Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for using cryptographic proofs with attestation data. One of the methods includes maintaining attestation data for a source system; generating an attestation result using a result of verifying, using an attestation process, the attestation data for the source system; generating, using a cryptographic proving key and data for the verification process, a cryptographic proof that indicates whether the verification process was correctly executed; and providing, to a recipient system, the attestation result and the cryptographic proof.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for data collaboration. One of the methods includes executing a first data collaboration stage, comprising: obtaining a collection of data from a first entity; generating synthetic data from the collection of data; and generating, by a second entity, code defining one or more operations or queries executable on the collection of data and evaluated with respect to the synthetic data; and executing a second data collaboration stage, comprising: executing the code generated by the second entity in a secure execution environment, including executing one or more operations on the collection of data to generate one or more corresponding output results; and providing the output results to the second entity.

Abstract: This specification describes technologies for limiting usage of protected data to specified purposes. One method incudes loading a workload image encoding snapshot of a software application into a virtual environment for execution; providing a unique identifier of the workload image to a database system storing registered unique identifiers of workload images that have been sanitized; obtaining, from the database system, a purpose token signed by the purpose key associated with the purpose label; requesting a set of protected data from a data repository using the purpose token, wherein the purpose token is used to verify that the corresponding workload image with the matching registered unique identifier is permitted to access the set of protected data tagged with the one or more purpose labels; receiving, from the data repository, the set of protected data accessible by the software application when the executable snapshot is executed in the virtual environment.

Abstract: In function-as-a-service (FaaS) environments, a client makes use of a function executing within a trusted execution environment (TEE) on a FaaS server. Multiple tenants of the FaaS platform may provide functions to be executed by the FaaS platform via a gateway. Each tenant may provide code and data for any number of functions to be executed within any number of TEEs on the FaaS platform and accessed via the gateway. Additionally, each tenant may provide code and data for a single surrogate attester TEE. The client devices of the tenant use the surrogate attester TEE to attest each of the other TEEs of the tenant and establish trust with the functions in those TEEs. Once the functions have been attested, the client devices have confidence that the other TEEs of the tenant are running on the same platform as the gateway.

Abstract: In function-as-a-service (FaaS) environments, a client makes use of a function executing within a trusted execution environment (TEE) on a FaaS server. Multiple tenants of the FaaS platform may provide functions to be executed by the FaaS platform via a gateway. Each tenant may provide code and data for any number of functions to be executed within any number of TEEs on the FaaS platform and accessed via the gateway. Additionally, each tenant may provide code and data for a single surrogate attester TEE. The client devices of the tenant use the surrogate attester TEE to attest each of the other TEEs of the tenant and establish trust with the functions in those TEEs. Once the functions have been attested, the client devices have confidence that the other TEEs of the tenant are running on the same platform as the gateway.