Open Access Open Access  Restricted Access Subscription Access

Confidential Computing in Edge-Cloud Hierarchy


Affiliations
1 Institute for Informatics and Automation Problems of NAS RA, Yerevan, Armenia
2 Synopsys, Armenia
 

"The paper introduces confidential computing approaches focused on protecting hierarchical data within edge-cloud network. Edge-cloud network suggests splitting and sharing data between the main cloud and the range of networks near the endpoint devices. The proposed solutions allow data in this two-level hierarchy to be protected via embedding traditional encryption at rest and in transit while leaving the remaining security issues, such as sensitive data and operations in use, in the scope of trusted execution environment. Hierarchical data for each network device are linked and identified through distinct paths between edge and main cloud using individual blockchain. Methods for data and cryptographic key splitting between the edge and the main cloud are based on strong authentication techniques ensuring the shared data confidentiality, integrity and availability.

Keywords

Edge-Cloud Architecture, Hierarchical Data, Confidential Computing, Key Splitting, Authentication, Blockchain.
User
Notifications
Font Size


  • Confidential Computing in Edge-Cloud Hierarchy

Abstract Views: 288  |  PDF Views: 158

Authors

Yeghisabet Alaverdyan
Institute for Informatics and Automation Problems of NAS RA, Yerevan, Armenia
Suren Poghosyan
Institute for Informatics and Automation Problems of NAS RA, Yerevan, Armenia
Vahagn Poghosyans
Synopsys, Armenia

Abstract


"The paper introduces confidential computing approaches focused on protecting hierarchical data within edge-cloud network. Edge-cloud network suggests splitting and sharing data between the main cloud and the range of networks near the endpoint devices. The proposed solutions allow data in this two-level hierarchy to be protected via embedding traditional encryption at rest and in transit while leaving the remaining security issues, such as sensitive data and operations in use, in the scope of trusted execution environment. Hierarchical data for each network device are linked and identified through distinct paths between edge and main cloud using individual blockchain. Methods for data and cryptographic key splitting between the edge and the main cloud are based on strong authentication techniques ensuring the shared data confidentiality, integrity and availability.

Keywords


Edge-Cloud Architecture, Hierarchical Data, Confidential Computing, Key Splitting, Authentication, Blockchain.

References