Lumoz Introduces On-chain AI Agent Solution: TEE+ZK Dual Verification Architecture Leading Security Innovation

Source: Lumoz

Background

With the development of Web3, decentralized AI Agents have become a key application. These agents can autonomously operate without centralized servers, process user data, and interact with blockchain smart contracts. However, the openness and trustlessness of Web3 pose security challenges. AI Agents show potential in Web3, such as managing private keys, automated trading, and supporting DAO operations. However, their lack of trustworthiness and accountability deviates from core principles like decentralization and transparency, limiting their widespread use and hindering future development.

Current Status

Currently, most AI agents operate in untrusted environments, facing various security and transparency challenges. These agents often handle sensitive user data and perform critical tasks, but their operating environment lacks necessary safeguards, leading to potential risks such as data leaks, tampering with execution logic, or unverifiable computation results. Common assumed issues include:

· The agent's initialization process has not been tampered with

· Data provided by external APIs is secure and reliable

· Private keys are properly managed and cannot be leaked

· User inputs are not tampered with during transmission

Introducing TEE to Enhance Security

By default, all worker nodes are considered untrusted. Malicious workers may attempt the following improper behaviors:

· Eavesdropping on users' sensitive data;

· Providing incorrect computation results or not executing tasks at all;

· Lowering service quality, for example, by reducing computing power or blocking network connections.

To ensure the system's trustlessness, Lumoz relies on Secure Enclave (a trusted execution environment, similar to Intel SGX) and an innovative key management mechanism. The Secure Enclave provides the system with robust hardware security guarantees, primarily including the following features:

· Data Confidentiality: All in-memory data is encrypted;

· Runtime Integrity: Even if an attacker controls the operating system or physical device, the correctness of the execution process cannot be compromised;

· Remote Attestation: Users can verify remotely to ensure that hardware and software are running within a secure area.

Lumoz TEE Operating Principle

Lumoz aims to be the core processing platform for AI computing, playing a critical role in supporting scalable blockchain infrastructure. By integrating Trusted Execution Environment (TEE) technology, Lumoz can ensure the security and transparency of its computing processes. This innovative combination merges the decentralized advantage of blockchain with the robust security of TEE, allowing Lumoz to not only provide a decentralized cloud computing network but also efficiently execute various computing tasks in a trust-minimized environment.

Benefits of Introducing TEE

· Hardware-level Security: Hardware secure enclaves ensure privacy, confidentiality, and data integrity.

· No Computational Overhead: Applications running on TEE operate almost at the same speed as applications running in a normal CPU environment.

· Low Verification Cost: Gas consumption for verifying TEE proofs is minimal and only requires ECDSA verification.

TEE Implementation Effects

· Tamper-Resistant Data: Ensuring that user request/response data is not altered by intermediaries is crucial. This requires a secure communication channel and robust encryption mechanisms.

· Secure Execution Environment: Both hardware and software must be protected from attacks. This involves using TEE to provide an isolated environment for secure computation.

· Open Source and Reproducible Versions: The entire software stack, from the operating system to application code, must be reproducible. This allows auditors to verify the integrity of the system.

Verifiable Execution Results: The results of artificial intelligence computation must be verifiable to ensure that the output is trustworthy and has not been tampered with.

TEE (Intel SGX) Framework

TEE Server-Side Security Check

When the service starts, it will generate a signing key in the TEE.

1. You can obtain CPU and GPU attestation to verify if the service is running in a confidential VM within the TEE.

2. This attestation includes the public key of the signing key to prove that the key was generated in the TEE.

3. All inference results include a signature with the signing key.

4. You can use the public key to verify that all inference results were generated in the TEE.

TEE and ZK-SNARKs

We cannot guarantee that any single cryptographic system is 100% secure. Meanwhile, current Zero-Knowledge (ZK) solutions are theoretically secure but still cannot ensure error-free operation of the entire system, especially from an engineering perspective. Due to the complexity of ZK implementations, it remains challenging. This is where multi-proof systems come into play. To hedge against errors in ZK implementations, a hardware-based Trusted Execution Environment (TEE) can be used as a two-factor authenticator to provide dual security for ZK projects like AI Agents.

Core Architecture Design

Decentralized Root of Trust (DROT)

Decentralized Root of Trust (DROT) is a core element of the Trusted Execution Environment (TEE) trust chain. Ultimately, user validation relies on remote attestations signed by the CPU, which, in turn, rely on a set of hardware-stored keys for generation. The hardware components responsible for managing these root keys, validating the firmware and applications, and issuing remote attestations are collectively referred to as DROT.

Key Management Protocol

In the overall scheme design, key management follows the principle of least privilege, where the secret known to each entity in the system is strictly limited to the secrets required to perform its tasks.

TEE Domain Certificate

The certificate management module in the design of the scheme, serving as a reverse proxy for the application running in the network. It is worth noting that as part of the overall scheme, it runs in a TEE and is also governed by a smart contract.

Summary

In the TEE and ZK multiple proof architecture provided by Lumoz, the innovative solution combines the Trusted Execution Environment (TEE) and Zero-Knowledge Proof (ZK) to enhance the security, privacy, and verifiability of most AI Agents in an untrusted environment. By combining the hardware isolation capability of TEE with the cryptographic verification features of ZK, the solution effectively addresses data protection and execution transparency issues, aligning with the core principles of decentralization and transparency in Web3. This technical architecture not only enhances the trustworthiness and availability of AI Agents but also unleashes greater potential in various application scenarios as technology continues to improve and standardize.

For further developments, please follow the Lumoz website and social media.

This article is a contribution and does not represent the views of BlockBeats