Safeguarding Sensitive Data Access At Scale with Privacy-Enhancing Technologies
summary
Combines confidential computing enclaves, a KMS plus an attestation service, and serverless compute to isolate only the small functions that touch sensitive data; uses pseudonymization for downstream services and hardware-signed remote attestation reports to prove which workloads hold which keys. Claims this enforces fine‑grained purpose limitation across hundreds of thousands of microservices and enables third‑party or co‑managed deployments with verifiable auditability; prototype design is presented and reported as effective for end‑to‑end protection.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 1:40Data Privacy Challenges
- 7:20Confidential Computing
- 13:46Innovative Solutions
- 22:21Key Takeaways
- 23:47Conclusion
related talks
30mK8s meets confidential computing - the different ways of scaling sensitive workloads
45mConfidential Computing: Protecting Customer Data in the Cloud
46mConfidential Cloud: Safeguarding Sensitive Data in K8s
40mKubernetes Meets Confidential Computing - The Different Ways of Scaling Sensitive Workloads- 40mKubernetes Meets Confidential Computing - The Different Ways of Scaling Sensitive...
28mSealed for All: Multi-Party Confidential Computing, No Trust
09mAn introduction to Confidential Computing
20mThe Transformational Power of Confidential Computing