Distributed Ledger Confidentiality via Trusted Execution Environment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current distributed ledger systems lack the ability to maintain confidentiality of transactions, which is essential for secure data storage, especially in applications where sensitive information needs to be protected, such as supply chain management or financial transactions, as they are inherently transparent and lack robust access control mechanisms.
Innovation Solution
The implementation of a data confidentiality module that utilizes a Trusted Execution Environment (TEE) for secure transaction processing and key synchronization, allowing for encrypted data storage and secure access control, ensuring that only authorized nodes can access and process sensitive information within the distributed ledger system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If distributed ledger maintains transparency for all participants, then data integrity and auditability are improved, but confidentiality of sensitive information deteriorates
Solution Approach 1:
The patent segments data into public and private components. Public data (transaction metadata, hashes) is stored on the distributed ledger for transparency, while private data (sensitive information) is encrypted and stored separately. This segmentation allows the system to maintain both transparency for auditability and confidentiality for sensitive information.
Solution Approach 2:
The patent introduces an intermediary encryption layer between the distributed ledger and sensitive data. Encryption keys are managed through a key management system that acts as an intermediary, allowing authorized parties to access confidential information without exposing it to all ledger participants. This intermediary mechanism preserves both the transparency of the ledger and the confidentiality of stored data.
2Loss of information
If distributed ledger stores encrypted data, then confidentiality is improved, but access control complexity and processing overhead increase
Solution Approach 1:
The patent implements self-service access control through cryptographic mechanisms. Each participant has their own encryption keys and can independently encrypt and decrypt data without requiring complex centralized access control systems. This self-service approach reduces access control complexity while maintaining strong confidentiality through cryptographic protection.
Data Source
AI summary
A system and apparatus for data confidentiality in a distributed ledger are disclosed. The system and apparatus preserve qualities of distributed ledgers, such as transparency, integrity, and redundancy, while also providing confidentiality, scalability, and security not previously available in distributed ledgers. The system includes a data confidentiality module that exploits a trusted execution environment for both transaction processing and key synchronization. The apparatus accessing the distributed ledger provides for new nodes joining the network, sending transactions to the ledger by existing nodes, securely processing the transaction using the trusted execution environment, securing transmission to the logic layer for application of business logic, reading and writing data to local storage, and reading encrypted transactions.