Patent AU-2019207312-B2 (AU)
Title: Distributed key management for trusted execution environments
Inventor: WEI CHANGZHENG
IPC: G06F21/53
Filed: 2019-04-26
Granted: 2020-06-25
Abstract: (12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property (1) Organization11111111111111111111111I1111111111111i1111liiiii International Bureau (10) International Publication Number (43) International Publication Date W O 2019/137565 A2 18 July 2019 (18.07.2019) W IPO I PCT (51) International Patent Classification: (74) Agent: BEIJING BESTIPR INTELLECTUAL PROP Not classified ERTY LAW CORPORATION; Room 409, Tower B, Ka (21) International Application Number: Wal Building, No. 9 Shangdi 3rd Street, Haidian District, PCT/CN2019/084530 Beijing 100085 (CN). (22) International Filing Date: (81) Designated States (unless otherwise indicated, for every 26 April 2019 (26.04.2019) kind ofnational protection available): AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, (25) Filing Language: English CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, (26)PublicationLanguage: English HR, HU, ID, IL, IN, IR, IS, JO, JP, KE, KG, KH, KN, KP, (71) Applicant: ALIBABA GROUP HOLDING LIMITED KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, [-/CN]; Fourth Floor, One Capital Place, P.O. BOX 847, MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, George Town, Grand Cayman (KY). OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, (72) Inventors: WEI, Changzheng; Alibaba Group Legal De- SC, SD, SE, S, G, S, S , S , SV, SYTH, TJ,TM, TN, partment 5/F, Building 3, No.969 West Wen Yi Road, Yu TR,TT,TZUA,UG,US,UZVC,VNZA,ZMZW. Hang District, Hangzhou, Zhejiang 311121 (CN). YAN, (84) Designated States (unless otherwise indicated, for every Ying; Alibaba Group Legal Department 5/F, Building 3, kind of regional protection available): ARIPO (BW, GH, No.969 West Wen Yi Road, Yu Hang District, Hangzhou, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, Zhejiang 311121 (CN). ZHAO, Boran; Alibaba Group UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, Legal Department 5/F, Building 3, No.969 West Wen Yi TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, Road, YuHangDistrict, Hangzhou, Zhejiang 311121 (CN). EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, SONG, Xuyang; Alibaba Group Legal Department 5/F, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, Building 3, No.969 West Wen Yi Road, Yu Hang District, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, Hangzhou, Zhejiang 311121 (CN). KM, ML, MR, NE, SN, TD, TG). (54) Title: DISTRIBUTED KEY MANAGEMENT FOR TRUSTED EXECUTION ENVIRONMENTS (57) Abstract: Disclosed herein are methods, systems, and apparatus, includ 300 ing computer programs encoded on computer storage media, for securely ex ecuting smart contract operations in a trusted execution environment (TEE). One of the methods includes establishing, by a key management (KM) TEE of SmartContract -330 a KM node, a trust relationship with a plurality of KM TEEs in a plurality of ServiceLogic RMnodes based on performing mutual attestations with the plurality of KM TEEs; initiating a consensus process with the plurality of KM TEEs for reach ing consensus on providing one or more encryption keys to a service TEE of the KM node; in response to reaching the consensus with the plurality of KM 304a 304b 304c 304d TEEs, initiating a local attestation process with a service TEE in the KM node; Node i Node2 Noce3 NodeN determining that the local attestation process is successful; and in response to determining that the local attestation process is successful, providing one or - more encryption keys to the TEE executing on the computing device. 308a 306b 306c 308d Remote Attestationi Key Deployment FIG. 3 Key Management Coer 1 W O 20 19/13 7565 A 2 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| Published: - upon request of the applicant, before the expiration of the time limit referred to in Article 21(2)(a) - without international search report and to be republished upon receipt of that report (Rule 48.2(g))