公开(公告)号：US20240291650A1

公开(公告)日：2024-08-29

申请号：US18573384

申请日：2023-02-15

Applicant: GOOGLE LLC

Inventor： Carlos Cela ,  John Tobler ,  Brian Burdick ,  Branton Horsley ,  Mayank Patel ,  Chanda Patel ,  Asela Gunawardana

IPC: H04L9/08 ,  G06F21/53 ,  H04L9/30 ,  H04L9/32

CPC classification number: H04L9/088 ,  G06F21/53 ,  H04L9/30 ,  H04L9/3236 ,  G06F2221/034

Abstract: The techniques disclosed herein provide a secure control plane (SCP), which in turn provides an isolated secure execution environment for a data plane (DP). Any arbitrary business logic can execute within the DP, and all sensitive data traversing the SCP and entering the DP is encrypted. Split keys generated outside the DP are assembled within, and only within, the DP, where they are used to decrypt sensitive data, enabling the business logic to perform computations using the sensitive data within the secure execution environment. The DP also provides attestation for the business logic executing within the DP, enabling outside parties to verify that the deployed business logic matches published logic. In the event of proprietary logic that is not published, techniques are also disclosed herein that enable verification that proprietary business logic deployed on the DP adheres to security policies.

公开(公告)号：US20250094561A1

公开(公告)日：2025-03-20

申请号：US18573374

申请日：2023-07-24

Applicant: GOOGLE LLC

Inventor： Carlos Cela ,  John Tobler ,  Eugene Shaphir ,  Chanda Patel ,  Quaseer Mujawar ,  Farshid Shariatzadeh ,  Dina Kurman ,  Minh Hoang

IPC: G06F21/53

Abstract: To performing a join operation, a module executing in a trusted execution environment (TEE) receives a first dataset including personal identifiable information (PII) data and non-PII data from a first-party (1P) data source. The module pre-processes the PII data to generate first formatted PII data, the first formatted PII data conforming to a predefined format: matches, in the TEE, the first formatted PII data to second formatted PII data included in a second dataset: performs a join operation between the first dataset and the second dataset based on the matching, to generate a joined dataset: and provides, to a data service operating independently of the 1P data source, the joined dataset.