Ant privacy computing innovation tee technology has won academic recognition

Trusted execution environment （TEE） It is one of the mainstream technologies of privacy Computing , Existing products are usually security boundaries and trusted roots built on specific security hardware , Binding hardware platforms are common 、 Poor versatility 、 Trusted root quilt CPU Manufacturer led 、 Only single operation mode is supported , Lack of flexibility and other issues .

International top academic conference in the field of computer systems USENIX ATC 2022 The annual meeting was held recently . Ant privacy computing innovation TEE Technical research results 《HyperEnclave: An Open and Cross-platform Trusted Execution Environment》 Be included and make a report .HyperEnclave It provides an open and general TEE Solution , Support multiple hardware platforms , Have flexible TEE Application mode , And compatible with existing TEE ecology .

In this paper , Ant privacy computing expounds HyperEnclave Design principle and innovation of .HyperEnclave Use widely supported virtualization technology to build security boundaries , be based on TPM Build trusted roots , It can support the current mainstream hardware architecture , Such as Hygon、AMD and Intel CPU, Avoid binding specific hardware platforms .

in the light of TEE Typical application features ,HyperEnclave There are three kinds of Enclave Operation mode , It can better adapt to computing intensive 、I/O intensive 、 Memory intensive and exception handling intensive applications need . In the development phase ,HyperEnclave Compatible with mainstream TEE Application development ecology , existing TEE Applications can be migrated to... Without or a small amount of code modification HyperEnclave.

HyperEnclave Three modes of operation

One of the current challenges of privacy computing technology is , The improvement of security often leads to the decline of performance , It is more difficult to balance the two . stay TEE Application load performance test ,HyperEnclave In computing intensive (NBench), Memory intensive (SQLite),I/O intensive (lighttpd), mixed type (Redis) And other workloads with different attributes show good performance , Under the same safety level ,HyperEnclave Compared to other TEE Stronger product performance .

TEE Application load performance test

HyperEnclave It is the core technology of ant privacy computing machine ,2021 During the world Internet Conference , Ant group has released the first commercial product of privacy computing all-in-one machine ant chain moss privacy computing all-in-one machine . In terms of opening to the outside world , The combination of science and Technology HyperEnclave Privacy computing all-in-one machine created by integrated solutions , It provides the industry with safe and reliable financial grade TEE Solution .

USENIX ATC It's the Chinese computer society （CCF） recommend A Class meeting , It has been successfully held so far 30 Many times , It has attracted top universities and technology companies from all over the world , This year, we received 393 Contributions , Included articles 64 piece , Acceptance rate only 16.28%.

Since this year, ant privacy computing papers have been selected into the International Summit for many times . Include WWW 2022、AAAI 2022、IJCAI2022、FCCM2022、IEEE S&P 2023 etc. , Ant privacy calculation on differential privacy 、 Privacy protection 、 Safety is the key （PSI）、 Research results of multi-party secure computing and other related technologies .

This article is from WeChat official account. - Alipay Technology （Ant-Techfin）.
If there is any infringement , Please contact the [email protected] Delete .
Participation of this paper “OSC Source creation plan ”, You are welcome to join us , share .