High-throughput confidential computing method and system based on risc-v architecture

Abstract

A high-throughput confidential computing method and system based on a RISC-V architecture are provided. The method includes: S, acquiring a hardware device tree configuration file to classify each physical resource into a normal partition or a security partition; S, loading a security manager; S, mapping memory resources in the normal and security partitions to the normal and security domains, respectively; registering CPU resources in the normal and security partitions to the normal and security domains, respectively; and registering an interrupt handler function; S, linking an image file of a security file system with a security kernel file to generate an operating system image of the security domain; S, reading the operating system image, and loading the same to a memory address of the security domain; and S, executing the initialization of the security domain according to an interrupt request from the normal domain.