Payment channel hub (PCH), by leveraging a powerful hub to reliably provide off-chain payment services, offers an effective enhancement to payment channel networks (PCNs). However, existing approaches typically rely on a single hub to relay transactions and provide relationship anonymity between participants. This design lacks flexibility under high-frequency transaction scenarios and fail to adequately balance the security of off-chain payments with PCH efficiency. Moreover, current PCNs often adopt source routing, where each transaction path is predetermined without considering the dynamic distribution of large-scale payment requests, leading to load imbalance and even transaction deadlocks. To address these issues, we propose SHARE, a multi-PCH distributed routing scheme based on trusted execution environments (TEE), designed to optimize secure hub allocation and routing efficiency in PCNs. For the multi-hub allocation problem, SHARE balances the management and synchronization costs among participants, and employs mixed-integer linear programming along with supermodular optimization techniques to transform the NP-hard problem into a solvable form, enabling optimal or approximate solutions across various PCN scales. At the routing layer, SHARE integrates global network state with local sender requests to design a TEE-assisted, privacy-preserving distributed routing protocol that dynamically adjusts multipath flow rates, achieving high-throughput and deadlock-free transaction forwarding. We formally prove the security of the SHARE protocol under the universally composable framework. Experimental results demonstrate that SHARE achieves a 43.6% improvement in transaction success ratio and an over 181.5% enhancement in system throughput compared to state-of-the-art PCN solutions, effectively realizing a secure extension of PCNs.
翻译:支付通道枢纽(PCH)通过利用强大的枢纽可靠地提供链下支付服务,为支付通道网络(PCNs)提供了有效的增强。然而,现有方法通常依赖单一枢纽来中继交易并提供参与者之间的关联匿名性。这种设计在高频交易场景下缺乏灵活性,且未能充分平衡链下支付的安全性与PCH效率。此外,当前的PCNs常采用源路由,即每条交易路径预先确定而未考虑大规模支付请求的动态分布,导致负载不均衡甚至交易死锁。为解决这些问题,我们提出了SHARE,一种基于可信执行环境(TEE)的多PCH分布式路由方案,旨在优化PCNs中的安全枢纽分配与路由效率。针对多枢纽分配问题,SHARE平衡了参与者间的管理与同步成本,并采用混合整数线性规划与超模优化技术,将NP难问题转化为可解形式,从而在不同规模的PCN中实现最优或近似解。在路由层,SHARE将全局网络状态与本地发送方请求相结合,设计了一种TEE辅助的、保护隐私的分布式路由协议,动态调整多路径流量速率,实现高吞吐且无死锁的交易转发。我们在通用可组合框架下形式化证明了SHARE协议的安全性。实验结果表明,与最先进的PCN解决方案相比,SHARE在交易成功率上提升了43.6%,系统吞吐量提高了超过181.5%,有效实现了PCNs的安全扩展。