  This paper introduces AGAPECert, an Auditable, Generalized, Automated,
Privacy-Enabling, Certification framework capable of performing auditable
computation on private data and reporting real-time aggregate certification
status without disclosing underlying private data. AGAPECert utilizes a novel
mix of trusted execution environments, blockchain technologies, and a real-time
graph-based API standard to provide automated, oblivious, and auditable
certification. Our technique allows a privacy-conscious data owner to run
pre-approved Oblivious Smart Contract code in their own environment on their
own private data to produce Private Automated Certifications. These
certifications are verifiable, purely functional transformations of the
available data, enabling a third party to trust that the private data must have
the necessary properties to produce the resulting certification. Recently, a
multitude of solutions for certification and traceability in supply chains have
been proposed. These often suffer from significant privacy issues because they
tend to take a" shared, replicated database" approach: every node in the
network has access to a copy of all relevant data and contract code to
guarantee the integrity and reach consensus, even in the presence of malicious
nodes. In these contexts of certifications that require global coordination,
AGAPECert can include a blockchain to guarantee ordering of events, while
keeping a core privacy model where private data is not shared outside of the
data owner's own platform. AGAPECert contributes an open-source certification
framework that can be adopted in any regulated environment to keep sensitive
data private while enabling a trusted automated workflow.
