US 11,934,540 B2
System and method for multiparty secure computing platform
Edison U. Ortiz, Orlando, FL (US); Arya Pourtabatabaie, Orlando, FL (US); Ambica Pawan Khandavilli, Orlando, FL (US); Margaret Inez Salter, Orlando, FL (US); Jordan Alexander Richards, Orlando, FL (US); Iustina-Miruna Vintila, Bucharest (RO); David Ian McKay, Toronto (CA); Christoph Knoess, Sag Harbor, NY (US); and Justin Simonelis, Toronto (CA)
Assigned to ROYAL BANK OF CANADA, Toronto (CA)
Filed by ROYAL BANK OF CANADA, Toronto (CA)
Filed on Sep. 13, 2021, as Appl. No. 17/474,012.
Application 17/474,012 is a continuation in part of application No. 17/169,221, filed on Feb. 5, 2021.
Application 17/169,221 is a continuation of application No. 16/424,242, filed on May 28, 2019, granted, now 10,956,585, issued on Mar. 22, 2021.
Claims priority of provisional application 63/189,611, filed on May 17, 2021.
Claims priority of provisional application 63/164,444, filed on Mar. 22, 2021.
Claims priority of provisional application 63/141,788, filed on Jan. 26, 2021.
Claims priority of provisional application 63/130,540, filed on Dec. 24, 2020.
Claims priority of provisional application 63/077,368, filed on Sep. 11, 2020.
Claims priority of provisional application 63/077,373, filed on Sep. 11, 2020.
Claims priority of provisional application 62/824,697, filed on Mar. 27, 2019.
Claims priority of provisional application 62/806,394, filed on Feb. 15, 2019.
Claims priority of provisional application 62/697,140, filed on Jul. 12, 2018.
Claims priority of provisional application 62/691,406, filed on Jun. 28, 2018.
Claims priority of provisional application 62/677,133, filed on May 28, 2018.
Prior Publication US 2022/0108026 A1, Apr. 7, 2022
Int. Cl. H04L 29/06 (2006.01); G06F 12/14 (2006.01); G06F 21/60 (2013.01); G06N 20/00 (2019.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01)
CPC G06F 21/602 (2013.01) [G06F 12/1408 (2013.01); G06N 20/00 (2019.01); H04L 9/0844 (2013.01); H04L 9/321 (2013.01); H04L 9/3247 (2013.01); G06F 2212/1052 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer implemented system for operating a trusted execution environment maintaining a segregated data processing subsystem:
a computer readable memory having a protected memory region that is encrypted such that it is inaccessible to both an operating system and kernel system, the protected memory region including at least a data storage region and a data processing subsystem storage region maintaining the segregated data processing subsystem;
a computer readable cache memory; and
a secure enclave data processor operating a data custodian data process for automated policy enforcement of one or more data protection policies, the data custodian data process configured to:
receive a query data object representing a proposed query to be operated on one or more protected database elements having access controlled by the segregated data processing subsystem on the protected memory region;
apply the one or more data protection policies operable on the query data object to determine whether the query data object adheres to the one or more data protection policies;
upon a determination that the query data object adheres to the one or more data protection policies, provide a control message to an attestation process to validate that the data custodian data process is operating on the secure enclave data processor and to receive an attestation token data object from the attestation process;
transmit the attestation token data object to release one or more data protection keys; and
access the one or more protected database elements using the data protection keys and cause execution of the proposed query to receive a query response data object.