Sistema que comprende un modulo de recepcion capaz de recibir comandos de ambiente de ejecucion de confianza emitidos por una pluralidad de entidades, un procesador de seguridad configurado para realizar una pluralidad de procesos criptograficos y de seguridad en claves y conjuntos de datos protegidos, y un modulo de manejo de cuenta configurado para mantener una pluralidad de cuentas protegidas; producto de programa de computadora

摘要

A system that includes an account management module configured to maintain protected accounts. For instance, a particular protected account includes a protected data set that is not readable outside of the system, and perhaps not even readable outside of the account. The particular data set corresponds to a particular entity assigned to the particular account and that includes keys corresponding to the particular entity. A security processor uses at least some of the plurality of keys to perform cryptographic processes in response to one or more trusted execution environment commands received from the particular entity.