Blockchain Oracle Verification for Trusted Execution Environment Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data privacy computing technologies based on trusted execution environments (TEEs) face challenges in ensuring the security, reliability, and credibility of data transmission due to the lack of verification mechanisms for the TEE platform, leading to potential data leakage and insecurity.
Innovation Solution
A blockchain-based data detection method that involves calling an oracle smart contract to initiate a verification request for the TEE platform, triggering an environment verification event, and obtaining verification information from a verification service node to ensure the credibility and security of the TEE platform through a transparent and tamper-resistant blockchain network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is transmitted in plaintext to TEE platform for analysis, then data can be processed and analyzed, but data security and privacy cannot be guaranteed
Solution Approach 1:
The patent introduces a TEE platform as an intermediary service that processes data in a trusted execution environment. The platform receives encrypted data, performs analysis within the secure enclave, and returns results without exposing the plaintext data, thus enabling processing while maintaining security
Solution Approach 2:
The patent replaces traditional plaintext data transmission mechanisms with encrypted data transmission and TEE-based processing mechanisms. Instead of direct data access, the system uses cryptographic encryption and trusted execution environments to achieve secure data processing
2Reliability
If TEE platform is used to encrypt and transmit data, then data security is improved, but reliability and credibility of the TEE platform cannot be verified
Solution Approach 1:
The patent implements a verification mechanism where the TEE platform provides verification information (such as quotes or certificates) about its security status. This feedback loop allows external systems to verify the credibility of the TEE platform, ensuring that security claims can be independently confirmed
Solution Approach 2:
The patent introduces a blockchain as an intermediary verification system. The blockchain records and stores verification information from the TEE platform, providing a transparent and immutable ledger that third parties can query to verify platform credibility without direct access to the TEE internals
3Reliability
If blockchain is used for verification, then transparency and tamper resistance are improved, but system complexity increases
Solution Approach 1:
The patent makes the blockchain serve multiple functions: it acts as a verification ledger, a data storage mechanism for verification information, and a transparency mechanism for tracking TEE platform status. This multi-functionality reduces the need for separate dedicated systems
Solution Approach 2:
The patent uses the blockchain as an intermediary layer between the TEE platform and external verification systems. The blockchain handles the complexity of verification recording and storage, allowing simpler interfaces for data processing and verification queries
Data Source
AI summary
This application discloses a blockchain-based data detection method performed by a computer device. The method includes: calling an oracle smart contract based on a verification smart contract to initiate a verification request for a trusted execution environment platform, where the verification request includes an environment signature corresponding to the trusted execution environment platform; triggering an environment verification event comprising the environment signature based on the verification request, wherein an oracle node is configured to obtain verification information about the trusted execution environment platform from a verification service node in response to the environment verification event; and obtaining the verification information from the oracle node and returning the verification information to the verification smart contract.