Ant Group Trusted Execution Environment open source operating system Occlum v1.0 released

Ant Group's Occlum v1.0, an open source Trusted Execution Environment (TEE) open source operating system, was released on December 12. This version is more stable and complete than previous versions, with up to a five-fold performance improvement in thread scheduling, networking, and storage IO. For the first time, the Spark big data analysis solution jointly developed by Ant Group and Intel is available in v1.0, which helps Spark users seamlessly migrate to TEE confidential computing environment.

Occlum is an open source operating system for memory-safe multi-tasking user states of multiple TEE. Occlum allows application loads to be easily deployed in TEE to ensure the confidentiality and integrity of user privacy data throughout the computing process. Currently, Occlum can support TEE including Intel SGX and Ant Group self-developed domestic Tee-HyperEnclave.

Occlum is a secure and efficient multi-task, user-state operating system implemented within a single Enclave on Intel SGX. Because Occlum implements LibOS within a single Enclave, Occlum performs better than other LibOS implementations in terms of resource occupancy and operational efficiency.

In 2021, Ant Group decided to donate Occlum to Linux Foundation Confidential Computing Alliance CCC. Occlum has been developed and polished for 4 years, released more than 40 versions on the open source community, and obtained more than 1000 Github Stars.