Secure Memory Partitioning for Encrypted Block Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods using trusted execution environments (TEE) for machine learning encounter increased processing times due to paging processes when memory usage exceeds the capacity of the confidence region, limiting advanced processing such as CNN operations.
Innovation Solution
A computer system with a processor that sets a secure, logically isolated confidence region in memory, determining whether encrypted data needs decryption and executing processes within or outside this region to prevent paging and optimize memory usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the machine learning model and application are loaded into the confidence region for secure processing, then security is ensured, but processing time increases due to paging when memory usage exceeds confidence region capacity
Solution Approach 1:
The patent divides the processing into two segments: secure processing within the confidence region for critical operations, and non-secure processing outside the confidence region for operations that don't require decryption. This segmentation allows the system to utilize the confidence region's security features when needed while avoiding paging delays by performing other operations in the larger external memory space.
Solution Approach 2:
The patent introduces an intermediary mechanism that manages data transfer between the confidence region and external memory. This intermediary coordinates the loading and unloading of data, ensuring that only necessary data resides in the confidence region at any given time, thereby preventing paging while maintaining security for confidential operations.
2Productivity
If the confidence region capacity is increased to accommodate larger machine learning models, then processing speed improves, but security isolation and resource protection may be compromised
Solution Approach 1:
The patent implements dynamic memory management where the confidence region's contents are adjusted based on the specific processing requirements. Rather than statically allocating large memory space that may remain unused, the system dynamically loads only the necessary components into the confidence region for each processing task, optimizing both speed and security isolation.
3Reliability
If basic processing operations are performed within the confidence region, then security is maintained, but the degree of freedom for advanced processing such as CNN is limited
Solution Approach 1:
The patent segments processing operations into secure and non-secure categories. Secure operations that require confidentiality (such as handling encrypted input data and generating encrypted results) are performed within the confidence region, while non-secure operations (such as certain preprocessing and postprocessing steps) are performed outside the confidence region using the full capabilities of the system.
Data Source
AI summary
This computer system comprises a computer having a processor that has a function for setting a confidence region in a memory, the confidence region having ensured security and being logically isolated. The computer system accepts a request for execution of processing on encrypted data, in which data is encrypted that includes a plurality of block processes and also includes confidential information, determines whether the encrypted data needs to be decrypted when executing one block process, and executes the block process using a region that is different from the confidence region when the encrypted data does not need to be decrypted, or executes the block process using the confidence region when the encrypted data needs to be decrypted.