Enforcing Security and Privacy in Distributed Ledgers by Intel SGX

摘要

Distributed Ledger Technology (DLT) utilizes an architecture that can host a large number of nodes without pre-established trust to provide decentralized services. The blockchain is the most widely used architecture of distributed ledger, where transactions across the whole network are visible to all participants in a chain to prevent tampering. However, transactions may contain sensitive information such as business contract. To secure the system and protect user privacy, we propose a multi-channel architecture that leverages Intel Software Guard Extensions (SGX). We illustrate how SGX capabilities help to defend against attacks on distributed ledgers, by way of SGX enforcement on the participating machines. We adopt the design and implementation of a two layer architecture for securing the blockchain mining process and enhancing the transaction privacy. The security analysis and performance evaluation show that the design and protocols are capable of protecting privacy, defending against adversarial attacks and scalable.