Tenant-Specific Caching for Confidential Container Data Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In server systems, confidential containers within a trusted execution environment face challenges in sharing data securely due to unintended data isolation, leading to wasted resources and increased bandwidth usage, as existing techniques compromise security when trying to share data among related containers.
Innovation Solution
Implementing a caching service that uses hardware-backed trusted execution environments to securely share data among confidential containers of the same tenant, eliminating the need for multiple copies and ensuring secure storage and access through attested keys, while maintaining isolation from unrelated containers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is shared among confidential containers of the same tenant, then resource utilization is improved and bandwidth usage is reduced, but security isolation is compromised
Solution Approach 1:
The patent segments the multitenant environment into tenant-specific data sharing zones. Each tenant's confidential containers form an isolated group where data can be shared, while maintaining strict separation from other tenants. This is achieved through tenant-specific caching services and isolated data storage paths, allowing intra-tenant data sharing without compromising inter-tenant security isolation.
Solution Approach 2:
The patent introduces a caching service as an intermediary between confidential containers within the same tenant. This intermediary manages data sharing by caching data locally and coordinating access among containers, enabling efficient data sharing while maintaining security boundaries. The caching service acts as a trusted mediator that ensures only authorized containers within the tenant can access shared data.
2Reliability
If each confidential container accesses and caches a copy of data, then security isolation is maintained, but hardware resources are wasted and bandwidth usage increases
Solution Approach 1:
The patent merges data storage and caching resources among confidential containers of the same tenant. Instead of each container maintaining separate data copies, the system combines storage resources into shared cache structures that multiple containers can access. This merging reduces redundant hardware resource consumption and bandwidth usage while maintaining security through tenant-specific isolation and controlled access mechanisms.
3Loss of energy
If data is shared among confidential containers, then bandwidth usage is reduced, but the complexity of managing secure access increases
Solution Approach 1:
The patent implements a universal caching service that handles multiple functions: data storage, access control, cache management, and security verification. This multi-functional intermediary simplifies the overall system by consolidating access management complexity into a single service that serves all confidential containers within a tenant, rather than requiring complex peer-to-peer security management between containers.
Data Source
AI summary
In a multitenant environment, confidential containers for the tenant having a trusted execution environment (TEE) which have security attested, can share data within the pod or between pods. The ability to share data for confidential containers of the same tenant eliminates the need to have multiple copies for different confidential containers. Thus, a storage device can store shared data specific to a tenant of the multitenant environment, and a caching service backed by protected hardware can manage access to the shared data. Management of the shared data can include attesting a key for a confidential container to verify that the confidential container is part of the TEE for a pod for the tenant, and access the shared data from the storage device for the confidential container based on the attested key.