신뢰실행환경(TEE) 기반의 블록체인 오프라인 결제 프로토콜
Trusted Execution Environment (TEE)-Based Blockchain Offline Payment Protocol
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
본 논문에서는 블록체인 기반 오프라인 결제를 위한 TEE-BOP(Trusted Execution Environment-Based Blockchain Offline Payment) 프로토콜을 제안한다. TEE-BOP는 신뢰실행환경(TEE) 내에서 오프라인 잔액을 안전하게 관리하고, 머클 트리를 활용해 블록체인에 기록된 초기 입금 증명을 효율적으로 검증한다. 또한, TEE Attestation을 통해 생성된 키와 시스템의 신뢰성을 보장함으로써, 오프라인 환경에서도 안전하고 무결한 거래를 가능하게 한다. 기존 연구와 달리, TEE-BOP는 중앙 기관에 대한 의존성을 제거하고 이상적인 모델을 가정하지 않음으로써, 실제 환경에서의 적용 가능성을 높였다. 본 프로토콜은 다층적 방어 메커니즘으로 이중 지불 문제를 해결하고, 수취인이 TEE와 블록체인 간의 데이터 일치를 직접 검증하는 방식으로 위조 방지 문제를 해결한다. 이를 통해 네트워크 인프라가 불안정한 지역에서도 신뢰성 있는 블록체인 기반 오프라인 결제를 가능하게 한다. 이는 본 연구가 블록체인 기술의 적용 범위를 확장하고, 개발도상국이나 재난 상황에서의 금융 서비스 접근성 향상에 기여할 수 있음을 보여준다.
Abstract
This paper proposes the TEE-BOP (Trusted Execution Environment-Based Blockchain Offline Payment) protocol for blockchain-based offline payments. TEE-BOP securely manages offline balances within a Trusted Execution Environment (TEE) and efficiently verifies initial deposit proofs recorded on the blockchain using Merkle trees. Additionally, it ensures secure and tamper-proof transactions in offline environments by guaranteeing the reliability of keys and the system through TEE Attestation. Unlike previous studies, TEE-BOP enhances real-world applicability by eliminating dependence on central authorities and avoiding assumptions of ideal models. The protocol solves the double-spending problem through multi-layered defense mechanisms and addresses forgery prevention by allowing recipients to directly verify data consistency between the TEE and the blockchain. This enables reliable blockchain-based offline payments in areas with unstable network infrastructure. It demonstrates that this research can expand the application of blockchain technology and contribute to improving access to financial services in developing countries or disaster situations.
참고문헌 (31)
- S. Nakamoto, "Bitcoin: A peer-to-peer electronic cash system" (2008)
- World Bank, "Global Findex Database 2017: Measuring Financial Inclusion and the Fintech Revolution" (2018), World Bank Publications
- D. Chaum, "Untraceable electronic cash", Advances in Cryptology, CRYPTO ’88, pp.319~327 (1990)
- U. Bodkhe, "Blockchain for industry 4.0: A comprehensive review", IEEE Access, 8, pp.79764~79800 (2020)
- Intel SGX explained, "V. Costan", ~, pp.Cryptology ePrint Archive, Paper 2016 (2016), 086
- R. C. Merkle, "A digital signature based on a conventional encryption function", Advances in Cryptology, CRYPTO ’87, pp.369~378 (1988)
- J. Camenisch, "Compact e-cash", EUROCRYPT 2005, pp.302~321 (2005)
- S. Brands, "Untraceable off-line cash in wallet with observers", Advances in Cryptology, CRYPTO ’93, pp.302~318 (1993)
- J. Poon, "The bitcoin lightning network: Scalable off-chain instant payments" (2016)
- V. Buterin, "A next-generation smart contract and decentralized application platform" (2014)
- National Institute of Standards and Technology, "Secure Hash Standard (SHS)", FIPS PUB 180-4, ~ (2015)
- ARM Limited, "ARM security technology:Building a secure system using TrustZone technology", PRD29-GENC-009492C, ~ (2009)
- A. Dmitrienko, "Secure wallet-assisted offline bitcoin payments with double-spender revocation", Proceedings of the 2017ACM on Asia Conference on Computer and Communications Security, pp.520~531 (2017)
- W. Jie, "A secure and flexible blockchain-based offline payment protocol", IEEE Transactions on Computers, 73(2), pp.408~421 (2024)
- S. Pinto, "Demystifying arm trustzone : A comprehensive survey", ACM Computing Surveys, 51(6), pp.1~36 (2019)
- N. Ferguson, "Cryptography Engineering:Design Principles and Practical Applications" (2011), John Wiley & Sons
- H. Armelius, "On the possibility of a cash-like CBDC", Sveriges Riksbank Staff memo, ~ (2021)
- W. A. Arbaugh, "A secure and reliable bootstrap architecture", Proceedings. 1997 IEEE Symposium on Security and Privacy (Cat. No. 97CB36097), pp.65~71 (1997)
- A. M. Azab, "Hypervision across worlds: Real-time kernel protection from the ARM TrustZone secure world", Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, pp.90~102 (2014)
- E. Ben-Sasson, "Succinct non-interactive zero knowledge for a von Neumann architecture", 23rd USENIX Security Symposium, pp.781~796 (2014)
- B. Bünz, "Bulletproofs: Short proofs for confidential transactions and more", 2018IEEE Symposium on Security and Privacy, pp.315~334 (2018)
- "Ethereum block count and rewards chart" (2024)[URL]
- W. Liu, "State of the Art : Secure Mobile Payment", IEEE Access, 8, pp.13898~13914 (2020)
- S.K. Bukasa, "How TrustZone could be bypassed:Side-channel attacks on a modern system-on-chip", 11th IFIP International Conference on Information Security Theory and Practice, pp.93~109 (2017)
- GlobalPlatform, "Introduction to trusted execution environments" (2018), GlobalPlatform, Inc
- C. Gomez, "Overview and evaluation of Bluetooth Low Energy : An emerging low-power wireless technology", Sensors, 12(9), pp.11734~11753 (2012)
- A. Muñoz, "A survey on the (in)security of trusted execution environments", Computers & Security, 129 (2023)
- Q. Ge, "A survey of microarchitectural timing attacks and countermeasures on contemporary hardware", Journal of Cryptographic Engineering, 8, pp.1~27 (2018)