Accessing protected data by a high-performance computing cluster

Patent · Tue Apr 06 04:00:00 EDT 2021

OSTI ID:1823817

Barnes, Peter; Fedor-Thurman, Daniel; Halliday, Kyle D.

A data protection system is provided that allows applications to access protected data in a way that restricts applications from outputting to unauthorized targets any unprotected data derived from the protected data and that ensures that the applications do not have access to a key that allows access to the unprotected data. The data protection system provides a policy server that may execute on a service node of a high performance computing system and a data encryption process that may execute on each compute node that is allocated to an application or batch job. The policy server maintains policies of entities specifying access control for protected data. The data encryption process generates a secure execution environment for an application process and interfaces with the policy server to retrieve keys for decrypting protected data in accordance with a policy, and it decrypts and provides the decrypted data to the application process.

• Research Organization: Lawrence Livermore National Laboratory (LLNL), Livermore, CA (United States)
• Sponsoring Organization: USDOE
• DOE Contract Number: AC52-07NA27344
• Assignee: Lawrence Livermore National Security, LLC (Livermore, CA)
• Patent Number(s): 10,970,410
• Application Number: 15/795,040
• OSTI ID: 1823817
• Country of Publication: United States
• Language: English