【摘要】 机密计算旨在保护正在使用中的数据,基于硬件的TEE可使受保护的数据无法被主内存中的应用程序访问。为优化机密计算技术在使用过程中的换页开销和系统I/O性能,针对键值数据的查询与更新操作,文章基于SGX1技术实现基于机密计算的键值数据存储与操作优化方法。该方法将高频查询的键值数据以明文形式存储在TEE的最小堆中,主要数据结构以密文哈希表形式存储在不受保护的主内存中,在利用TEE优化热数据查询操作时,利用数据标签优化主内存中冷数据的查询与更新操作。实验结果表明,与直接对键值数据进行加解密以实现查询与更新的方法相比,该方法效率更高,能够有效避免换页开销并提升系统的I/O性能。更多还原

【Abstract】 Confidential computing aims to protect data in use by making it inaccessible to applications in main memory through a hardware-based TEE. To optimize the paging overhead and system I/O performance of confidential computing technology during operation, this article implemented a key-value data storage and operation optimization method based on confidential computing in light of SGX1 technology for key-value data query and update operations. This approach stored frequently queried key-value data in plaintext within the TEE’s min-heap, while the primary data structures were maintained as ciphertext hash tables in unprotected main memory. By leveraging the TEE to optimize hot data queries, the method also enhanced cold data queries and updates in main memory through the use of data tags. Experimental results demonstrate that this method is more efficient than directly encrypting and decrypting key-value data for query and update operations, effectively reducing paging overhead and improving system I/O performance.更多还原