Validating Device for Secure Multi-Party Consensus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed processing systems like blockchain networks, untrusted computing nodes face challenges in reaching consensus due to the lack of trust among members, making them vulnerable to malicious manipulation of consensus outcomes.
Innovation Solution
A validating device uses a unidirectional secure communication channel to transmit queries to computing nodes, aggregates responses using secret components, and validates the consensus answer by comparing received strings to locally computed strings, ensuring the answer matches one of the possible valid answers, thereby preventing malicious manipulation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If distributed processing is used among untrusted computing nodes, then processing capacity and decentralization are improved, but security and reliability of consensus deteriorate due to vulnerability to malicious manipulation
Solution Approach 1:
A validating device acts as an intermediary between the distributed computing nodes and the final consensus result. This device receives responses from multiple computing nodes, validates them against pre-shared secret components, and only accepts results that pass validation. This intermediary layer protects the system from malicious manipulation while preserving the decentralized processing capacity.
Solution Approach 2:
Secret components are pre-shared between the validating device and computing nodes before the consensus process begins. These secret components enable the validating device to verify the authenticity of responses without revealing the actual secret values. This preliminary setup establishes trust boundaries that prevent malicious manipulation during the actual consensus execution.
2Reliability
If a validating device connects to multiple computing nodes to validate consensus, then security is improved, but connection complexity and device complexity increase
Solution Approach 1:
The validation logic and secret component storage are extracted into a dedicated validating device that is separate from the computing nodes. This separation allows the validating device to focus solely on verification tasks while the computing nodes handle processing. The unidirectional communication channel further simplifies the connection model by allowing only one-way data flow from nodes to validator.
Solution Approach 2:
The communication model is changed to use unidirectional secure channels instead of bidirectional communication. This parameter change in the communication protocol reduces the complexity of connection management and authentication mechanisms while maintaining security. The validating device only needs to send queries and receive responses, without needing to handle incoming connection requests or complex handshakes.
3Reliability
If secret components are shared with computing nodes for consensus validation, then consensus reliability is improved, but information security risks increase due to potential exposure
Solution Approach 1:
The secret validation mechanism is segmented into two parts: secret components that are pre-shared with computing nodes for generating valid responses, and validation logic that remains exclusively in the validating device. This segmentation ensures that even if computing nodes are compromised, the full secret cannot be extracted because the validation logic and complete secret components remain protected in the validating device.
Solution Approach 2:
The validating device serves as an intermediary that never exposes the complete secret to the network. It uses the pre-shared secret components to verify responses without revealing the actual secret values to any computing node or external party. This intermediary role ensures that information security is maintained while enabling reliable consensus validation.
Data Source
AI summary
A method of validating a multi-party consensus over a limited connection comprising a validating device configured to transmit a query having a finite number of possible valid answers to a plurality of computing nodes via a unidirectional secure communication channel, receive a limited length string computed based on an aggregated response aggregating a plurality of responses each computed for a multi-party consensus answer to the query by each of at least some of the plurality of computing nodes using a respective secret component, compute a plurality of locally computed strings each computed based on a respective one of the finite number of possible valid answers using an aggregated secret aggregating the plurality of secret components, validate the multi-party consensus answer by comparing the received limited length string to each of the plurality of locally computed strings and initiating one or more operations according to an outcome of the validation.