Blockchain TEE Privacy Data Access via Smart Contract Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for providing user privacy data, such as in the education industry, suffer from poor confidentiality and low security, leading to risks of data leakage and unnecessary troubles for users.
Innovation Solution
A blockchain-based method and apparatus that pre-encrypts user privacy data and uploads it to a Trusted Execution Environment (TEE) within a blockchain node, using smart contracts for verification to ensure secure data consumption and processing, thereby enhancing data security and confidentiality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If user privacy data is stored and provided using existing solutions, then data accessibility and query speed are improved, but data security and confidentiality deteriorate
Solution Approach 1:
The patent applies preliminary action by pre-encrypting user privacy data before storage and upload to the TEE. The data is encrypted using asymmetric encryption algorithms where the public key is stored on the blockchain and the private key is stored in the TEE. This preliminary encryption ensures that even though data is quickly accessible, it remains secure because the private key needed for decryption is never exposed outside the TEE environment.
Solution Approach 2:
The patent uses the TEE as an intermediary between data storage and data access. The TEE acts as a trusted execution environment that mediates between the blockchain's public accessibility and the need for private key protection. It allows fast data queries while maintaining security by keeping the private key isolated within the TEE's secure boundary, preventing direct access to encrypted data without proper authentication.
2Reliability
If data is encrypted and stored in TEE, then data security and confidentiality are improved, but data processing complexity increases
Solution Approach 1:
The patent implements self-service by allowing the TEE to automatically perform encryption and decryption operations without requiring complex manual intervention. The system uses automated key management where public keys are automatically stored on the blockchain and private keys are automatically stored in the TEE. The TEE autonomously handles the cryptographic operations during data access, reducing the need for complex external security systems.
Solution Approach 2:
The patent applies universality by designing the TEE to perform multiple functions: storing private keys, executing encrypted data processing, validating authentication credentials, and managing encryption operations. This multi-functional approach consolidates what would otherwise require multiple separate systems into a single TEE component, reducing overall system complexity despite the advanced security requirements.
3Reliability
If smart contract verification is performed in TEE, then data access security is improved, but processing time increases
Solution Approach 1:
The patent applies preliminary action by pre-deploying smart contracts on the blockchain before data access is needed. The smart contracts contain pre-programmed verification logic and authentication rules that are already in place and ready to execute. When data access is requested, the verification process simply needs to invoke the existing smart contract rather than creating or compiling new verification logic, significantly reducing processing time while maintaining strong security.
Solution Approach 2:
The patent replaces complex mechanical verification processes with automated smart contract execution. Instead of manual or multi-step verification procedures, the system uses blockchain-based smart contracts that automatically execute verification logic. This substitution of mechanical verification with automated cryptographic verification reduces processing time while enhancing security through the immutability and transparency of blockchain-based authentication.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
One or more embodiments of the present specification provide a blockchain-based user privacy data providing method and apparatus. The method includes: receiving a data consumption request sent by a data consumer, where the data consumption request is a consumption request aiming at user privacy data of a target user, the user privacy data includes personal data that is pre-encrypted and is uploaded to a trusted execution environment (TEE), and the TEE is constructed in a node of a blockchain; performing predetermined verification on the data consumption request in the TEE based on request body data corresponding to the data consumption request by using a smart contract deployed in the blockchain, to obtain a corresponding predetermined verification result; and if the predetermined verification result satisfies a verification success condition, obtaining target privacy data obtained for the data consumption request, and sending the encrypted target privacy data to the data consumer, where the target privacy data is obtained in the TEE based on the user privacy data stored in the blockchain.