Trusted Execution Environment Lifecycle for Private Smart Contract Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing methods in trusted execution environments using smart contracts fail to adequately protect data privacy by preventing data leakage and unauthorized viewing.
Innovation Solution
A data processing method involving the generation of a trusted execution environment with a data processing code and encryption key, which processes data within a secure environment, ensures data privacy by self-destructing upon contract completion, and securely deletes data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is stored in a trusted execution environment for processing, then data processing capability is improved, but data privacy and security deteriorate due to potential data leakage and unauthorized viewing
Solution Approach 1:
The system segments the data lifecycle into distinct phases: data is encrypted before storage, processed in an isolated trusted execution environment, and the execution environment is automatically destroyed after processing. This segmentation ensures that data exists in secure states during transitions, preventing unauthorized access while enabling processing capability.
Solution Approach 2:
The trusted execution environment is pre-configured with necessary processing capabilities and security protocols before data is introduced. Encryption keys are generated in advance, and the execution environment is validated for integrity prior to data processing, ensuring both processing efficiency and security from the outset.
2Ease of operation
If the trusted execution environment maintains data for extended periods, then data accessibility is improved, but data security deteriorates due to increased exposure risk
Solution Approach 1:
The trusted execution environment operates in periodic cycles: data is loaded, processed, and then the environment is automatically destroyed. This periodic operation ensures data is accessible only during the brief processing window while minimizing exposure risk during storage and transmission phases through encryption.
Solution Approach 2:
After data processing is complete, the trusted execution environment is automatically discarded and destroyed. This ensures that processed data cannot be accessed afterward, eliminating prolonged exposure risks while maintaining accessibility during the necessary processing period through the secure environment.
3Productivity
If multiple smart contracts are executed simultaneously, then system productivity is improved, but system complexity increases due to multiple execution environments
Solution Approach 1:
The system extracts the trusted execution environment as a separate, self-contained module that can be independently instantiated for each smart contract. This extraction allows multiple contracts to be processed simultaneously in parallel environments while maintaining clear boundaries, reducing the complexity of managing shared state and access control.
Data Source
AI summary
A data processing method of a trusted execution environment using a smart contract of the present invention comprises the steps of: a data processing platform server generating, according to a smart contract distributed on a blockchain, a trusted execution environment including a data processing code and an encryption key in response to a data processing request received from a client device; the trusted execution environment acquiring, from a data-owned device, first data encrypted by the encryption key; the trusted execution environment decoding the first data; the trusted execution environment generating the result of data processing by processing the decoded first data according to the data processing code; the trusted execution environment providing the result of data processing to the client device; and the trusted execution environment being self-destroyed according to the smart contract.