Secure Enclave Blockchain Oracle for Trusted Off-Chain Consensus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing blockchain oracles are vulnerable to manipulation and deception by malicious entities due to lack of a secure and trustless computing environment, making it difficult to determine reliable consensus information from distributed data sources.
Innovation Solution
A blockchain oracle executed within a secure enclave environment interacts with a pool of warden servers to collect data, using remote attestation to verify the authenticity and integrity of the oracle program, and employs a consensus algorithm to determine reliable information from a threshold of trustworthy data sources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If blockchain oracles are implemented without a secure enclave environment, then the system complexity is reduced and ease of operation is improved, but the oracle becomes vulnerable to manipulation and deception by malicious entities
Solution Approach 1:
The patent introduces a secure enclave environment as an intermediary layer between the oracle logic and the underlying hardware/software environment. This enclave acts as a trusted mediator that isolates the oracle execution from external attacks, providing cryptographic proof of execution integrity through remote attestation. The enclave mediates between the need for simple oracle operation and the requirement for security, allowing the oracle to maintain reliability without requiring complex security infrastructure at the application level.
2Reliability
If remote attestation is implemented to verify oracle program authenticity, then the reliability of consensus information is improved, but the time required for verification and system complexity increases
Solution Approach 1:
The patent implements preliminary action by performing remote attestation verification before the oracle executes its consensus-determining logic. The secure enclave pre-proves its identity and the authenticity of the loaded oracle program through cryptographic attestation reports. This preliminary verification ensures that when the oracle subsequently determines consensus information, the verification is already complete, preventing future manipulation without requiring repeated verification time during the actual consensus process.
3Reliability
If a distributed pool of warden servers is used to collect data from multiple sources, then the reliability of consensus information is improved, but the device complexity and difficulty of detecting and measuring manipulation increases
Solution Approach 1:
The patent uses the secure enclave as an intermediary that receives and processes data from multiple warden servers. The enclave verifies the authenticity of incoming data through cryptographic signatures and validates that the wardens are legitimate participants. This intermediary approach allows the system to maintain a distributed pool of wardens for improved reliability while centralizing the verification logic in the trusted enclave, simplifying the detection and measurement of potential manipulations compared to a fully distributed verification system.
Data Source
AI summary
Described herein are systems and methods for providing trustworthy consensus information based on data from distributed data sources. An oracle program can be executed by processors in a secure execution environment, and can interact with a pool of warden servers of a blockchain to determine the trustworthy consensus information. The oracle can perform operations including providing requests for off-chain to the warden servers, receiving off-chain data values from the warden servers, and determining reliable consensus information from the received off-chain data values. The reliable consensus information can be provided to a computing device that is external to the secure execution environment.