Blockchain-Verified Virtual Machine State Transitions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies for implementing critical functions in computer systems fail to protect against both accidental and intentional malfunctions, particularly in untrustworthy platforms, and do not provide comprehensive protection against manipulation.
Innovation Solution
A device and method for operating a cryptographically protected virtual machine using a blockchain platform, where a verification function is embedded in the blockchain to check and execute transactions, ensuring the integrity and correctness of the virtual machine's state transitions, thereby preventing manipulation and ensuring reliable operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virtual machines are executed on untrustworthy hardware platforms, then device complexity is reduced, but reliability is compromised due to potential hardware malfunctions and intentional tampering
Solution Approach 1:
The patent introduces a blockchain-based verification function as an intermediary layer between the hardware platform and the virtual machine execution. This mediator records and verifies state transitions in a distributed ledger, providing trustless execution guarantees without requiring complex hardware security modules or trusted platform modules. The blockchain acts as a neutral third party that certifies the correctness of VM operations.
Solution Approach 2:
The patent replaces traditional hardware-based trust mechanisms (such as TPMs, secure enclaves, or hardware roots of trust) with a software-based blockchain verification system. Instead of relying on physical security features of the hardware platform, the system uses cryptographic proofs and consensus mechanisms to guarantee execution reliability, thereby reducing dependence on hardware complexity.
2Measurement precision
If code replication is used to detect transient errors, then measurement precision improves, but productivity decreases due to repeated execution requirements
Solution Approach 1:
The patent performs verification actions in advance by recording the expected state transitions and verification logic in the blockchain before execution. The verification function is pre-deployed and configured, so that during runtime, the system only needs to check against the predetermined verification rules rather than performing full re-execution or complex error detection algorithms.
Solution Approach 2:
Instead of replicating the entire code execution multiple times, the patent creates a cryptographic copy of the state transition verification logic in the blockchain. The verification function maintains a copy of the expected state transformations and compares actual executions against this copy, providing error detection with minimal performance overhead.
3Reliability
If comprehensive verification is performed on all transactions, then reliability improves, but device complexity increases due to additional checking mechanisms
Solution Approach 1:
The blockchain-based verification function serves multiple purposes simultaneously: it acts as a transaction ledger, a state verification mechanism, an execution oracle, and a consensus protocol. This multi-functional design eliminates the need for separate verification modules, reducing overall system complexity while maintaining comprehensive transaction checking.
Solution Approach 2:
The patent merges the verification function directly into the blockchain structure itself, combining the state transition validation logic with the transaction recording mechanism. Rather than having separate verification layers, the verification rules are embedded in the blockchain protocol, simplifying the architecture while ensuring thorough transaction validation.
4Reliability
If blockchain verification is implemented for virtual machine operations, then protection against intentional manipulation improves, but use of energy increases due to cryptographic operations
Solution Approach 1:
The patent implements selective verification where the blockchain validation focuses on critical state transitions and security-relevant operations rather than verifying every single VM instruction. The verification function performs partial checks on essential state changes, providing adequate protection against manipulation while avoiding the energy cost of exhaustive verification of all operations.
Data Source
Figure 1~2
Figure 3
AI summary
The invention claims a device, particularly suitable for a runtime environment for a blockchain (510), for operating a cryptographically protected virtual machine, comprising: - means for providing at least one first link (511) of a blockchain, which includes at least one transaction record (410) that describes at least one first operating state of the virtual machine and includes at least one instruction for forming a second link (512, 513) in the blockchain, wherein the at least one transaction record of the second link describes a second operating state (T', T") of the virtual machine that differs from the first operating state (T); - means for providing a verification function that checks whether the second operating state of the virtual machine is permissible, based on a transaction defined by the at least one transaction record.and - means to execute the transaction depending on the verified admissibility.