Toward a Fast and Secure Blockchain Framework for Smart Contracts

建立快速、安全的智能合约区块链框架

• 批准号: RGPIN-2020-05926
• 负责人: Long, Fan
• 金额: $ 2.11万
• 依托单位: University of Toronto
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2022
• 资助国家: 加拿大
• 起止时间: 2022-01-01 至 2023-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=750046
• 关键词: Toward; Fast; Secure; Blockchain; Framework

Following the success of the cryptocurrencies, blockchain has recently evolved into a technology platform that powers secure, decentralized, and consistent transaction ledgers at Internet-scale. Smart contract deployment is the most important feature of many blockchain systems. Users can develop smart contracts to encode arbitrarily complicated transaction rules and deploy these contracts to a blockchain system. The contracts (i.e., transaction rules) are then faithfully executed and enforced by all participants of the system, eliminating any potential counter-party risk of the encoded transactions in future. One challenge for the adoption of smart contract techniques is the security risk. Because smart contracts are in fact programs that directly manipulate digital assets, ensuring the correctness of these contracts is very critical. Unfortunately, human programmers often make mistakes and errors. The consequence of programming errors and security vulnerabilities in smart contracts is particularly severe, often leading to tens of millions of dollar losses. Another challenge for the adoption is the performance issue. To ensure the consistency of the transaction ledger, the consensus protocols in blockchain systems have to operate with slow block generation to avoid concurrent blocks (i.e., forks), which are considered harmful for the consensus safety. Therefore these systems have very limited transaction throughputs for smart contracts. Users often have to wait for a long period of time to confirm a transaction. To tackle the security challenge, we propose to design a new set of tools for securing smart contracts, combining the static analysis with runtime instrumentations. One observation is that the transaction execution is not the bottleneck in blockchain platforms. The bottleneck is instead first at the consensus protocol and then at the blockchain storage layer. Therefore the overhead of runtime instrumentation, which is often too expensive for other domains, is in fact negligible for smart contracts. To tackle the performance challenge, we propose to design a novel consensus protocol that reorganizes blocks into direct acyclic graph to safely incorporate concurrent blocks. The protocol inherently encodes two strategies, an optimistic strategy for high performance and a conservative strategy that ensure the consensus progress to thwart liveness attacks. We also propose to revisit the design of the storage layer and the transaction propagation to build a high performance end-to-end blockchain platform. If the proposed research becomes successful, the proposed techniques would make the development of smart contracts significantly more secure. The techniques would also allow blockchain platforms to process smart contracts at a higher throughput and a faster speed. The ultimate goal of the proposed research is to find comprehensive solutions to unleash the full potential of smart contract technologies.

随着加密货币的成功，区块链最近发展成为一种技术平台，在互联网规模上为安全、分散和一致的交易分类账提供动力。智能合约部署是许多区块链系统最重要的功能。用户可以开发智能合同来编码任意复杂的交易规则，并将这些合同部署到区块链系统。合同(即交易规则)随后被系统的所有参与者忠实地执行和执行，从而消除了未来编码交易的任何潜在的交易对手风险。采用智能合同技术的一个挑战是安全风险。由于智能合同实际上是直接操纵数字资产的程序，因此确保这些合同的正确性非常关键。不幸的是，人类程序员经常犯错误。智能合约中的编程错误和安全漏洞的后果尤为严重，往往会导致数千万美元的损失。采用的另一个挑战是性能问题。为了确保交易账簿的一致性，区块链系统中的一致性协议必须以缓慢的块生成来操作，以避免并发块(即分叉)，这被认为是对一致性安全有害的。因此，这些系统对智能合约的交易吞吐量非常有限。用户通常需要等待很长一段时间才能确认交易。为了应对安全挑战，我们建议设计一套新的工具来保护智能合同，将静态分析与运行时工具相结合。一种观察是，交易执行并不是区块链平台的瓶颈。相反，瓶颈首先在共识协议上，然后在区块链存储层。因此，运行时插装的开销对于其他域来说往往过于昂贵，实际上对于智能合同来说可以忽略不计。为了解决这一性能挑战，我们提出了一种新的一致性协议，该协议将块重新组织为有向无环图，以安全地合并并发块。该协议固有地编码了两种策略，一种是用于高性能的乐观策略，另一种是确保共识进展以阻止活跃性攻击的保守策略。我们还建议重新设计存储层和事务传播，以构建高性能的端到端区块链平台。如果拟议的研究取得成功，拟议的技术将使智能合同的开发明显更加安全。这些技术还将允许区块链平台以更高的吞吐量和更快的速度处理智能合同。拟议研究的最终目标是找到全面的解决方案，以释放智能合约技术的全部潜力。