Program execution system, data processing apparatus, program execution method and program
A program execution system includes a data holding apparatus, a program providing apparatus, and a data processing apparatus that performs computing in a secure region. The data holding apparatus transmits encrypted data, encrypted with a first common key, to the data processing apparatus, and the program providing apparatus transmits an encrypted program, encrypted with a second common key, to the data processing apparatus. In the secure region, the data processing apparatus acquires data by decrypting the encrypted data with the first common key, acquires a program by decrypting the encrypted program with the second common key, executes the program for the data, and encrypts a result of the execution with a public key of the data holding apparatus or the first common key. The data holding apparatus acquires the result of the execution by decrypting the encrypted result of the execution with a secret key or the first common key.
1. A program execution system comprising:
a data holding apparatus; a program providing apparatus; and a data processing apparatus having a mechanism that performs secret computing in a secure region,
wherein
the data holding apparatus transmits encrypted data to the data processing apparatus, and the program providing apparatus transmits an encrypted program to the data processing apparatus, the encrypted data being encrypted with a first common key, the encrypted program being encrypted with a second common key,
in the secure region, the data processing apparatus acquires data by decrypting the encrypted data transmitted by the data holding apparatus with the first common key, acquires a program by decrypting the encrypted program transmitted by the program providing apparatus with the second common key, executes the program acquired by decrypting the encrypted program transmitted by the program providing apparatus for the data acquired by decrypting the encrypted data transmitted by the data holding apparatus, and encrypts a result of the execution with a public key of the data holding apparatus or the first common key,
the data processing apparatus transmits the encrypted result of the execution to the data holding apparatus, and
the data holding apparatus acquires the result of the execution by decrypting the encrypted result of the execution with a secret key or the first common key.
2. The program execution system according to claim 1 , wherein
the data processing apparatus executes an application including an interpreter, to activate the secure region including the encrypted program, and cause the interpreter to interpret the decrypted program.
3. The program execution system according to claim 1 , wherein
the data processing apparatus discards the data and the result of the execution after executing the program in the secure region.
4. A data processing apparatus in a program execution system that includes a data holding apparatus, a program providing apparatus, and the data processing apparatus having a mechanism that performs secret computing in a secure region,
the data processing apparatus comprising:
a memory; and
a processor coupled to the memory and configured to
receive encrypted data encrypted with a first common key from the data holding apparatus, and receive an encrypted program encrypted with a second common key from the program providing apparatus;
acquire data by decrypting the encrypted data transmitted by the data holding apparatus with the first common key, acquire a program by decrypting the encrypted program transmitted by the program providing apparatus with the second common key, execute the program acquired by decrypting the encrypted program transmitted by the program providing apparatus for the data acquired by decrypting the encrypted data transmitted by the data holding apparatus, and encrypt a result of the execution with a public key of the data holding apparatus or the first common key in the secure region; and
transmit the encrypted result of the execution to the data holding apparatus.
5. A non-transitory computer-readable storage medium storing a program for causing a computer to function as the data processing apparatus according to claim 4 .
6. A program execution method in a program execution system that includes a data holding apparatus, a program providing apparatus, and a data processing apparatus having a mechanism that performs secret computing in a secure region, the program execution method comprising:
causing the data holding apparatus to transmit encrypted data to the data processing apparatus and the program providing apparatus to transmit an encrypted program to the data processing apparatus, the encrypted data being encrypted with a first common key, the encrypted program being encrypted with a second common key,
causing, in the secure region, the data processing apparatus to acquire data by decrypting the encrypted data transmitted by the data holding apparatus with the first common key, acquire a program by decrypting the encrypted program acquired by decrypting the encrypted program transmitted by the program providing apparatus with the second common key, execute the program transmitted by the program providing apparatus for the data acquired by decrypting the encrypted data transmitted by the data holding apparatus, and encrypt a result of the execution with a public key of the data holding apparatus or the first common key,
causing the data processing apparatus to transmit the encrypted result of the execution to the data holding apparatus, and
causing the data holding apparatus to acquire the result of the execution by decrypting the encrypted result of the execution with a secret key or the first common key.