English

应用科学学报 ›› 2021, Vol. 39 ›› Issue (1): 17-28.doi: 10.3969/j.issn.0255-8297.2021.01.002

• 区块链 • 上一篇    

基于SGX的区块链交易隐私安全保护方法

范俊松1, 陈建海1, 沈睿1, 刘振广3, 何钦铭1, 黄步添1,2   

  1. 1. 浙江大学 计算机科学与技术学院, 浙江 杭州 310027;
    2. 杭州云象网络技术有限公司, 浙江 杭州 310012;
    3. 浙江工商大学 计算机与信息工程学院, 浙江 杭州
  • 收稿日期:2020-11-12 发布日期:2021-02-04
  • 通信作者: 陈建海,副教授,研究方向为区块链安全。E-mail:chenjh919@zju.edu.cn E-mail:chenjh919@zju.edu.cn
  • 基金资助:
    国家重点研发计划基金（No.2017YFB1401304）；浙江省重点研发计划基金（No.2019C01055）资助

SGX-Based Approach for Blockchain Transactions Security and Privacy Protection

FAN Junsong1, CHEN Jianhai1, SHEN Rui1, LIU Zhenguang3, HE Qinming1, HUANG Butian1,2   

  1. 1. College of Computer Science and Technology, Zhejiang University, Hangzhou 310027, Zhejiang, China;
    2. Hangzhou Yunphant Network Technology Co. Ltd., Hangzhou 310012, Zhejiang, China;
    3. School of Computer and Information Engineering, Zhejiang Gongshang University, Hangzhou 310018, Zhejiang, China
  • Received:2020-11-12 Published:2021-02-04

PDF

338

摘要： 与传统支付方式相比，区块链具有去中心化和隐私保护的优势，但涉及轻量型客户端交易的隐私安全性和用户友好性时仍存在问题。为此，提出了一种可以为区块链交易过程提供隐私保护的系统——SGXTrans。SGXTrans在轻量型客户端的设计框架上运用因特尔的软件防护扩展（software guard executions，SGX）技术，将用户密钥、生成用户地址等密码学数据和操作以及区块链交易过程中敏感的隐私信息处理过程放置于SGX安全区加以保护。为了隐藏本地数据存储过程的数据访问模式，SGXTrans还引入了茫然随机访问机算法以防止隐私信息被恶意攻击者间接推断。基于现有区块链网络进行的实验结果表明：SGXTrans能在低于10%的性能开销下确保隐私安全性与用户友好性。

关键词: 区块链, 可信执行环境, 软件防护扩展, 隐私和安全

Abstract: Compared to traditional payment, blockchain has the advantages of decentralization and privacy protection, while there are still issues with the privacy and security of transactions involving lightweight clients and with the user-friendliness of blockchain systems. This paper proposes SGXTrans, a system that can provide privacy protection for blockchain transaction. On the framework of lightweight clients, as SGXTrans creates a service, it uses Intel software guard extensions (SGX) to protect sensitive privacy information by putting them into the SGX enclave, including cryptographic data and operations such as the user key, the generation of user addresses, and the process of blockchain transactions. To hide the access patterns of local data storage processes, SGXTrans also introduces oblivious random access machine (ORAM) algorithm to prevent privacy information from being indirectly inferred by malicious attackers. Experiments based on the existing blockchain networks show that SGXTrans can provide better user-friendliness and higher security with a performance overhead less than 10%.

Key words: blockchain, trust execution environment, software guard executions (SGX), privacy and security

中图分类号: