Query Authentication Using Intel SGX for Blockchain Light Clients  

作　　者：邵奇峰 张召 金澈清 周傲英 Qi-Feng Shao;Zhao Zhang;Che-Qing Jin;Ao-Ying Zhou(School of Data Science and Engineering,East China Normal University,Shanghai 200062,China;School of Software,Zhongyuan University of Technology,Zhengzhou 450007,China)

机构地区：[1]School of Data Science and Engineering,East China Normal University,Shanghai 200062,China [2]School of Software,Zhongyuan University of Technology,Zhengzhou 450007,China

出　　处：《Journal of Computer Science & Technology》2023年第3期714-734,共21页计算机科学技术学报（英文版）

基　　金：supported by the National Key Research and Development Program of China under Grant No.2021YFB-2700100;the National Natural Science Foundation of China under Grant Nos.U1911203,U1811264 and 61972152.

摘　　要：Due to limited computing and storage resources,light clients and full nodes coexist in a typical blockchain system.Any query from light clients must be forwarded to full nodes for execution,and light clients verify the integrity of query results returned.Since existing verifiable queries based on an authenticated data structure(ADS)suffer from significant network,storage and computing overheads by virtue of verification objects(VOs),an alternative way turns to the trusted execution environment(TEE),with which light clients do not need to receive or verify any VO.However,state-of-the-art TEEs cannot deal with large-scale applications conveniently due to the limited secure memory space(e.g.,the size of the enclave in Intel SGX(software guard extensions),a typical TEE product,is only 128 MB).Hence,we organize data hierarchically in trusted(enclave)and untrusted memory,along with hot data buffered in the enclave to reduce page swapping overhead between two kinds of memory.The cost analysis and empirical study validate the effectiveness of our proposed scheme.The VO size of our scheme is reduced by one to two orders of magnitude compared with that of the traditional scheme.

关 键 词：blockchain query authentication Merkle B-tree(MB-tree) Intel software guard extensions(SGX) 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]