Trusted Execution Environments (TEEs) have emerged as a critical technology for safeguarding sensitive data and ensuring code integrity in modern computing systems. However, relying on a single TEE implementation makes systems vulnerable to a central point of attack. Building distributed-trust systems leveraging heterogeneous TEEs helps disperse trust but still faces threats from centralized management and adaptive mobile adversaries. To address these challenges, this paper introduces TeeDAO, a novel three-layer framework that automatically organizes multiple heterogeneous TEE instances and provides unified interfaces to support diverse applications, while ensuring long-term guarantees of availability, integrity, and confidentiality. TeeDAO couples BFT-ordered governance with heterogeneity-aware Distributed Proactive Secret Sharing (DPSS) and Secure Multi-Party Computation (MPC) so that attestation-driven committee changes are consistently reflected in secret recovery, resharing, and computation across a dynamic committee of heterogeneous TEEs. We implement a prototype of TeeDAO, integrating COBRA's DPSS scheme with the HotStuff BFT consensus protocol, and adapt it for Intel SGX, TDX, and Hygon CSV. Evaluations demonstrate that TeeDAO achieves up to 1.8x higher key-value store throughput in a large cluster with 61 nodes compared to state-of-the-art systems, efficient autonomous management, and minimal computation overhead (<18%) for multi-party computation tasks.

翻译：可信执行环境（TEE）已成为现代计算系统中保护敏感数据和确保代码完整性的关键技术。然而，依赖单一TEE实现会令系统面临单点攻击风险。利用异构TEE构建分布式信任系统有助于分散信任，但仍面临集中式管理和自适应移动对手的威胁。为应对这些挑战，本文提出TeeDAO——一种新颖的三层框架，可自动组织多个异构TEE实例并提供统一接口以支持多样化应用，同时确保可用性、完整性和机密性的长期保障。TeeDAO将BFT排序治理与异构感知的分布式主动秘密共享（DPSS）及安全多方计算（MPC）相结合，使得基于认证的委员会变更能够一致地反映在跨异构TEE动态委员会的密钥恢复、重新共享与计算过程中。我们实现了TeeDAO原型，将COBRA的DPSS方案与HotStuff BFT共识协议集成，并适配至Intel SGX、TDX及Hygon CSV。评估表明，在含61节点的大型集群中，TeeDAO的键值存储吞吐量相比现有最优系统提升达1.8倍，具备高效的自治管理能力，且多方计算任务的计算开销极低（<18%）。