On-Premises IP Protection

The following documents provide detailed information about FLARE’s Confidential Federated AI architecture for IP protection:

• IP Protection Security Architecture with FLARE and Confidential Computing - System architecture and component design

• FLARE Confidential Federated AI Deployment Guide - Deployment guide for on-premises CVM setup with AMD SEV-SNP and NVIDIA GPU

• CVM Base Image and Binary Building - Build instructions for Ubuntu base image, firmware, and required binaries

• Confidential Computing: Attestation Service Integration - Attestation mechanisms and trust establishment

• HashiCorp Vault and Trustee KBS Joint Deployment Guide - Operational HashiCorp key vault deployment with Trustee

• IP Protection Security Architecture with FLARE and Confidential Computing
  • Introduction
  • Design Proposal & Solution Overview
  • Security Architecture Components
  • Trustee Service Integration
  • CVM Implementation Details
  • Application Level Security
  • References
• FLARE Confidential Federated AI Deployment Guide
  • Overview
  • Deployment Environment
  • Prerequisites
  • Deployment Workflow
  • Configuration Reference
  • Troubleshooting
  • Notes on using NVIDIA GPU CC
  • Next Steps
• CVM Base Image and Binary Building
  • Build Ubuntu Base Image
  • Fetch Firmware
  • Build snpguest
  • Build kbs-client
• Confidential Computing: Attestation Service Integration
  • Overview
  • How It Works
  • Components
  • Supported Platforms
  • Runtime Behavior
• HashiCorp Vault and Trustee KBS Joint Deployment Guide
  • Overview
  • Understanding the Architecture
  • Deployment Phases
  • Phase 1: Environment Preparation
  • Phase 2: Deploy HashiCorp Vault
  • Phase 3: Deploy Trustee KBS (Key Broker Service)
  • Phase 4: Client Operations and Verification
  • Troubleshooting
  • Appendix