Identity Centric Dataset Transaction via Trusted Execution Environment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing blockchain-based identity systems lack strong privacy and confidentiality due to their design, which makes them unsuitable for implementing transactional policies through smart contracts, as all instructions are available to all nodes on the network, compromising user privacy.
Innovation Solution
A method and system that utilize a consortium network to establish permitted data operations using privacy schemas, execute transactions in a trusted execution environment, and record metadata on a distributed ledger, ensuring privacy preservation and confidentiality by identifying appropriate privacy schemas based on data owners and receivers, and transferring manipulated datasets securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If blockchain-encoded smart contracts are used to implement transactional policies, then automation and policy enforcement are improved, but privacy and confidentiality deteriorate because all smart contract instructions are available to all nodes on the distributed network
Solution Approach 1:
The system segments the blockchain network into a consortium network layer (for policy management and metadata recording) and a service network layer (for actual data processing). This segmentation allows smart contracts to operate at the consortium level for automation while keeping sensitive data operations at the service level where they remain confidential.
Solution Approach 2:
The patent introduces an intermediary trusted execution environment that sits between the smart contract layer and the data processing layer. This intermediary receives policy instructions from smart contracts, executes them in a privacy-preserving manner using homomorphic encryption and secure multi-party computation, and returns results without exposing sensitive data or instructions to the broader network.
2Loss of information
If identity attributes are stored off-chain with anonymous keys, then privacy of identity attributes is improved, but the ability to implement strong privacy with blockchain-encoded smart contracts deteriorates
Solution Approach 1:
The system changes the cryptographic parameters and data representation formats used in the blockchain system. Instead of traditional public-key cryptography for all operations, the patent employs homomorphic encryption schemes and secure multi-party computation protocols that allow computations on encrypted data, fundamentally changing how privacy is achieved in blockchain transactions.
Solution Approach 2:
The patent combines multiple cryptographic techniques and privacy-preserving technologies into a composite system. This includes integrating homomorphic encryption, secure multi-party computation, zero-knowledge proofs, and traditional blockchain mechanisms to create a multi-layered privacy guarantee that is stronger than any single technique alone.
3Loss of information
If all smart contract instructions are made available to all nodes, then transparency and auditability are improved, but confidentiality and security of transactions deteriorate
Solution Approach 1:
The patent extracts the confidential computational logic from the public blockchain layer and places it in a separate trusted execution environment. The smart contracts on the consortium network only manage policy definitions and metadata, while the actual data processing instructions are executed privately in the TEE, separating transparent policy management from confidential execution.
Solution Approach 2:
The system adds a new dimensional layer to the blockchain architecture by introducing a trusted execution environment that operates parallel to the blockchain ledger. This additional dimension allows simultaneous achievement of transparency (through blockchain recording of policies and results) and confidentiality (through private computation in the TEE layer).
Data Source
AI summary
Disclosed is a method, system and computer readable medium for performing a transaction in relation to an identity centric dataset. In one aspect, the method comprises: establishing, by a consortium network, a set of permitted data operations for a service network using a plurality of privacy schemas; receiving, by the service network, a transaction request to perform the transaction in relation to the identity centric dataset associated with a data owner; identifying, by the service network from the plurality of schemas and based on the transaction request, a privacy schema from the plurality of privacy schemas for use in performing the transaction; performing the transaction by executing, in a trusted execution environment of the service network, one or more data operations from the set of permitted data operations upon the identity centric dataset of the data owner as permitted by the identified privacy schema thereby generating a manipulated dataset and transaction metadata; recording the transaction metadata to a distributed ledger of the service network; and transferring the manipulated dataset to a data receiver indicated by the transaction request.