Decision support systems are increasingly adopted to automate decision-making processes across industries, organizations, and governments. Decision support demands data privacy, integrity, and availability while ensuring customization, security, and verifiability of the decision process. Existing solutions fail to guarantee those properties altogether. To overcome this limitation, we propose SPARTA, an approach based on Trusted Execution Environments (TEEs) that automates decision processes. To guarantee privacy, integrity, and availability, SPARTA employs efficient cryptographic techniques on notarized data with access mediated through user-defined access policies. Our solution allows users to define decision rules, which are translated to certified software objects deployed within TEEs, thereby guaranteeing customization, verifiability, and security of the process. With experiments run on public benchmarks and synthetic data, we show our approach is scalable and adds limited overhead compared to non-cryptographically secured solutions.

翻译：决策支持系统正日益被各行各业、组织以及政府采用，以自动化决策流程。决策支持要求数据隐私性、完整性及可用性，同时确保决策流程的定制化、安全性与可验证性。现有解决方案无法同时保证这些属性。为克服此局限，我们提出SPARTA，一种基于可信执行环境的自动化决策方法。为保障隐私性、完整性及可用性，SPARTA对经公证的数据采用高效加密技术，并通过用户定义的访问策略控制中介访问权限。我们的方案允许用户定义决策规则，这些规则被转化为部署于TEE内的经认证软件对象，从而保障流程的定制化、可验证性与安全性。通过在公开基准数据集及合成数据上进行实验，我们证明该方法具有可扩展性，且相较于非加密安全方案仅引入极少量开销。