CPC G06F 21/6218 (2013.01) [G06F 12/1425 (2013.01); G06F 16/1734 (2019.01); G06F 21/121 (2013.01); G06F 21/604 (2013.01); G06F 21/62 (2013.01); G06F 21/6281 (2013.01)] | 20 Claims |
1. A system comprising:
at least one hardware processor; and
a computer-readable medium storing instructions that, when executed by the at least one hardware processor, cause the at least one hardware processor to perform operations comprising:
storing a database management application inside of an enclave inside of a first container in a container-based cloud service, wherein the enclave utilizes central processing unit (CPU)-specific software instructions to shield data from software outside the enclave;
storing an instance of a database inside of a second container but outside of an enclave inside the second container;
storing data from the database inside the enclave inside the second container;
receiving, from one or more clients, a command; and
passing the command to the database management application stored inside the enclave in the first container, causing the database management application to issue a command to access the database in the second container.
|