Patent ID: 8621649

Claim:
A method of providing a security-sensitive environment, the method comprising: establishing a first secure channel from a trusted server to a first data source through which the trusted server is able to access the first data source; establishing a second secure channel from the trusted server to a second data source through which the trusted server is able to access the second data source; and while the trusted server performs a set of collaborative operations in which the trusted server (i) accesses the first data source through the first secure channel (ii) accesses the second data source through the second secure channel, and (iii) generates a set of collaborative results based on information from the first and second data sources, running a set of security policy compliance operations in the trusted server to inhibit unauthorized leakage of data in the set of collaborative results; wherein running the set of security policy compliance operations in the trusted server includes: partitioning the set of collaborative operations to un-correlate the set of collaborative results; and wherein partitioning the set of collaborative operations includes: while the trusted server performs the set of collaborative operations as a series, resetting the trusted server to an initial state between each collaborative operation to prevent formation of correlated data across multiple collaborative operations.