Trusted Computing Node Proxy for Resource-Constrained IoT Blockchain Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain systems face limitations in scalability and resource requirements, making it difficult for devices with limited processing capabilities to participate effectively, especially in IoT applications, due to the need for significant computing power, network bandwidth, and storage space.
Innovation Solution
The implementation of a trusted computing node proxy system, where IoT devices with limited capabilities can utilize a trusted computing node to act as a proxy on the blockchain, enabling them to initiate transactions, monitor execution, and store data without compromising security, by leveraging smart contracts and secure channel encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If devices with limited processing capabilities attempt to join the blockchain directly, then security and decentralization are maintained, but the device complexity and resource requirements become prohibitive
Solution Approach 1:
The patent introduces a trusted computing node as an intermediary between resource-constrained devices and the blockchain network. This node performs remote attestation to verify device authenticity and handles complex blockchain operations on behalf of devices, allowing them to participate without requiring full node capabilities while maintaining security through cryptographic verification.
Solution Approach 2:
The system segments blockchain participation into different roles: lightweight devices that can initiate transactions and verify outcomes, and full-capability trusted computing nodes that handle complex operations. This segmentation allows devices with limited processing power to benefit from blockchain security without needing to implement full node functionality.
2Productivity
If the blockchain supports massive number of devices and transactions, then scalability is improved, but the processing capability requirements for participating nodes increase
Solution Approach 1:
Trusted computing nodes act as intermediaries that aggregate and manage transactions from multiple devices. Instead of each device independently processing blockchain operations, the intermediary nodes handle transaction validation, smart contract execution, and state management, enabling the network to support massive numbers of devices without increasing individual node processing requirements.
Solution Approach 2:
The system uses proxy nodes that replicate blockchain functionality for lightweight devices. These proxy nodes maintain copies of necessary blockchain state and can independently process transactions locally, reducing the need for constant network communication and heavy processing at device level while maintaining consistency with the main blockchain.
3Reliability
If secret information is stored locally on devices, then security is maintained, but the device resource requirements and vulnerability to attacks increase
Solution Approach 1:
The trusted computing node serves as a secure intermediary for storing and managing secret information. Devices can outsource sensitive data storage to the intermediary node's secure enclave, which performs remote attestation to prove its trustworthiness. This allows devices to maintain security without burdening their limited resources with local storage of large amounts of sensitive data.
Solution Approach 2:
The system replaces physical local storage of secrets on devices with cryptographic verification mechanisms. Instead of relying on devices to securely store and manage secret information locally, the system uses remote attestation and cryptographic proofs to verify device identity and authorization, eliminating the need for devices to maintain complex local security infrastructure.
Data Source
AI summary
A computer-implement method comprises: selecting a trusted computing node via smart contract on a blockchain; completing remote attestation of the selected trusted computing node; writing secret information to an enclave of the selected node; causing a thin device to establish a private connection with the selected node without revealing the secret information; and causing the selected node to act as a proxy on the blockchain for the device. Another method comprises: receiving a signed device access request from a device owner; validating, by the verification node, the received request; executing, by a verification node, a smart contract on a blockchain based on the received request; and producing, based on the executed smart contract, an output command to access the device for the device to validate, decrypt and execute.