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Oct. 17, 2017

Filed:

Feb. 07, 2014
Applicant:

Microsoft Corporation, Redmond, WA (US);

Inventors:

Manuel Costa, Cambridge, GB;

Felix Schuster, Bochum, DE;

Cedric Fournet, Cambridge, GB;

Christos Gkantsidis, Ely, GB;

Marcus Peinado, Bellevue, WA (US);

Antony Ian Taylor Rowstron, Cambridge, GB;

Assignee:
Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 9/32 (2006.01); G06F 21/44 (2013.01); H04L 29/06 (2006.01); G06F 21/57 (2013.01);
U.S. Cl.
CPC ...
G06F 21/445 (2013.01); G06F 21/57 (2013.01); H04L 63/0823 (2013.01); H04L 63/12 (2013.01);
Abstract

Methods for enforcing confidentiality and integrity of code and data while running the code over the data in a distributed computing system are described. In an embodiment each machine which processes data within the system provides a secure sub-system which is protected from other parts of the machine and which receives encrypted data and encrypted code, processes the data using the received code and outputs encrypted data. When establishing the secure sub-systems, keys are exchanged between the client and secure sub-systems and the secure sub-systems provide an attestation confirming the identity of the code running in the secure sub-systems and confirming that the code is running on genuine secure sub-systems. In another embodiment a data-flow computation system is described in which chunks of input data, each comprising an identifier, are authenticated/encrypted. The identifiers are used within the system to confirm that each chunk is processed exactly once.


Find Patent Forward Citations

Loading…