Enclave Key Management for Cloud Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cloud computing systems, tenant customers require secure data protection from cloud service providers, necessitating a solution that allows third-party administration of data without physical access or visibility.
Innovation Solution
The implementation of hardware-based key protection systems using enclaves and management enclaves, which create a protected area of execution that prevents external access, enabling secure tenant data encryption key transfers and secure virtual machines for operating on tenant data, with attestation certificates for authentication and key management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cloud service provider employees or individuals with physical access manage customer data, then data administration is simplified, but data security and confidentiality are compromised
Solution Approach 1:
The system divides data management into separate components: customer data is encrypted with customer-controlled keys, while cloud service providers can only access encrypted data. This segmentation allows simplified administration by the provider while maintaining security through customer control of encryption keys.
Solution Approach 2:
Encryption keys act as an intermediary between the cloud service provider and customer data. The keys enable the provider to administer encrypted data without being able to view or access the actual customer information, thus maintaining both ease of operation and data security.
2Ease of operation
If encryption keys are stored externally for easy access, then key management is simplified, but security against unauthorized access is reduced
Solution Approach 1:
The encryption key is segmented into two parts: a customer-controlled portion and a cloud service provider portion. Each party holds only their segment, which is insufficient alone to decrypt data. This allows simplified key management through distribution while maintaining security through the need for both segments.
Solution Approach 2:
Different portions of the encryption key have different security properties and access controls. The customer portion is protected by customer authentication mechanisms, while the provider portion is protected by system access controls. This local differentiation of security qualities enables both ease of management and protection against unauthorized access.
3Ease of manufacture
If cloud service providers have physical access to data infrastructure, then system maintenance and updates are easier, but data confidentiality is compromised
Solution Approach 1:
Encryption keys serve as an intermediary layer between the physical infrastructure and the customer data. Cloud service providers can maintain and update the physical systems while the encryption ensures that even with physical access, they cannot access the actual customer information without the decryption keys.
Solution Approach 2:
The system uses encrypted copies of customer data that can be freely copied and moved across the infrastructure for maintenance purposes. The encrypted copies are functionally equivalent for storage and processing but remain confidential without the decryption key, enabling easy system maintenance while preserving data confidentiality.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A protected machine. The machine includes an enclave. An enclave includes a protected area of an application address space for which access is prevented for any application code not resident in the enclave itself, except that keys can be provided by one or more management enclaves into the enclave. The machine further includes a management enclave coupled to the enclave. The management enclave is configured to provide a key to the enclave. The management enclave is a protected area of an application address space for which access is prevented for any application code not resident in the management enclave itself.