Intel SGX State Consistency via Remote Attestation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing state consistency protection mechanisms for Intel SGX rely on special hardware, leading to performance issues and difficulties with cross-platform migration, making them inadequate for ensuring data integrity and security in cloud computing environments.
Innovation Solution
A method utilizing remote attestation with a secure cryptographic channel to store and restore execution states of enclaves, ensuring state consistency without relying on special hardware, by calculating hash values and using a remote attestation module to verify and manage state transitions across platforms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If special hardware is used for state consistency protection, then reliability is improved, but device complexity increases and cross-platform migration becomes difficult
Solution Approach 1:
The patent replaces hardware-based state consistency protection mechanisms with a software-based solution using remote attestation. Instead of relying on special hardware modules to verify enclave states, the system uses cryptographic verification through remote attestation protocols, substituting mechanical/hardware verification with software-based cryptographic validation.
Solution Approach 2:
The patent introduces a remote attestation module as an intermediary between the enclave and the verification system. This module facilitates state consistency verification by generating and managing attestation reports that prove the enclave's state without requiring direct hardware access or special hardware components in the verifying system.
2Reliability
If special hardware is used for state consistency protection, then reliability is improved, but ease of manufacture and cross-platform migration deteriorate
Solution Approach 1:
The patent creates a universal state consistency protection mechanism that works across different platforms and enclave implementations. The remote attestation approach is platform-agnostic and can verify states from different hardware vendors and enclave frameworks, making the solution universally applicable rather than hardware-specific.
Solution Approach 2:
By replacing hardware-dependent verification mechanisms with software-based remote attestation, the patent enables easy cross-platform migration. The same verification logic can operate across different hardware platforms without requiring platform-specific hardware components or modifications.
3Adaptability or versatility
If remote attestation is used for state consistency protection, then adaptability is improved, but use of energy increases due to cryptographic operations
Solution Approach 1:
The patent performs attestation operations in advance of actual state verification needs. By establishing secure channels and generating attestation reports proactively, the system reduces the computational burden during critical verification moments, allowing for more efficient energy management during actual state consistency checks.
Data Source
AI summary
The present invention involves with a method and system of state consistency protection for Intel software guard extension (SGX). In a method of state consistency protection for a central processing unit capable of creating enclaves, the central processing unit supports creation of at least one enclave, wherein the central processing unit communicates with a remote server providing services for the central processing unit through remote communication and the remote server has a remote attestation module, configuring the remote attestation module to facilitate the completion of every execution state storing operation and/or every execution state restoring operation, wherein the remote attestation refers to an attestation mechanism by which the central processing unit proves to the remote server that it has created the specific enclave in a local platform so that the remote server trusts the specific enclave. The present invention does not require special hardware and is favorable to cross-platform migration.