AI 中文总结
针对人工智能工作负载对安全计算资源的需求及云提供商的局限，本文利用英特尔TDX等建立去中心化机密计算平台，通过激励硬件提供商贡献资源，为各参与方提供加密CVM，保障数据安全，是传统云基础设施的可行替代方案。
AI 中文摘要
人工智能工作负载的快速增长对安全且可扩展的计算资源产生了前所未有的需求。然而，集中式云提供商在定价和安全模型方面仍占主导。在竞争激烈的人工智能领域，保护数据至关重要。本文介绍了一个去中心化的机密计算平台，它利用英特尔信任域扩展（TDX）、英特尔信任机构（ITA）和英伟达机密计算（CC）来建立完全加密的机密虚拟机（CVM）分布式生态系统。该架构激励硬件提供商贡献支持英特尔TDX的计算资源，为每个参与提供商提供新实例化、唯一加密的Ubuntu 24.04 CVM，在数据的各个阶段提供保护。通过去中心化机密计算堆栈并跨独立运行节点利用机密计算，该工作展示了传统基于云的基础设施的可行替代方案，为下一代人工智能开发提供了增强的安全保障、透明的成本结构和对企业级安全计算能力的平等访问。
英文摘要
The rapid growth of artificial intelligence workloads has generated an unprecedented demand for secure and scalable compute resources. However, centralized cloud providers continue to dominate both pricing and security models. In an increasingly competitive AI landscape, where the compromise of training data or model weights can confer a significant advantage, there is a critical need for a computing infrastructure that safeguards data at rest, in transit, and in use, while remaining affordable and broadly accessible. Furthermore, existing GPU cluster offerings (e.g., 8xH100s, 8xH200s, 8xB200s) create financial barriers that limit access for organizations, startups, and independent researchers seeking secure, high-performance computing environments. This paper introduces a decentralized, confidential computing platform that leverages Intel Trust Domain Extensions (TDX), Intel Trust Authority (ITA) and NVIDIA Confidential Computing (CC) to establish a distributed ecosystem of fully encrypted Confidential Virtual Machines (CVMs). The proposed architecture incentivizes hardware providers to contribute Intel TDX capable compute resources. Each participating provider is provisioned with a freshly instantiated, uniquely encrypted Ubuntu 24.04 CVM, providing data protection across all stages, at rest, in transit, and in use. By decentralizing the confidential computing stack and leveraging confidential computing across independently operated nodes, this work demonstrates a viable alternative to traditional cloud-based infrastructures. The proposed system offers enhanced security assurances, transparent cost structures, and democratized access to enterprise-grade secure compute capabilities, paving the way for a more open, secure, and equitable foundation for next-generation AI development.
Comments9 pages, 3 figures. Prior version at Intel Community Blog and manifold.inc
