2023/10/17 by Heidi Howard, Fritz Alder, Howard, Heidi +29 · 1 voice · 2 citations
Computer Science · #Cloud Data Security Solutions #Cryptography and Security (cs.CR) #Distributed #Distributed systems and fault tolerance #FOS: Computer and information sciences #Parallel #Security and Verification in Computing #and Cluster Computing (cs.DC) #cs.CR #cs.DC
paper · pdf · doi:10.48550/arxiv.2310.11559
openalex publication_date 2023/10/17 · arxiv published 2023/10/17 · arxiv updated 2023/10/17 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Confidentiality, integrity protection, and high availability, abbreviated to CIA, are essential properties for trustworthy data systems. The rise of cloud computing and the growing demand for multiparty applications however means that building modern CIA systems is more challenging than ever. In response, we present the Confidential Consortium Framework (CCF), a general-purpose foundation for developing secure stateful CIA applications. CCF combines centralized compute with decentralized trust, supporting deployment on untrusted cloud infrastructure and transparent governance by mutually untrusted parties. CCF leverages hardware-based trusted execution environments for remotely verifiable confidentiality and code integrity. This is coupled with state machine replication backed by an auditable immutable ledger for data integrity and high availability. CCF enables each service to bring its own application logic, custom multiparty governance model, and deployment scenario, decoupling the operators of nodes from the consortium that governs them. CCF is open-source and available now at https://github.com/microsoft/CCF.