TWC: Small: Ascend: Architecture for Secure Computation on Encrypted Data

TWC：小型：Ascend：加密数据安全计算架构

• 批准号: 1317763
• 负责人: Srini Devadas
• 金额: $ 50万
• 依托单位: Massachusetts Institute of Technology
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-10-01 至 2017-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1317763&HistoricalAwards=false
• 关键词: TWC; Small; Ascend; Architecture; Secure

Outsourcing computation to the cloud has a difficult set of privacy challenges, a primary one being that the client cannot really trust cloud or application software. Encrypted computation achieves privacy by having the user specify encrypted inputs to a program in the cloud and returning encrypted results.The design and implementation of a secure processor architecture, called Ascend, that guarantees privacy of data computed upon by untrusted programs and run on an untrusted operating system (OS) is underway. Our security goal is to only trust the Ascend processor chip and show that it is secure against software attacks and power analysis attacks on its pins even though application and system software can be malicious. Our performance goal is to show that execution time and energy overheads of encrypted computation are reasonable. The key idea in Ascend to guarantee privacy is obfuscated program execution: from the perspective of the Ascend chip's input/output and power pins, an untrusted server cannot learn anything about private user data regardless of the program run.Through innovations in architectural mechanisms, security protocols, and applied cryptography, we hope to show that it is viable to only trust hardware and not trust any software in some security-conscious applications, thereby substantially minimizing the trusted computing base for these applications. The development of simulator infrastructure and hardware prototypes will allow the fruits of the research to be widely disseminated. This project will introduce high-school students to research in applied cryptography and security through an innovative high-school outreach program.

将计算外包给云计算面临着一系列困难的隐私挑战，其中一个主要挑战是客户端无法真正信任云计算或应用软件。加密计算通过让用户向云中的程序指定加密输入并返回加密结果来实现隐私。一种名为Ascend的安全处理器架构的设计和实现正在进行中，该架构可以保证由不可信程序计算并在不可信操作系统（OS）上运行的数据的隐私。 我们的安全目标是只信任Ascend处理器芯片，并证明它是安全的，可以抵御软件攻击和对其引脚的功耗分析攻击，即使应用程序和系统软件可能是恶意的。我们的性能目标是表明加密计算的执行时间和能量开销是合理的。 Ascend中保证隐私的关键思想是混淆程序执行：从Ascend芯片的输入/输出和电源引脚的角度来看，无论程序运行如何，不可信的服务器都无法了解任何关于私人用户数据的信息。通过架构机制、安全协议和应用密码学的创新，我们希望表明，在某些安全意识强的应用程序中，只信任硬件而不信任任何软件是可行的，从而基本上最小化这些应用程序的可信计算基础。模拟器基础设施和硬件原型的开发将使研究成果得到广泛传播。该项目将通过一个创新的高中外展计划向高中生介绍应用密码学和安全性的研究。