Multi-Party Computation Setup via Consensus-Controlled TEEs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Collaborative computing environments involving multiple entities face trust issues when a single party has administrative power, potentially leading to unauthorized access or modification of sensitive digital assets, and existing solutions rely on a trusted third party that may not be secure.
Innovation Solution
Implement a consensus-driven management interface (CMMI) that enforces rules of cooperation among entities, using advanced privacy-preserving computing techniques to establish a confidential computing environment (CCE) where management operations are only performed if all parties agree, with a controller TEE ensuring secure and tamper-proof auditing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single party has administrative power in a computing environment, then ease of operation and decision-making are improved, but security and trust among multiple entities deteriorate due to potential unauthorized access or modification of sensitive digital assets
Solution Approach 1:
The patent segments administrative power by introducing a consensus mechanism where multiple parties must approve management operations. The controller TEE divides decision-making authority among participating parties, requiring consensus for setup and management operations, thereby preventing any single party from having unchecked administrative power while maintaining system operability
Solution Approach 2:
The patent introduces a controller TEE as an intermediary that mediates between participating parties and the confidential computing system. This intermediary enforces consensus rules, verifies approvals, and executes management operations only when consensus is reached, thus resolving the contradiction between ease of operation and security by providing a structured decision-making framework
2Reliability
If a trusted third party is used to manage collaborative computing environments, then security and trust are improved, but device complexity and loss of control for participating parties increase
Solution Approach 1:
The patent enables participating parties to self-manage their own access and operations within the collaborative environment through the consensus mechanism. Each party can independently propose, approve, or reject management operations, eliminating the need for an external trusted third party while maintaining security through cryptographic verification and consensus protocols
Solution Approach 2:
The controller TEE serves multiple functions: it acts as a security enclave, consensus coordinator, operation verifier, and audit logger. This multi-functional design consolidates what would otherwise require separate trusted third-party services, reducing overall system complexity while maintaining security and trust
3Reliability
If consensus-based management is implemented among multiple parties, then security and trust are improved by eliminating single-point control, but ease of operation and decision-making speed deteriorate due to requiring approvals from all parties
Solution Approach 1:
The patent implements preliminary action by having participating parties pre-approve setup criteria and management operation parameters before executing operations. The controller TEE stores pre-approved criteria and automatically verifies whether proposed operations meet these criteria, reducing the need for real-time consensus on every detail and improving operational efficiency while maintaining security
Data Source
AI summary
A method for implementing a cooperative computing environment includes, using one or more computing devices, establishing a first confidential computing system, executing, on the first confidential computing system, a controller software module, executing, using the controller software module, an interface configured to provide, to a plurality of participating parties, access to the computing environment, receiving, via the interface from a requesting participating party of the plurality of participating parties, a request to initiate a setup process for the computing environment on a second confidential computing system, and, in response to a determination that non-requesting participating parties of the plurality of participating parties approved the request, completing the setup process for the computing environment in accordance with one or more criteria defined by the request.