Blockchain Private Account Execution Using TEE and External Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing blockchain technologies face challenges in balancing privacy and performance, with common encryption methods causing significant performance degradation, and Trusted Execution Environments (TEE) being inefficient due to plaintext data operations.
Innovation Solution
Implementing a method and apparatus that determine if a transaction involves a private account, executing it in a trusted execution environment, and encrypting account data within this environment while storing it outside, ensuring privacy and reducing TEE occupation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If common encryption technologies (homomorphic encryption, zero-knowledge proof) are used to protect privacy, then privacy security is improved, but computing performance deteriorates significantly
Solution Approach 1:
The patent introduces a Trusted Execution Environment (TEE) as an intermediary component between the blockchain network and external storage. The TEE acts as a secure mediator that handles encryption/decryption operations and data access control, isolating the complexity of cryptographic operations from the main blockchain execution. This allows privacy protection without requiring all blockchain nodes to perform complex cryptographic computations, thus maintaining computing performance while improving privacy security.
2Reliability
If TEE is used to execute transactions for privacy protection, then privacy security is improved, but TEE resource occupation increases
Solution Approach 1:
The patent extracts the storage function of encrypted account data from the TEE environment and places it in external storage. Only the decryption keys and access control logic remain in the TEE, while the actual data resides outside. This extraction reduces TEE resource occupation significantly, allowing the limited TEE resources to be used more efficiently for critical security operations rather than storing large amounts of encrypted data.
3Productivity
If encrypted data is stored outside TEE, then TEE utilization is improved, but data access complexity increases
Solution Approach 1:
The patent implements a feedback mechanism where the TEE continuously monitors and controls access to encrypted data stored externally. When a transaction requires access to encrypted account data, the system requests decryption from the TEE, which verifies the transaction's legitimacy and provides decryption keys only when authorized. This feedback loop ensures secure data access while maintaining simple interfaces for legitimate operations, balancing TEE utilization improvement with manageable access complexity.
Data Source
AI summary
This present disclosure provides methods and apparatuses for preserving privacy of account data in a blockchain. In an implementation, a method includes: determining, in response to receiving a target transaction, whether the target transaction involves a private account, and executing the target transaction in a trusted execution environment in response to determining that the target transaction involves a private account, wherein account data of the private account is encrypted and is stored in a target storage space outside the trusted execution environment.