Digital asset semi-hosting security cross-chain method and system based on distributed TEE network

Abstract

The invention discloses a digital asset semi-hosting security cross-chain method and system based on a distributed TEE network, and relates to the technical field of block chains, and the method comprises the following steps: obtaining a node, verifying the node through a pre-constructed centralized server, carrying out the remote authentication and initialization of the verified node through a trusted execution environment TEE, obtaining a trusted TEE node, and sending the trusted TEE node to a server; wherein the nodes are users participating in cross-chain bridge verification; according to the method, a trusted TEE node executes under-chain calculation verification in a TEE environment, corresponding tokens are casted for a receiver according to an HTLC unlocking rule after verification succeeds, semi-trusteeship safety cross-chain of digital assets is achieved, and optimization of transaction cost and stable operation of a system are achieved while the safety of a cross-chain bridge is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of blockchain, specifically a semi-custodial secure cross-chain method and system for digital assets based on a distributed TEE network. Background Art

[0002] In recent years, with the continuous development of blockchain technology and the rise of various blockchain systems, the demand for value circulation between different blockchain networks has been increasing. However, due to the different consensus mechanisms, smart contract frameworks, and data storage methods adopted by each blockchain system, significant challenges exist in their interoperability. As a key technology to solve the blockchain interoperability problem, cross-chain bridges allow the exchange of assets, data, and smart contract calls between different blockchains, thus playing an important role in the blockchain ecosystem.

[0003] However, existing cross-chain bridges have some structural drawbacks, which are mainly classified into two categories: centralized cross-chain bridges and decentralized cross-chain bridges according to their structures. Centralized cross-chain bridges rely on a single trusted entity (such as an exchange or a custodian institution) to manage user assets and provide efficient cross-chain services. However, this model has a single point of failure risk. Once the centralized entity is attacked or mismanaged, it may lead to large-scale asset losses. On the other hand, decentralized cross-chain bridges are based on smart contracts and decentralized verification mechanisms and do not rely on any centralized institution. However, due to their high computational and communication resource requirements, they often face problems such as high transaction costs, long delays, and limited scalability. Summary of the Invention

[0004] To solve the deficiencies mentioned in the above background art, the purpose of the present invention is to provide a semi-custodial secure cross-chain method and system for digital assets based on a distributed TEE network.

[0005] In a first aspect, the purpose of the present invention can be achieved by the following technical solutions: A semi-custodial secure cross-chain method for digital assets based on a distributed TEE network, the method comprising the following steps:

[0006] Obtain nodes, verify the nodes through a pre-constructed centralized server, and remotely authenticate and initialize the verified nodes through a trusted execution environment TEE to obtain trusted TEE nodes, wherein the nodes are users participating in cross-chain bridge verification;

[0007] Execute off-chain calculation verification on the trusted TEE nodes in the TEE environment. After successful verification, according to the HTLC unlocking rules, mint corresponding tokens for the receiver to achieve semi-custodial secure cross-chain of digital assets.

[0008] In combination with the first aspect, in certain implementations of the first aspect, the method further includes: the process of remotely authenticating and initializing the node to be verified through the trusted execution environment (TEE) includes node registration and authentication, smart contract deployment and routing table update, cross-chain protocol parameter configuration, and staking and incentive mechanisms.

[0009] In combination with the first aspect, in certain implementations of the first aspect, the method further includes: the process of node registration and authentication includes the verification node in the cross-chain bridge submitting a registration application to the central server and performing identity authentication through the remote attestation mechanism; the process of smart contract deployment and routing table update: the authenticated node is added to the decentralized network of the cross-chain bridge, the core smart contract of the cross-chain protocol is deployed to the target blockchain, and the routing table is updated simultaneously.

[0010] In combination with the first aspect, in certain implementations of the first aspect, the method further includes: the process of cross-chain protocol parameter configuration: when the system is initialized, HTLC-related parameters are set, including the hash function and the time lock period; the process of staking and incentive mechanisms: the nodes participating in cross-chain verification need to stake a preset amount of assets as a margin, and through the incentive mechanism managed by the smart contract, the node income is dynamically adjusted according to the transaction verification record.

[0011] In combination with the first aspect, in certain implementations of the first aspect, the method further includes: the process of semi-custodial secure cross-chain of digital assets includes:

[0012] Cross-chain transaction initiation, verification node processing, target chain asset minting, transaction confirmation and receipt.

[0013] In combination with the first aspect, in certain implementations of the first aspect, the method further includes: the process of cross-chain transaction initiation: the user submits a cross-chain transaction request on the source blockchain, the smart contract locks the user's tokens, and generates a hash time lock value (HTLC); the process of verification node processing: the verification node performs off-chain calculations in the TEE environment to verify the legality of the transaction, including hash value matching and transaction data integrity check; the process of target chain asset minting: after successful verification, the smart contract on the target blockchain will mint the corresponding tokens for the recipient according to the HTLC unlocking rule and broadcast the transaction completion information; the process of transaction confirmation and receipt: after the target chain transaction is completed, the system will return a transaction confirmation message to the source chain and allow the user to unlock the source chain assets using the key of the HTLC.

[0014] In combination with the first aspect, in certain implementations of the first aspect, the method further includes: the failure rollback mechanism for the semi-custodial secure cross-chain of digital assets is as follows: if the transaction fails to complete within the time lock period, the smart contract will automatically execute the rollback logic to return the locked assets to the transaction initiator.

[0015] In a second aspect, to achieve the above object, the present invention discloses a semi-custodial secure cross-chain system for digital assets based on a distributed TEE network, including:

[0016] A node verification module, configured to obtain nodes, verify the nodes through a pre-constructed centralized server, and remotely authenticate and initialize the verified nodes through a trusted execution environment TEE to obtain trusted TEE nodes, where the nodes are users participating in cross-chain bridge verification;

[0017] A secure cross-chain module, configured to perform off-chain calculation verification on the trusted TEE nodes in the TEE environment, and after successful verification, mint corresponding tokens for the receiver according to the HTLC unlocking rule to achieve semi-custodial secure cross-chain of digital assets.

[0018] In another aspect of the present invention, to achieve the above object, a terminal device is disclosed, including a memory, a processor, and a computer program stored in the memory and capable of running on the processor. The computer program stored in the memory is capable of running on the processor. When the processor loads and executes the computer program, the above-mentioned semi-custodial secure cross-chain method for digital assets based on a distributed TEE network is adopted.

[0019] In still another aspect of the present invention, to achieve the above object, a computer-readable storage medium is disclosed. The computer-readable storage medium stores a computer program. When the computer program is loaded and executed by a processor, the above-mentioned semi-custodial secure cross-chain method for digital assets based on a distributed TEE network is adopted.

[0020] Advantages of the present invention:

[0021] In view of the risk of single-point failure in the existing cross-chain asset centralized custody, our solution is to allow public nodes with TEE to join the distributed TEE network to achieve decentralized cross-chain transaction verification. At the same time, in order to avoid the cost increase of transaction fees and time costs brought by the distributed structure. By designing a two-way HTLC protocol and combining remote authentication, the transaction fees and time costs of cross-chain transactions are significantly reduced. In terms of security, efficiency, and economic sustainability, while improving the security of the cross-chain bridge, the optimization of transaction costs and the stable operation of the system are achieved. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for the description of the embodiments or the prior art. Obviously, for those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings;

[0023] Figure 1 It is a schematic diagram of the method flow of the present invention;

[0024] Figure 2 It is a flow chart for initializing the cross-chain bridge of the present invention;

[0025] Figure 3 It is a flow chart for cross-chain transactions of the cross-chain bridge of the present invention;

[0026] Figure 4 It is a schematic diagram of the process of Embodiment 2 of the present invention;

[0027] Figure 5 It is a schematic diagram of the process of Embodiment 3 of the present invention;

[0028] Figure 6 It is a schematic diagram of the system structure of the present invention;

[0029] Figure 7 It is a schematic diagram of the CPU utilization rate of the actual verification case of the present invention;

[0030] Figure 8 It is a schematic diagram of the time taken for cross-chain of digital assets in the actual verification case of the present invention. Specific Embodiments

[0031] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0032] Embodiment 1:

[0033] As Figure 1 shown, a semi-custodial secure cross-chain method for digital assets based on a distributed TEE network, the method includes the following steps:

[0034] S101: Obtain nodes, verify the nodes through a pre-constructed centralized server, and remotely authenticate and initialize the verified nodes through a trusted execution environment TEE to obtain trusted TEE nodes, where the nodes are users participating in cross-chain bridge verification;

[0035] Specifically, in the initialization phase: Users who wish to participate in the cross-chain bridge transaction verification act as nodes and are verified through a centralized server. In the initialization phase of the cross-chain bridge system, all verification nodes for cross-chain transactions must undergo remote authentication by a trusted execution environment (TEE) to ensure the credibility and security of their computations. The entire initialization process includes the following steps: (1) Node registration and authentication. The verification nodes in the cross-chain bridge submit registration applications to the central server and authenticate their identities through a remote attestation mechanism to ensure that their operating environments meet security requirements; (2) Smart contract deployment and routing table update. The authenticated nodes are added to the decentralized network of the cross-chain bridge. The core smart contract of the cross-chain protocol is deployed to the target blockchain, and at the same time, the routing table is updated to ensure that all nodes can correctly identify the paths of cross-chain transactions; (3) Cross-chain protocol parameter configuration. When the system is initialized, HTLC-related parameters such as hash functions and time lock durations are set to ensure the atomicity of transactions; (4) Staking and incentive mechanism. Nodes participating in cross-chain verification need to stake a certain amount of assets as collateral to ensure their honest behavior in cross-chain transactions, and through an incentive mechanism managed by a smart contract, the node rewards are dynamically adjusted according to transaction verification records. Finally, the cross-chain bridge completes the access and initialization of trusted TEE nodes, providing secure and efficient support for subsequent cross-chain transactions, such as Figure 2 shown.

[0036] S102: Perform off-chain computation verification of the trusted TEE node in the TEE environment. After successful verification, according to the HTLC unlocking rules, mint corresponding tokens for the receiver to achieve semi-custodial secure cross-chain of digital assets.

[0037] Specifically, during the running phase: Considering the implementation of decentralization and asset non-custody throughout the running process to avoid single points of failure and asset risks, during the running phase of the cross-chain bridge, the system needs to optimize the transaction costs of all participants and ensure the security and efficiency of cross-chain transactions. The entire process includes the following steps: (1) Cross-chain transaction initiation: The user submits a cross-chain transaction request on the source blockchain. The smart contract locks the user's tokens and generates a hash time lock value (HTLC); (2) Verification node processing: The verification node performs off-chain calculations in the TEE environment to verify the legitimacy of the transaction, including hash value matching, transaction data integrity check, etc.; (3) Target chain asset minting: After successful verification, the smart contract on the target blockchain will mint the corresponding tokens for the recipient according to the HTLC unlocking rules and broadcast the transaction completion information; (4) Transaction confirmation and receipt: After the target chain transaction is completed, the system will return a transaction confirmation message to the source chain and allow the user to unlock the source chain assets using the HTLC key to ensure the atomicity of the transaction; (5) Failure rollback mechanism: If the transaction fails to complete within the time lock period, the smart contract will automatically execute the rollback logic to return the locked assets to the transaction initiator to prevent fund loss. Throughout the process, we combine TEE calculations with decentralized verification to minimize transaction costs while ensuring transaction security and fairness. Finally, the cross-chain bridge successfully realizes the complete process of cross-chain transactions, as Figure 3 shown.

[0038] The cross-chain bridge mainly solves two problems: (1) We propose an off-chain calculation method based on TEE (Trusted Execution Environment) aiming to reduce the overall cost of cross-chain transactions. During each cross-chain transaction process, off-chain calculations can transfer complex computing tasks from the blockchain to a secure computing environment, avoiding frequent on-chain interactions, thus reducing unnecessary gas fees and computing overhead. We only regard these calculations as temporary states because directly migrating all calculations to the chain may lead to unnecessary costs and delays. Therefore, the environment provided by TEE can optimize transaction costs while ensuring security, making cross-chain transactions more cost-effective; (2) Implementing a distributed trusted network to verify transactions to achieve the robustness and anti-attack ability of cross-chain transactions. We design a distributed network architecture, combined with a non-custodial asset management mechanism, which significantly enhances the security of cross-chain transactions. In traditional centralized transactions, asset control is concentrated in one entity, which may bring potential security risks and single points of failure. In the distributed architecture of the cross-chain bridge, asset management is decentralized among multiple nodes, ensuring the security and immutability of assets through encryption technology and consensus mechanisms, avoiding the risks of mismanagement or being attacked that may occur in the traditional custody mode, thus providing higher security for transactions.

[0039] Finally, the following results were observed: (1) The time taken by the scheme (24-36 seconds) was significantly reduced compared to traditional decentralized cross-chain bridges (such as Across Bridge 21-900 seconds, Celer C Bridge 36-240 seconds). At the same time, the waiting time was further reduced through the minting / destruction and minting / locking token mechanisms, achieving low time for high-value transaction scenarios; (2) The cost of a single cross-chain transaction in this scheme is 403,299 gas, which is comparable to the cost level of centralized cross-chain bridges (such as Binance Bridge), but it realizes distributed asset custody and improves security to a trustless level, highlighting its advantages in balancing cost control and security; (3) The scheme successfully implemented the "monetary incentive + pledge penalty" dual-track economic model proposed in this scheme, and verified that the equilibrium solution can only be achieved through multi-party cooperation through Nash equilibrium solution. Through the automatic execution of the economic model by smart contracts, honest nodes are rewarded for transaction verification to increase their participation enthusiasm, malicious nodes have a 100% deposit confiscation rate, and the compensation efficiency of the damaged party is improved to milliseconds. This model effectively suppresses malicious behavior of nodes and forms a self-balancing economic closed-loop system;

[0040] Embodiment 2: Figure 4 As shown in the figure, in order to realize a cross-chain transaction from blockchain A to blockchain B, we propose a cross-chain protocol for distributed TEE networks, which is executed as follows: 1) Initiate a cross-chain request: The user or smart contract on blockchain A makes a request for a cross-chain operation.

[0041] Check and update online nodes: The decentralized part verifies the list of online nodes in the current network and maintains updates through IPFS.

[0042] Asset destruction event: When a cross-chain request requires the transfer of assets, an asset destruction event is triggered on blockchain A.

[0043] Verify transactions and charge fees: The validator nodes (nodes A, B, C, etc.) in the trusted network verify transactions and charge relevant fees.

[0044] Asset minting signature: Signed on blockchain B to confirm the asset minting request.

[0045] Verify signature and mint assets: After receiving the signature on blockchain B, verify the validity and complete the asset minting operation.

[0046] Embodiment 3: Figure 5 As shown, in order to realize the trusted joining of public nodes with TEE in the cross-chain bridge, the specific steps are as follows: In the cross-chain bridge initialization phase, the following steps are included:

[0047] Node Initialization: Nodes in the trusted network (such as nodes A, B, and C) complete the initial configuration and are ready to participate in the operation of the cross-chain bridge.

[0048] Remote Authentication: The central server performs remote identity authentication of the nodes to confirm the trustworthiness of the nodes.

[0049] Update Routing Table and Code: The central server transmits the code of the cross-chain protocol through IPFS for the distributed nodes to download, and at the same time continuously updates the contract routing table of the cross-chain bridge.

[0050] Node Joining: After the authentication is completed, the nodes join the trusted network and become trusted verifiers.

[0051] Connect Routing Table: The updated routing table will be connected to Blockchains A and B to ensure the correctness and availability of the cross-chain communication path.

[0052] Cross-chain Bridge Update: After the initialization is completed, the configuration or logic of the cross-chain bridge is updated according to requirements to adapt to different blockchain environments.

[0053] Example 4: As Figure 6 shown, to achieve the above object, the present invention discloses a semi-custodial secure cross-chain system for digital assets based on a distributed TEE network, including:

[0054] Node Verification Module 11, which is used to obtain nodes, verify the nodes through a pre-constructed central server, and remotely authenticate and initialize the verified nodes through the Trusted Execution Environment TEE to obtain trusted TEE nodes, where the nodes are users participating in the cross-chain bridge verification;

[0055] Secure Cross-chain Module 12, which is used to perform off-chain calculation verification on the trusted TEE nodes in the TEE environment, and after successful verification, mint corresponding tokens for the recipient according to the HTLC unlocking rule to achieve semi-custodial secure cross-chain of digital assets.

[0056] Actual Verification Case: The present method and system were actually verified. Two Ethereum blockchain networks were constructed on a 4-core 16G server and the present method was used for cross-chain operations, and cross-chain transfer verification was carried out. The CPU occupancy rate of the server and the time taken for digital asset cross-chain for 1 - 1000 cross-chains were verified on the server, as shown in Figure 7 and Figure 8 shown. The actual verification shows that a 4-core 16G server device can complete 1000 cross-chain verifications within 8 seconds, and the CPU occupancy rate is not higher than 70%.

[0057] Based on the same inventive concept, the present invention further provides a computer device, which includes: one or more processors, and a memory for storing one or more computer programs; the program includes program instructions, and the processor is configured to execute the program instructions stored in the memory. The processor may be a Central Processing Unit (CPU), or may also be other general-purpose processors, Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), Field-Programmable Gate Arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. It is the computing core and control core of the terminal, and is used to implement one or more instructions. Specifically, it is used to load and execute one or more instructions in the computer storage medium to implement the above method.

[0058] It should be further noted that, based on the same inventive concept, the present invention further provides a computer storage medium, on which a computer program is stored, and the computer program, when run by a processor, executes the above method. The storage medium may be any combination of one or more computer-readable media. The computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium may, for example, but not be limited to, an electrical, magnetic, optical, electrical, magnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the above. More specific examples (non-exhaustive list) of the computer-readable storage medium include: an electrical connection having one or more wires, a portable computer disk, a hard disk, a Random Access Memory (RAM), a Read-Only Memory (ROM), an Erasable Programmable Read-Only Memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, the computer-readable storage medium may be any tangible medium that contains or stores a program, and the program may be used by or combined with an instruction execution system, apparatus, or device.

[0059] In the description of this specification, the description referring to terms such as "one embodiment", "example", "specific example", etc. means that the specific features, structures, materials, or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present disclosure. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials, or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0060] The foregoing has shown and described the basic principles, main features and advantages of the present disclosure. Those skilled in the art should understand that the present disclosure is not limited by the above embodiments, and what is described in the above embodiments and the specification is only to illustrate the principles of the present disclosure. Without departing from the spirit and scope of the present disclosure, the present disclosure will have various changes and improvements, and these changes and improvements fall within the scope of the present disclosure claimed.

Claims

1. A digital asset semi-custodial secure cross-chain method based on a distributed TEE network, characterized in that: The method comprises the following steps: Obtain the node, verify the node through a pre-built centralized server, remotely authenticate and initialize the verified node through the trusted execution environment TEE, and obtain a trusted TEE node, where the node is the user participating in the cross-chain bridge verification; The trusted TEE node performs off-chain computing verification in the TEE environment. After successful verification, the corresponding tokens are minted for the recipient according to the HTLC unlocking rules, realizing semi-custodial and secure cross-chain of digital assets.

2. The digital asset semi-custodial secure cross-chain method based on a distributed TEE network according to claim 1 is characterized in that: The process of remote authentication and initialization of the verified node through the trusted execution environment TEE includes node registration and authentication, smart contract deployment and routing table update, cross-chain protocol parameter configuration, and pledge and incentive mechanism.

3. The digital asset semi-custodial secure cross-chain method based on a distributed TEE network according to claim 2 is characterized in that: The node registration and authentication process includes the verification node in the cross-chain bridge submitting a registration application to the central server and performing identity authentication through a remote proof mechanism, and the process of smart contract deployment and routing table update: the authenticated node is added to the decentralized network of the cross-chain bridge, the core smart contract of the cross-chain protocol is deployed to the target blockchain, and the routing table is updated.

4. The digital asset semi-custodial secure cross-chain method based on a distributed TEE network according to claim 3 is characterized in that: The process of cross-chain protocol parameter configuration: HTLC related parameters will be set when the system is initialized, including hash function and time lock period; The process of staking and incentive mechanism: Nodes participating in cross-chain verification need to pledge a preset amount of assets as a deposit, and dynamically adjust node income based on transaction verification records through an incentive mechanism managed by smart contracts.

5. The digital asset semi-custodial secure cross-chain method based on a distributed TEE network according to claim 1 is characterized in that: The semi-custodial secure cross-chain process of the digital assets includes: Cross-chain transaction initiation, verification node processing, target chain asset casting, transaction confirmation and receipt.

6. The digital asset semi-custodial secure cross-chain method based on a distributed TEE network according to claim 5 is characterized in that: The process of initiating the cross-chain transaction: the user submits a cross-chain transaction request on the source blockchain, the smart contract locks the user's token and generates a hash time lock value HTLC; the process of processing by the verification node: the verification node performs off-chain calculations in the TEE environment to verify the legitimacy of the transaction, including hash value matching and transaction data integrity checks; the process of minting assets on the target chain, after successful verification, the smart contract on the target blockchain will mint the corresponding tokens for the recipient according to the HTLC unlocking rules and broadcast the transaction completion information; the process of transaction confirmation and receipt: after the target chain transaction is completed, the system will return the transaction confirmation information to the source chain and allow the user to use the HTLC key to unlock the source chain assets.

7. The digital asset semi-custodial secure cross-chain method based on a distributed TEE network according to claim 6 is characterized in that: The failure rollback mechanism of the semi-custodial secure cross-chain of the digital assets is as follows: if the transaction fails to be completed within the time lock period, the smart contract will automatically execute the rollback logic and return the locked assets to the transaction initiator.

8. A digital asset semi-custodial secure cross-chain system based on a distributed TEE network, characterized by: include: The node verification module is used to obtain nodes, verify the nodes through a pre-built centralized server, remotely authenticate and initialize the verified nodes through the trusted execution environment TEE, and obtain a trusted TEE node, wherein the node is a user participating in the cross-chain bridge verification; The secure cross-chain module is used to perform off-chain computing verification on trusted TEE nodes in the TEE environment. After successful verification, the corresponding tokens are minted for the recipient according to the HTLC unlocking rules, realizing semi-custodial secure cross-chain of digital assets.

9. A terminal device, comprising a memory, a processor, and a computer program stored in the memory and capable of running on the processor, characterized in that: The memory stores a computer program that can be run on a processor. When the processor loads and executes the computer program, the digital asset semi-custodial secure cross-chain method based on a distributed TEE network as described in any one of claims 1 to 7 is adopted.

10. A computer-readable storage medium having a computer program stored therein, characterized in that: When the computer program is loaded and executed by the processor, the digital asset semi-custodial secure cross-chain method based on a distributed TEE network as described in any one of claims 1 to 7 is adopted.

Images