Data security fusion and verification method for trusted execution environment and block chain

Abstract

The invention discloses a data secrecy fusion and verification method for a trusted execution environment and a block chain, and relates to the technical field of block chains. The trusted execution environment is used as an independent module to be deployed in the block chain system, the trusted execution environment module and the block chain system are integrated through an intermediate layer, and large-scale transformation of an existing system is not needed. An under-chain multi-layer data fusion framework is introduced, sensitive data are processed by combining and using a trusted execution environment, and a multi-layer fusion result is verified through an on-chain smart contract, so that the calculation efficiency and the data security are ensured. In combination with a zero-knowledge proof technology and an intelligent contract, correctness of under-chain fusion calculation is verified, privacy of sensitive data is ensured not to be leaked, and authenticity of a fusion result is ensured.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a method for integrating and verifying data confidentiality of a trusted execution environment and a blockchain. Background Art

[0002] With the advancement of technology, blockchain technology has been widely used in many fields due to its unique decentralized and tamper-proof characteristics, especially in the judicial, financial, and medical industries. Blockchain technology has shown great potential in improving data transparency, security, and trust. In the judicial field, blockchain technology is used for the storage, verification, and traceability of electronic evidence and documents, improving the fairness and efficiency of the judicial process.

[0003] However, with the deepening of blockchain technology applications, data privacy protection has become an issue that cannot be ignored. Although the openness and transparency of blockchain enhances the trust of data, it also brings the risk of privacy leakage. Especially in the fusion calculation process involving sensitive data, how to achieve effective use and verification of data while ensuring data privacy has become a major challenge.

[0004] Data fusion refers to the process of integrating and processing data from different sources, aiming to improve data quality, accuracy and value. In the fields of justice and medicine, data privacy fusion computing is particularly important, which involves sensitive information such as personal privacy and business secrets. However, in traditional blockchain systems, all data and transaction records are visible to all participants in the network, which makes sensitive data fusion computing directly on the chain have the risk of privacy leakage.

[0005] In addition, even if encryption technology is used to protect data privacy, how to effectively integrate and calculate encrypted data without publicly decrypting it, and how to verify the correctness and integrity of the integrated calculation results are also technical challenges currently faced. Therefore, researching and developing new technologies and methods that can protect data privacy while ensuring computing efficiency and verifiability of results has become an important topic in the development of blockchain technology.

[0006] Homomorphic encryption technology is an important method for dealing with blockchain data privacy issues. It allows calculations to be performed on encrypted data without decryption, ensuring the privacy of the data processing process. In this way, data can be safely uploaded to the blockchain while still supporting smart contracts to perform complex logical operations on these encrypted data. The application of homomorphic encryption enables data storage, transmission and calculation without exposing the original data content, effectively protecting user privacy.

[0007] There are three problems with homomorphic encryption-based methods: First, the computational efficiency is low, which is directly due to the computational complexity of homomorphic encryption technology. Since homomorphic encryption algorithms need to perform calculations while maintaining the encrypted state of the data, the complexity of such calculations is much higher than that of ordinary data processing, resulting in a significant decrease in processing speed; second, such methods consume a lot of resources, and the processing of encrypted data requires additional computing resources. The algorithmic complexity of homomorphic encryption processing and the demand for encrypted data calculations mean that more computing power and storage space are needed to process and save these data; finally, the scope of application is limited. The types of calculations supported by homomorphic encryption technology are limited. The design of homomorphic encryption algorithms determines that only specific types of calculations can be effectively performed, and for more complex data processing tasks, it is difficult and costly to implement.

[0008] The technical solution based on the Trusted Execution Environment (TEE) provides a secure hardware environment so that data and computing processes can be carried out in an isolated environment, protecting the computing process from external attacks. In the TEE, even the operator of the system cannot access the sensitive data being processed. This provides a secure execution environment for processing private data, while allowing complex data processing logic to run under the premise of protecting privacy. This type of approach ensures that the execution of smart contracts can only be carried out in a secure and trusted environment by integrating a trusted execution environment in the blockchain system.

[0009] Implementing TEE technology requires specialized hardware support and software transformation of existing blockchain systems, which is a major challenge for already deployed blockchain systems. Especially for those systems that were not designed to integrate TEE, the transformation work may involve major adjustments to the underlying architecture. At the same time, the implementation of TEE solutions relies on specific hardware support, which may lead to compatibility issues between the solution and existing blockchain networks, hardware, and operating systems, limiting its widespread application. Finally, while TEE provides a secure computing environment, it also introduces additional complexity, including hardware maintenance, system updates, and security verification. These all require additional management and maintenance costs.

[0010] Therefore, technicians in this field are committed to developing a data confidentiality fusion and verification method for a trusted execution environment and blockchain. It effectively protects the privacy of data; avoids the use of methods such as homomorphic encryption that are computationally inefficient and have high storage overhead, and improves the speed and efficiency of data processing; does not require the transformation of the existing blockchain system, and has good compatibility and scalability; the results are verifiable, ensuring the transparency and credibility of the data fusion process. Summary of the invention

[0011] In view of the above-mentioned defects of the prior art, the technical problem to be solved by the present invention is to realize data fusion with privacy protection, improve data utilization efficiency, and at the same time protect personal privacy and data security.

[0012] To achieve the above objectives, the present invention provides a data confidentiality fusion and verification method for a trusted execution environment and blockchain, and deploys the trusted execution environment as an independent module into the blockchain system.

[0013] Furthermore, the trusted execution environment is integrated with the blockchain system through an intermediate layer.

[0014] Furthermore, the trusted execution environment is deployed as a pluggable module.

[0015] Furthermore, the trusted execution environment module may be dynamically introduced or removed.

[0016] Furthermore, the off-chain multi-layer data fusion architecture is combined with a trusted execution environment to process sensitive data, and the multi-layer fusion results are verified through on-chain smart contracts.

[0017] Furthermore, zero-knowledge proof and smart contracts are combined to verify the correctness of off-chain fusion calculations.

[0018] Furthermore, the data is divided into sensitive data and non-sensitive data.

[0019] Furthermore, the sensitive data is initially integrated off-chain using a trusted execution environment, and the integration result is used to generate verification information through zero-knowledge proof. The on-chain smart contract uses the verification information to verify the integration result step by step.

[0020] Furthermore, it includes a blockchain module, a trusted execution environment module, an off-chain secure storage module, and a fusion result verification smart contract module.

[0021] Further, the following steps are included:

[0022] Step 1: Deployment of blockchain nodes and data storage;

[0023] Step 2: Register the public key of the trusted execution environment;

[0024] Step 3: Data fusion processing;

[0025] Step 4: Upload and verify the fusion results;

[0026] Step 5: Blockchain record of fusion results.

[0027] The Trusted Execution Environment (TEE) requires special hardware support and software modification, which increases the complexity and maintenance cost of the system and is not easy to integrate into the deployed blockchain system. The modular trusted execution environment integration of the present invention: A method for deploying a trusted execution environment as an independent module is proposed, and the TEE module is integrated with the blockchain system through an intermediate layer, without the need for large-scale transformation of the existing system. The modular integration principle of the present invention: By designing an intermediate layer, the trusted execution environment can be deployed as a pluggable module in the blockchain system. This module can be dynamically introduced or removed without making major changes to the existing blockchain nodes, thereby reducing the difficulty and cost of integration.

[0028] Methods based on homomorphic encryption have the problems of low computational efficiency, high consumption of computing resources and limited scope of application. The present invention introduces off-chain multi-layer data fusion and verification: introduces an off-chain multi-layer data fusion architecture, combines the use of a trusted execution environment to process sensitive data, and verifies the multi-layer fusion results through on-chain smart contracts to ensure computing efficiency and data security. The principle of multi-layer data fusion and verification of the present invention: divide the data into sensitive and non-sensitive parts, and first use TEE off-chain to perform a preliminary fusion of sensitive data. Then, the fusion result generates verification information through zero-knowledge proof. The on-chain smart contract uses this verification information to verify the fusion results step by step, which improves the computing efficiency and enhances the credibility of the results.

[0029] The openness and transparency of blockchains can bring risks of privacy leakage. The zero-knowledge proof of the present invention is combined with smart contracts: zero-knowledge proof technology is combined with smart contracts to verify the correctness of off-chain fusion calculations, ensuring that the privacy of sensitive data is not leaked while ensuring the authenticity of the fusion results. The principle of combining zero-knowledge proof with smart contracts in the present invention: During the data fusion process, a proof of the fusion result is generated through zero-knowledge proof, and the smart contract verifies the correctness of the proof on the chain without directly exposing the sensitive data itself, thereby protecting data privacy.

[0030] The present invention proposes a data confidentiality fusion and verification method that combines a trusted execution environment with blockchain technology, which has significant technical advantages and good industrial application prospects. From the perspectives of technical advantages, performance indicators, and production implementation, the practicality of the present invention is as follows:

[0031] 1.Technological advantages

[0032] High security and privacy protection: By placing the processing of sensitive data in a trusted execution environment, the present invention effectively prevents unauthorized access and tampering. At the same time, by using zero-knowledge proof technology, on-chain verification can confirm the correctness of data fusion without exposing sensitive data, thereby further improving the level of data privacy protection. This advantage makes it highly practical in scenarios involving sensitive data (such as medical, financial, and supply chain).

[0033] Compatibility and scalability: This paper proposes a modular integration solution that deploys the trusted execution environment as an independent module, which has good compatibility with the existing blockchain system and does not require large-scale transformation of the existing system. This design enables the system to flexibly introduce or remove TEE modules according to actual needs, improving the scalability and flexibility of the system.

[0034] Efficient data fusion and verification: Through multi-layer data fusion off-chain and smart contract verification on-chain, this invention significantly improves the efficiency of data fusion calculation while ensuring data security. Executing fusion calculation off-chain reduces the computing and storage pressure on the chain and optimizes system performance.

[0035] 2. Performance indicators

[0036] Fusion computing efficiency: Performing data fusion computing in a trusted execution environment can improve computing efficiency while ensuring data security. Compared with traditional homomorphic encryption schemes, this invention has obvious advantages in complexity and computing resource consumption.

[0037] Verification speed and accuracy: By combining zero-knowledge proof with smart contracts, the present invention can quickly verify the correctness of data fusion results, and the verification process has high accuracy. The on-chain verification process will not leak sensitive data, and the verification speed is fast, meeting the real-time requirements in practical applications.

[0038] Resource utilization: By performing the fusion calculation of sensitive data off-chain and only storing the verification information on the blockchain, the present invention effectively reduces the storage and computing resource consumption on the chain and improves the overall resource utilization of the blockchain system.

[0039] 3. Production implementation

[0040] Easy to integrate: Since the present invention adopts modular design and deploys the trusted execution environment as an independent module, it can be easily integrated into the existing blockchain system without making major adjustments to the original system architecture. This makes the present invention have good production implementation feasibility and is conducive to rapid deployment and application in actual projects.

[0041] Cross-industry application potential: The present invention can be applied to multiple industries, including medical data sharing, financial data fusion, supply chain traceability, etc. Its outstanding advantages in data security and privacy protection make it have a wide market demand. By providing a safe and efficient data fusion and verification method, the present invention can promote data sharing and collaboration in different fields and promote the digital transformation of the industry.

[0042] Economic benefits: By improving the efficiency of data fusion computing and reducing system maintenance costs, the present invention can save a lot of computing resources and human resource costs for enterprises. At the same time, the enhanced data security and credibility can improve the competitiveness of enterprises in data processing and sharing, creating higher economic benefits.

[0043] 4. Prospects for industrial application

[0044] The present invention has significant technical advantages in the field of data security and privacy protection, and is particularly suitable for industries that need to process sensitive data and have high requirements for data authenticity and privacy, such as medical, finance, and supply chain management. Its modular design, easy integration, and efficient computing power provide great convenience for its industrial application. Through further research and development and optimization, the technical solution of the present invention has good commercialization potential and market promotion value, and is expected to become an important technical solution in the field of data fusion and verification in related industries.

[0045] The present invention has strong practicality and broad industrial application prospects. It not only provides a safe, efficient and scalable data fusion and verification method for the existing technology, but also has significant economic and social benefits in actual production implementation. Therefore, the present invention has a high possibility of scientific research transformation.

[0046] Compared with the prior art, the present invention has the following obvious substantial features and significant advantages:

[0047] 1. The modular trusted execution environment integration method of the present invention enables the system to flexibly introduce or remove TEE modules, reduces integration and maintenance costs, and enhances the flexibility and scalability of the system.

[0048] 2. The present invention improves the efficiency and security of fusion calculation: The multi-layer data fusion and verification strategy improves the efficiency of fusion calculation and reduces the consumption of on-chain computing resources. At the same time, the authenticity and integrity of the data fusion results are ensured through the layered verification mechanism.

[0049] 3. The present invention protects data privacy and enhances credibility: The combination of zero-knowledge proof and smart contracts ensures that sensitive data is not leaked and verifies the correctness of the fusion results, thereby protecting data privacy and increasing the credibility of the system.

[0050] 4. The present invention has strong practicality and broad industrial application prospects. It not only provides a safe, efficient and scalable data fusion and verification method for the existing technology, but also has significant economic and social benefits in actual production implementation. It has a high possibility of scientific research transformation.

[0051] The concept, specific structure and technical effects of the present invention will be further described below in conjunction with the accompanying drawings to fully understand the purpose, characteristics and effects of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 It is a schematic diagram of the system structure of a preferred embodiment of the present invention;

[0053] Figure 2 It is a system flow chart of a preferred embodiment of the present invention. DETAILED DESCRIPTION

[0054] The following describes several preferred embodiments of the present invention with reference to the drawings in the specification, so that the technical content is clearer and easier to understand. The present invention can be embodied in many different forms of embodiments, and the protection scope of the present invention is not limited to the embodiments mentioned in the text.

[0055] In the drawings, components with the same structure are indicated by the same numerical reference numerals, and components with similar structures or functions are indicated by similar numerical reference numerals. The size and thickness of each component shown in the drawings are arbitrarily shown, and the present invention does not limit the size and thickness of each component. In order to make the illustration clearer, the thickness of the components is appropriately exaggerated in some places in the drawings.

[0056] like Figure 1 As shown, the system includes a blockchain module jointly maintained by the court and relevant units such as medical, tax, and procuratorate, a trusted execution environment module, an off-chain secure storage module, and a fusion result verification smart contract module.

[0057] Step 1: Deployment of blockchain nodes and data storage

[0058] In this implementation, relevant units such as hospitals, civil affairs departments, and public security, procuratorial, judicial and other units will deploy blockchain nodes respectively. These nodes constitute a private chain based on the Ethereum platform. Ethereum is selected because of its mature smart contract ecosystem and high security. Each unit stores non-sensitive information and smart contracts on the blockchain through deployed nodes. IPFS (Interplanetary File System) is used for data storage to improve storage efficiency and reduce the burden on the blockchain. Smart contracts are written in Solidity language for easy deployment and execution on Ethereum. AES encryption algorithm is used to ensure data security during all data transmission and access processes.

[0059] Step 2: Register the public key of the trusted execution environment

[0060] Each participating unit deploys a trusted execution environment (TEE), such as Intel SGX, in its internal computers. TEE provides a secure execution environment for sensitive data processing tasks. Each unit's TEE will generate a pair of public and private keys using the RSA encryption algorithm. The public key is registered in the blockchain for subsequent verification. This process ensures the identity of each unit's trusted execution environment and the credibility of the executed code.

[0061] Step 3: Data fusion processing

[0062] Participants run the data fusion code in their local trusted execution environment. The code first reads the ciphertext of the private data from the local database (for example, using MySQL or MongoDB to securely store private data) and decrypts it in the TEE. It then reads the public data from the blockchain and fuses the two parts of data. In this process, the data fusion code is public, while the specific business logic and data processing logic are customized according to the actual business needs of each unit. The results of data fusion are signed with the key built into the TEE to ensure the non-repudiation and integrity of the results.

[0063] Step 4: Upload and verify the fusion results

[0064] The fusion result and its signature are uploaded to the blockchain. The fusion result verification smart contract then verifies the signature based on the previously registered public key to confirm the authenticity and integrity of the data. This smart contract is also written in Solidity and can handle various types of data verification logic. The key to this step is that the smart contract can be independent of any centralized verification agency and provide a transparent and trusted verification process.

[0065] Step 5: Blockchain record of fusion results

[0066] After verification, the fusion results will be recorded in the blockchain, which provides a reliable and tamper-proof data source for the end users of the data. During the recording process, smart contracts are also used to ensure the standardization and consistency of data records. These data can be queried by authorized units or individuals for further analysis or decision support.

[0067] like Figure 2 As shown, through this series of steps, the technical solution of the present invention can not only ensure the security and efficiency of the data fusion process, but also ensure the authenticity and non-tamperability of the data, providing a reliable data sharing and processing platform for judicial and other fields.

[0068] In some embodiments, the privacy protection and effective integration of medical data are achieved through the technical solution of the present invention. Assume that there is a city whose medical institutions (such as hospitals, clinics, and pharmacies) and social security departments need to share patients' medical records and social security information in order to provide better medical services and protection.

[0069] 1. First, medical institutions and social security departments deploy blockchain nodes respectively, and upload patients’ non-sensitive medical information (such as medical records, drug prescriptions) and social security information (such as social security payment records) to the blockchain. This information is verified for integrity through a hash chain structure and updated using a distributed node consensus algorithm to ensure the openness, transparency, and auditability of the data.

[0070] 2. Medical institutions deploy a trusted execution environment module in their internal computers, which is used to process patients' sensitive medical data (such as personal identity information, disease diagnosis). The data fusion code runs in the trusted execution environment, first decrypting the local sensitive data and then fusing it with the non-sensitive data on the chain.

[0071] 3. The fused data and its signature are uploaded to the blockchain, and the fusion result verification smart contract module verifies the fusion result based on the public key of the trusted execution environment. In this way, the social security department can verify the authenticity of the patient's medical records provided by the medical institution while protecting the patient's privacy.

[0072] Through the embodiments, the technical solution of the present invention realizes privacy-protected data fusion in different fields, improves data utilization efficiency, and protects personal privacy and data security.

[0073] The technical solution of the present invention has the following beneficial effects:

[0074] Privacy protection: By performing data fusion calculations locally and uploading only the fusion results and their proofs to the blockchain, the privacy of the data is effectively protected.

[0075] Efficient fusion: It avoids the use of methods such as homomorphic encryption that are computationally inefficient and have high storage overhead, and improves the speed and efficiency of data processing.

[0076] System compatibility: This method does not require modification of the existing blockchain system, has good compatibility and scalability, and is easy to implement on the existing blockchain infrastructure.

[0077] Verifiability of results: Through the transparent glass certification technology, the verifiability of the fusion results is achieved, ensuring the transparency and credibility of the data fusion process.

[0078] The preferred specific embodiments of the present invention are described in detail above. It should be understood that ordinary technicians in the field can make many modifications and changes based on the concept of the present invention without creative work. Therefore, all technical solutions that can be obtained by technicians in the technical field based on the concept of the present invention through logical analysis, reasoning or limited experiments on the basis of the prior art should be within the scope of protection determined by the claims.

Claims

1. A method for integrating and verifying data confidentiality between a trusted execution environment and a blockchain, characterized in that: Deploy the trusted execution environment as an independent module into the blockchain system.

2. The data confidentiality fusion and verification method of the trusted execution environment and blockchain as claimed in claim 1 is characterized in that: The trusted execution environment is integrated with the blockchain system through an intermediate layer.

3. The data confidentiality fusion and verification method of the trusted execution environment and blockchain as claimed in claim 1 is characterized in that: The trusted execution environment is deployed as a pluggable module.

4. The data confidentiality fusion and verification method of the trusted execution environment and blockchain as claimed in claim 1, characterized in that: The trusted execution environment module can be dynamically introduced or removed.

5. The data confidentiality fusion and verification method of the trusted execution environment and blockchain as claimed in claim 1 is characterized in that: The off-chain multi-layer data fusion architecture combines a trusted execution environment to process sensitive data, and verifies the multi-layer fusion results through on-chain smart contracts.

6. The data confidentiality fusion and verification method of the trusted execution environment and blockchain as claimed in claim 1 is characterized in that: Combine zero-knowledge proof with smart contracts to verify the correctness of off-chain fusion calculations.

7. The data confidentiality fusion and verification method of the trusted execution environment and blockchain as claimed in claim 1 is characterized in that: Separate data into sensitive and non-sensitive data.

8. The data confidentiality fusion and verification method of the trusted execution environment and blockchain as claimed in claim 7, characterized in that: The sensitive data is initially integrated off-chain using a trusted execution environment, and the integration result is used to generate verification information through zero-knowledge proof. The on-chain smart contract uses the verification information to verify the integration result step by step.

9. The data confidentiality fusion and verification method of the trusted execution environment and blockchain as claimed in claim 1, characterized in that: It includes blockchain module, trusted execution environment module, off-chain secure storage module, and fusion result verification smart contract module.

10. The data confidentiality fusion and verification method of the trusted execution environment and blockchain as claimed in claim 1, characterized in that: The following steps are involved: Step 1: Deployment of blockchain nodes and data storage; Step 2: Register the public key of the trusted execution environment; Step 3: Data fusion processing; Step 4: Upload and verify the fusion results; Step 5: Blockchain record of fusion results.

Images