Encrypted Container Image Secure Execution Environment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing algorithms face challenges in achieving language and hardware independence while ensuring confidentiality, especially when deployed on embedded devices and untrusted systems.
Innovation Solution
A method for providing an encrypted container image using an asymmetric key pair, where the private key is stored in a secure execution environment and the encrypted image is decrypted and executed only in this secure environment, preventing execution in insecure environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data processing algorithms are deployed on embedded devices, then analysis efficiency is improved, but confidentiality of the algorithms is compromised
Solution Approach 1:
The system segments the execution environment into secure and insecure areas, with the private key stored exclusively in the secure area. This segmentation allows the algorithm to run on embedded devices for efficient analysis while protecting the confidential code through isolated storage and execution controls.
Solution Approach 2:
The patent introduces an asymmetric key pair as an intermediary mechanism. The public key acts as a mediator that allows encrypted container images to be distributed and executed on embedded devices, while the private key in the secure area maintains confidentiality by controlling decryption and execution permissions.
2Reliability
If software is customized for specific end devices, then performance is improved, but hardware independence is lost
Solution Approach 1:
The secure execution environment provides a universal platform that can execute encrypted container images across different embedded devices. The asymmetric encryption system works consistently across various hardware architectures, allowing the same encrypted container to be deployed on different end devices while maintaining performance through optimized execution in the secure area.
3Productivity
If programming languages are optimized for embedded devices, then execution efficiency is improved, but language independence is lost
Solution Approach 1:
The patent uses encrypted container images as portable copies of the algorithm that can be transferred and executed across different programming environments. The containerization approach allows the algorithm to be packaged in a language-independent format that can be executed efficiently in the secure area regardless of the host system's programming language.
Data Source
Figure 1
Figure 2
AI summary
The invention relates to a method for providing an encrypted container image (1), comprising the steps of: - providing (S1) a private key of an asymmetric key pair, - storing (S2) the private key in a memory area, wherein a secure execution environment (2) of a computing unit (6) has exclusive access to the memory area, - providing (S4) the encrypted container image (1), wherein the encrypted container image (1) is encrypted by the public key (S3), wherein the encrypted container image (1) is decryptable by the associated private key (S7), wherein the decrypted container image (1b) is executable in the secure execution environment of the computing unit (S9), thereby providing a containerized application program,wherein the containerized application program is executable in the secure execution environment (3) of the computing unit (6) (S10). Furthermore, the invention relates to an associated computer program product and computer-readable medium, as well as a higher-level computing unit, a device, and a system.