The Cocos AI Solution

A distributed, microservice-based system for confidential and privacy-preserving AI/ML execution.

Secure Multi-Party Computation

Secure Multi-party Computation (SMPC) allows two or more parties to collectively perform computation and receive the resulting output without ever exposing any party’s sensitive input.

With the advances in machine learning, parties can be, for example, the owners of sensitive data on one hand and the providers of machine learning models on the other. Cocos AI ensures that sensitive data is not exposed to the model providers and vice versa, while still delivering valuable results.

Confidential Data Training
Model IP Protection
Verifiable Execution
Cocos AI Concept

Powered by Trusted Execution Environments

Cocos AI leverages Trusted Execution Environments (TEEs) like Intel SGX and AMD SEV to provide hardware-enforced isolation of in-use code and data.

Cryptographic keys used for code and data isolation are randomly generated and stored on the processors, never exposed to the hypervisor or operating system. This ensures that even the cloud provider cannot access the user's data or code.

Remote Attestation Process

System Architecture

A robust architecture containing multiple TEEs for code, data, and a central Security Policy Engine (SPE).

Cocos AI Architecture Diagram

TEE Manager

Microservice running on host hardware to dynamically deploy and configure TEEs for confidential computations.

In-Enclave Agent

Lightweight component within the enclave serving as a coordinator for execution and remote attestation.

HAL

Hardware Abstraction Layer providing a unified interface for AMD SEV, Intel TDX, and other architectures.

CLI

Command Line Interface for users to configure, manage, and monitor confidential computations.

Platform Features

Comprehensive capabilities for secure AI workloads.

Secure VM Provisioning

Seamlessly deploy and maintain secure Virtual Machines.

Hardware Abstraction Layer

Unified interface for AMD SEV and Intel TDX.

End-to-End Encryption

Encrypted traffic safeguarding confidentiality and integrity.

Remote Attestation

Verify the integrity of remote systems and establish trust.

Multiple Runtimes

Support for Python, Docker, and WebAssembly workloads.

SDK and CLI

Comprehensive tools to streamline development.

Ready to get started?

Explore the documentation or check out the code on GitHub.