Secure computing systems and methods

Patent metadata

Field	Value
Publication number	US-10083277-B2
Application number	US-201715410631-A
Country	US
Kind code	B2
Filing date	Jan 19, 2017
Priority date	May 1, 2014
Publication date	Sep 25, 2018
Grant date	Sep 25, 2018

Abstract

The present disclosure relates to systems and methods for facilitating trusted handling of genomic and/or other sensitive information. Certain embodiments may use a virtualized execution environment to execute code and/or programs that wish to access and/or otherwise use genomic and/or other sensitive information. In some embodiments, data requests from the code and/or programs may be routed through a transparent data access proxy configured to transform requests and/or associated responses to protect the integrity of the genomic and/or other sensitive information.

First claim

What is claimed is:

1. A method for performing trusted computations on sensitive data performed by a system comprising a processor and a non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the system to perform the method, the method comprising:
receiving, by an execution manager executing on the system, a request from a user to perform a computation using a genomic data set;
loading a first program associated with a first part of the computation into a first virtualized execution environment executing on the system;
loading a second program associated with a second part of the computation into a second virtualized execution environment executing on the system, the second virtualized execution environment being different than the first virtualized execution environment;
generating, by the execution manager, first execution context for the first program and second execution context for the second program;
generating, using the first program, a first result to the first part of the computation based on the first execution context;
generating, using the second program, a second result to the second part of the computation based on the second execution context;
generating, using a third program associated with a third part of the computation, a third result responsive to the request from the user based on the first result and the second result; and
sending, to a system associated with the user, the third result.

2. The method of claim 1 , wherein the method further comprises loading the third program into a third virtualized execution environment executing on the system.

3. The method of claim 2 , wherein the method further comprises generating, by the execution manager, third execution context for the third program.

4. The method of claim 3 , whether generating the third result is based on the third execution context.

5. The method of claim 1 , wherein the method further comprises:
receiving, by the execution manager from the third program, the third result, wherein sending the third result to the system associated with the user comprises sending the third result from the execution manager.

6. The method of claim 1 , wherein the first part of the computation is associated with first genomic information of the genomic data set associated with a first individual and the second part of the computation is associated with second genomic information of the genomic data set associated with a second individual.

7. The method of claim 6 , wherein at least one of the first part of the computation and the second part of the computation comprises a determination of whether the first genomic information or the second genomic information comprises a specified variant.

8. The method of claim 7 , wherein at least one of the first result and the second result comprises a Boolean response.

9. The method of claim 1 , wherein at least one of the first virtualized execution environment and the second virtualized execution environment comprises a limited execution environment.

10. The method of claim 1 , wherein at least one of the first virtualized execution environment and the second virtualized execution environment is associated with a different address space than a data store associated with the genomic data set.

11. The method of claim 1 , wherein the genomic data set is associated with a local data store.

12. The method of claim 1 , wherein the genomic data set is associated with a distributed data store.

13. The method of claim 1 , wherein the request from the user comprises a request to access the genomic data set.

14. The method of claim 1 , where at least one of the first execution context and the second execution context comprises a mapping between a first set of identifiers and a second set of identifiers.

15. The method of claim 14 , wherein the first set of identifiers comprises protected actual identifiers associated with the genomic data set and the second set of identifiers comprises ephemeral identifiers accessed by one or more of the first program and the second program.

16. The method of claim 15 , where in the second set of identifiers are generated randomly.

17. The method of claim 16 , wherein the second set of identifiers are generated by applying a function to the first set of identifiers.

18. The method of claim 17 , wherein the function comprises an encryption function.

19. The method of claim 17 , wherein the function comprises a hashing function.

20. The method of claim 1 , wherein the method further comprises sending, from the first program to the execution manager, the first result and sending, from the second program to the execution manager, the second result.

Assignees

• Intertrust Tech Corp

Inventors

• Carey W Knox
• Nilsson Jarl A
• Grantham Bart

Classifications

• G06F19/28 Primary

  Physics · mapped topic

• G06F19/18

  Physics · mapped topic

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G16B50/30 Primary

  Data warehousing; Computing architectures · CPC title

• G16B20/20

  Allele or variant detection, e.g. single nucleotide polymorphism [SNP] detection · CPC title