Abstract: In general, this disclosure describes a multi-zone secure AI exchange. The multi-zone secure AI exchange may be implemented in a multi-cloud, multi-data center environment, where each zone may be in a different cloud or data center. The multi-zone secure AI exchange may include a data repository, a data exchange, and shared services. The data repository may be configured to store algorithms and datasets, each having a respective owning user. The data exchange may receive datasets and algorithms from the data repository, and may perform the algorithms to produce output data. Each of the data repository, data exchange, and shared services may have a different level of security. The data repository may implement the highest level of security, allowing the owner user, and only the owning user, to control how their data and algorithms move in and out of the data repository, or are changed while in the data repository.

Abstract: In general, this disclosure describes a multi-zone secure AI exchange. The multi-zone secure AI exchange may be implemented in a multi-cloud, multi-data center environment, where each zone may be in a different cloud or data center. The multi-zone secure AI exchange may include a data repository, a data exchange, and shared services. The data repository may be configured to store algorithms and datasets, each having a respective owning user. The data exchange may receive datasets and algorithms from the data repository, and may perform the algorithms to produce output data. Each of the data repository, data exchange, and shared services may have a different level of security. The data repository may implement the highest level of security, allowing the owner user, and only the owning user, to control how their data and algorithms move in and out of the data repository, or are changed while in the data repository.

Abstract: In general, techniques are described for dynamically programming a cloud-based service exchange to enable connections from an enterprise buyer in one metropolitan area to connect to a cloud exchange in another metropolitan area. For example, a network data center includes a programmable network platform to receive an indication of a network service provider (NSP) configured to transport traffic to a customer in a second metropolitan area; provision a virtual circuit from a customer-facing port of a cloud-based services exchange point of the second metropolitan area to the NSP; receive a service request that specifies one or more cloud services provided by one or more cloud service provider networks of the first metropolitan area operated by the respective cloud service providers; and configure access to the one or more cloud services provided by one or more cloud service provider networks via the virtual circuit.

Abstract: In general, this disclosure describes a system for securely training artificial intelligence (AI) models. The system may include communication circuitry for receiving from providers data sets, machine learning algorithms, and AI models. The data sets, machine learning algorithms, and AI models may be placed in a secure sandbox for access by a user. The user may securely train the AI models using the data sets in the secure sandbox. The secure sandbox may record AI model metadata associated with transactions involving the AI models and send the AI model metadata to a model registry. The model registry may attest to the lineage of the AI models.

Abstract: In general, techniques are described for dynamically programming a cloud-based service exchange to enable connections from an enterprise buyer in one metropolitan area to connect to a cloud exchange in another metropolitan area. For example, a network data center includes a programmable network platform to receive an indication of a network service provider (NSP) configured to transport traffic to a customer in a second metropolitan area; provision a virtual circuit from a customer-facing port of a cloud-based services exchange point of the second metropolitan area to the NSP; receive a service request that specifies one or more cloud services provided by one or more cloud service provider networks of the first metropolitan area operated by the respective cloud service providers; and configure access to the one or more cloud services provided by one or more cloud service provider networks via the virtual circuit.