TEE-based privacy protection distributed account book auditing method and system

Abstract

The invention discloses a privacy protection distributed account book auditing method and system based on TEE, and the method comprises the steps: firstly selecting a proper service provider by a customer, and registering as a legal user; in order to process a user service request, a service provider successfully runs a transaction verification program in a trusted execution environment after being authorized by a supervisor; before a service request is initiated, a user reads the latest state of the distributed account book and obtains confidential information to which the user belongs; the user anonymously obtains the latest identity certificate from the supervisor; and the user requests the service provider for the available trusted execution environment, and finally, the user sends an identity certificate and a transaction request to the trusted execution environment to complete the transaction. In an auditing link, an auditor describes an auditing task by using an executable file, and if a supervisor approves auditing, the auditor can obtain an auditing result but cannot access the auditing process. According to the method, the efficient and generalized auditing function can be realized on the premise of fully protecting the privacy of the user.

Description

technical field [0001] The invention belongs to the technical field of distributed ledgers, and in particular relates to a TEE-based privacy protection distributed ledger audit method and system. Background technique [0002] Audit generally refers to the inspection or review of a specific process, quality system or compliance, which plays an irreplaceable role in deterring or exposing illegal and fraudulent behavior, and is also one of the main means to solve the "information asymmetry" dilemma. one. For example, financial regulators in major economies around the world generally require listed companies to regularly disclose audited financial reports to investors and other stakeholders to protect stakeholders from major economic losses. The emergence of distributed ledger technology (such as blockchain technology, etc.) has brought about a turning point for the auditing work. Its record cannot be tampered with, which can effectively prevent the data to be audited from bein...

AI Technical Summary

Problems solved by technology

[0003] However, compliance auditing of distributed ledgers often faces the following challenges: 1) The degree of protection of user privacy is insufficient. In order to ensure that auditors complete the audit tasks correctly, auditors may have access to user data beyond the necessary level; 2) The limitations of the audit function, when the user data is encrypted, the audit work under privacy protection is often only applicable to specific audit categories, and has no general value; 3) Audit efficiency is low, and audit work under privacy protection often relies on zero For complex calculations such as knowledge proof, the audit efficiency cannot adapt to the data volume in the era of big data

Existing solutions still do not solve this type of problem

Images