TEEnder: SGX enclave migration using HSMs

doi:10.1016/j.cose.2020.101874

TEEnder: SGX enclave migration using HSMs

2020-09-01

5

PRE

AI

DOI：10.1016/j.cose.2020.101874

原文链接

原文求助

摘要

En 中文

Intel Software Guard Extensions (SGX) is a new method of enhancing application security by creating safe areas of memory (enclaves) where data and code are protected from inspection and tampering. This technology is being applied to cloud computing as well, however, software deployed with SGX enclaves is complex to migrate between machines using traditional methods as SGX uses unique hardware keys for data sealing. This paper proposes a novel method of migrating SGX enclaves between different machines using Hardware Security Modules (HSMs) to encrypt and decrypt data using HSM generated keys. The use of HSMs achieves faster migration for large enclaves or during multiple concurrent migrations. Since the this solution does not depend on the security of remote attestation, and uses the keys stored in the HSM it provides a higher degree of security than current enclave migration solutions. (C) 2020 Elsevier Ltd. All rights reserved.

Keyword:

Trusted execution environment

Intel SGX

Hardware security module

Enclave migration

Cloud computing

TEEnder: SGX enclave migration using HSMs

摘要

AI总结

期刊

机构

引用论文