Patent AU-2019204707-B2 (AU)
Title: Program execution and data proof scheme using multiple key pair signatures
Inventor: YU YIRONG
IPC: G06F21/00
Filed: 2019-03-26
Granted: 2020-10-01
Abstract: INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 
(19) World Intellectual Property 
(1) Organization11111111111111111111111I1111111111111i1111liiiii 
International Bureau (10) International Publication Number 
(43) International Publication Date W O 2019/120317 A2 
27 June 2019 (27.06.2019) W IPO I PCT 
(51) InternationalPatent Classification: (81) Designated States (unless otherwise indicated, for every 
Not classified kind ofnational protection available): AE, AG, AL, AM, 
(21) International Application Number: AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, 
PCT/CN2019/079715 CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, 
DZ, EC, EE, EG, ES, Fl, GB, GD, GE, GH, GM, GT, HN, 
(22) International Filing Date: HR, HU, ID, IL, IN, IR, IS, JO, JP, KE, KG, KH, KN, KP, 
26 March 2019 (26.03.2019) KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, 
MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, 
(25)FilingOLanguage: English M, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, 
(26) Publication Language: English SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, 
(71) Applicant: ALIBABA GROUP HOLDING LIMITED TR, TT, TZ, UA, UG, US, UZ, VC, VN, 
ZA, ZM, ZW.  
[-/CN]; Fourth Floor, One Capital Place, P.O. BOX 847, (84) Designated States (unless otherwise indicated, for every 
George Town, Grand Cayman (KY). kind of regional protection available): ARIPO (BW, GH, 
GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, 
(72) Inventors: YU, Yirong; Alibaba Group Legal Department UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, 
5/F, Building 3, No. 969 West Wen Yi Road, Yu Hang Dis- TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, 
trict, Hangzhou, Zhejiang 311121 (CN). QIU, Honglin; Al- EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, 
ibaba Group Legal Department 5/F, Building 3, No. 969 MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, 
West Wen Yi Road, Yu Hang District, Hangzhou, Zhejiang TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, 
311121 (CN). KM, ML, MR, NE, SN, TD, TG).  
(74) Agent: BEIJING BESTIPR INTELLECTUAL PROP
ERTY LAW CORPORATION; Room 409, Tower B, Ka 
Wah Building, No. 9 Shangdi 3rd Street, Haidian District, 
Beijing 100085 (CN).  
(54) Title: PROGRAM EXECUTION AND DATA PROOF SCHEME USING MULTIPLE KEY PAIR SIGNATURES 
(57) Abstract: Methods, systems, and apparatus, including computer 
300 programs encoded on computer storage media for program execution and 
data proof scheme to prove that sub-logic code that was expected to be 
executed within a TEE was indeed executed, and that the resulting data is 
Attestation Evidence 322 trustworthy. In some implementations, each sub-logic code of a plurality 
Measurement Value - of sub-logic code is registered, and stored within the TEE, and a key pair 
Public Key 324 (private key, public key) corresponding to the sub-logic code is generat
Pbce326 ed. The client receives and stores the public key, sends requests to the 
Signature TEE with an identifier of the sub-logic that is to be executed. The sub
308 310 logic code corresponding to the identifier is executed within the TEE, 
which signs the result using a digital signature that is generated using the 
Client i Node private key of the sub-logic code. The client verifies the result based on 
T EE | the digital signature and the public key of the sub-logic code.  
AVIR32 
Attestation Evidence -334 
Verification Result 
312 Signature 
A ttestation 336 
FIG. 3
W O 2019/120317 A2||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| 
Published: 
- upon request of the applicant, before the expiration of the 
time limit referred to in Article 21(2)(a) 
- without international search report and to be republished 
upon receipt of that report (Rule 48.2(g))