Confidential Computing


Confidential computing is a cloud computing technology that protects data during processing.

  • new and emerging focus for organizations operating in extremely secure environments
    • e.g., military and defense sector
  • extends security throughout the computing process
  • In normal client-server computing model,
    • client may request server to take action on client’s behalf
    • server might have to access some data that is maintained in a separate storage environment, then perform some processing on it
    • to secure this, we apply encryption to data on the storage devices and to network communication
    • but typically do not address data actively processed
  • adds protection for data and code in memory with Trusted Execution Environments (TEE)
    • these environments guarantee no outside process can view or alter data being handled within the environment
  • adds additional assurance that data is protected throughout all stages of the computing life cycle