Blockchain Node Bootstrap via Trusted Execution Environment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for a node to join or rejoin a blockchain network after a network or power disruption are either time-consuming, vulnerable to security attacks, or unreliable, as they require downloading and validating the entire blockchain or relying on untrusted code to restore the TEE context.
Innovation Solution
A blockchain bootstrap method that securely initializes the TEE context and blockchain context of a node by communicating with peer nodes using a trusted execution environment (TEE) to establish a secure channel, avoiding untrusted inputs and preventing replay attacks, allowing the node to quickly synchronize and participate in consensus.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a node downloads and validates the entire blockchain to synchronize state, then data integrity and reliability are ensured, but the synchronization time becomes excessively long
Solution Approach 1:
The patent extracts only the essential blockchain state data (ledger state, block headers, transaction roots) needed for node synchronization, rather than requiring download and validation of the entire blockchain. This selective extraction of critical information enables fast bootstrap while maintaining data integrity through cryptographic verification of the extracted state components.
Solution Approach 2:
The patent implements preliminary action by having peer nodes pre-compute and store blockchain state snapshots at specific checkpoints before other nodes need them. These pre-prepared state snapshots are readily available for distribution, eliminating the need for receiving nodes to process the entire blockchain history and significantly reducing synchronization time.
2Productivity
If a node uses untrusted code to restore TEE context, then bootstrap speed improves, but security vulnerability increases
Solution Approach 1:
The patent introduces an intermediary Trusted Execution Environment (TEE) that acts as a secure mediator between the untrusted network environment and the node's internal state. The TEE verifies cryptographic signatures and validates blockchain state data before allowing it to influence the node's TEE context, enabling fast bootstrap through trusted peer nodes while preventing security vulnerabilities by isolating untrusted inputs within the TEE boundary.
3Productivity
If a node relies on peer nodes for context initialization, then synchronization speed improves, but reliability against replay attacks deteriorates
Solution Approach 1:
The patent applies preliminary anti-action by implementing cryptographic verification mechanisms (digital signatures, hash verification, nonces) that prevent replay attacks before they can compromise the node. Peer nodes sign their context initialization data with cryptographic keys, and the receiving node verifies these signatures within the TEE, ensuring that even if data is intercepted and retransmitted, the cryptographic validation will detect the replay attempt and reject it.
Data Source
AI summary
A system and method are disclosed in which a node of a peer-to-peer (P2P) network supporting a blockchain is able to restart following network or power disruption (or is able to initially join the blockchain network) by bootstrapping information from one or more peer nodes in the P2P network. The bootstrapping operation involves communication between the Trusted Execution Environments (TEEs) of the two or more nodes. The system and method ensure that the retrieval of data related to the blockchain state are not from untrusted parts of the peer node(s) and the data has not been tampered with (avoidance of replay attacks).