IBM, Google, Microsoft le Intel li thehile selekane ho nts'etsapele mahlale a bulehileng a ts'ireletso ea data

Linux Foundation e phatlalalitse ho thehoeng ha khonsotiamo Consortium ea lekunutu ea k'homphieutha, e reretsoeng ho theha mahlale a bulehileng le litekanyetso tse amanang le ts'ebetso e sireletsehileng ea mohopolong le khomphutha ea lekunutu. Morero o kopanetsoeng o se o kopantsoe ke lik'hamphani tse kang Alibaba, Arm, Baidu, Google, IBM, Intel, Tencent le Microsoft, tse ikemiselitseng ho sebetsa 'moho sethaleng sa ho se nke lehlakore ho nts'etsapele mahlale a ho arola data mohopolong nakong ea ts'ebetso ea komporo.

Sepheo sa ho qetela ke ho fana ka mekhoa ea ho tšehetsa potoloho e feletseng ea ts'ebetso ea data ka mokhoa o patiloeng, ntle le ho fumana boitsebiso ka mokhoa o bulehileng ka mekhahlelo ka bomong. Sebaka sa thahasello ea consortium haholo-holo se kenyelletsa mahlale a amanang le ts'ebeliso ea data e patiloeng ts'ebetsong ea likhomphutha, e leng, ts'ebeliso ea li-enclave tse ikhethileng, liprothokholo. multiparty computing, ho qhekella ha data e patiloeng mohopolong le ho arola ka ho feletseng data mohopolong (mohlala, ho thibela mookameli oa tsamaiso ea moamoheli ho fumana data mohopolong oa litsamaiso tsa baeti).

Merero e latelang e fetiselitsoe molemong oa nts'etsopele e ikemetseng joalo ka karolo ea Confidential Computing Consortium:

• Intel e fane ka nts'etsopele e tsoelang pele e kopanetsoeng e butsoeng pele
  likarolo tsa ho sebelisa theknoloji SGX (Software Guard Extensions) ho Linux, ho kenyeletsoa SDK e nang le lisebelisoa le lilaeborari. SGX e etsa tlhahiso ea ho sebelisa sete ea litaelo tse khethehileng tsa processor ho abela libaka tsa memori ea poraefete lits'ebetsong tsa boemo ba basebelisi, tse ka hare ho tsona li kentsoeng ka mokhoa o patehileng 'me li ke ke tsa baloa kapa tsa fetoloa le ke kernel le khoutu e sebetsang ka mekhoa ea ring0, SMM le VMM;

• Microsoft e fane ka moralo Bula Enclav, e u lumellang hore u thehe likopo bakeng sa meaho e fapaneng ea TEE (Trusted Execution Environment) u sebelisa API e le 'ngoe le boemeli bo sa bonahaleng ba enclave. Sesebelisoa se lokiselitsoeng ho sebelisoa Open Enclav se ka sebetsa lits'ebetsong tse nang le ts'ebetso e fapaneng ea enclave. Ho li-TEE, ke Intel SGX feela e tšehetsoang hajoale. Khoutu ea ho tšehetsa ARM TrustZone e ntse e ntlafatsoa. Mabapi le tšehetso ntlha ea motheo, AMD PSP (Platform Security Processor) le AMD SEV (Secure Encryption Virtualization) ha e tlalehoe.
• Red Hat e fane ka morero Enarx, e fanang ka sekhahla sa ho theha lits'ebetso tsa bokahohleng ho sebetsa ka har'a li-enclave tse ts'ehetsang libaka tse fapaneng tsa TEE, tse ikemetseng ka meralo ea lisebelisoa le ho lumella ts'ebeliso ea lipuo tse fapaneng tsa lenaneo (ho sebelisoa nako ea ho sebetsa e thehiloeng ho WebAssembly). Morero hajoale o ts'ehetsa theknoloji ea AMD SEV le Intel SGX.

Har'a merero e ts'oanang e kileng ea hlokomolohuoa, re ka hlokomela moralo botshabelo, e hlahisoang haholo ke baenjiniere ba Google, empa ha e joalo sehlahisoa sa Google se tšehetsoeng ka molao. Moralo ona o u lumella ho ikamahanya le lits'ebetso habonolo ho tsamaisa tse ling tsa ts'ebetso e hlokang ts'ireletso e eketsehileng ka lehlakoreng la sebaka se sirelelitsoeng. Har'a mekhoa ea ho itšehla thajana ho Asylo, ke Intel SGX feela e tšehetsoang, empa mochine oa software oa ho etsa li-enclaves o thehiloeng ho sebelisoa ha virtualization o teng.

Hopola hore enclave (tee, Trusted Execution Environment) e kenyelletsa tokisetso ea processor ea sebaka se ikhethileng se ikhethileng, se u lumellang hore u tsamaise karolo ea ts'ebetso ea lits'ebetso le sistimi ea ts'ebetso sebakeng se arohaneng, likahare tsa memori le khoutu e sebetsang eo ho eona ho sa fihleheng ho tsoa ho tse kholo. tsamaiso, ho sa tsotelehe boemo ba litokelo tse teng. Bakeng sa ts'ebetsong ea bona, ts'ebetsong ea li-algorithms tse fapaneng tsa encryption, mesebetsi ea ho sebetsana le linotlolo tsa poraefete le li-password, mekhoa ea netefatso, le khoutu ea ho sebetsa ka data ea lekunutu e ka fetisetsoa ho enclave.

Haeba tsamaiso e kholo e sekiselitsoe, mohlaseli a ke ke a khona ho fumana boitsebiso bo bolokiloeng ka har'a enclave 'me e tla lekanyetsoa feela ho sebopeho sa software se ka ntle. Tšebeliso ea li-enclave tsa hardware e ka nkoa e le mokhoa o mong oa ho sebelisa mekhoa e thehiloeng ho homomorphic encryption kapa liprothokholo tsa lekunutu tsa komporo, empa ho fapana le mahlale ana, enclave ha e na phello holima lipalo ka data ea lekunutu mme e nolofatsa nts'etsopele haholo.

Source: opennet.ru