TEE Task Distribution for Privacy-Preserving Low-Latency Content Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing systems face challenges in efficiently distributing tasks among trusted execution environments (TEEs) due to resource intensity and latency issues, particularly when handling sensitive user data, which can compromise privacy and security.
Innovation Solution
Distribute task execution between trusted and untrusted environments, where sensitive user data is stored and processed only in TEEs, while untrusted platforms handle operations that do not compromise privacy, using cryptographic techniques to ensure secure data handling and reduce resource consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If tasks are executed in a TEE to ensure security and privacy of sensitive user data, then data security and user privacy are improved, but resource consumption increases and latency is introduced
Solution Approach 1:
The patent segments task execution between two environments: TEEs for security-critical operations involving sensitive user data, and untrusted platforms for non-sensitive operations. This segmentation allows the system to maintain high security standards where needed while reducing overall resource consumption by handling routine tasks outside the resource-intensive TEE environment.
Solution Approach 2:
The patent applies local quality by providing different execution environments for different types of tasks based on their security requirements. Sensitive operations receive the high-security TEE environment, while non-sensitive operations use the standard untrusted platform environment, optimizing resource usage according to local security needs rather than applying uniform high-security processing to all tasks.
2Reliability
If tasks are executed in a TEE to protect sensitive user data, then user privacy is improved, but execution speed decreases due to additional latency
Solution Approach 1:
The patent segments task execution between two environments: TEEs for security-critical operations involving sensitive user data, and untrusted platforms for non-sensitive operations. This segmentation allows the system to maintain high security standards where needed while reducing overall resource consumption by handling routine tasks outside the resource-intensive TEE environment.
Solution Approach 2:
The patent applies local quality by providing different execution environments for different types of tasks based on their security requirements. Sensitive operations receive the high-security TEE environment, while non-sensitive operations use the standard untrusted platform environment, optimizing resource usage according to local security needs rather than applying uniform high-security processing to all tasks.
3Reliability
If all tasks are executed in a TEE to ensure maximum security, then data security is improved, but productivity decreases due to resource intensity
Solution Approach 1:
The patent segments task execution between two environments: TEEs for security-critical operations involving sensitive user data, and untrusted platforms for non-sensitive operations. This segmentation allows the system to maintain high security standards where needed while reducing overall resource consumption by handling routine tasks outside the resource-intensive TEE environment.
Solution Approach 2:
The patent applies local quality by providing different execution environments for different types of tasks based on their security requirements. Sensitive operations receive the high-security TEE environment, while non-sensitive operations use the standard untrusted platform environment, optimizing resource usage according to local security needs rather than applying uniform high-security processing to all tasks.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
Methods, systems, and apparatus, including medium-encoded computer program products for selecting and displaying content in privacy preserving manners are described. A first trusted content platform (CP) that executes within a first trusted environment can receive a digital component (DC) response that can include: (i) data indicating constrained DCs and, for each constrained DC, distribution parameters; and (ii) data indicating at least one contextual DC selected according to contextual data. The first trusted CP can send to a second trusted CP a second DC request that can include set of constraining values and the distribution parameters. The first trusted CP can receive from the second trusted CP, data indicating (i) one or more constrained DCs selected and (ii) selection values generated based on the set of constraining values. The first trusted CP can select a DC based on a selection value for each contextual DC and the selection value.