This dataset counts 1,437 published patent families filed between 2015 and the 2026 data cut-off, matched against terms covering trusted execution environments, secure enclaves and confidential computing together with memory encryption, remote attestation, performance overhead, side-channel resistance and multi-party data handling. Filing rose from 43 families in 2017 to a peak of 228 in 2020, then declined toward 16 in the most recent, still-incomplete year. Because publication lags filing by roughly 18 months, the true count for the last one to two years will be higher once later filings publish.

The assignee ranking is dominated by large technology and cloud vendors and their affiliated entities, several of which appear as separate but related filers under the same corporate group. Recent-year momentum data shows that even the most active of these filers is currently in decline year-on-year, and several others show zero filings in the latest year. That combination — large historical portfolios with cooling recent activity — suggests the core claim space has already been staked out rather than being actively contested.

No, not on the evidence here: filing peaked at 228 families in 2020, sat at 147 by 2022, and has fallen since, with the latest year showing only 16 filings. Some of that recent drop reflects publication lag rather than a genuine stop in filing activity, since patents filed in 2025 and 2026 may not yet be published. Still, the multi-year decline from the 2020 peak, well before the lag window, points to a real slowdown in new filing rather than purely a reporting artefact.

The IPC composition shows heavy concentration in G06F (1,116 records) and H04L (802), with G06Q, G06N, H04W, G06T, G09C and G05B each carrying far fewer filings. That gap suggests thinner claim density around AI-model attestation inside enclaves, multi-party data handling across federated TEEs, and lightweight attestation schemes for wireless or edge devices. A first claim in one of these adjacent branches is more likely to clear prior art than another claim on core enclave provisioning or attestation mechanics, provided it is drafted around a genuine technical contribution in that specific branch.

US20210397698A1 covers a two-stage remote attestation method for a trusted execution environment created inside a virtualized computing instance: a trusted bootloader appliance provisions the TEE in response to a software process's request, the host hardware platform attests the bootloader appliance first, and a second attestation stage then covers the provisioned environment itself. Anyone building attestation flows for virtualized or cloud-hosted enclaves should read the claims closely, since the two-stage bootloader-then-environment structure is the specific mechanism at issue, not remote attestation in general. Designing around it typically means moving to a single-stage attestation flow or attesting the environment directly without an intermediate bootloader appliance stage.