基于TrustZone的区块链智能合约隐私授权方法  

Blockchain smart contract privacy authorization method based on TrustZone

作　　者：陈璐瑀 马小峰[1] 何敬 龚生智 高建 CHEN Luyu;MA Xiaofeng;HE Jing;GONG Shengzhi;GAO Jian(College of Electronic and Information Engineering,Tongji University,Shanghai 201804,China;Wutong Chain Digital Technology Research Institute(Suzhou)Company Limited,Suzhou Jiangsu 215100,China;Office of Science and Technology Management,Yunnan Provincial Academy of Science and Technology,Kunming Yunnan 650100,China)

机构地区：[1]同济大学电子与信息工程学院,上海201804 [2]梧桐链数字科技研究院(苏州)有限公司,江苏苏州215100 [3]云南省科学技术院科技管理办公室,昆明650100

出　　处：《计算机应用》2023年第6期1969-1978,共10页journal of Computer Applications

基　　金：上海市科技创新行动计划项目(21511101503)。

摘　　要：为满足当代数字化背景下数据共享的需求,同时兼顾保护隐私数据安全的必要性,提出一种基于TrustZone的区块链智能合约隐私数据授权方法。区块链系统能够在不同应用场景中实现数据共享,并且满足监管的要求;TrustZone可信执行环境(TEE)技术则为隐私计算提供安全的隔离环境。在整体系统中,隐私数据的上传由监管机构完成,其余业务节点需要在获得用户授权的前提下,获得隐私数据的明文信息,从而保护用户的隐私安全。针对技术融合时TrustZone架构存在的内存空间较小的问题,提出一种针对小内存条件的隐私求交算法,其中,通过基于分组计算的思想完成对大数量级数据集合的求交运算。使用不同数量级大小的数据集测试所提算法,结果表明所提算法在时间与空间方面的消耗在极小范围内波动,方差分别约为1.0 s^(2)与0.01 MB^(2),较为稳定;当增大数据集数量级时,所提算法的时间消耗是可预期的;此外,使用事先排序的数据集能够大幅提高算法性能。To meet the needs of data sharing in the context of digitalization currently,and take into account the necessity of protecting private data security at the same time,a blockchain smart contract private data authorization method based on TrustZone was proposed.The blockchain system is able to realize data sharing in different application scenarios and meet regulatory requirements,and a secure isolation environment was provided by TrustZone Trusted Execution Environment(TEE)technology for private computing.In the integrated system,the uploading of private data was completed by the regulatory agency,the plaintext information of the private data was obtained by other business nodes only after obtaining the authorization of the user.In this way,the privacy and security of the user were able to be protected.Aiming at the problem of limited memory space in the TrustZone architecture during technology fusion,a privacy set intersection algorithm for small memory conditions was proposed.In the proposed algorithm,the intersection operation for large-scale datasets was completed on the basis of the grouping computing idea.The proposed algorithm was tested with datasets of different orders of magnitude.The results show that the time and space consumption of the proposed algorithm fluctuates in a very small range and is relatively stable.The variances are 1.0 s^(2) and 0.01 MB^(2) respectively.When the order of magnitudes of the dataset is increased,the time consumption is predictable.Furthermore,using a pre-sorted dataset can greatly improve the algorithm performance.

关 键 词：区块链 智能合约 可信执行环境 TRUSTZONE 隐私求交 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]