Heterogeneous computing, which incorporates GPUs, NPUs, and FPGAs, is increasingly utilized to improve the efficiency of computer systems. However, this shift has given rise to significant security and privacy concerns, especially when the execution platform is remote. One way to tackle these challenges is to establish a trusted and isolated environment for remote program execution, while maintaining minimal overhead and flexibility. While CPU-based trusted execution has been extensively explored and found commercial success, extension to heterogeneous computing systems remains a challenge. This paper proposes a practical trusted execution environment design for ARM/FPGA System-on-Chip platforms, leveraging TrustZone's unique characteristics. The design features a dedicated security controller within the ARM TrustZone, overseeing FPGA reconfiguration and managing communication between CPU cores and FPGA fabrics. This design involves a provisioning service that enables application users to establish trust in the FPGA fabric within cloud-based computing resources provided by the platform owner, running applications developed by third-party developers and hardware manufactured by the device manufacturer. To ensure the security of our proposed system, we employ an automated protocol verifier, ProVerif, to validate its compliance with essential security requirements. Furthermore, we demonstrate the practicality of our system model by implementing a prototype application on the Xilinx MPSoC development board.

翻译：异构计算（包含GPU、NPU和FPGA）正日益广泛地应用于提升计算机系统的效率。然而，这一转变引发了严重的安全与隐私问题，尤其在执行平台位于远端时。应对这些挑战的一种途径是为远程程序执行建立可信且隔离的环境，同时保持较低开销与灵活性。尽管基于CPU的可信执行技术已得到广泛研究并取得商业成功，但其向异构计算系统的扩展仍面临挑战。本文提出一种基于ARM/FPGA片上系统平台的可信执行环境设计方案，该方案充分利用TrustZone的独特特性。设计核心是在ARM TrustZone内设置专用安全控制器，负责监控FPGA重配置并管理CPU核与FPGA硬件结构间的通信。该设计包含一套供应服务，使应用程序用户能够在平台所有者提供的云端计算资源中，对运行由第三方开发者开发的应用、由设备制造商制造的硬件所构成的FPGA硬件结构建立信任。为验证所提系统的安全性，我们采用自动化协议验证工具ProVerif来检验其是否符合核心安全要求。此外，我们通过在Xilinx MPSoC开发板上实现原型应用，展示了系统模型的实用性。