Mobile edge-cloud security infrastructure

A method for edge-cloud security, the method comprising:

• receiving a first workload request via a network;
• receiving a second workload request via the network;
• instantiating the workload in an isolated environment on an edge computing platform, the isolated environment being a container or a virtual machine, the instantiating including using a hardware security component (SEC) of the edge computing platform to prevent access to data or code of the workload from other environments hosted by the edge computing platform, wherein to prevent access to the data or code of the workload, the SEC encrypts the data or code before storing the data or code in memory or on a storage device of the edge computing platform;
• instantiating the second workload in the isolated environment on the edge computing platform, the instantiation of the second workload using the SEC to prevent access to a second data or code of the second workload from at least one of the first workload or the other environments hosted by the edge computing platform, wherein to prevent access to the second data or code of the second workload, the SEC encrypts the second data or code before storing the second data or code in the memory or on the storage device of the edge computing platform;
• executing at least one of the first workload or the second workload in the isolated environment;
• and
• returning a result of at least one of the first workload or the second workload;
• wherein the SEC generates a first workload specific key and a second workload specific key as a part of the instantiation of the isolated environment, wherein the first workload specific key is used for encryption of the data or code, and the second workload specific key is used for encryption of the second data or code.

At least one non-transitory machine readable medium including instructions for edge-cloud security, the instructions, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:

• receiving a first workload request via a network;
• receiving a second workload request via the network;
• instantiating the workload in an isolated environment on an edge computing platform, the isolated environment being a container or a virtual machine, the instantiating including using a hardware security component (SEC) of the edge computing platform to prevent access to data or code of the workload from other environments hosted by the edge computing platform, wherein to prevent access to the data or code of the workload, the SEC encrypts the data or code before storing the data or code in memory or on a storage device of the edge computing platform;
• instantiating the second workload in the isolated environment on the edge computing platform, the instantiation of the second workload using the SEC to prevent access to a second data or code of the second workload from at least one of the first workload or the other environments hosted by the edge computing platform, wherein to prevent access to the second data or code of the second workload, the SEC encrypts the second data or code before storing the second data or code in the memory or on the storage device of the edge computing platform;
• executing at least one of the first workload or the second workload in the isolated environment;
• and
• returning a result of at least one of the first workload or the second workload;
• wherein the SEC generates a first workload specific key and a second workload specific key as a part of the instantiation of the isolated environment, wherein the first workload specific key is used for encryption of the data or code, and the second workload specific key is used for encryption of the second data or code.