Alipay (Hangzhou) Information Technology Co., Ltd.

Alibaba Group Holding Limited

Advanced New Technologies Co., Ltd.

Alipay Information Technology Co., Ltd.

Xiaojian Liu

Shoumeng Yan

Zongmin Gu

One or more implementations of the present specification provide a method and apparatus for securely entering a trusted execution environment in a hyper-threading scenario. The method can include: in response to that a logical processor running on a physical processor core generates a trusted execution environment entry event through an approach provided by a virtual machine monitor, labeling the logical processor with a state of expecting to enter a trusted execution environment; and in response to determining that all logical processors corresponding to the physical processor core are labeled with the state of expecting to enter a trusted execution environment, separately controlling each one of the logical processors to enter a trusted execution environment built on the physical processor core. In either a privacy blockchain scenario or other privacy protection scenarios, the solution above can allow the hyper-threading technology to be enabled to improve computing efficiency while ensuring that a trusted application exclusively occupies a physical processor core to avoid a risk of privacy leakage.

Method and apparatus for securely entering trusted execution environment in hyper- threading scenario

Embodiments of this specification provide transaction confirmation methods and apparatuses. An example method includes: in response to detecting an event indicating that one of multiple nodes has persistently stored a batch of transactions or executed transactions of a subbatch of transactions, determining a current latest subbatch of subbatches of transactions for which the multiple nodes have confirmed; determining a target subbatch according to the current latest subbatch; determining a first quantity of the multiple nodes that have generated execution results that are consistent with an execution result of the target subbatch; determining a second quantity of the multiple nodes that have persistently stored a target batch to which the target subbatch belongs; and in response to the first quantity and the second quantity both meeting a consensus fault tolerance, determining that transactions in the target subbatch are confirmable transactions.

Transaction confirmation methods and apparatuses in blockchain network

Implementations of the present specification provide a method and an apparatus for obtaining a number for a transaction-accessed variable in parallel in a blockchain. The method includes: for a first variable in a first transaction, calculating a hash value m corresponding to a variable name of the first variable, the hash value m being a value in pre-determined M values; performing the following atomic operation on an mbit in a bitmap in a shared memory: reading a current first value of the mbit, setting the mbit to 1, and returning the first value, the bitmap having M bits, and initial values of the M bits being 0; in response to the first value being 0, obtaining a first number uniquely corresponding to the first variable, the first number being a value in pre-determined N values, and N being less than M; and setting a value of an melement in a mapping array in the shared memory based on the first number, the mapping array including a total of M elements.

Method and apparatus for obtaining number for transaction-accessed variable in blockchain in parallel

Implementations of the present specification provide a method and an apparatus for grouping transactions in a blockchain. The method includes: obtaining a first transaction in multiple transactions; obtaining a first variable accessed in the first transaction; reading a first value of a first belonging variable corresponding to the first variable; reading a first value of a first associated variable corresponding to the first transaction; if the first value of the first belonging variable is a numbering value of a second transaction in the multiple transactions, recording an association relationship between the first transaction and the second transaction in the associative array by performing an atomic comparative change operation on an atomic variable in an associative array; and grouping the multiple transactions based on the associative array.

Method and apparatus for grouping transactions in blockchain

Disclosed herein are methods, devices, and apparatuses, including computer programs stored on computer-readable media, for executing applications. One of the methods includes: establishing an enclave in a first physical processing unit of a processor; recording a first trust declaration declared by a first application, the first trust declaration declaring whether the first application trusts any application to execute with the first application on the first physical processing unit; assigning the first application to a first logical processing unit hosted on the first physical processing unit; providing a set of enclave entry instructions for the first logical processing unit to execute, to cause the first logical processing unit to enter the enclave when a predefined entering condition is satisfied; and providing a set of enclave exit instructions for the first logical processing unit to execute, to cause the first logical processing unit to exit the enclave when a predefined exiting condition is satisfied.

Methods and devices for executing trusted applications on processor with support for protected execution environments

Implementations of the present specification are provided for interpreting a bytecode instruction stream. An interpreter of a virtual machine receives an instruction stream comprising a plurality of machine instructions. A first value, comprising a current analog function address and stored in a first register corresponding to a current instruction of the plurality of machine instructions, is read. The validity of the first value is determined. If the first value is valid, the first value is stored in a second register configured to store current analog function addresses corresponding to current instructions in the instruction stream. A subsequent analog function address corresponding to a subsequent instruction associated with the current instruction is retrieved by using the current analog function address. The subsequent analog function address is stored in the first register. The current instruction is executed based on the current analog function address read from the second register.

Growing community of inventors

Zhejiang, China

Xiaojian Liu