Patent ID: 11893108
Assignee: GOOGLE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 10:
11. A system comprising:
data processing hardware; and
memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed on the data processing hardware cause the data processing hardware to perform operations comprising:
executing a service enclave providing a first interface to a secure execution environment;
receiving, from a client device over a network, a program call via a second interface, the client device and the network external to the service enclave;
encrypting the program call, the encrypted program call comprising cipher text;
establishing a communication tunnel between the second interface and the first interface of the service enclave interfacing with the secure execution environment;
communicating the encrypted program call to the service enclave as encrypted communications through the communication tunnel;
attesting to a key manager external to the communication tunnel; and
after successful attestation to the key manager, obtaining, at the service enclave a decryption key from the key manager for decrypting the encrypted program call.