Confidential Cloud Computing How to get healthcare data securely
summary
Proof-of-concept confidential cloud for the European Health Data Space is underway, aiming for an MVP by Q1 next year and six applications already live in other contexts. Architecture uses IDS-style connectors, a container/VM mix orchestrated by Kubernetes, and hardware-backed TEEs with Intel TDX and AMD SE plus upcoming NVIDIA support. Runtime uses Kata containers for isolation, a management suite of about 10 services for deployment and attestation, and integration with gematik certification paths; on-premises-first with limited public-cloud outsourcing.
AI-written summary · about
chapters (22)
- 0:00Introduction and speaker background
- 2:10European Health Data Space challenge
- 3:58Political origins of confidential computing
- 6:06Technological aspects and market impact
- 8:58Data space architecture and connectors
- 10:23Confidential Computing working groups
- 13:38Road map and legal requirements
- 15:30Keem application and infrastructure
- 16:34Data space security standards
- 18:02Hardware and software defense layers
- 19:27Open source approach and standards
- 20:56Hardware layer and encryption
- 21:39Kubernetes and Kata implementation
- 23:29Application stack and stakeholder maps
- 24:58Road map and MVP timeline
- 26:51Demo offer and contact details
- 27:13Q&A: What is Kata software?
- 27:57Q&A: Public cloud compatibility
- 29:23Q&A: Open source tools for security
- 30:10Q&A: Patient data sharing with companies
- 31:57Q&A: TPM for attestation
- 32:39Closing remarks and networking
