Processing blockchain data based on smart contract operations executed in a trusted execution environment
Disclosed herein are methods, systems, and apparatus, including computer programs encoded on computer storage media, for processing blockchain data under a trusted execution environment (TEE). One of the methods includes receiving, by a blockchain node, a request to execute one or more software instructions in a TEE executing on the blockchain node; determining, by a virtual machine in the TEE, data associated with one or more blockchain accounts to execute the one or more software instructions based on the request; traversing, by the virtual machine, a global state of a blockchain stored in the TEE to locate the data; and executing, by the virtual machine, the one or more software instructions based on the data.
1. A computer-implemented method for processing blockchain data under a trusted execution environment (TEE), the method comprising:
receiving, by a blockchain node, a request to execute one or more software instructions in a TEE executing on the blockchain node;
identifying, by a virtual machine in the TEE based on the request, data associated with one or more blockchain accounts related to the execution of the one or more software instructions;
in response to identifying the data associated with the one or more blockchain accounts, traversing, by the virtual machine, a global state of a blockchain stored in the TEE to locate the data associated with the one or more blockchain accounts;
executing, by the virtual machine, the one or more software instructions based on the data, wherein the global state of the blockchain stored in the TEE is updated during execution of the one or more software instructions to produce an updated global state;
in response to executing the one or more software instructions, generating, by the blockchain node, an encrypted representation of the updated global state; and
storing, by the blockchain node, the encrypted representation of the updated global state in a storage location separate from the TEE.
2. The computer-implemented method of claim 1 , wherein the request includes one or more input parameters and is made to an interface function of the TEE.
3. The computer-implemented method of claim 1 , wherein the global state is stored in the TEE as a Merkle Patricia tree (MPT).
4. The computer-implemented method of claim 1 , wherein the global state includes a mapping between addresses and states of a plurality of blockchain accounts of the blockchain, and the plurality of blockchain accounts include one or more of externally owned accounts or contract accounts, and wherein each of the contracts accounts includes a storage root.
5. The computer-implemented method of claim 4 , wherein the storage root includes a hash of a root node of a Merkle Patricia tree (MPT), and wherein the MPT encodes a hash of storage content of a corresponding contract account.
6. The computer-implemented method of claim 5 , wherein an updated global state is produced by updating the MPT that encodes the hash of the storage content of the corresponding contract account.
7. The computer-implemented method of claim 1 , wherein the storage location separate from the TEE is associated with a cache or a database.
8. The computer-implemented method of claim 1 , wherein the request is received through an application programming interface associated with the TEE.
9. A non-transitory, computer-readable storage medium storing one or more instructions executable by a computer system to perform operations for processing blockchain data under a trusted execution environment (TEE), the operations comprising:
receiving, by a blockchain node, a request to execute one or more software instructions in a TEE executing on the blockchain node;
identifying, by a virtual machine in the TEE based on the request, data associated with one or more blockchain accounts related to the execution of the one or more software instructions;
in response to identifying the data associated with the one or more blockchain accounts, traversing, by the virtual machine, a global state of a blockchain stored in the TEE to locate the data associated with the one or more blockchain accounts;
executing, by the virtual machine, the one or more software instructions based on the data, wherein the global state of the blockchain stored in the TEE is updated during execution of the one or more software instructions to produce an updated global state;
in response to executing the one or more software instructions, generating, by the blockchain node, an encrypted representation of the updated global state; and
storing, by the blockchain node, the encrypted representation of the updated global state in a storage location separate from the TEE.
10. The non-transitory, computer-readable storage medium of claim 9 , wherein the request includes one or more input parameters and is made to an interface function of the TEE.
11. The non-transitory, computer-readable storage medium of claim 9 , wherein the global state is stored in the TEE as a Merkle Patricia tree (MPT).
12. The non-transitory, computer-readable storage medium of claim 9 , wherein the global state includes a mapping between addresses and states of a plurality of blockchain accounts of the blockchain, and the plurality of blockchain accounts include one or more of externally owned accounts or contract accounts, and wherein each of the contracts accounts includes a storage root.
13. The non-transitory, computer-readable storage medium of claim 12 , wherein the storage root includes a hash of a root node of a Merkle Patricia tree (MPT), and wherein the MPT encodes a hash of storage content of a corresponding contract account.
14. The non-transitory, computer-readable storage medium of claim 13 , wherein an updated global state is produced by updating the MPT that encodes the hash of the storage content of the corresponding contract account.
15. The non-transitory, computer-readable storage medium of claim 9 , wherein the storage location separate from the TEE is associated with a cache or a database.
16. The non-transitory, computer-readable storage medium of claim 9 , wherein the request is received through an application programming interface associated with the TEE.
17. A computer-implemented system, comprising:
one or more computers; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations for processing blockchain data under a trusted execution environment (TEE), the operations comprising:
receiving, by a blockchain node, a request to execute one or more software instructions in a TEE executing on the blockchain node,
identifying, by a virtual machine in the TEE based on the request, data associated with one or more blockchain accounts related to the execution of the one or more software instructions,
in response to identifying the data associated with the one or more blockchain accounts, traversing, by the virtual machine, a global state of a blockchain stored in the TEE to locate the data associated with the one or more blockchain accounts,
executing, by the virtual machine, the one or more software instructions based on the data, wherein the global state of the blockchain stored in the TEE is updated during execution of the one or more software instructions to produce an updated global state;
in response to executing the one or more software instructions, generating, by the blockchain node, an encrypted representation of the updated global state; and
storing, by the blockchain node, the encrypted representation of the updated global state in a storage location separate from the TEE.
18. The system of claim 17 , wherein the request includes one or more input parameters and is made to an interface function of the TEE.
19. The system of claim 17 , wherein the global state is stored in the TEE as a Merkle Patricia tree (MPT).
20. The system of claim 17 , wherein the global state includes a mapping between addresses and states of a plurality of blockchain accounts of the blockchain, and the plurality of blockchain accounts include one or more of externally owned accounts or contract accounts, and wherein each of the contracts accounts includes a storage root.
21. The system of claim 20 , wherein the storage root includes a hash of a root node of a Merkle Patricia tree (MPT), and wherein the MPT encodes a hash of storage content of a corresponding contract account.
22. The system of claim 21 , wherein an updated global state is produced by updating the MPT that encodes the hash of the storage content of the corresponding contract account.
23. The system of claim 17 , wherein the storage location separate from the TEE is associated with a cache or a database.
24. The system of claim 17 , wherein the request is received through an application programming interface associated with the TEE.