PROVABLE TRACEABILITY

• US 20170091467A1
• Filed: 09/25/2015
• Published: 03/30/2017
• Est. Priority Date: 09/25/2015
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Pogorelik, Oleg, Nayshtut, Alex, Smith, Ned M., Muttik, Igor, Ben-Shalom, Omer
• Granted Patent: US 10,318,746 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06F 40/166 Editing, e.g. inserting or deleting

Abstract

There is disclosed in an example, a computing apparatus, including: a trusted execution environment (TEE); and one or more logic elements providing a collaboration engine within the TEE, operable to: receive a change to a secured document via a trusted channel; apply a change to the secured document; log the change to a ledger; and display the document to a client device via a protected audio-video path (PAVP). There is also disclosed a method of providing a collaboration engine, and a computer-readable medium having stored thereon executable instructions for providing a collaboration engine.

Claims

1. A computing device, comprising:

a trusted execution environment (TEE); and

one or more logic elements comprising a collaboration engine within the TEE, operable to;

receive a change to a secured document via a trusted channel;

apply a change to the secured document; and

log the change to a ledger.

2. The computing apparatus of claim 1 wherein logging the change to the ledger comprises hashing the change and logging the hash to the ledger.

3. The computing apparatus of claim 2, wherein the ledger is a public block chain.

4. The computing apparatus of claim 1, wherein the collaboration engine is further operable to render the document and export a display of the document via a protected audio-video path (PAVP).

5. The computing apparatus of claim 4, wherein the PAVP is configured to be logically disposed between the computing apparatus and an end user.

6. The computing apparatus of claim 1, wherein the collaboration engine is further operable to include a time stamp in the change log.

7. The computing apparatus of claim 1, wherein the collaboration engine is further operable to log a user authentication indicium.

8. The computing apparatus of claim 7, wherein the user authentication indicium comprises an authentication type and strength.

9. The computing apparatus of claim 1, wherein the collaboration engine is further operable to apply the change to a baseline of the document, and construct a current document state at least partially from the change and the baseline.

10. The computing apparatus of claim 1, wherein the collaboration engine is further configured to perform key management.

11. The computing apparatus of claim 10, wherein the collaboration engine is further configured to manage diverse keys.

12. The computing apparatus of claim 1, wherein the collaboration engine is further configured to provide user privacy via direct anonymous attribution.

13. One or more tangible, non-transitory computer-readable mediums having stored thereon executable instructions for providing a collaboration engine within a trusted execution environment (TEE), the collaboration engine operable to:

receive a change to a secured document via a trusted channel;

apply a change to the secured document; and

log the change to a ledger.

14. The one or more tangible, non-transitory computer-readable mediums of claim 13, wherein logging the change to the ledger comprises hashing the change and logging the hash to the ledger.

15. The one or more tangible, non-transitory computer-readable mediums of claim 14, wherein the ledger is a public block chain.

16. The one or more tangible, non-transitory computer-readable mediums of claim 13, wherein the collaboration engine is further operable to render the document and export a display of the document via a protected audio-video path (PAVP).

17. The one or more tangible, non-transitory computer-readable mediums of claim 16, wherein the PAVP is configured to be logically disposed between the computing apparatus and an end user.

18. The one or more tangible, non-transitory computer-readable mediums of claim 13, wherein the collaboration engine is further operable to include a time stamp in the change log.

19. The one or more tangible, non-transitory computer-readable mediums of claim 13, wherein the collaboration engine is further operable to log a user authentication indicium.

20. The one or more tangible, non-transitory computer-readable mediums of claim 19, wherein the user authentication indicium comprises an authentication type and strength.

21. The one or more tangible, non-transitory computer-readable mediums of claim 13, wherein the collaboration engine is further operable to apply the change to a baseline of the document, and construct a current document state at least partially from the change and the baseline.

22. The one or more tangible, non-transitory computer-readable mediums of claim 13, wherein the collaboration engine is further configured to perform key management.

23. The one or more tangible, non-transitory computer-readable mediums of claim 22, wherein the collaboration engine is further configured to manage diverse keys.

24. A computing apparatus comprising:

a trusted execution environment (TEE); and

one or more logic elements comprising a collaboration application, operable to;

receive a data stream representing a document over a protected audio-video path (PAVP); and

display the document to a user.

25. The computing apparatus of claim 24, wherein the collaboration application is further configured to:

authenticate the user;

receive a change to the document from the user; and

send a change instruction via a secure channel, the change instruction comprising a substantive change and metadata.