A data privacy fusion and verification method of a trusted execution environment and a blockchain

Abstract

The application discloses a data privacy fusion and verification method of a trusted execution environment and a blockchain, and relates to the technical field of the blockchain.The trusted execution environment is deployed as an independent module into the blockchain system, and the trusted execution environment module is integrated with the blockchain system through an intermediate layer, without the need of large-scale modification of the existing system.A multi-layer data fusion architecture off-chain is introduced, sensitive data is processed by combining the trusted execution environment, and the multi-layer fusion result is verified through an on-chain smart contract, so that the calculation efficiency and data security are ensured.Combining zero-knowledge proof technology and the smart contract, the correctness of the off-chain fusion calculation is verified, the privacy of the sensitive data is ensured from being leaked, and the authenticity of the fusion result is ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of blockchain, and particularly relates to a data privacy fusion and verification method of a trusted execution environment and a blockchain. BACKGROUND

[0002] With the advancement of technology, blockchain technology has been widely applied in various fields due to its unique characteristics of decentralization and tamper resistance, especially in the fields of justice, finance, and medicine. In these industries, blockchain technology has shown great potential in improving data transparency, security, and trust. In the field of justice, blockchain technology is used for the storage, verification, and tracing of electronic evidence and documents, which improves the fairness and efficiency of the judicial process.

[0003] However, as the application of blockchain technology deepens, data privacy protection has become a problem that cannot be ignored. Although the openness and transparency of blockchain enhance the trustworthiness of data, it also brings the risk of privacy leakage. Especially in the process of fusion computing involving sensitive data, how to ensure data privacy while effectively utilizing and verifying data has become a major challenge.

[0004] Data fusion refers to the process of integrating and processing data from different sources to improve data quality, accuracy, and value. In the fields of justice, medicine, and others, data privacy fusion computing is particularly important, as it involves sensitive information such as personal privacy and business secrets. However, in traditional blockchain systems, all data and transaction records are visible to all participants in the network, which makes it risky to perform sensitive data fusion computing directly on the chain.

[0005] In addition, even if encryption technology is used to protect data privacy, how to effectively perform fusion computing on encrypted data without disclosing the decryption, and how to verify the correctness and integrity of the fusion computing results, are also technical challenges currently faced. Therefore, researching and developing new technologies and methods that can protect data privacy while ensuring computing efficiency and verifiable results has become an important task in the development of blockchain technology.

[0006] Homomorphic encryption technology is an important method for handling blockchain data privacy issues. It allows computing on encrypted data without decryption, ensuring the privacy of data processing. In this way, data can be securely uploaded to the blockchain while still supporting smart contracts to perform complex logical operations on these encrypted data. The application of homomorphic encryption enables the storage, transmission, and computation of data without exposing the original data content, effectively protecting user privacy.

[0007] Homomorphic encryption methods suffer from three main problems: First, they are computationally inefficient, stemming directly from the computational complexity of homomorphic encryption. Since homomorphic encryption algorithms require computation while maintaining data encryption, this computational complexity far exceeds that of ordinary data processing, leading to a significant decrease in processing speed. Second, these methods are resource-intensive. Processing encrypted data requires additional computational resources. The algorithmic complexity of homomorphic encryption and its computational demands on encrypted data mean that more computing power and storage space are needed to process and store this data. Finally, their applicability is limited. Homomorphic encryption supports a limited range of computational types. The design of homomorphic encryption algorithms dictates that only specific types of computation can be effectively executed, making it difficult and costly to implement for more complex data processing tasks.

[0008] Trusted Execution Environment (TEE)-based technical solutions provide a secure hardware environment, allowing data and computation to occur in an isolated environment, protecting the computation process from external attacks. Within a TEE, even system operators cannot access sensitive data being processed. This provides a secure execution environment for processing private data, while allowing complex data processing logic to run while protecting privacy. This type of approach ensures that smart contract execution can only occur in a secure and trusted environment by integrating a trusted execution environment into the blockchain system.

[0009] Implementing TEE technology requires specialized hardware support and software modifications to existing blockchain systems, posing a significant challenge for already deployed systems. This is especially true for systems not originally designed with TEE integration in mind, where modifications may involve substantial adjustments to the underlying architecture. Furthermore, the implementation of TEE solutions relies on specific hardware support, potentially leading to compatibility issues with existing blockchain networks, hardware, and operating systems, limiting their widespread adoption. Finally, while TEE provides a secure computing environment, it also introduces additional complexities, including hardware maintenance, system updates, and security verification. These all require additional management and maintenance costs.

[0010] Therefore, those skilled in the art are dedicated to developing a method for the integration and verification of data confidentiality between a trusted execution environment and blockchain. This method effectively protects data privacy; avoids the use of computationally inefficient and storage-intensive methods such as homomorphic encryption, thereby improving the speed and efficiency of data processing; requires no modification to existing blockchain systems, exhibiting good compatibility and scalability; and provides verifiable results, ensuring the transparency and credibility of the data integration process. Summary of the Invention

[0011] In view of the above-mentioned deficiencies of the prior art, the technical problem to be solved by the present invention is to achieve privacy-preserving data fusion, improve data utilization efficiency, and at the same time protect personal privacy and data security.

[0012] To achieve the above objectives, this invention provides a method for integrating and verifying data confidentiality between a trusted execution environment and a blockchain, in which the trusted execution environment is deployed as an independent module into the blockchain system.

[0013] Furthermore, the trusted execution environment is integrated with the blockchain system through a middleware layer.

[0014] Furthermore, the trusted execution environment is deployed as a pluggable module.

[0015] Furthermore, the trusted execution environment module can be dynamically introduced or removed.

[0016] Furthermore, the off-chain multi-layer data fusion architecture, combined with a trusted execution environment to process sensitive data, verifies the multi-layer fusion results through on-chain smart contracts.

[0017] Furthermore, by combining zero-knowledge proofs with smart contracts, the correctness of off-chain fusion computation is verified.

[0018] Furthermore, the data is divided into sensitive data and non-sensitive data.

[0019] Furthermore, the sensitive data is initially fused off-chain using a trusted execution environment, and the fusion result is used to generate verification information through zero-knowledge proof. On-chain smart contracts use the verification information to verify the fusion result step by step.

[0020] Furthermore, it includes a blockchain module, a trusted execution environment module, an off-chain secure storage module, and a smart contract module for fusion result verification.

[0021] Furthermore, it includes the following steps:

[0022] Step 1: Deployment of blockchain nodes and data storage;

[0023] Step 2: Public key registration for the trusted execution environment;

[0024] Step 3: Data fusion processing;

[0025] Step 4: Uploading and verifying the fusion results;

[0026] Step 5: Blockchain record of the fusion result.

[0027] Trusted Execution Environments (TEEs) require specialized hardware support and software modifications, increasing system complexity and maintenance costs, and are difficult to integrate into deployed blockchain systems. This invention proposes a modular TEE integration method: deploying the TEE as an independent module, integrating the TEE module with the blockchain system through an intermediate layer, without requiring large-scale modifications to the existing system. The modular integration principle of this invention: by designing an intermediate layer, the TEE can be deployed as a pluggable module into the blockchain system. This module can be dynamically introduced or removed without significant modifications to existing blockchain nodes, thereby reducing integration difficulty and costs.

[0028] Homomorphic encryption methods suffer from low computational efficiency, high computational resource consumption, and limited applicability. This invention addresses this issue with off-chain multi-layer data fusion and verification: It introduces an off-chain multi-layer data fusion architecture, utilizes a Trusted Execution Environment (TEE) to process sensitive data, and verifies the multi-layer fusion results through on-chain smart contracts, ensuring both computational efficiency and data security. The principle of this multi-layer data fusion and verification is as follows: Data is divided into sensitive and non-sensitive parts. First, sensitive data is initially fused off-chain using a TEE. Then, the fusion result is used to generate verification information through zero-knowledge proofs. On-chain smart contracts use this verification information to perform step-by-step verification of the fusion result, improving computational efficiency and enhancing the credibility of the result.

[0029] The transparency of blockchain technology carries the risk of privacy breaches. This invention combines zero-knowledge proofs with smart contracts: It uses zero-knowledge proof technology and smart contracts to verify the correctness of off-chain fusion computations, ensuring the privacy of sensitive data is not compromised while guaranteeing the authenticity of the fusion result. The principle behind this combination of zero-knowledge proofs and smart contracts is as follows: During data fusion, zero-knowledge proofs generate a proof of the fusion result. The smart contract verifies the correctness of this proof on-chain, without directly exposing the sensitive data itself, thus protecting data privacy.

[0030] This invention proposes a data confidentiality fusion and verification method combining a trusted execution environment and blockchain technology, which has significant technical advantages and promising prospects for industrial application. From the perspectives of technical advantages, performance indicators, and production implementation, the practicality of this invention is as follows:

[0031] 1. Technological advantages

[0032] High security and privacy protection: By placing the processing of sensitive data in a trusted execution environment, this invention effectively prevents unauthorized access and tampering. Simultaneously, utilizing zero-knowledge proof technology, on-chain verification can confirm the correctness of data fusion without exposing sensitive data, thereby further enhancing data privacy protection. This advantage makes it highly practical in scenarios involving sensitive data (such as healthcare, finance, and supply chain).

[0033] Compatibility and Scalability: This invention proposes a modular integration scheme that deploys the Trusted Execution Environment (TEE) as an independent module, ensuring good compatibility with existing blockchain systems without requiring large-scale modifications. This design allows the system to flexibly introduce or remove the TEE module as needed, improving its scalability and flexibility.

[0034] Efficient Data Fusion and Verification: By combining off-chain multi-layer data fusion with on-chain smart contract verification, this invention significantly improves the efficiency of data fusion computation while ensuring data security. Performing the fusion computation off-chain reduces the computational and storage burden on the blockchain, thus optimizing system performance.

[0035] 2. Performance Indicators

[0036] Fusion computation efficiency: Performing data fusion computation in a trusted execution environment can improve computational efficiency while ensuring data security. Compared with traditional homomorphic encryption schemes, this invention has significant advantages in terms of complexity and computational resource consumption.

[0037] Verification Speed ​​and Accuracy: By combining zero-knowledge proofs with smart contracts, this invention can quickly verify the correctness of data fusion results, and the verification process is highly accurate. The on-chain verification process does not leak sensitive data, and the fast verification speed meets the real-time requirements of practical applications.

[0038] Resource utilization: By performing the fusion computation of sensitive data off-chain and storing only the verification information on the blockchain, this invention effectively reduces the consumption of on-chain storage and computing resources and improves the overall resource utilization of the blockchain system.

[0039] 3. Production Implementation

[0040] Easy integration: Due to its modular design, this invention deploys the trusted execution environment as an independent module, allowing for easy integration into existing blockchain systems without significant modifications to the original system architecture. This makes the invention highly feasible for production implementation, facilitating rapid deployment and application in real-world projects.

[0041] Cross-industry application potential: This invention can be applied to multiple industry sectors, including medical data sharing, financial data fusion, and supply chain traceability. Its outstanding advantages in data security and privacy protection make it widely in demand. By providing a secure and efficient data fusion and verification method, this invention can promote data sharing and collaboration across different fields, driving digital transformation in various industries.

[0042] Economic Benefits: By improving the efficiency of data fusion computing and reducing system maintenance costs, this invention can save enterprises significant computing and human resource costs. Simultaneously, enhanced data security and trustworthiness can improve an enterprise's competitiveness in data processing and sharing, creating greater economic benefits.

[0043] 4. Prospects for Industrial Application

[0044] This invention offers significant technical advantages in the field of data security and privacy protection, and is particularly suitable for industries that require the processing of sensitive data and have high requirements for data authenticity and privacy, such as healthcare, finance, and supply chain management. Its modular design, ease of integration, and efficient computing power greatly facilitate its industrial application. Through further research and optimization, the technical solution of this invention has good commercialization potential and market promotion value, and is expected to become an important technical solution in the field of data fusion and verification in related industries.

[0045] This invention possesses strong practicality and broad prospects for industrial application. It not only provides a safe, efficient, and scalable data fusion and verification method for existing technologies, but also demonstrates significant economic and social benefits in actual production implementation. Therefore, this invention has a high potential for scientific research transformation.

[0046] Compared with the prior art, the present invention has the following obvious substantive features and significant advantages:

[0047] 1. The modular Trusted Execution Environment (TEE) integration method of this invention enables the system to flexibly introduce or remove TEE modules, reducing integration and maintenance costs and enhancing the system's flexibility and scalability.

[0048] 2. This invention improves the efficiency and security of fusion computing: The multi-layer data fusion and verification strategy improves the efficiency of fusion computing and reduces the consumption of on-chain computing resources. Simultaneously, the layered verification mechanism ensures the authenticity and integrity of the data fusion results.

[0049] 3. This invention protects data privacy and enhances credibility: The combination of zero-knowledge proofs and smart contracts ensures that sensitive data is not leaked while verifying the correctness of the fusion result, thus protecting data privacy and increasing the credibility of the system.

[0050] 4. This invention possesses strong practicality and broad prospects for industrial application. It not only provides a safe, efficient, and scalable data fusion and verification method for existing technologies, but also demonstrates significant economic and social benefits in actual production implementation. It also possesses a high potential for scientific research transformation.

[0051] The following will further explain the concept, specific structure, and technical effects of the present invention in conjunction with the accompanying drawings, so as to fully understand the purpose, features, and effects of the present invention. Attached Figure Description

[0052] Figure 1 This is a schematic diagram of the system structure of a preferred embodiment of the present invention;

[0053] Figure 2 This is a system flowchart of a preferred embodiment of the present invention. Detailed Implementation

[0054] The following description, with reference to the accompanying drawings, illustrates several preferred embodiments of the present invention to make its technical content clearer and easier to understand. The present invention can be embodied in many different forms, and the scope of protection of the present invention is not limited to the embodiments mentioned herein.

[0055] In the accompanying drawings, components with the same structure are indicated by the same numerical designation, and components with similar structures or functions are indicated by similar numerical designations. The dimensions and thicknesses of each component shown in the drawings are arbitrary, and the present invention does not limit the dimensions and thicknesses of each component. To make the illustrations clearer, the thickness of some components has been appropriately exaggerated in the drawings.

[0056] like Figure 1 As shown, the system includes a blockchain module jointly maintained by the court and relevant units such as medical institutions, tax authorities, and procuratorates, a trusted execution environment module, an off-chain secure storage module, and a smart contract module for verifying fusion results.

[0057] Step 1: Deployment of Blockchain Nodes and Data Storage

[0058] In this implementation, relevant entities such as hospitals, civil affairs departments, and public security, procuratorate, and judicial organs will deploy blockchain nodes. These nodes constitute a private blockchain based on the Ethereum platform, chosen for its mature smart contract ecosystem and high security. Each entity stores non-sensitive information and smart contracts on the blockchain through its deployed nodes. Data storage utilizes IPFS (InterPlanetary File System) to improve storage efficiency and reduce the burden on the blockchain. Smart contracts are written in Solidity for easy deployment and execution on Ethereum. AES encryption is used to ensure data security throughout all data transmission and access processes.

[0059] Step 2: Public key registration for the trusted execution environment

[0060] Each participating entity deploys a Trusted Execution Environment (TEE), such as an Intel SGX, on its internal computer. The TEE provides a secure execution environment for performing sensitive data processing tasks. Each entity's TEE generates a public-private key pair using the RSA encryption algorithm. The public key is registered in the blockchain for subsequent verification. This process ensures the identity of each entity's Trusted Execution Environment and the trustworthiness of its executed code.

[0061] Step 3: Data Fusion Processing

[0062] Participants run data fusion code within their local Trusted Execution Environment (TEE). This code first reads the encrypted private data from a local database (e.g., using MySQL or MongoDB to securely store the private data) and decrypts it within the TEE. Subsequently, it reads public data from the blockchain and merges these two datasets. Throughout this process, the data fusion code is publicly available, while the specific business logic and data processing logic are customized according to each unit's actual business needs. The result of the data fusion is signed using a key built into the TEE, ensuring the non-repudiation and integrity of the result.

[0063] Step 4: Uploading and verifying the fusion results

[0064] The fusion result and its signature are uploaded to the blockchain. The fusion result verification smart contract then verifies the signature using the previously registered public key to confirm the authenticity and integrity of the data. This smart contract is also written in Solidity and can handle various types of data verification logic. The key to this step is that the smart contract can operate independently of any centralized verification authority, providing a transparent and trustworthy verification process.

[0065] Step 5: Blockchain Recording of the Fusion Results

[0066] Once verified, the fusion results are recorded on the blockchain, providing end-users with a trusted and tamper-proof data source. Smart contracts are also used during the recording process to ensure the standardization and consistency of the data. This data can be queried by authorized entities or individuals for further analysis or decision support.

[0067] like Figure 2 As shown, through this series of steps, the technical solution of the present invention can not only ensure the security and efficiency of the data fusion process, but also ensure the authenticity and immutability of the data, providing a reliable data sharing and processing platform for fields such as the judiciary.

[0068] In some embodiments, the technical solution of the present invention achieves privacy protection and effective integration of medical data. Suppose there is a city where medical institutions (such as hospitals, clinics, and pharmacies) and social security departments need to share patients' medical records and social security information in order to provide better medical services and protection.

[0069] 1. First, medical institutions and social security departments deploy blockchain nodes to upload patients' non-sensitive medical information (such as medical records and prescriptions) and social security information (such as social security payment records) to the chain. This information is verified for integrity using a hash chain structure and updated using a distributed node consensus algorithm to ensure data transparency and auditability.

[0070] 2. Healthcare institutions deploy a Trusted Execution Environment (TEE) module on their internal computers to process sensitive patient medical data (such as personal identification information and disease diagnoses). The data fusion code runs within the TEE, first decrypting the sensitive data locally, and then fusing it with non-sensitive data on the blockchain.

[0071] 3. The merged data and its signature are uploaded to the blockchain. The smart contract module for verifying the merged result verifies the result using the public key of the trusted execution environment. This allows social security departments to verify the authenticity of patient medical records provided by medical institutions while protecting patient privacy.

[0072] Through these embodiments, the technical solution of the present invention enables privacy-preserving data fusion in different fields, improves data utilization efficiency, and protects personal privacy and data security.

[0073] The technical solution of the present invention has the following beneficial effects:

[0074] Privacy protection: By performing data fusion calculations locally and only uploading the fusion results and their proofs to the blockchain, data privacy is effectively protected.

[0075] Highly efficient integration: It avoids the use of computationally inefficient and storage-intensive methods such as homomorphic encryption, thereby improving the speed and efficiency of data processing.

[0076] System compatibility: This method does not require modification of existing blockchain systems, has good compatibility and scalability, and is easy to implement on existing blockchain infrastructure.

[0077] Verifiability of Results: The transparent glass verification technology ensures the verifiability of the fusion results, guaranteeing the transparency and credibility of the data fusion process.

[0078] The preferred embodiments of the present invention have been described in detail above. It should be understood that those skilled in the art can make numerous modifications and variations based on the concept of the present invention without creative effort. Therefore, all technical solutions that can be obtained by those skilled in the art based on the concept of the present invention through logical analysis, reasoning, or limited experimentation on the basis of existing technology should be within the scope of protection defined by the claims.

Claims

1. A method for data confidentiality fusion and verification of a trusted execution environment and blockchain, characterized in that, Deploy the trusted execution environment as an independent module into the blockchain system; The trusted execution environment is integrated with the blockchain system through a middleware layer; The trusted execution environment is deployed as a pluggable module; An off-chain multi-layer data fusion architecture is used to process sensitive data in a trusted execution environment and to verify the multi-layer fusion results through on-chain smart contracts. By combining zero-knowledge proofs and smart contracts, the correctness of off-chain fusion computation is verified; The data is categorized into sensitive data and non-sensitive data. The sensitive data is initially fused off-chain using a trusted execution environment. The fusion result is used to generate verification information through zero-knowledge proof. On-chain smart contracts use the verification information to verify the fusion result step by step. The trusted execution environment module can be dynamically introduced or removed; By using an intermediate layer, the Trusted Execution Environment (TEE) module can be integrated with the deployed blockchain system without requiring large-scale modifications to the existing system; by designing an intermediate layer, the TEE can be deployed as a pluggable module into the blockchain system. This module can be dynamically introduced or removed without requiring significant modifications to existing blockchain nodes; It includes a blockchain module, a trusted execution environment module, an off-chain secure storage module, and a smart contract module for fusion result verification; Step 1: Deployment of Blockchain Nodes and Data Storage Relevant units deploy blockchain nodes; each unit stores non-sensitive information and smart contracts on the blockchain through the deployed nodes; AES encryption algorithm is used to ensure data security during all data transmission and access processes; Step 2: Public key registration for the trusted execution environment Each unit deploys a Trusted Execution Environment (TEX) on its internal computers. The TEX provides a secure execution environment for performing sensitive data processing tasks. Each unit's TEX generates a public-private key pair using the RSA encryption algorithm. The public key is registered in the blockchain for subsequent verification. This process ensures the identity of each unit's TEX and the trustworthiness of the executed code. Step 3: Data Fusion Processing Each unit runs data fusion code in its local trusted execution environment. The code first reads the encrypted private data from the local database and decrypts it in the trusted execution environment. Then, it reads public data from the blockchain and merges the two parts of data. During this process, the data fusion code is public, while the specific business logic and data processing logic are customized according to the actual business needs of each unit. The result of data fusion is signed with a key built into the trusted execution environment to ensure the non-repudiation and integrity of the result. Step 4: Uploading and verifying the fusion results The fusion result and signature are uploaded to the blockchain; the fusion result verification smart contract then verifies the signature based on the previously registered public key to confirm the authenticity and integrity of the data; the smart contract can handle various types of data verification logic; the smart contract can provide a transparent and trustworthy verification process independent of any centralized verification authority. Step 5: Blockchain Recording of the Fusion Results Once verified, the fusion results will be recorded in the blockchain, providing a trusted and tamper-proof data source for end users of the data. During the recording process, smart contracts are also used to ensure the standardization and consistency of the data recording. This data can be queried by authorized units or individuals for further analysis or decision support.

Images