vix.ing · top · new · best · stats · spec

Trusted IP solution in multi-tenant cloud FPGA platform

2022/09/22 by Muhammed Kawser Ahmed, Ahmed, Muhammed Kawser, Sujan Kumar Saha +3
Computer Science · #Cloud Data Security Solutions #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #FOS: Electrical engineering #Physical Unclonable Functions (PUFs) and Hardware Security #Security and Verification in Computing #Systems and Control (eess.SY) #electronic engineering #information engineering

paper · pdf · doi:10.48550/arxiv.2209.11274

openalex publication_date 2022/09/22 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28

Abstract

Because FPGAs outperform traditional processing cores like CPUs and GPUs in terms of performance per watt and flexibility, they are being used more and more in cloud and data center applications. There are growing worries about the security risks posed by multi-tenant sharing as the demand for hardware acceleration increases and gradually gives way to FPGA multi-tenancy in the cloud. The confidentiality, integrity, and availability of FPGA-accelerated applications may be compromised if space-shared FPGAs are made available to many cloud tenants. We propose a root of trust-based trusted execution mechanism called TrustToken to prevent harmful software-level attackers from getting unauthorized access and jeopardizing security. With safe key creation and truly random sources, TrustToken creates a security block that serves as the foundation of trust-based IP security. By offering crucial security characteristics, such as secure, isolated execution and trusted user interaction, TrustToken only permits trustworthy connection between the non-trusted third-party IP and the rest of the SoC environment. The suggested approach does this by connecting the third-party IP interface to the TrustToken Controller and running run-time checks on the correctness of the IP authorization(Token) signals. With an emphasis on software-based assaults targeting unauthorized access and information leakage, we offer a noble hardware/software architecture for trusted execution in FPGA-accelerated clouds and data centers.

Related