CPC G06F 21/57 (2013.01) [G06F 9/45558 (2013.01); G06F 21/64 (2013.01); H04L 9/3236 (2013.01); H04L 9/3247 (2013.01); G06F 2009/45587 (2013.01); G06F 2221/034 (2013.01); G06Q 30/018 (2013.01); G16H 40/20 (2018.01); G16H 40/67 (2018.01)] | 29 Claims |
1. A data processing apparatus comprising:
an input policy filter configured to receive input data and an input provenance that relates to the input data, and to forward some or all of the input data and the input provenance according to at least one input policy;
a processing environment configured to receive the input data forwarded by the input policy filter and to process the input data to generate output data;
a management environment configured to produce an attestation of the processing environment and to produce an output provenance based on the input provenance and the attestation; and
an output policy filter configured to receive the output data and the output provenance and to forward the output data and the output provenance according to at least one output policy, wherein
the input provenance is cryptographically signed, and
the management environment causes the attestation of the processing environment to be cryptographically signed.
|