Trusted Circuit for Decentralized Data Storage Proof
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Decentralized data storage systems face challenges in proving the existence and persistence of data stored on participant devices, leading to inefficiencies in bandwidth and processing usage, as existing cryptographic proofs are computationally expensive and resource-intensive.
Innovation Solution
Incorporating a trusted circuit in storage devices that computes hashes and generates anonymous digital signatures for data stored on them, allowing for efficient proof of data existence without the need for on-demand data retrieval, thereby reducing computational and power usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional cryptographic proofs are used to prove data existence in decentralized storage systems, then data existence can be proven, but computational cost and resource usage increase significantly
Solution Approach 1:
The trusted circuit pre-computes and stores cryptographic proofs (Merkle proofs, range proofs, etc.) when data is written to the storage device. These proofs are prepared in advance and stored with the data, eliminating the need for expensive real-time proof generation during verification phases. This preliminary computation significantly reduces the computational burden during subsequent data existence verification operations.
Solution Approach 2:
A trusted circuit is introduced as an intermediary component between the storage device and the decentralized storage network. This trusted circuit handles the computationally intensive cryptographic operations locally within the storage device, acting as a mediator that protects the main storage system from direct computational attacks while still enabling secure proof generation. The trusted circuit processes proofs using dedicated hardware security modules rather than general-purpose processors.
2Reliability
If frequent data retrieval is performed to validate storage, then data existence can be verified, but bandwidth consumption and processing usage increase
Solution Approach 1:
The invention extracts only the essential verification information (cryptographic proofs and data hashes) from the full data set and stores these condensed verification artifacts in the blockchain. Instead of retrieving entire data blocks for validation, the system stores and transmits only the compact proof structures, reducing bandwidth consumption by orders of magnitude while maintaining verification reliability.
Solution Approach 2:
The system creates cryptographic copies of data integrity information (Merkle roots, proof trees) that can be verified without accessing the original data. These proof copies are stored in the blockchain and can be validated independently, allowing verification of data existence without actually transferring or processing the full data payloads, thus eliminating unnecessary bandwidth consumption.
3Productivity
If a trusted circuit is added to storage devices to enable efficient proof generation, then computational efficiency improves, but device complexity increases
Solution Approach 1:
The trusted circuit merges multiple functions into a single integrated component: cryptographic key storage, proof generation, data hashing, and validation logic are combined in one secure module. This consolidation reduces the number of separate components needed and simplifies the overall system architecture compared to having separate modules for each function, while still achieving high computational efficiency through hardware acceleration.
Solution Approach 2:
The trusted circuit is designed as a universal module that can generate different types of cryptographic proofs (Merkle proofs, range proofs, possession proofs) depending on the storage scheme, without requiring separate dedicated hardware for each proof type. This multi-functional design increases productivity across different applications while controlling complexity by using a single versatile component rather than multiple specialized ones.
Data Source
AI summary
Certain aspects of the present disclosure provide techniques for proving possession of data in a storage device participating in a distributed data storage network. An example storage device includes a storage circuitry and a trusted circuit. The storage circuitry is configured to store a plurality of data blocks. The trusted circuit generally has a private signing key securely stored thereon. The trusted circuit is generally configured to compute a hash over data stored in a plurality of data blocks and to generate an anonymous digital signature for the data stored in the plurality of data blocks based at least in part on the private signing key and the computed hash. The trusted circuit may be interposed on a write path to the storage circuitry such that data written to the storage circuitry is processed through the trusted circuit.