Program execution and data proof scheme using multiple key pair signatures

A non-transitory, computer-readable storage medium storing one or more instructions executable by a computer system to perform operations comprising:

• transmitting a registration request to a node to register a sub-logic code with a trusted program within a trusted execution environment (TEE), the node executing the trusted program within the TEE, the registration request comprising the sub-logic code and an identifier identifying the sub-logic code, and the sub-logic code comprising computer-executable code for execution by the trusted program;
• receiving a registration result from the trusted program, the registration result comprising a public code key of the sub-logic code;
• verifying the registration result using a digital signature of the trusted program and a public key of the trusted program, the digital signature of the trusted program being generated using a private key of the trusted program, the public key and the private key of the trusted program being generated as a key pair during an attestation of the trusted program;
• transmitting a request to the node, the request comprising the identifier identifying the sub-logic code and one or more request parameters;
• receiving a response to the request, the response comprising result data and a digital signature, the result data being generated by processing of the one or more request parameters using the sub-logic code within the TEE, and the digital signature being generated using a private code key of the sub-logic code;
• and
• verifying the result data using the digital signature and the public code key of the sub-logic code.

A computer-implemented system, comprising:

• one or more computers;
• and
• one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
• transmitting, by a client device, a registration request to a node to register a sub-logic code with a trusted program within a trusted execution environment (TEE), the node executing the trusted program within the TEE, the registration request comprising the sub-logic code and an identifier identifying the sub-logic code, and the sub-logic code comprising computer-executable code for execution by the trusted program;
• receiving, by the client device, a registration result from the trusted program, the registration result comprising a public code key of the sub-logic code;
• verifying, by the client device, the registration result using a digital signature of the trusted program and a public key of the trusted program, the digital signature of the trusted program being generated using a private key of the trusted program, the public key and the private key of the trusted program being generated as a key pair during an attestation of the trusted program;
• transmitting a request to the node, the request comprising the identifier identifying the sub-logic code and one or more request parameters;
• receiving a response to the request, the response comprising result data and a digital signature, the result data being generated by processing of the one or more request parameters using the sub-logic code within the TEE, and the digital signature being generated using a private code key of the sub-logic code, and
• verifying the result data using the digital signature and the public code key of the sub-logic code.