Technology
T-REE: The foundation beneath our products
T-REE, our patented Trusted Rich Execution Environment, is the technology that FideCompute and FideProtect are both built on. It creates a secure, isolated space for each container, delivering the protection of a virtual machine with the efficiency of a container.
How T-REE works
Kernel-level isolation
Capability-based access control for each container prevents container escape and unauthorized use of resources.
Virtual machine protection, container efficiency
Isolated execution without the overhead that full virtualization normally carries.
No kernel modification
The middleware uses Linux kernel security functions as they are, so no new attack surface is introduced.
CNCF compliant
Native to Docker and Kubernetes container management, so existing deployment workflows continue to apply.
A chain of trust, built from the hardware up
Trust has to start somewhere physical. T-REE builds upward from a hardware root of trust, so each layer is verified by the one beneath it.
5
Trusted information interchange
Zero-trust secure communication protects data moving between trusted components.
4
Trusted applications
Application certification and information isolation protect the workload itself.
3
Trusted execution environments
Certified operating system and middleware are verified through measured boot.
2
Trusted platforms
Certified system firmware is verified through secure boot.
1
Trusted hardware
A hardware platform with TPM provides the root of trust at power-on.
From foundation to product
T-REE is the common foundation. FideCompute applies it to protect workloads while they run, sealing software, AI models, and data inside the execution environment. FideProtect applies it to bind software to authorized hardware, so that a copied installation will not execute. Deploying both gives you a single trust stack from the silicon up to the application.
Trusted things provisioning
Trust has to be established before a device reaches the field and maintained once it is there. We provide three services across the device lifecycle, in partnership with certification authorities including TWCA and DEKRA.
Device initialization
Establishes the foundation of trust at the manufacturer with initial device credentials and trusted firmware modules.
Device onboarding
Extends the chain of trust to the device owner with local device credentials and trusted software modules.
Trusted computing support
Enforces trust in operation for the device user with execution environment credentials and trusted application containers.
Standards and intellectual property
FiduciaEdge has participated in and led the development of international standards, including IEEE 1934 and IEEE 1935 for edge and fog computing, and has contributed through the Industry IoT Consortium. Our T-REE technology is protected by international patents granted in Taiwan, the United States, Japan, and the PCT system.
