Unlock instant, AI-driven research and patent intelligence for your innovation.

WebAssembly model execution engine based on TEE (Trusted Execution Environment)

An execution engine and model technology, applied in the field of model execution engine design, can solve problems such as inability to guarantee the security of programs and data, and easy to be attacked, so as to achieve the effect of convenient invocation, enhanced security and privacy

Active Publication Date: 2020-05-19
HANGZHOU QULIAN TECH CO LTD
View PDF5 Cites 5 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

In open environments such as cloud servers, programs and data run in an untrusted environment, which is vulnerable to attacks and cannot guarantee the security of programs and data

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • WebAssembly model execution engine based on TEE (Trusted Execution Environment)
  • WebAssembly model execution engine based on TEE (Trusted Execution Environment)
  • WebAssembly model execution engine based on TEE (Trusted Execution Environment)

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0010] The WebAssembly model execution engine usually includes function parsing, function execution, memory management, function management function modules and interfaces; the current WebAssembly virtual machine directly runs in a common environment and executes the WebAssembly model without additional protection. In open environments such as cloud servers, programs and data run in untrusted environments, which are vulnerable to attacks and cannot guarantee the security of programs and data. In order to give the WebAssembly model execution engine the feasibility, we use Intel SGX to transform the WebAssembly virtual machine. According to the SGX design specification, the interface includes the trusted layer interface and the untrusted layer interface. The overall architecture design is as follows: figure 1 As shown, the trusted layer interface is used to implement the specific trusted operation of the functional module in SGX; the untrusted layer is used to implement the funct...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a WebAssembly model execution engine based on TEE. The WebAssembly model execution engine comprises a function analysis module, a function execution module, a memory managementmodule, a function management function module and interfaces. The interfaces comprise a credible layer interface and an uncredible layer interface, and the credible layer interface is composed of aninitialization function wam _ init compiled by Rust, a model calling function wam _ call and a closing function wam _ close; wherein the trusted layer interface is used for realizing that the functional module executes specific trusted operation in the SGX; the incredible layer interface is composed of an initialization function init compiled by Rust, a model calling function call, a closing function close and a C header file of a incredible layer compiled by a C language. Wherein the C header file is used for declaring an initialization function init, a model calling function call and a closing function clock, and the function init, the call and the clock are used for functional packaging of corresponding trusted layer codes. According to the WebAssembly model execution engine, the IntelSGX technology is adopted to modify the data sharing model execution engine, it is ensured that data cannot be stolen in the model execution process, and the credible model execution engine is achieved.

Description

technical field [0001] The invention belongs to the field of model execution engine design, and in particular relates to a TEE-based WebAssembly model execution engine. Background technique [0002] The current WebAssembly virtual machine runs directly in the normal environment, executing WebAssembly models without additional protection. In open environments such as cloud servers, programs and data run in untrusted environments, which are vulnerable to attacks and cannot guarantee the security of programs and data. Contents of the invention [0003] Aiming at the deficiencies of the prior art, the present invention proposes a TEE-based WebAssembly model execution engine. The WebAssembly model execution engine is executed in a trusted environment and can effectively guarantee the security of programs and data. [0004] The technical scheme adopted by the present invention is as follows: a TEE-based WebAssembly model execution engine, the WebAssembly model execution engine ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F21/53G06F21/57G06F21/62
CPCG06F21/57G06F21/6245G06F21/53
Inventor 尹可挺匡立中李伟邱炜伟胡为
Owner HANGZHOU QULIAN TECH CO LTD