Blockchain Replay Attack Prevention via Unique Security Values
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Replay attacks compromise the security of blockchain networks by reusing validated transactions, which can lead to unintended repetition of transactions, especially in payment systems, necessitating effective resistance mechanisms while preserving user permissions and privacy.
Innovation Solution
Implementing a method that generates a security value usable once, signing messages with a security certificate, and using counter, hash, or random functions to ensure transaction uniqueness, along with validity periods for certificates, to prevent replay attacks by resetting hashes upon expiration, ensuring only valid transactions are recorded in the blockchain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional blockchain validation is used, then transaction processing is simple, but the network is vulnerable to replay attacks
Solution Approach 1:
The system performs preliminary actions by generating and embedding unique security values (nonces) in transactions before they are broadcast to the network. Validators预先 maintain sets of these security values to check against incoming transactions, preventing replay attacks before they can compromise the network.
Solution Approach 2:
Security values act as intermediaries between the transaction sender and validator. These unique identifiers mediate the validation process by providing a mechanism to distinguish legitimate transactions from replayed ones, adding a layer of security without fundamentally changing the blockchain structure.
2Reliability
If security values are tracked for each user, then replay attacks are prevented, but storage requirements increase
Solution Approach 1:
The patent extracts only the essential security value from each transaction for storage in validator sets, rather than storing entire transaction histories. This selective extraction maintains replay attack prevention while minimizing storage requirements.
Solution Approach 2:
The system discards security values after they have been validated and processed. Once a security value has been used to validate a transaction, it is removed from the active set, preventing accumulation of unnecessary data while maintaining security for future transactions.
3Ease of operation
If security certificates include user identification, then permissions can be enforced, but user privacy is compromised
Solution Approach 1:
The security certificate is segmented into separate components: identifying information (for permission verification) and security values (for replay attack prevention). This segmentation allows the system to enforce permissions while maintaining user privacy by separating identity from transaction validation data.
Solution Approach 2:
Different parts of the security certificate serve different local functions. The identifying information is used locally for permission checks, while security values are used for network-wide replay attack prevention. This local quality optimization allows permission management without compromising overall user privacy.
Data Source
AI summary
Embodiments of the present invention may provide techniques by which replay attacks in a blockchain network may be efficiently resisted, while preserving valid user permissions and privacy in the blockchain network. For example, in an embodiment of the present invention, in a network of computer systems, a method of communication may comprise at a user computer system, generating a security value that is to be used only once, generating a message signed with a security certificate and including the security value, and transmitting the message over the network of computer systems.