The Good Tech Companies - Lumoz Unveils TEE+ZK Multi-Proof for On-chain AI Agent

Episode Date: January 10, 2025

This story was originally published on HackerNoon at: https://hackernoon.com/lumoz-unveils-teezk-multi-proof-for-on-chain-ai-agent. AI Agents demonstrate potential in Web3 applications, such as managing private keys, automating transactions, and supporting DAO operations. Check more stories related to tech-stories at: https://hackernoon.com/c/tech-stories. You can also check exclusive content about #ai-evaluation, #lumoz, #ai-agents, #tee-zk, #on-chain-ai-agent, #lumoz-tee, #trusted-execution-environment, #good-company, and more. This story was written by: @lumoz. Learn more about this writer by checking @lumoz's about page, and for more stories, please visit hackernoon.com. decentralized AI Agents have emerged as a key application. Lumoz aims to be the core processing platform for AI computation. By integrating Trusted Execution Environment (TEE) technology, Lumoz ensures the security and transparency of its computational processes.

This audio is presented by Hacker Noon, where anyone can learn anything about any technology. Lumos unveils T plus ZK multi-proof for on-chain AI agent. By Lumos, formerly Opside. Hash hash background with the development of Web3, decentralized AI agents have emerged as a key application. These agents operate autonomously without relying on centralized servers, handling user data and interacting with blockchain smart contracts. However, the openness and trustless nature of Web3 pose significant security challenges. AI agents demonstrate potential in Web3 applications,

such as managing private keys, automating transactions, and supporting DAO operations. Yet, their shortcomings in trustworthiness and accountability deviate from core principles like decentralization and transparency. This limits their broader adoption and hinders future development. Current state. At present, most AI agents operate in untrusted environments, facing numerous challenges in terms of security and transparency. These agents often handle sensitive user data and perform critical tasks, yet their operating environments lack the necessary safeguards. This exposes them to risks such as data leaks, tampering with execution logic, or unverifiable computation results.

Commonly assumed issues include the agent's initialization process is untampered, data provided by external APIs is secure and reliable. Private keys are properly managed and cannot be leaked. User input remains uncompromised during transmission. Introducing T to enhance security. By default, all worker nodes are considered untrusted. Malicious workers may attempt the following improper actions. Accessing sensitive user data. Providing incorrect computation results or failing to execute tasks entirely, degrading service quality, such as reducing computational capacity or disrupting network connections. To ensure a trustless system, Lumos leverages Secure Enclave

trusted execution environment, similar to Intel SGX, and an innovative key management mechanism. Secure Enclave provides robust hardware security guarantees, including the following features data confidentiality. All memory data is encrypted. Execution integrity. Even if an attacker gains control of the operating system or physical device, the correctness of the execution process remains intact. Remote attestation. Users can verify remotely that both hardware and software are operating within a secure environment. How Lumos T works. Lumos aims to be the core processing platform for AI computation, playing a critical role in

supporting scalable blockchain infrastructure. By integrating Trusted Execution Environment T technology, Lumos ensures the security and transparency of its computational processes. This innovative combination merges the decentralization strengths of blockchain with the robust security of T, enabling Lumos to deliver not only a centralized cloud computing network but also the ability to efficiently execute various computational tasks in a trust-minimized environment. NBENEFITS of introducing T hardware-level security. The secure hardware enclave ensures privacy, confidentiality, and data integrity. No computational overhead.

Applications running in T operate at nearly the same speed as those in a standard CPU environment. Low verification costs. Verifying T proofs consumes minimal gas, requiring only ECDSA verification. T-implementation outcomes tamper proof data. Ensures that user request response data cannot be altered by intermediaries. This requires secure communication channels and robust encryption mechanisms. Secure execution environment. Both hardware and software must be protected from attacks, leveraging T to create an isolated environment for secure

computation. Open source and reproducible versions. The entire software stack, from the operating system to application code, must be reproducible. This allows auditors to verify the system's integrity. Verifiable execution results. AI computation results must be verifiable to ensure that outputs are trustworthy and untampered. T. Intel SGX, Framework, NTE server security verification When the service starts, it generates a signing key within the T. 1. You can obtain CPU and GPU attestations to verify that the service is running within a confidential VM in T-Mode. Backslash dot.

2. The attestation includes the public key of the signing key, proving that the key was generated within the T. Backslash dot. 3. All inference results are signed using the signing key. Backslash dot. 4. You can use the public key to verify that all inference results were generated within the T. T and ZK multi-proof. No single cryptographic system can be guaranteed to be 100% secure. While current zero-knowledge, ZK, solutions are theoretically secure, they cannot ensure flawless operation across the entire system, especially from an engineering perspective, given the complexity of ZK implementations. This is where multi-proof

systems come into play. To mitigate potential errors in ZK implementations, hardware-based solutions like Trusted Execution Environments, T, can act as a dual-factor verifier, providing an additional layer of security for ZK-based projects such as AI agents. Core architecture design, decentralized root of trust, DROT, decentralized root of trust, DROT, is a core component of the trusted execution environment, T, trust chain. Ultimately, user verification relies on remote proofs signed by the CPU, which depend on a set of hardware stored keys for generation. The hardware components responsible for managing these root keys, verifying firmware and applications,

and issuing remote proofs are collectively referred to as DRAT. NKEY management protocol and the overall design, key management follows the principle of least privilege, meaning that the secrets known by each entity are strictly limited to what is necessary to perform its specific task. T-controlled domain certificates in the solution design, the certificate management module serves as a reverse proxy for applications running on the network. It is important to note that Aspert of the overall solution, it operates within the T and is managed by smart contracts. Conclusion. The T and ZK multi-proof architecture provided by Lumos combines trusted execution environment, T, with zero knowledge

proofs, ZK, to create a multi-layered security framework. This innovative solution addresses the safety, privacy, and verifiability challenges faced by most AI agents in untrusted environments. By integrating T's hardware isolation capabilities with ZK's cryptographic verification features, the technology effectively resolves issues related to data protection and execution transparency. This aligns with the core principles of decentralization and transparency inherent to Web3. This architectural approach enhances the trustworthiness and usability of AI agents, unlocking greater potential as technology continues to evolve and standardize. For more updates, visit the Lumos website, https colon slash slash Lumos.org, and social media, https colon slash slash x.com, Lumos.org. Thank you for listening to this HackerNoon story,

read by Artificial Intelligence. Visit HackerNoon.com to read, write, learn and publish.