Data security protection method and system for large model training

By deploying the Data Vault (TA) application in a Trusted Execution Environment (TA) and building an end-to-end secure data access control link, the security issues of sensitive data in large model training are solved, hardware-level isolation and real-time encryption protection are achieved, and data security is improved.

CN121580437APending Publication Date: 2026-02-27PANOVASIC TECHNOLOGY CO LTD
0 Cites 2 Cited by

Patent Information

Application Number
CN202511764781.6
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-11-27
Publication Date
2026-02-27

AI Technical Summary

Technical Problem

During the training of large models, the security of sensitive data faces challenges such as long attack chains, wide attack surfaces, and blurred trust boundaries. Traditional security management solutions lack hardware-level isolation and effective supervision of internal operations and maintenance personnel who illegally steal data.

Method used

Deploy the Data Vault TA application in a Trusted Execution Environment (TEE) to work in conjunction with a custom virtual file system driver on the host side to build an end-to-end encrypted data access control link. Submit metrics to a remote verification service through the Data Vault TA application to verify the trustworthiness of the TEE environment, generate encryption keys, and perform encryption and decryption of sensitive data in the TEE.

Benefits of technology

It achieves hardware-level isolation and real-time encryption protection for sensitive data, prevents data theft from memory and storage media, ensures that data is not obtained by unauthorized users in plaintext form, and improves the security of large model training.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention discloses a data security protection method and system for large model training. The core of the method is that a data safe box trusted application (TA application) is deployed in a trusted execution environment (TEE) and cooperatively works with a user-defined virtual file system driver at a host machine side, so that an end-to-end secret state data access control link is constructed. Before encryption protection of sensitive data, a measurement value (including code hash, configuration parameters and a runtime state) of a current TEE instance is submitted to a remote verification service through a data safe box TA application, and the verification service only sends the measurement value (including code hash, configuration parameters and a runtime state) of the current TEE instance to the remote verification service after confirming that the TEE environment meets a preset security policy (such as a kernel version, a software version and configuration parameter compliance). And generating a secret key encrypted by a custom virtual file system on a host machine side through derivation. And malicious copying of a system memory and a storage medium is prevented, so that the traditional attack defense capability is effectively improved.
Need to check novelty before this filing date? Find Prior Art