Trusted Execution Environment for Secure Genetic Data Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for processing genetic data lack sufficient security and integrity, allowing unauthorized access to sensitive information even when encrypted.
Innovation Solution
The method involves processing genetic data in a trusted execution environment (TEE) where ciphertext is received from a normal execution environment via a public channel, and a decryption key is received via a secure channel. The ciphertext is decrypted to obtain plaintext, which is then processed within the TEE to ensure security and integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If genetic data is encrypted and transmitted via public channels, then data security is improved, but data processing effectiveness deteriorates due to the need for separate key management and decryption steps
Solution Approach 1:
The system segments the execution environment into two distinct parts: a normal execution environment for receiving ciphertext and a trusted execution environment (TEE) for secure key storage and decryption operations. This segmentation allows public channel transmission to be combined with secure processing by separating data reception from data decryption, resolving the contradiction between security and processing efficiency
Solution Approach 2:
The trusted execution environment acts as an intermediary between the public channel and the plaintext data. The TEE receives ciphertext from the normal environment, performs secure decryption using stored keys, and outputs plaintext results. This intermediary structure enables both public channel transmission and secure processing to coexist, improving both security and processing effectiveness
2Reliability
If a trusted execution environment is used to protect genetic data, then data security is improved, but system complexity increases due to the need for dual execution environments and secure channels
Solution Approach 1:
The trusted execution environment is designed to perform multiple functions: storing decryption keys securely, receiving ciphertext from the normal execution environment, performing decryption operations, and outputting plaintext results. By making the TEE multi-functional, the system reduces overall complexity compared to having separate dedicated components for each function, while still maintaining high security standards
Data Source
AI summary
Methods, apparatuses, devices, and media are provided for processing genetic data. In a method, in a normal execution environment in a data processing system, ciphertext of genetic data is received from a data providing system via a public channel between the normal execution environment and the data providing system. In a trusted execution environment in the data processing system, a key for decrypting the ciphertext of the genetic data is received from the data providing system via a secure channel between the trusted execution environment and the data providing system. In the trusted execution environment, the ciphertext of the genetic data is decrypted using the key to obtain plaintext of the genetic data. In the trusted execution environment, the plaintext of the genetic data is processed to determine a processing result of the genetic data. The genetic data may be processed in a safe and reliable trusted execution environment.