Enclave Ring Topologies for Smart Contract Privacy

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current blockchain-based transaction systems lack secure and private execution environments for smart contracts, particularly in handling sensitive information like private keys and terms, which are essential for secure and trustworthy transactions.

Innovation Solution

The implementation of cryptlets, which are code components that execute in secure enclaves, providing secure channels for communication and using advanced encryption schemes like ring or threshold encryption to keep secrets isolated and private, allowing for secure execution of smart contracts with multiple counterparties.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional blockchain transaction systems are used, then transactions can be processed, but secure and private execution environments for smart contracts are lacking, particularly for handling sensitive information like private keys and terms

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system divides the execution environment into separate secure enclaves for each counterparty, with each enclave isolated from others. This segmentation allows sensitive information like private keys to be kept separate while still enabling coordinated smart contract execution across multiple parties.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a witness enclave as an intermediary component that receives and validates outputs from multiple counterparty enclaves. This mediator ensures consistent results across all counterparties without requiring them to share their private information directly.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple counterparties are involved in smart contracts, then transaction versatility is improved, but keeping secrets isolated and private becomes more difficult

Engineering Contradiction:
Improvetransaction versatilityVSAvoidinformation privacy
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

Each counterparty is assigned a separate enclave that isolates their secrets and execution environment. This segmentation enables multiple counterparties to participate in versatile transactions while maintaining strict information isolation - each party sees only what is necessary for the transaction without access to others' private information.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system uses cryptographic techniques where each counterparty receives a copy of the smart contract logic tailored to their role, but all copies execute in isolated enclaves with different secret inputs. The witness collects and validates outputs from all copies to ensure consistency, enabling versatile multi-party transactions without information leakage.

Inventive Principle:
Principle #26Copying

Data Source

PatentEP3622686B1Enclave ring and pair topologies
Publication Date: 2023.08.16 MICROSOFT TECHNOLOGY LICENSING LLC
  • EP3622686B1 patent drawingFigure 1
  • EP3622686B1 patent drawingFigure 2
  • EP3622686B1 patent drawingFigure 3

AI summary

In one example, a first enclave for use by a first counterparty to a smart contract is identified. A second enclave for use by a second counterparty to the smart contract may be identified. Secrets associated with the first counterparty to the first enclave may be caused to be securely provided. Secrets associated with the second counterparty to the second enclave may be caused to be securely provided. A cryptlet is caused to be provided to the first enclave. The cryptlet may be caused to be provided to the second enclave. A payload is received from the first enclave. A payload may be received from the second enclave. Validation may be caused to be performed for a plurality of payloads. The plurality of payloads may include the payload from the first enclave and the payload from the second enclave.