NFT Token Script Access Control Using Trusted Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack effective protection against token-based malicious scripts, particularly in NFT environments, which can lead to potential harm and financial loss due to buffer overflow attacks and unauthorized script execution.
Innovation Solution
Implementing a blockchain-based NFT platform with a trusted execution environment (TEE) that includes secure storage compartments (sandboxes) and a restricted interface to control access between tokens, using access control settings and certificates to manage script execution based on token rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If tokens are allowed to initiate script execution in end-user environments, then beneficial functionality is provided, but the system becomes susceptible to malicious attacks
Solution Approach 1:
The patent introduces a trusted execution environment (TEE) as an intermediary between the token and the end-user execution environment. The TEE acts as a secure mediator that verifies script authenticity and controls execution, allowing beneficial script functionality while blocking malicious attacks. The TEE creates a trusted boundary that enables safe interaction between tokens and external scripts.
Solution Approach 2:
The system segments the execution environment into distinct trusted and untrusted zones. The TEE forms a segregated secure compartment that isolates critical verification and execution functions from the potentially malicious external environment. This segmentation allows the system to maintain versatile script execution while containing harmful factors within isolated boundaries.
2Reliability
If access control settings are implemented to protect against malicious scripts, then security is improved, but system complexity increases
Solution Approach 1:
The access control mechanism is embedded within the token structure itself, allowing tokens to self-manage their own access rights and script execution permissions. The token's inherent data elements and associated access control settings enable autonomous security decisions without requiring external complex verification systems, simplifying the overall architecture while maintaining strong security.
3Power
If distributed computing environment is used for NFT platform, then processing capability is enhanced, but security coordination becomes more difficult
Solution Approach 1:
The patent changes the security verification parameter from distributed consensus (requiring coordination across multiple nodes) to local trusted execution verification. Each participating node runs scripts within its own TEE, making security decisions locally based on verified access control settings. This parameter change maintains the distributed processing capability while simplifying security coordination by eliminating the need for complex inter-node security consensus.
Data Source
AI summary
Non-fungible token (NFT) platforms in accordance with various embodiments of the invention are described. In an embodiment of the NFT platform includes storing several tokens, where a token includes several data elements and associated access control settings for accessing the several data elements; identifying a script to execute that is associated with a first token, where the script includes at least one instruction for accessing data from at least one data element of a second token; determining, based on access control settings of the second token, that the first token has particular access rights to the at least one data element of the second token; and executing the script based on the particular access rights of the first token.