Secure enclave pathing configuration for data confidence fabrics
One example method includes performing a secure boot of hardware at a node of a data confidence fabric, creating an artifact that includes information concerning the secure boot, storing the artifact, receiving a data stream at the node, annotating data of the data stream with trust metadata, and associating the artifact with the data. An immutable ledger entry may be created that includes a pointer to the data, and a pointer to the artifact, and the immutable ledger entry may be accessible by an application.
1. A method, comprising:
performing a secure boot of hardware at a node of a data confidence fabric to access a protected memory space;
creating, by the node, an artifact that includes information concerning the secure boot;
storing the artifact in the protected memory space;
receiving, at the node, a data stream;
annotating data of the data stream with trust metadata the trust metadata including a plurality of individual trust metadata values, each one of the individual trust metadata values including a confidence score that specifies an overall trustworthiness of each individual trust metadata value; and
associating the artifact with the data so as to enable a downstream node, having received the trust metadata from the node, to verify, by accessing the artifact, that the trust metadata is authentic and accurate.
2. The method as recited in claim 1 , wherein the artifact is stored locally at the node.
3. The method as recited in claim 1 , wherein the artifact is immutably stored in a ledger.
4. The method as recited in claim 1 , wherein annotating the data is performed by logic retrieved by a container from a secure enclave at the node.
5. The method as recited in claim 4 , wherein successful performance of the secure boot enables the container to access the logic in the secure enclave.
6. The method as recited in claim 1 , further comprising creating a ledger entry that comprises a pointer to the data, a pointer to the artifact, and the trust metadata.
7. The method as recited in claim 1 , wherein the artifact comprises an audit log that contains a record of performance and validation of processes of a trusted data confidence fabric annotation stack.
8. The method as recited in claim 1 , further comprising receiving another artifact from another node of the data confidence fabric, and appending the another artifact to the artifact and the trust metadata.
9. The method as recited in claim 8 , further comprising creating a ledger entry that comprises the artifact, the another artifact, a pointer to the data, and the trust metadata.
10. The method as recited in claim 1 , further comprising broadcasting the artifact to another node of the data confidence fabric.
11. A non-transitory storage medium having stored therein instructions that are executable by one or more hardware processors to perform operations comprising:
performing a secure boot of hardware at a node of a data confidence fabric to access a protected memory space;
creating, by the node, an artifact that includes information concerning the secure boot;
storing the artifact in the protected memory space;
receiving, at the node, a data stream;
annotating data of the data stream with trust metadata the trust metadata including a plurality of individual trust metadata values, each one of the individual trust metadata values including a confidence score that specifies an overall trustworthiness of each individual trust metadata value; and
associating the artifact with the data so as to enable a downstream node, having received the trust metadata from the node, to verify, by accessing the artifact, that the trust metadata is authentic and accurate.
12. The non-transitory storage medium as recited in claim 11 , wherein the artifact is stored locally at the node.
13. The non-transitory storage medium as recited in claim 11 , wherein the artifact is immutably stored in a ledger.
14. The non-transitory storage medium as recited in claim 11 , wherein annotating the data is performed by logic retrieved by a container from a secure enclave at the node.
15. The non-transitory storage medium as recited in claim 14 , wherein successful performance of the secure boot enables the container to access the logic in the secure enclave.
16. The non-transitory storage medium as recited in claim 11 , wherein the operations further comprise creating a ledger entry that comprises a pointer to the data, a pointer to the artifact, and the trust metadata.
17. The non-transitory storage medium as recited in claim 11 , wherein the artifact comprises an audit log that contains a record of performance and validation of processes of a trusted data confidence fabric annotation stack.
18. The non-transitory storage medium as recited in claim 11 , wherein the operations further comprise receiving another artifact from another node of the data confidence fabric, and appending the another artifact to the artifact and the trust metadata.
19. The non-transitory storage medium as recited in claim 18 , wherein the operations further comprise creating a ledger entry that comprises the artifact, the another artifact, a pointer to the data, and the trust metadata.
20. The non-transitory storage medium as recited in claim 11 , wherein the operations further comprise broadcasting the artifact to another node of the data confidence fabric.