Towards a Trusted and Privacy Preserving Membership Service in Distributed Ledger Using Intel Software Guard Extensions
Towards a Trusted and Privacy Preserving Membership Service in Distributed Ledger Using Intel Software Guard Extensions
复制标题
使用英特尔 Software Guard 扩展在分布式账本中实现可信且保护隐私的会员服务
DOI：
10.1007/978-3-319-89500-0_27
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Lingchen Zhang
中科院分区：
文献类型：
--
作者：
Xueping Liang;S. Shetty;Deepak K. Tosh;Peter B. Foytik;Lingchen Zhang
分布式分类帐技术（DLT）通过消除分布式节点之间的信任和中央当局在分布式系统中的信任来提供分散服务。所有参与节点都可以看到整个网络的交易。但是，某些交易可能包含敏感信息，例如业务合同和财务报告，甚至个人健康记录。为了保护用户隐私，可以采用以会员服务为关键组件的分布式分类帐的体系结构。我们通过提出一个会员服务体系结构来迈向这样的愿景，该构建结构结合了两种有前途的技术，分布式分类帐和英特尔软件后卫扩展（SGX）。有了SGX远程证明和隔离执行功能，每个分布式节点都可以作为一个受信任的实体注册。我们建议在分布式分类帐中为会员服务的安全属性，并说明SGX功能如何帮助在会员服务的每个阶段实现这些属性，包括会员注册，注册，交易签名，验证和交易审计。启用SGX的会员服务可以增强隐私保护的支持，并具有针对对抗性攻击的防御能力，并具有可扩展性和成本效益。
Distributed Ledger Technology (DLT) provides decentralized services by removing the need of trust among distributed nodes and the trust of central authority in the distributed system. Transactions across the whole network are visible to all participating nodes. However, some transactions may contain sensitive information such as business contracts and financial reports, or even personal health records. To protect user privacy, the architecture of distributed ledger with membership service as a critical component can be adopted. We make a step towards such vision by proposing a membership service architecture that combines two promising technologies, distributed ledger and Intel Software Guard Extensions (SGX). With SGX remote attestation and isolated execution features, each distributed node can be enrolled as a trusted entity. We propose security properties for membership service in distributed ledger and illustrate how SGX capabilities help to achieve these properties in each phase of membership service, including member registration, enrollment, transaction signing and verifying and transacting auditing. The SGX enabled membership service could enhance the support of privacy preservation, and defense capabilities against adversarial attacks, with scalability and cost effectiveness.