Enabling Strong Database Integrity using Trusted Execution Environments

01/05/2018
by   Kai Mast, et al.
0

Immutable and consistent sharing of data across organization boundaries enabl es a new class of applications. Because conventional datastores cannot provide this functionality, blockchain s have been proposed as one possible solution. Yet public blockchains are energy inefficient, hard to scale and suffer from limited throughput and high latencies, while permissioned blockchains depend on specially designated nodes, potentially le ak meta-information, and also suffer from scale and performance bottlenecks. This paper presents CreDB, a datastore that provides blockchain-like guarante es of integrity using trusted execution environments. CreDB employs three novel mechanisms to support a new class of applications. First, it creates a permanent record of every transaction, known as a witness , that clients can then use not only to audit the database, but to prove to thi rd parties that desired actions took place. Second, it associates with every object an inseparable and inviolable securit y policy, which not only performs access control but enables the datastore to i mplement state machines whose behavior is amenable to analysis. Finally, CreDB provides a protected function evaluation mechanism that allows integrity-protected computation over private data. The paper describes these mechanisms, and the applications they collectively enable, in detail. We have fully implemented CreDB on Intel SGX. Evaluation shows that these new mechanisms do not adversely affect performance.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
05/22/2018

Blockchain and Trusted Computing: Problems, Pitfalls, and a Solution for Hyperledger Fabric

A smart contract on a blockchain cannot keep a secret because its data i...
research
08/21/2020

Spitz: A Verifiable Database System

Databases in the past have helped businesses maintain and extract insigh...
research
04/17/2019

Truxen: A Trusted Computing Enhanced Blockchain

Truxen is a Trusted Computing enhanced blockchain that uses Proof of Int...
research
08/07/2018

GEEC: Scalable, Efficient, and Consistent Consensus for Blockchains

Blockchain technology has the potential to deploy broad decentralized ap...
research
06/08/2020

Distributed Attribute-Based Access Control System Using a Permissioned Blockchain

Auditing provides an essential security control in computer systems, by ...
research
09/04/2019

A Tale of Two Trees: One Writes, and Other Reads. Optimized Oblivious Accesses to Large-Scale Blockchains

The Bitcoin network has offered a new way of securely performing financi...
research
10/11/2019

SADAN: Scalable Adversary Detection in Autonomous Networks

Autonomous collaborative networks of devices are emerging in numerous do...

Please sign up or login with your details

Forgot password? Click here to reset