A lightweight trusted container sandbox construction method, system, terminal and medium
By building a minimalist container base environment, integrating a built-in trusted measurement mechanism and hardware virtualization technology, it solves the problems of insufficient image security and isolation in container technology, and achieves high security and lightweight deployment, which is suitable for scenarios such as enterprise joint research and development and AI model training and inference.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- TIANFU JIANGXI LAB
- Filing Date
- 2026-04-10
- Publication Date
- 2026-06-09
AI Technical Summary
Existing container technologies suffer from insufficient image security, inadequate isolation, and a lack of trusted mechanisms, resulting in large image sizes, slow startup, high resource consumption, and an inability to meet the requirements of high-security scenarios.
By building a minimalist container base environment and integrating a built-in trusted measurement mechanism, kernel-level static and user-space dynamic measurement are achieved. Combined with hardware virtualization technology, multi-dimensional isolation is implemented to build a trusted sandbox isolation, ensuring trusted measurement across the entire chain from hardware to application.
It achieves high security, high reliability, and lightweight deployment of container environments, improves startup speed, reduces resource consumption, and ensures independent control of images. It is suitable for scenarios such as enterprise joint research and development, AI model training and inference, and trusted data spaces.
Smart Images
Figure CN121996361B_ABST