paper proposes a new data abstraction for TEEs, data enclave. As a data-centric abstraction, data enclave is decoupled from an enclave’s existence, is equipped with flexible secure permission

Dec 8, 2022 · A data enclave is a secure network through which confidential data, such as identifiable information from census data, can be stored and disseminated. In a virtual data enclave a researcher can access the data from their own computer but cannot download or remove it from the remote server.

... enclave environment allows processing of data by direct connection to existing computational resources situated outside the hospital firewall.

Launched in 2006, the NORC Data Enclave® is the preferred solution for clients, analysts, and researchers to securely store, access, and analyze sensitive data. Clients include federal, state, and local governments, research institutions, foundations, and universities.

This paper presents this new abstraction, its properties, and the architecture support. Experiments on synthetic benchmarks and three real-world applications all show that data enclave can help improve the efficiency of enclaves and inter-enclave cooperations significantly while enhancing the security protection.

The Data Enclave provides an ideal system for accessing confidential microdata. Employing security technologies used by the military and banking sectors, the Data Enclave is based around a Citrix infrastructure that renders users’

Today, organizations of any size can implement a Secure Data Enclave in a cost-effective way using best practices for security and compliance through managed cloud services. In this paper, we describe a cloud-based approach to implementing a Secure Data Enclave, along with a standardized set of technical and governance

•What is the Data Enclave? •Secure, remote access to confidential data •Initial launch sponsored and guided by the National Institute of Standards and Technology (NIST) •Provides a robust analytic platform that enforces secure and compliant access to data •Securely stored and provided access to MHDO data since 2012 2

How is an Enclave Used? • Makes approved data available to approved users for approved projects – Each project’s data are segregated from other projects – May allow users to upload and link their own datasets • May include access to: – Interactive, query-based tools – Suite of statistical tools (e.g., SQL, SAS, Stata, R, Python)

As a data-centric abstraction, data enclave is decoupled from an enclave's existence, is equipped with flexible secure permission controls, and crytographically isolated. It eliminates the hurdles for enclaves to cooperate efficiently, and at the same time, enables dynamic shrinking of the height of integrity tree for performance.