TEE-Encrypted SMS Processing via Blockchain Smart Contracts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Service providers face challenges in ensuring the authenticity and validity of short message services (SMS) while maintaining low costs, as existing methods lack effective solutions for secure message transmission and decryption, particularly in scenarios involving trusted execution environments (TEE) and blockchain-based systems.
Innovation Solution
A service processing method and apparatus that utilizes a trusted execution environment (TEE) to encrypt and decrypt messages, involving a service provider device, a channel partner device, and a node device accessed to a blockchain, where a smart contract is invoked to ensure secure message transmission and authenticity, reducing the need for exclusive service channels and minimizing costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If messages are transmitted in plaintext through traditional channels, then transmission speed is fast, but security and authenticity cannot be ensured
Solution Approach 1:
The patent embeds a TEE environment within the service provider device, creating a nested secure execution layer. The TEE contains the message processing logic and cryptographic operations, while the outer system handles general service management. This nesting provides security without requiring complete system redesign.
Solution Approach 2:
The patent introduces a blockchain-based intermediary layer that mediates between service providers and channel partners. The blockchain verifies message authenticity through smart contracts and cryptographic proofs, acting as a trusted mediator that reduces the need for direct trust between parties while maintaining system simplicity.
2Reliability
If exclusive service channels are established between service providers and operators, then message security is improved, but service costs increase
Solution Approach 1:
The patent makes the TEE environment universal by allowing multiple channel partners to access the same secure processing infrastructure through standardized interfaces. Instead of requiring separate dedicated channels for each partner, the universal TEE serves multiple parties simultaneously, reducing infrastructure costs while maintaining security through cryptographic isolation.
Solution Approach 2:
The blockchain system provides self-verification capabilities through smart contracts that automatically validate message authenticity and routing. This eliminates the need for manual security verification and reduces operational costs, as the system verifies its own integrity through cryptographic proofs rather than requiring expensive human-mediated security checks.
3Reliability
If traditional encryption methods are used without TEE, then device complexity is reduced, but message authenticity and validity cannot be ensured
Solution Approach 1:
The patent segments the encryption system into distinct functional modules within the TEE: key management, message encryption, digital signature generation, and verification. Each module performs a specific cryptographic function, making the complex security system manageable and maintainable while providing comprehensive message validity assurance.
4Productivity
If centralized message processing is used, then system complexity is low, but scalability is limited
Solution Approach 1:
The blockchain acts as a decentralized intermediary layer that coordinates between multiple service providers and channel partners without requiring centralized control. Each participant runs independent TEE instances that interact through standardized blockchain interfaces, enabling the system to scale horizontally by adding new participants without increasing central coordination complexity.
Data Source
Figure 1~2
Figure 3~4
Figure 5~6
AI summary
Embodiments of the present specification provide a service processing method, apparatus, device and system. The method includes: a service provider device encrypts, through a trusted execution environment (TEE) of the service provider device based on a service processing request sent by a request user, at least one message plaintext to be processed that is included in the service processing request and sends the message plaintext to a channel partner device so that the channel partner device sends a message processing request to a node device accessed to a blockchain; and the node device receives the message processing request sent by the channel partner device, invokes a first smart contract deployed in the blockchain in the TEE of the node device, decrypts, based on the first smart contract, a message ciphertext in the message processing request to obtain the message plaintext, and sends the message plaintext to an operator device so that the operator device sends a message to be sent in the message plaintext to a target user.