Trusted Execution Environment Verifiable Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods face challenges in verifying properties of plaintext using ciphertext, as they are computationally intensive and require specific zero-knowledge proof protocols for each property, making them complex and inefficient.
Innovation Solution
A method utilizing a Trusted Execution Environment (TEE) to decrypt ciphertext using a private encryption key, generate a digitally signed validation result with a private signing key, and transmit it for verification, allowing properties of plaintext to be confirmed without exposing sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Zero Knowledge Proof (ZKP) is used to verify properties of plaintext, then verification capability is achieved, but computational complexity and time consumption increase significantly
Solution Approach 1:
The patent introduces a Trusted Execution Environment (TEE) as an intermediary between the encryption operation and the verification operation. The TEE securely decrypts the ciphertext to obtain plaintext for property verification, then re-encrypts the verified plaintext. This mediator enables verification without requiring complex ZKP protocols, significantly reducing computational time while maintaining verification reliability.
2Measurement precision
If specific Zero Knowledge Proof protocols are constructed for different properties, then verification accuracy is improved, but system complexity increases
Solution Approach 1:
The patent creates a universal verification system using TEE that can handle multiple different property verification tasks (range verification, equality verification, etc.) through a single unified approach. Instead of constructing specific ZKP protocols for each property, the TEE provides a multi-functional platform that simplifies the system architecture while maintaining verification accuracy for various plaintext properties.
3Reliability
If Zero Knowledge Proof is used for verifiable encryption, then security is enhanced, but ease of operation deteriorates due to complex protocol construction
Solution Approach 1:
The patent implements a self-service verification mechanism where the TEE automatically performs decryption, property verification, and re-encryption operations without requiring external ZKP protocol construction or verification. The system serves itself by handling all verification tasks internally within the trusted environment, eliminating the need for users to understand or construct complex ZKP protocols, thereby greatly improving ease of operation while maintaining security.
4Device complexity
If traditional encryption methods are used, then simplicity is maintained, but verification of plaintext properties becomes impossible
Solution Approach 1:
The TEE acts as a trusted intermediary that enables property verification on encrypted data without compromising system simplicity. By introducing this single trusted component, the system gains verification capability while keeping the overall architecture relatively simple compared to implementing multiple specialized ZKP protocols for different verification needs.
Data Source
Figure 1~2B
Figure 3
Figure 4~5
AI summary
A method for verifying a property of plaintext using ciphertext is disclosed. In an embodiment, a computing device may receive the ciphertext at a trusted execution environment (TEE) of the computing device. The TEE may decrypt the ciphertext to generate the plaintext using a private encryption key of an encryption key pair. The encryption key pair comprises a public encryption key and the private encryption key. The TEE may generate a digitally signed validation result by encrypting the validation result using a private signing key of a signing key pair. The signed key pair comprises a public signing key and the private signing key. The private key is retrieved from secure memory of the computing device, and the secure memory may only be accessible by the TEE. The computing device may then transmit the digitally signed validation result.