Trusted Execution Environment Consensus for Distributed Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing consensus methods in decentralized systems, such as Proof of Work in Bitcoin, consume significant computing resources and are inefficient for massive service transactions, while solutions like Intel's hardware-based consensus and Microsoft's COCO framework face challenges in creating an efficient and scalable consensus system for large networks.

Innovation Solution

The technology generates consensus for transactions and services by using service nodes in a distributed network to accumulate and hash service records within Trusted Execution Environments (TEEs), validating these records across nodes to reach consensus and store results in a ledger, thereby facilitating efficient and scalable service transactions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If Proof of Work consensus method is used in decentralized systems, then security and trust are improved, but computing resource consumption increases significantly and transaction efficiency decreases

Engineering Contradiction:
Improveconsensus trustVSAvoidcomputing resource consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent introduces Trusted Execution Environments (TEEs) as intermediary hardware components that mediate the consensus process. TEEs provide a secure enclave for performing cryptographic operations and validating service records, replacing the need for computationally intensive Proof of Work while maintaining consensus trust through hardware-based security boundaries.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical/computational Proof of Work system with a hardware-based TEE system. Instead of relying on computational difficulty to secure the network, the invention uses specialized hardware enclaves with built-in security features to validate transactions and establish consensus, significantly reducing energy consumption while maintaining security.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If hardware-based consensus systems like Intel's TEE are deployed, then security is improved, but device complexity and scalability challenges increase

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent designs the TEE-based consensus system to serve multiple functions within a single hardware component. The TEE simultaneously provides secure key storage, cryptographic operation execution, service record validation, and consensus participation, reducing overall system complexity by consolidating these functions into a universal hardware module rather than requiring separate components for each function.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Measurement precision

If service records are accumulated and validated across multiple nodes, then consensus accuracy is improved, but transaction processing time increases

Engineering Contradiction:
Improveconsensus accuracyVSAvoidtransaction processing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent implements preliminary validation of service records within the TEE before they are propagated across the network. Nodes perform initial hashing and verification of service records locally within their TEEs, preparing validated records in advance for consensus. This preliminary action reduces the time required for cross-node validation while maintaining consensus accuracy through pre-verified data.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12200138B2System and method of establishing a trusted relationship in a distributed system
Publication Date: 2025.01.14 HUAWEI TECH CO LTD
  • US12200138B2 patent drawing
  • US12200138B2 patent drawing
  • US12200138B2 patent drawing

AI summary

A node in a distributed network computes a hash of content for a service received in a data packet. The node verifies the data packet by comparing the hash of the content of a service received from a neighboring node to a hash of the content computed by the node. An amount of content of the service having a same identification is accumulated in a trusted execution environment (TEE) of the node, and a signature based on code stored in a TEE of the node is generated. The node then sends the data packet to the next neighboring node, where the service-related information includes the service ID, a hash of the service content and the signature. The service records with the accumulated amount of service content, accumulated hash values, and nodes' signatures are sent to the validation nodes to reach consensus for the service provided.