Real asset fair and safe transaction processing method and system based on trusted execution environment

Abstract

The application discloses a real asset fair and safe transaction processing method and system based on a trusted execution environment, and relates to the technical field of digital transaction. The method comprises the following steps: in response to a connection request of a client, transaction data is acquired; the transaction data types include: conventional real asset transaction data and sealed transaction data containing a bid; a session key is generated by negotiation between the client and a verified TEE node; the TEE is a trusted execution environment; the transaction data is encrypted by the client based on the session key; the encrypted data packet is anonymously submitted to the TEE node, so that the TEE node decrypts the encrypted data packet based on a private key, transaction screening processing is performed on the decrypted transaction data based on the transaction data type, and winning transaction data is obtained; after the winning transaction data is verified in terms of integrity and legality, the winning transaction data is submitted to a block chain for block packaging and data storage, and incentive distribution is performed. The application can guarantee tamper-proof transaction order and transparent income distribution.

Description

Technical Field

[0001] This invention relates to the field of digital transaction technology, and in particular to a method and system for fair and secure transaction processing of real-world assets based on a trusted execution environment. Background Technology

[0002] With the deep integration of the digital economy and blockchain technology, the digitization process of Real World Assets (RWA) continues to accelerate. The value of real assets, amounting to trillions of dollars, is being mapped and aggregated onto the blockchain network. RWA transactions have become an important application scenario in the blockchain ecosystem, and the fairness, security, and efficiency of their transaction processing have become core demands for industry development.

[0003] In existing technologies, RWA transactions primarily rely on traditional blockchain public pools for end-to-end processing. Transaction initiation is typically done by users or institutions submitting standard RWA transaction requests or requests with quotes within a Rich Execution Environment (REE). The public pool receives the transaction data and then uses traditional sorting mechanisms to filter and upload the transactions to the blockchain. To improve transaction security, the industry is also exploring the use of general-purpose Trusted Execution Environment (TEE) hardware combined with blockchain public pools for encrypted RWA transaction data processing.

[0004] However, in actual RWA transaction processing, the transaction ordering mechanism of traditional blockchain public pools is prone to triggering behaviors such as front-running. Furthermore, general-purpose TEE hardware is primarily designed for consumer electronics scenarios and lacks sufficient adaptability to the needs of RWA transactions.

[0005] Therefore, existing technologies still need improvement and development. Summary of the Invention

[0006] The technical problem to be solved by the present invention is to provide a method and system for fair and secure transaction processing of real assets based on a trusted execution environment, in order to address the above-mentioned deficiencies of the prior art in the processing of real assets, and to solve the problems of insufficient fairness and performance of the prior art in the processing of real assets.

[0007] The technical solution adopted by this invention to solve the problem is as follows:

[0008] In a first aspect, embodiments of the present invention provide a method for processing fair and secure transactions of real-world assets based on a trusted execution environment, the method comprising:

[0009] In response to client connection requests, transaction data is retrieved; transaction data types include: regular real-world asset transaction data and sealed transaction data with quotes;

[0010] The client negotiates and generates a session key with the verified TEE node; the TEE is a trusted execution environment.

[0011] The client encrypts the transaction data based on the session key to obtain an encrypted data packet, and then anonymously submits the encrypted data packet to the TEE node.

[0012] The TEE node decrypts the encrypted data packet based on its private key, and performs corresponding transaction filtering processing on the decrypted transaction data based on the transaction data type to determine the winning transaction data.

[0013] The winning transaction data is subjected to integrity and legality verification. If both verifications pass, the winning transaction data is submitted to the blockchain for block packaging and data storage, and incentives are allocated.

[0014] In one implementation, the step of negotiating and generating a session key between the client and the verified TEE node includes:

[0015] The legality of the operating environment of the TEE node is verified by a remote verification server.

[0016] After the legitimacy verification is passed, the client and the TEE node negotiate and generate a session key through an asymmetric encryption algorithm.

[0017] In one implementation, the step of performing corresponding transaction filtering processing on the decrypted transaction data based on the transaction data type to determine the winning transaction data includes:

[0018] If the transaction data type is regular real-world asset transaction data, then the decrypted transaction data is subjected to fair sorting processing based on state change simulation;

[0019] If the transaction data type is sealed transaction data containing a quote, then the decrypted transaction data is subjected to a Vickrey auction.

[0020] The winning transaction data is determined based on the fair ranking results and the Vickrey auction results.

[0021] In one implementation, the step of performing fair sorting processing based on state change simulation on the decrypted transaction data includes:

[0022] The state change values ​​of a single transaction are obtained by simulating the state changes of the decrypted transaction data using a simulation algorithm.

[0023] Merkle-based trajectories are generated using the Merkle tree algorithm based on the state change values ​​of multiple transactions;

[0024] Each transaction is calculated using a hash formula, and then fairly sorted based on these hash values.

[0025] In one implementation, the step of performing a Vickrey auction on the decrypted transaction data includes:

[0026] A second-price auction is conducted on the bids in the decrypted transaction data. The winning bidder pays the second-highest bid and the bid is immediately recorded on the blockchain. Unsuccessful bidders are subject to a preset delay.

[0027] In one implementation, the steps of verifying the integrity and legality of the winning transaction data include:

[0028] The proof service module generates proof documents corresponding to the winning transaction data.

[0029] The verification node performs integrity verification based on the winning transaction data and the corresponding Merkelized trajectory.

[0030] The verification node calls the remote verification server interface to verify the legitimacy of the proof document.

[0031] In one implementation, the incentive allocation step includes:

[0032] Transaction fees and profits are allocated according to a preset ratio.

[0033] Secondly, embodiments of the present invention also provide a fair and secure transaction processing system for real-world assets based on a trusted execution environment, the system comprising:

[0034] The data acquisition module is used to acquire transaction data in response to client connection requests; the transaction data types include: regular real-world asset transaction data and sealed transaction data with quotes;

[0035] The key generation module is used to negotiate and generate a session key with the verified TEE node through the client; TEE is a trusted execution environment.

[0036] The encrypted submission module is used to encrypt the transaction data based on the session key through the client to obtain an encrypted data packet, and then anonymously submit the encrypted data packet to the TEE node.

[0037] The transaction filtering module is used to decrypt the encrypted data packet based on the private key through the TEE node, and perform corresponding transaction filtering processing on the decrypted transaction data based on the transaction data type to determine the winning transaction data.

[0038] The on-chain and incentive allocation module is used to verify the integrity and legality of the winning transaction data. If both verifications pass, the winning transaction data is submitted to the blockchain for block packaging and data storage, and incentives are allocated.

[0039] Thirdly, embodiments of the present invention also provide a terminal, the terminal including a memory and one or more processors; the memory stores one or more programs; the programs include instructions for executing the real-world asset fair and secure transaction processing method based on a trusted execution environment as described above; the processor is used to execute the programs.

[0040] Fourthly, embodiments of the present invention also provide a computer-readable storage medium storing a plurality of instructions adapted to be loaded and executed by a processor to implement the steps of the real-world asset fair and secure transaction processing method based on a trusted execution environment as described above.

[0041] The beneficial effects of this invention are as follows: In this embodiment, transaction data is obtained in response to a client's connection request. The transaction data types include: regular real-world asset transaction data and sealed transaction data containing quotes. A session key is generated by the client and a verified TEE node. The TEE is a trusted execution environment. The client encrypts the transaction data based on the session key to obtain an encrypted data packet, which is then anonymously submitted to the TEE node. The TEE node decrypts the encrypted data packet based on its private key and performs corresponding transaction filtering based on the transaction data type to determine the winning transaction data. The winning transaction data undergoes integrity and legality verification. If both verifications pass, the winning transaction data is submitted to the blockchain for block packaging and data storage, and incentive distribution is performed. This invention uses the TEE as a secure carrier to achieve end-to-end control from transaction initiation to on-chain storage and profit distribution, thereby ensuring tamper-proof transaction order, verifiable data confidentiality, and transparent profit distribution, providing technical support and process assurance for the large-scale development of the real-world asset ecosystem. Attached Figure Description

[0042] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0043] Figure 1 This is a flowchart illustrating the fair and secure transaction processing method for real-world assets based on a trusted execution environment, as provided in an embodiment of the present invention.

[0044] Figure 2 This is the process architecture and timing diagram of the real-world asset fair and secure transaction processing method based on a trusted execution environment provided in the embodiments of the present invention.

[0045] Figure 3 This is a schematic diagram of a real-world asset fair and secure transaction processing system based on a trusted execution environment, provided in an embodiment of the present invention.

[0046] Figure 4 This is a schematic diagram of the terminal provided in the embodiment of the present invention. Detailed Implementation

[0047] This invention discloses a method and system for fair and secure real-world asset transactions based on a trusted execution environment. To make the objectives, technical solutions, and effects of this invention clearer and more explicit, the invention is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only for explaining the invention and are not intended to limit the invention.

[0048] Those skilled in the art will understand that, unless specifically stated otherwise, the singular forms “a,” “an,” “the,” and “the” used herein may also include the plural forms. It should be further understood that the term “comprising” as used in this specification means the presence of the stated features, integers, steps, operations, elements, and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof. It should be understood that when we say an element is “connected” or “coupled” to another element, it can be directly connected or coupled to the other element, or there may be intermediate elements. Furthermore, “connected” or “coupled” as used herein can include wireless connections or wireless coupling. The term “and / or” as used herein includes all or any units and all combinations of one or more associated listed items.

[0049] It will be understood by those skilled in the art that, unless otherwise defined, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. It should also be understood that terms such as those defined in general dictionaries should be understood to have the same meaning as in the context of the prior art, and should not be interpreted in an idealized or overly formal sense unless specifically defined as herein.

[0050] To address the aforementioned deficiencies in existing technologies, this invention provides a fair and secure transaction processing method for real-world assets based on a Trusted Execution Environment (TEE). The method includes: responding to a client's connection request and acquiring transaction data; the transaction data types include: regular real-world asset transaction data and sealed transaction data containing quotes; the client and a verified TEE node negotiate to generate a session key; the TEE is a Trusted Execution Environment; the client encrypts the transaction data based on the session key to obtain an encrypted data packet, and anonymously submits the encrypted data packet to the TEE node; the TEE node decrypts the encrypted data packet based on its private key, and performs corresponding transaction filtering processing on the decrypted transaction data based on the transaction data type to determine the winning transaction data; the winning transaction data undergoes integrity and legality verification; if both verifications pass, the winning transaction data is submitted to the blockchain for block packaging and data storage, and incentive distribution is performed. This invention uses the TEE as a security carrier to achieve end-to-end control from transaction initiation to on-chain storage and profit distribution, thereby ensuring tamper-proof transaction order, verifiable data confidentiality, and transparent profit distribution, providing technical support and process assurance for the large-scale development of the real-world asset ecosystem.

[0051] like Figure 1 As shown, the method includes:

[0052] Step S100: In response to the client's connection request, obtain transaction data; the transaction data types include: regular real-world asset transaction data and sealed transaction data containing quotes.

[0053] Specifically, the triggering condition in this embodiment is a search transaction, i.e., a certain entity actively initiates a connection request (also known as a real asset transaction request) to the system from the client. The entity type can be a user or an institution, such as a partner or a searcher. The client's operating environment is typically a Rich Execution Environment (REE), which is a normal execution environment relative to a Trusted Execution Environment (TEE). Ordinary users initiate regular real asset transactions, while searchers initiate sealed transaction data containing quotes. After receiving the connection request from the client, the system obtains the corresponding transaction data and determines the current transaction data type based on the entity type and transaction attributes. Regular real asset transaction data and sealed transaction data containing quotes can correspond to the two types of initiating entities: ordinary users and searchers, respectively.

[0054] Step S200: The client and the verified TEE node negotiate to generate a session key; TEE is a trusted execution environment.

[0055] Furthermore, the step of the client negotiating and generating a session key with the verified TEE node includes:

[0056] The legality of the operating environment of the TEE node is verified by a remote verification server.

[0057] After the legitimacy verification is passed, the client and the TEE node negotiate and generate a session key through an asymmetric encryption algorithm.

[0058] Specifically, after the client initiates a connection request, the remote verification server verifies the legitimacy of the TEE node's operating environment. This verifies whether the TEE node's operating environment has been tampered with and whether it possesses secure conditions for processing transaction data. Only by completing and passing this legitimacy verification can the security of the underlying environment for subsequent transaction data processing be ensured, preventing the risk of transaction data leakage or tampering. It should be noted that the TEE node in this embodiment can refer to a single node or a cluster of nodes; the specific number of nodes is determined based on the number of nodes required to process the connection request. The client and the verified TEE node negotiate and generate a unique session key using an asymmetric encryption algorithm. This session key is the foundation for the client to encrypt regular real-world asset transaction data and sealed transaction data containing quotes. It provides dedicated security support for the encrypted transmission of transaction data, ensuring the privacy of transaction data during transmission at the key level and preventing tampering of transaction data during relay node transmission.

[0059] Step S300: The client encrypts the transaction data based on the session key to obtain an encrypted data packet, and then anonymously submits the encrypted data packet to the TEE node.

[0060] Specifically, to ensure the security and privacy of transaction data transmission, the client encrypts the transaction data based on the previously negotiated session key, generating an encrypted data packet (i.e., an encrypted bundle). Subsequently, the generated encrypted data packet is anonymously submitted to the TEE node via a relay node. This embodiment uses a dedicated session key for end-to-end encryption of transaction data, ensuring data privacy during transmission and preventing theft or tampering. Anonymous submission further reduces the risk of exposing the transaction initiator's identity, providing a secure transmission-level foundation for the subsequent decryption and processing of transaction data by the TEE node in a hardware-level isolated secure environment.

[0061] For example, the original transaction data, the system-generated timestamp, and the random number are concatenated into a complete data body, and then the transaction data is encrypted using the following encryption algorithm:

[0062] ;

[0063] In the formula, To encrypt data packets; For encryption, i.e., encryption processing; For session key; This is the original transaction data; For timestamps; It is a random number.

[0064] Step S400: The TEE node decrypts the encrypted data packet based on the private key, and performs corresponding transaction filtering processing on the decrypted transaction data based on the transaction data type to determine the winning transaction data.

[0065] Specifically, TEE nodes decrypt received encrypted data packets using their own private keys within a hardware-isolated secure environment. This process is entirely isolated, effectively preventing transaction data theft during decryption and reconstructing two types of transaction data: regular real-world asset transactions initiated by ordinary users, and sealed transaction data with quotes submitted by searchers. After decryption, TEE nodes perform differentiated transaction screening based on the transaction data type: for regular real-world asset transactions, a fair ranking mechanism determines their processing priority; for sealed transaction data with quotes, a Vickrey auction mechanism is used to select winning transactions, thus balancing the fairness of competition. Through these processes, TEE nodes ultimately select winning transaction data that meets the on-chain criteria. This process avoids the possibility of human intervention in the transaction order and provides a reliable data foundation for subsequent verification and on-chain processes.

[0066] For example, TEE nodes decrypt regular transaction data within a Secure Processing Unit (SPU). Secondly, to ensure fairness and efficiency in sealed transactions, the searcher submits sealed transaction data containing quotes to the TEE privacy memory pool. Subsequently, TEE nodes decrypt all sealed quotes within a hardware-level isolated secure environment, preventing the leakage of quote information.

[0067] In one implementation, the steps of performing corresponding transaction filtering processing on the decrypted transaction data based on the transaction data type to determine the winning transaction data include:

[0068] If the transaction data type is regular real-world asset transaction data, then the decrypted transaction data is subjected to fair sorting processing based on state change simulation;

[0069] If the transaction data type is sealed transaction data containing a quote, then the decrypted transaction data is subjected to a Vickrey auction.

[0070] The winning transaction data is determined based on the fair ranking results and the Vickrey auction results.

[0071] Specifically, TEE nodes decrypt encrypted data packets in an isolated and secure environment, extracting regular real-world asset transaction data and sealed transaction data containing quotes. Based on the type of transaction data, they execute corresponding processing procedures: for regular real-world asset transaction data, they perform fair sorting based on state change simulation, resulting in a fair sorting result (i.e., the hidden transaction pool sorting result for regular transactions); for sealed transaction data containing quotes, they perform a Vickery auction, decrypting the quotes in a privacy memory pool and selecting bidders according to the second-price auction rules, resulting in a Vickery auction result. After completing the differentiated processing of the two types of transaction data and obtaining the corresponding results, the fair sorting result and the Vickery auction result are integrated and a decision is made. Regular transactions and winning sealed transaction data that meet the on-chain conditions are selected and integrated into a unified transaction set, ultimately yielding the winning transaction data.

[0072] In one implementation, the step of performing fair sorting processing based on state change simulation on the decrypted transaction data includes:

[0073] The state change values ​​of a single transaction are obtained by simulating the state changes of the decrypted transaction data using a simulation algorithm.

[0074] Merkle-based trajectories are generated using the Merkle tree algorithm based on the state change values ​​of multiple transactions;

[0075] Each transaction is calculated using a hash formula, and then fairly sorted based on these hash values.

[0076] Specifically, the process of TEE nodes performing the anonymous transaction pool protocol on decrypted regular real-world asset transactions mainly involves three key steps. The purpose is to provide a secure foundation for subsequent transaction screening and on-chain processing from three dimensions: transaction logic verification, data integrity assurance, and sorting fairness.

[0077] First, after decrypting the regular transaction data within the secure processing unit, the TEE node will simulate state changes using a simulation algorithm: In the formula, This is the initial state before the transaction. For simulation algorithms; This represents the status change value for a single transaction. This process verifies whether the status changes of assets or accounts after a transaction are consistent with business logic, ensuring the feasibility and compliance of the transaction.

[0078] Secondly, the TEE node will generate Merkle-formatted trajectories from the state change values ​​of multiple transactions using the Merkle tree algorithm: In the formula, For Merkel's trajectory, For Merkle tree algorithm, This is the state change value of the first transaction. Let be the state change value of the nth transaction. The Merkelized trajectory can serve as a key basis for subsequent verification of transaction integrity, ensuring that the state change records of all transactions are traceable and tamper-proof, providing mathematical guarantees for the authenticity of transaction data.

[0079] Finally, the TEE node will be based on a hash algorithm: Calculate the hash value of each transaction; where, For hash algorithms, For hash value, This is the address of the transaction initiator. Regular real-world asset transaction data is sorted based on hash values. This hash-based sorting rule is algorithm-driven, avoiding human intervention or priority manipulation, and ensuring the fairness of the transaction processing order.

[0080] In one implementation, the step of performing a Vickrey auction on the decrypted transaction data includes:

[0081] A second-price auction is conducted on the bids in the decrypted transaction data. The winning bidder pays the second-highest bid and the bid is immediately recorded on the blockchain. Unsuccessful bidders are subject to a preset delay.

[0082] Specifically, TEE nodes execute the Vickrey auction process using a second-price auction method to select the winning bidder. The winning bidder completes the transaction at the second-highest price among all bids to ensure fair competition. The winning bidder's transaction is processed on the blockchain immediately, ensuring that their transaction request is fulfilled quickly. For transactions from unsuccessful bidders, TEE nodes perform a pre-set delay (e.g., 200 milliseconds). This delay mechanism avoids congestion caused by a large number of unsuccessful transactions, improving overall transaction processing efficiency.

[0083] In one implementation, to improve the compatibility of general-purpose TEE hardware with trading scenarios, the TEE can be adapted, including but not limited to:

[0084] Regarding scalability, the TEE node cluster supports horizontal scaling. By adding new TEE nodes and optimizing resource scheduling strategies, it can overcome the bottleneck of traditional TEE memory limitations and effectively adapt to high-concurrency scenarios during peak periods of real-world asset transactions.

[0085] Regarding security protection, based on the characteristics of the TEE isolated environment, it ensures that computing resources and microarchitecture are not shared, effectively resisting software side-channel attacks from the underlying architecture level, while supporting compliant certified versions to further enhance physical security protection capabilities.

[0086] Step S500: Perform integrity verification and legality verification on the winning transaction data. If both verifications pass, submit the winning transaction data to the blockchain for block packaging and data storage, and distribute incentives.

[0087] Specifically, to ensure the legality, traceability, and sustainability of transactions, after determining the winning transaction data (also known as the winning bundle, where a bundle is an executable file type in an operating system), the winning transaction data needs to undergo dual verification: First, integrity verification, which verifies the Merkelized trajectory to check the completeness of the state change trajectories of all transactions within the winning transaction data and the compliance of the transaction logic, ensuring that the transaction data itself is not incomplete or tampered with. Second, legality verification, which verifies the authenticity of the supporting documents corresponding to the winning transaction data, confirming that the TEE environment for transaction processing has not been tampered with and that the supporting documents are legal and valid, thus ensuring transaction security at the underlying environment level. Once both verifications pass, the verification node submits the winning transaction data to the blockchain network, completing block packaging and permanent storage of the transaction data, achieving immutability and traceability of real-world asset transactions. Simultaneously, the system automatically triggers the incentive distribution process, ensuring transparency and fairness in profit distribution.

[0088] In one implementation, the steps of verifying the integrity and legality of the winning transaction data include:

[0089] The proof service module generates proof documents corresponding to the winning transaction data.

[0090] The verification node performs integrity verification based on the winning transaction data and the corresponding Merkelized trajectory.

[0091] The verification node calls the remote verification server interface to verify the legitimacy of the proof document.

[0092] Specifically, after the winning transaction data is determined, the TEE node submits the winning transaction data and its corresponding Merkelized trajectory to the proof service module (also known as the TEE proof service), initiating the proof generation process. Based on the winning transaction data and the TEE operating environment status, the proof service module generates a complete TEE proof file containing an environment quote and a TEE digital signature, providing foundational data for subsequent verification. Next, integrity verification is performed: the verification node receives the winning transaction data and the Merkelized trajectory, and verifies the integrity of the transaction status trajectory to confirm whether all transaction status change records within the winning transaction data are complete and whether the transaction logic is compliant, ensuring that the transaction data itself is not incomplete or tampered with. Then, legality verification is performed: the verification node calls the remote verification server interface, submitting the TEE proof file for verification, verifying whether the TEE operating environment has been tampered with and whether the proof file itself is authentic and valid, ensuring transaction security at the underlying environment level. If both verifications pass, the proof is considered successful, providing security for the subsequent on-chaining of the winning transaction data and incentive allocation.

[0093] In one implementation, the incentive allocation steps include:

[0094] Transaction fees and profits are allocated according to a preset ratio.

[0095] Specifically, in order to address the imbalance in the distribution of real-world asset transaction revenue, this embodiment standardizes and makes transparent the distribution of transaction fees and related revenues by setting a preset ratio. The specific distribution process can be executed by an incentive distribution model.

[0096] For example, taking 1 unit of token as an example, the transaction fee is allocated according to the following proportion:

[0097] The verification nodes are allocated 80% (i.e., 0.8 units). The purpose of this ratio is to increase the verification nodes' enthusiasm for participating in transaction verification and block packaging, as well as their actual benefits.

[0098] TrustNet (a cross-network file exchange system based on a zero-trust architecture with continuous authentication and dynamic permission management at its core) protocol or fund allocation of 10% (i.e. 0.1 units) will be used for technology iteration and daily platform operation, providing financial support for the continuous optimization of the transaction processing system.

[0099] An 8% (0.08 unit) share is allocated to ecosystem applications or users to enhance the fairness of the transaction ecosystem and protect the rights and interests of ordinary users by returning a portion of the revenue to users.

[0100] TEE operators allocate 2% (0.02 units) to ensure the decentralized operation of TEE hardware nodes and maintain the stable operation of the node cluster.

[0101] This allocation method in this embodiment covers key participants in transaction processing and system operators, achieving transparent and reasonable allocation of transaction fees and revenues, and effectively enhancing the participation enthusiasm of all parties.

[0102] In one implementation, the method further includes: deploying a smart contract to verify the validity of a transaction. For example, deploying a TrustNet Verifier (TrustNet stands for Trust Network, and Verifier stands for Verification Contract) to verify the validity of the transaction.

[0103] like Figure 2 The diagram illustrates the full-process architecture and timing of the method in this embodiment, clearly reflecting the complete technical process from client-initiated transaction to data storage on the blockchain. This flowchart uses the client (REE), trusted execution environment (TEE), and verification nodes as the three main execution entities, supplemented by a remote verification server, to achieve fairness, security, and verifiability in real-world asset transactions.

[0104] The advantages of this invention are:

[0105] 1. Achieve end-to-end security control: This invention builds a full-link security processing architecture for real-world asset transactions based on TEE, integrating transaction encryption, isolated computation, and anti-tampering sorting into the entire transaction processing process. Transaction data is encrypted and transmitted from the client to the TEE sandbox for decryption verification and state simulation, all of which are completed in a hardware-level isolated environment. By leveraging the sandbox characteristics of TEE, hardware-level security protection for transaction data is achieved, ensuring that every core link in the transaction processing has secure isolation attributes, thus building a solid end-to-end security barrier for real-world asset transactions from the underlying architecture.

[0106] 2. Comprehensive Enhancement of Transaction Fairness: This invention achieves dual fairness in transaction order and profit distribution through the Oblivious Mempool Protocol and the Vickrey auction mechanism, which integrates the privacy features of a TEE (Transaction Execution Environment). The Oblivious Mempool Protocol processes regular real-world asset transactions through encrypted submission, decryption verification within the TEE, and hash-driven fair sorting. Transaction sorting is conducted without any human intervention, eliminating front-running and sandwich attacks, and reducing slippage for novice traders to a reasonable range. The Vickrey auction mechanism ensures fair profit distribution for sealed transaction data containing quotes, enabling fair processing of different types of real-world asset transactions and meeting the fairness requirements of high-value real-world asset transactions.

[0107] 3. Achieving a breakthrough in transaction processing performance: This invention breaks through the memory limitations of traditional TEEs by optimizing the horizontal scaling design and resource scheduling of TEE node clusters, achieving a significant improvement in transaction processing performance. In actual processing, the TEE can process 2000 transactions with a latency of only 0.17 seconds, and can complete the processing of thousands of transactions within 200 milliseconds during peak periods. This solves the problem of the mismatch between the performance of existing general-purpose TEE hardware and the needs of real-world asset transactions, adapts to the high-concurrency processing needs during peak periods of real-world asset transactions, and can also meet the low-latency processing requirements of high-concurrency, high-value real-world asset transaction scenarios.

[0108] 4. Comprehensive Enhancement of Security Protection: This invention fully leverages the core characteristics of the TEE isolation environment, ensuring that each TEE node does not share computing resources and microarchitecture. This achieves effective immunity against software side-channel attacks from the ground up. Simultaneously, it supports compliant certified versions and strengthens physical security protection, enabling the system to effectively resist various security attacks and intrusions. Compared to existing general-purpose TEE hardware, this invention achieves a comprehensive upgrade in security protection capabilities, providing high-strength security guarantees for the on-chain transfer of large amounts of real-world assets, and technically avoiding various security risks such as private key leakage and data tampering.

[0109] 5. Eliminating reliance on third-party trust and building an independent and controllable blockchain native trust system: This invention, through customized TEE adaptation design and end-to-end independent processing flow, frees real-world asset transaction processing from reliance on third-party hardware manufacturers. It also eliminates the dependence on external manufacturers for core security aspects such as private key storage, successfully building an independent and controllable trust chain. This aligns with the core concept of trustlessness in blockchain technology, solves the problem of fragile trust chains in existing technologies, and makes the trust foundation of the real-world asset transaction system more solid.

[0110] 6. Achieving Win-Win Development for All Participants in the Ecosystem: This invention designs an incentive distribution model covering multiple participating roles, allocating transaction fees and profits according to a preset ratio to validator nodes, the TrustNet protocol or treasury, ecosystem applications or users, and TEE operators, thus achieving win-win development for all participants. This model significantly enhances the participation enthusiasm and actual profits of validator nodes; at the same time, it returns a portion of the profits to ecosystem users, protecting the rights and interests of ordinary users; the protocol party and TEE operators also receive corresponding profits, which are used for technology iteration operations and decentralized operation of hardware nodes, respectively, effectively promoting large-scale participation in the real-world asset ecosystem and solving the problems of unbalanced profit distribution and poor ecosystem sustainability in existing technologies.

[0111] 7. Covers diverse real-world asset transfer scenarios: This invention is specifically designed for large-scale real-world asset transfers and has strong scenario adaptability. It is compatible with on-chain trading scenarios for various real-world assets such as real estate, art, and commodities. At the same time, the system supports compliance certification and full-chain security verification, which can meet the compliance and security requirements of different real-world asset transactions. This allows the technical solution to be implemented in various actual real-world asset trading scenarios, providing practical technical support for the large-scale development of the real-world asset digital ecosystem.

[0112] Based on the above embodiments, the present invention also provides a fair and secure transaction processing system for real-world assets based on a trusted execution environment, such as... Figure 3 As shown, the system includes:

[0113] Data acquisition module 01 is used to acquire transaction data in response to client connection requests; the transaction data types include: regular real-world asset transaction data and sealed transaction data with quotes;

[0114] The key generation module 02 is used to negotiate and generate a session key with the verified TEE node through the client; TEE is a trusted execution environment.

[0115] The encryption submission module 03 is used to encrypt the transaction data based on the session key through the client to obtain an encrypted data packet, and anonymously submit the encrypted data packet to the TEE node;

[0116] The transaction filtering module 04 is used to decrypt the encrypted data packet based on the private key through the TEE node, and perform corresponding transaction filtering processing on the decrypted transaction data based on the transaction data type to determine the winning transaction data.

[0117] The on-chain and incentive allocation module 05 is used to verify the integrity and legality of the winning transaction data. If both verifications pass, the winning transaction data is submitted to the blockchain for block packaging and data storage, and incentives are allocated.

[0118] Specifically, this embodiment adopts a three-layer core architecture, building a trust network system based on a TEE (Transaction Environment). It establishes a complete technical framework adapted to the characteristics of real-world asset transactions from multiple dimensions, including core transaction processing, revenue distribution governance, and full-scenario security protection. The secure transaction engine is the core of the entire system's operation execution. Through the TEE isolation environment, it completes the core operations of the entire process, including transaction capture, encryption processing, sorting, and packaging, providing core support for end-to-end security control, improved transaction fairness, and breakthroughs in processing performance. The verifiable revenue distribution layer ensures the fair and transparent distribution of transaction revenue. It guarantees the compliance and traceability of the distribution process through a remote verification mechanism, while distributing transaction fees and revenue according to a specific ratio. The end-to-end security enhancement layer, deeply integrated with privacy computing technology, extends the scope of security protection from the transaction processing stage to the entire lifecycle and all application scenarios of real-world assets from mapping to circulation.

[0119] Based on the above embodiments, the present invention also provides a terminal, the principle block diagram of which can be as follows: Figure 4 As shown, the terminal includes a processor, memory, network interface, and display screen connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The network interface is used to communicate with external terminals via a network connection. When the computer program is executed by the processor, it implements a fair and secure transaction processing method for real-world assets based on a trusted execution environment. The display screen can be an LCD screen or an e-ink screen.

[0120] Those skilled in the art will understand that Figure 4 The block diagram shown is merely a partial structural diagram related to the present invention and does not constitute a limitation on the terminal to which the present invention is applied. A specific terminal may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0121] In one implementation, the terminal's memory stores one or more programs, and these programs are configured to be executed by one or more processors, and the programs contain instructions for performing a method for fair and secure transaction processing of real-world assets based on a trusted execution environment.

[0122] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, storage, databases, or other media used in the embodiments provided by this invention can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), Rambus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0123] In summary, this invention discloses a method and system for fair and secure real-world asset transactions based on a trusted execution environment (TEE), relating to the field of digital transaction technology. The method includes: responding to a client's connection request and acquiring transaction data; the transaction data types include: regular real-world asset transaction data and sealed transaction data containing quotes; the client and a verified TEE node negotiate to generate a session key; the TEE is a trusted execution environment; the client encrypts the transaction data based on the session key to obtain an encrypted data packet, and anonymously submits the encrypted data packet to the TEE node; the TEE node decrypts the encrypted data packet based on its private key, and performs corresponding transaction filtering processing on the decrypted transaction data based on the transaction data type to determine the winning transaction data; the winning transaction data undergoes integrity and legality verification, and if both verifications pass, the winning transaction data is submitted to the blockchain for block packaging and data storage, and incentive allocation is performed. This invention uses TEE as a secure carrier to achieve end-to-end control from transaction initiation to on-chain storage and profit distribution, thereby ensuring that the transaction order is tamper-proof, data confidentiality is verifiable, and profit distribution is transparent, providing technical support and process assurance for the large-scale development of the real asset ecosystem.

[0124] It should be understood that the application of the present invention is not limited to the examples above. Those skilled in the art can make improvements or modifications based on the above description, and all such improvements and modifications should fall within the protection scope of the appended claims.

Claims

1. A method for processing fair and secure transactions of real-world assets based on a trusted execution environment, characterized in that, The method includes: In response to client connection requests, transaction data is retrieved; transaction data types include: regular real-world asset transaction data and sealed transaction data with quotes; The client negotiates and generates a session key with the verified TEE node; the TEE is a trusted execution environment. The client encrypts the transaction data based on the session key to obtain an encrypted data packet, and then anonymously submits the encrypted data packet to the TEE node. The TEE node decrypts the encrypted data packet using its private key and performs corresponding transaction filtering based on the transaction data type to determine the winning transaction data. This includes: if the transaction data type is regular real-world asset transaction data, then a simulation algorithm is used to simulate the state changes of the decrypted transaction data to obtain the state change value of a single transaction. In the formula, This is the initial state before the transaction. For simulation algorithms; This represents the state change value for a single transaction. The original transaction data is used; Merkle-formatted trajectories are generated based on the state change values ​​of multiple transactions using the Merkle tree algorithm: In the formula, For Merkel's trajectory, For Merkle tree algorithm, This is the state change value of the first transaction. Let n be the state change value of the nth transaction; calculate the hash value of each transaction based on the hash formula: Calculate the hash value of each transaction; where, For timestamps, It is a random number. For hash algorithms, For hash value, The transaction initiator's address is used, and the hash value is used for fair sorting. If the transaction data type is sealed transaction data containing a quote, a second price auction is performed on the quote in the decrypted transaction data. The winner pays the second highest bid and is immediately added to the blockchain. Unsuccessful bidders are subject to a preset delay. The winning transaction data is determined based on the fair sorting result and the Vickrey auction result. The winning transaction data is subjected to integrity and legality verification. If both verifications pass, the winning transaction data is submitted to the blockchain for block packaging and data storage, and incentives are allocated.

2. The method for fair and secure transaction processing of real-world assets based on a trusted execution environment according to claim 1, characterized in that, The steps for the client and the verified TEE node to negotiate and generate a session key include: The legality of the operating environment of the TEE node is verified by a remote verification server. After the legitimacy verification is passed, the client and the TEE node negotiate and generate a session key through an asymmetric encryption algorithm.

3. The method for fair and secure transaction processing of real-world assets based on a trusted execution environment according to claim 1, characterized in that, The steps for verifying the integrity and legality of the winning transaction data include: The proof service module generates proof documents corresponding to the winning transaction data. The verification node performs integrity verification based on the winning transaction data and the corresponding Merkelized trajectory. The verification node calls the remote verification server interface to verify the legitimacy of the proof document.

4. The method for fair and secure transaction processing of real-world assets based on a trusted execution environment according to claim 1, characterized in that, The steps involved in incentive allocation include: Transaction fees and profits are allocated according to a preset ratio.

5. A fair and secure transaction processing system for real-world assets based on a trusted execution environment, characterized in that: The system includes: The data acquisition module is used to acquire transaction data in response to client connection requests; the transaction data types include: regular real-world asset transaction data and sealed transaction data with quotes; The key generation module is used to negotiate and generate a session key with the verified TEE node through the client; TEE is a trusted execution environment. The encrypted submission module is used to encrypt the transaction data based on the session key through the client to obtain an encrypted data packet, and then anonymously submit the encrypted data packet to the TEE node. The transaction filtering module is used to decrypt the encrypted data packet using the private key via the TEE node, and to perform corresponding transaction filtering processing on the decrypted transaction data based on the transaction data type to determine the winning transaction data. This includes: if the transaction data type is conventional real-world asset transaction data, then simulating the state changes of the decrypted transaction data using a simulation algorithm to obtain the state change value of a single transaction. In the formula, This is the initial state before the transaction. For simulation algorithms; This represents the state change value for a single transaction. The original transaction data is used; Merkle-formatted trajectories are generated based on the state change values ​​of multiple transactions using the Merkle tree algorithm: In the formula, For Merkel's trajectory, For Merkle tree algorithm, This is the state change value of the first transaction. Let n be the state change value of the nth transaction; calculate the hash value of each transaction based on the hash formula: Calculate the hash value of each transaction; where, For timestamps, It is a random number. For hash algorithms, For hash value, The transaction initiator's address is used, and the hash value is used for fair sorting. If the transaction data type is sealed transaction data containing a quote, a second price auction is performed on the quote in the decrypted transaction data. The winner pays the second highest bid and is immediately added to the blockchain. Unsuccessful bidders are subject to a preset delay. The winning transaction data is determined based on the fair sorting result and the Vickrey auction result. The on-chain and incentive allocation module is used to verify the integrity and legality of the winning transaction data. If both verifications pass, the winning transaction data is submitted to the blockchain for block packaging and data storage, and incentives are allocated.

6. A terminal, characterized in that, The terminal includes a memory and one or more processors; the memory stores one or more programs; the programs contain instructions for executing the real-world asset fair and secure transaction processing method based on a trusted execution environment as described in any one of claims 1 to 4; the processors are used to execute the programs.

7. A computer-readable storage medium storing a plurality of instructions thereon, characterized in that, The instructions are applicable to being loaded and executed by a processor to implement the steps of the real-world asset fair and secure transaction processing method based on a trusted execution environment as described in any one of claims 1 to 4.

Images