TEE-Based Data Processing for Distributed Key Fragment Signing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Centralized key custody schemes face security challenges as illegal access to custodial devices can lead to the loss of user keys, making it difficult to verify the validity of keys used in service signing processes.
Innovation Solution
Implement a data processing method using a trusted execution environment (TEE) with remote attestation and threshold signature policies, where key fragments are distributed across different clients, ensuring security through encryption, identity verification, and multi-party signing before writing services into a blockchain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If centralized key custody scheme is used, then key management is simplified and service signing is efficient, but security is compromised as illegal access can lead to batch key loss
Solution Approach 1:
The patent divides the centralized key custody system into distributed key fragments stored across multiple independent nodes. Each node holds only a portion of the key material, and no single node has access to the complete key. This segmentation prevents batch key loss from a single point of failure while maintaining operational efficiency through automated threshold signature mechanisms.
Solution Approach 2:
The patent introduces a threshold signature scheme as an intermediary mechanism between key storage and service signing. The threshold signature coordinator facilitates key operations by aggregating signatures from multiple key fragment holders, enabling secure service signing without requiring direct access to individual key fragments. This intermediary layer enhances security while preserving operational efficiency.
2Reliability
If key fragments are distributed across multiple nodes, then security is improved against batch key loss, but system complexity increases
Solution Approach 1:
The patent implements a universal threshold signature protocol that can be applied across different service types and key management scenarios. The same core mechanism handles key fragment distribution, signature generation, and verification for various services, reducing overall system complexity despite the distributed architecture. The resource management client provides a unified interface for diverse key operations.
Solution Approach 2:
The system employs self-service mechanisms where key fragment holders automatically participate in signature generation when service signing is required. The threshold signature coordinator autonomously aggregates signatures from available nodes without requiring manual intervention. This self-service approach manages the complexity of distributed key management through automated protocols.
3Reliability
If remote attestation and encryption are implemented, then key access security is enhanced, but processing time and computational overhead increase
Solution Approach 1:
The patent performs remote attestation and establishes encrypted communication channels in advance before actual key operations. The resource management client verifies the credentials and trustworthiness of key fragment holders beforehand, creating pre-established secure channels. This preliminary action ensures security while reducing processing time during actual service signing operations.
Solution Approach 2:
The patent replaces traditional mechanical key access control with cryptographic verification mechanisms. Instead of physical key distribution and manual access control, the system uses remote attestation protocols and encryption algorithms to verify identities and secure communications. This substitution reduces physical complexity while maintaining security, though it introduces computational overhead that is managed through efficient cryptographic implementations.
Data Source
AI summary
A data processing method and apparatus based on a trusted execution environment includes: transmitting object data encryption information obtained through encryption based on a first communication key and a to-be-signed service to a key custody client when remote attestation performed by a resource management client on the key custody client succeeds, so that the key custody client performs remote signing processing on the to-be-signed service by using a custodial key fragment when obtaining object access data information through decryption based on the first communication key; obtaining a first key fragment based on the object access data information when service remote signature information returned by the key custody client is received, and performing local signing processing on the to-be-signed service, to obtain service local signature information; and writing the to-be-signed service into a blockchain based on the service remote signature information and the service local signature information.