Blockchain-Verified Virtual Machine State Transitions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing technologies for implementing critical functions in computer systems fail to protect against both accidental and intentional malfunctions, particularly in untrustworthy platforms, and do not provide comprehensive protection against manipulation.

Innovation Solution

A device and method for operating a cryptographically protected virtual machine using a blockchain platform, where a verification function is embedded in the blockchain to check and execute transactions, ensuring the integrity and correctness of the virtual machine's state transitions, thereby preventing manipulation and ensuring reliable operation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If virtual machines are executed on untrustworthy hardware platforms, then device complexity is reduced, but reliability is compromised due to potential hardware malfunctions and intentional tampering

Engineering Contradiction:
Improveexecution reliabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a blockchain-based verification function as an intermediary layer between the hardware platform and the virtual machine execution. This mediator records and verifies state transitions in a distributed ledger, providing trustless execution guarantees without requiring complex hardware security modules or trusted platform modules. The blockchain acts as a neutral third party that certifies the correctness of VM operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional hardware-based trust mechanisms (such as TPMs, secure enclaves, or hardware roots of trust) with a software-based blockchain verification system. Instead of relying on physical security features of the hardware platform, the system uses cryptographic proofs and consensus mechanisms to guarantee execution reliability, thereby reducing dependence on hardware complexity.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If code replication is used to detect transient errors, then measurement precision improves, but productivity decreases due to repeated execution requirements

Engineering Contradiction:
Improveerror detection capabilityVSAvoidexecution efficiency
Core Design Contradiction:
Measurement precisionVSProductivity

Solution Approach 1:

The patent performs verification actions in advance by recording the expected state transitions and verification logic in the blockchain before execution. The verification function is pre-deployed and configured, so that during runtime, the system only needs to check against the predetermined verification rules rather than performing full re-execution or complex error detection algorithms.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

Instead of replicating the entire code execution multiple times, the patent creates a cryptographic copy of the state transition verification logic in the blockchain. The verification function maintains a copy of the expected state transformations and compares actual executions against this copy, providing error detection with minimal performance overhead.

Inventive Principle:
Principle #26Copying

3Reliability

If comprehensive verification is performed on all transactions, then reliability improves, but device complexity increases due to additional checking mechanisms

Engineering Contradiction:
Improvetransaction verification reliabilityVSAvoidverification system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The blockchain-based verification function serves multiple purposes simultaneously: it acts as a transaction ledger, a state verification mechanism, an execution oracle, and a consensus protocol. This multi-functional design eliminates the need for separate verification modules, reducing overall system complexity while maintaining comprehensive transaction checking.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent merges the verification function directly into the blockchain structure itself, combining the state transition validation logic with the transaction recording mechanism. Rather than having separate verification layers, the verification rules are embedded in the blockchain protocol, simplifying the architecture while ensuring thorough transaction validation.

Inventive Principle:
Principle #5Merging (Combining)

4Reliability

If blockchain verification is implemented for virtual machine operations, then protection against intentional manipulation improves, but use of energy increases due to cryptographic operations

Engineering Contradiction:
Improveprotection against manipulationVSAvoidcomputational energy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements selective verification where the blockchain validation focuses on critical state transitions and security-relevant operations rather than verifying every single VM instruction. The verification function performs partial checks on essential state changes, providing adequate protection against manipulation while avoiding the energy cost of exhaustive verification of all operations.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentEP3435270B1Device and method for cryptographically protected operation of a virtual machine
Publication Date: 2020.09.23 SIEMENS AG
  • EP3435270B1 patent drawingFigure 1~2
  • EP3435270B1 patent drawingFigure 3

AI summary

The invention claims a device, particularly suitable for a runtime environment for a blockchain (510), for operating a cryptographically protected virtual machine, comprising: - means for providing at least one first link (511) of a blockchain, which includes at least one transaction record (410) that describes at least one first operating state of the virtual machine and includes at least one instruction for forming a second link (512, 513) in the blockchain, wherein the at least one transaction record of the second link describes a second operating state (T', T") of the virtual machine that differs from the first operating state (T); - means for providing a verification function that checks whether the second operating state of the virtual machine is permissible, based on a transaction defined by the at least one transaction record.and - means to execute the transaction depending on the verified admissibility.