# AGAPECert: An Auditable, Generalized, Automated, Privacy-Enabling Certification Framework with Oblivious Smart Contracts

**Authors:** Servio Palacios, Aaron Ault, James V. Krogmeier, Bharat Bhargava, Christopher G. Brinton  
**arXiv:** [2207.12482](https://arxiv.org/abs/2207.12482)  
**Date:** 2022-07-25  
**Summary page:** https://www.summarizepaper.com/en/paper/2207.12482v1/

## Key points

- AGAPECert is a certification framework that allows auditable computation on private data while maintaining privacy.
- The framework uses trusted execution environments, blockchain technologies, and a real-time graph-based API standard to provide automated, oblivious, and auditable certification.
- With AGAPECert, a privacy-conscious data owner can run pre-approved Oblivious Smart Contract code in their own environment on their private data to produce Private Automated Certifications.
- These certifications are verifiable transformations of the available data that enable third parties to trust that the private data has the necessary properties to produce the resulting certification.
- AGAPECert keeps private data within the owner's platform while guaranteeing ordering of events through blockchain technology when global coordination is required.
- The framework contributes an open-source certification solution that can be adopted in any regulated environment to keep sensitive data private while enabling a trusted automated workflow.
- AGAPECert offers a promising avenue for organizations seeking secure ways of sharing sensitive information with third parties without compromising privacy or security.

## Summary

AGAPECert is a novel certification framework that enables auditable computation on private data while maintaining privacy. The framework utilizes trusted execution environments, blockchain technologies, and a real-time graph-based API standard to provide automated, oblivious, and auditable certification. With AGAPECert, a privacy-conscious data owner can run pre-approved Oblivious Smart Contract code in their own environment on their private data to produce Private Automated Certifications. These certifications are verifiable, purely functional transformations of the available data that enable third parties to trust that the private data has the necessary properties to produce the resulting certification. In contrast to other solutions for certification and traceability in supply chains that suffer from significant privacy issues due to their "shared, replicated database" approach where every node in the network has access to all relevant data and contract code, AGAPECert keeps private data within the owner's platform while guaranteeing ordering of events through blockchain technology when global coordination is required. AGAPECert contributes an open-source certification framework that can be adopted in any regulated environment to keep sensitive data private while enabling a trusted automated workflow. This paper introduces AGAPECert as an Auditable, Generalized, Automated, Privacy-Enabling Certification (AGAPECert) framework capable of performing auditable computation on private data and reporting real-time aggregate certification status without disclosing underlying private data. The authors propose this innovative solution as a means of addressing privacy concerns associated with existing solutions for certification and traceability in supply chains while providing an efficient and reliable way of certifying products or services. The proposed framework offers a promising avenue for organizations seeking secure ways of sharing sensitive information with third parties without compromising privacy or security.