CN110348830A - A kind of network system based on block chain, authentication method, equipment and storage medium - Google Patents

A kind of network system based on block chain, authentication method, equipment and storage medium Download PDF

Info

Publication number
CN110348830A
CN110348830A CN201910535948.XA CN201910535948A CN110348830A CN 110348830 A CN110348830 A CN 110348830A CN 201910535948 A CN201910535948 A CN 201910535948A CN 110348830 A CN110348830 A CN 110348830A
Authority
CN
China
Prior art keywords
node
information
application
transaction
transaction processing
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201910535948.XA
Other languages
Chinese (zh)
Other versions
CN110348830B (en
Inventor
单志广
何亦凡
高鹏
邢皓
谭敏
李政晖
游峰
马晓军
张延强
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Jujube Science And Technology Co Ltd
Guo Jia Xinxizhongxin
China Mobile Group Design Institute Co Ltd
China Mobile Group Electronic Commerce Co Ltd
Original Assignee
Beijing Jujube Science And Technology Co Ltd
Guo Jia Xinxizhongxin
China Mobile Group Design Institute Co Ltd
China Mobile Group Electronic Commerce Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Jujube Science And Technology Co Ltd, Guo Jia Xinxizhongxin, China Mobile Group Design Institute Co Ltd, China Mobile Group Electronic Commerce Co Ltd filed Critical Beijing Jujube Science And Technology Co Ltd
Priority to CN201910535948.XA priority Critical patent/CN110348830B/en
Publication of CN110348830A publication Critical patent/CN110348830A/en
Application granted granted Critical
Publication of CN110348830B publication Critical patent/CN110348830B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/08Payment architectures
    • G06Q20/085Payment architectures involving remote charge determination or related payment systems
    • G06Q20/0855Payment architectures involving remote charge determination or related payment systems involving a third party
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • G06Q20/4014Identity check for transactions

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Engineering & Computer Science (AREA)
  • Finance (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

The embodiment of the present application provides a kind of network system based on block chain, authentication method, equipment and storage medium, in the embodiment of the present application, node is runed, for providing the first authentication information;Service network transaction processing node obtains the first business service by the first authentication information access operation node;Transaction processing node, for providing the second authentication information;And by the second authentication information, allow using participation platform access;And provide the second business service.Multiple transaction processing nodes can be deployed in different cities;Node and multiple transaction processing nodes will be runed as relay device, pass through authentication, realize that real-time confirmation, data can not be distorted and keep the consistent characteristic of height, allow and shares a set of credible, information for recognizing each other using participating in each side, efficiency of operation can be improved, and the degree of automation of process, and reduce operating cost.

Description

A kind of network system based on block chain, authentication method, equipment and storage medium
Technical field
This application involves computer field more particularly to a kind of network system based on block chain, authentication method, equipment with And storage medium.
Background technique
Paid on consumption and line with the development of internet and on-line payment technology, on line it is very universal, however Transaction on line requires to handle electronic payment information by the reliable third-party institution, but third-party intervention also has Many problems generate, for example, transaction cost is high, is easy to expose privacy information of user etc..
Summary of the invention
The many aspects of the application provide a kind of network system based on block chain, authentication method, equipment and storage and are situated between Matter can be improved the protection of privacy, realize the consistency and safety of data.
The embodiment of the present application provides a kind of network system based on block chain, comprising: at operation node and multiple transaction Node is managed, different cities is arranged in multiple transaction processing nodes;The operation node, for being mentioned to the transaction processing node For the first authentication information;The transaction processing node accesses the operation node by first authentication information, And by first authentication information, the first business service of the operation node is obtained;The transaction processing node is used The second authentication information is provided in participating in platform to application;The transaction processing node is believed by second authentication Breath allows the application to participate in platform access;And by second authentication information, platform is participated in the application and is provided Second business service.
In some instances, the operation node includes the first block chain node gateway and First Certificate node;It is described Transaction processing node, for sending the first identity information of the transaction processing node to the operation node, and described in reception First authentication information that first block chain node gateway returns;The First Certificate node, for according to described the One identity information generates first authentication information, and first authentication information is sent to firstth area Block chain node gateway;The operation node, for determining corresponding first authority information of first authentication information;According to First authority information passes through the first block chain node gateway and corresponding with service channel, Xiang Suoshu trading processing section Point provides first business service.
In some instances, the transaction processing node includes the second block chain node gateway and the second certificate node; The second block chain node gateway participates in the second identity information of platform for obtaining the application, and is sent to described the Two certificate nodes;The second certificate node, for generating second authentication information according to second identity information; The transaction processing node, for determining corresponding second authority information of second authentication information;According to described second Authority information participates in platform to the application and provides institute by the second block chain node gateway and corresponding with service channel State the second business service.
In some instances, the second block chain node gateway participates in the friendship that platform is sent for receiving the application Easy information, the application for determining that the Transaction Information carries participate in platform identity information to be verified and second identity verifying information Whether match;The transaction processing node, for upon a match, determining second identity verifying information corresponding described second Whether authority information includes trading privilege;If comprising the Transaction Information is sent to the operation node;Firstth area Block chain node gateway, for receiving the Transaction Information, determine node identity information to be verified that the Transaction Information carries with Whether first identity verifying information matches;The operation node, for upon a match, determining the first proof of identity letter Cease whether corresponding first authority information includes trading privilege, if comprising passing through the first block chain node gateway And trading channel, the Transaction Information is sent to memory node, stores the Transaction Information, and the storage result is sent out It send to the transaction processing node;The transaction processing node participates in putting down for the storage result to be sent to the application Platform.
In some instances, the operation node, for the Transaction Information to be distributed to other trading processing sections Point, so that other described transaction processing nodes are updated Transaction Information by respective memory node.
In some instances, the operation node further includes common recognition ordering joint;The common recognition ordering joint, if being used for institute Stating corresponding first authority information of the first identity verifying information includes trading privilege, then by the Transaction Information according to application Grouping carries out temporal sequence and the Transaction Information after sequence is packaged into using respective trading information data block, by institute State the memory node that trading information data block is sent in the operation node.
In some instances, the common recognition ordering joint, if for receiving multiple same transaction information, according to the time Multiple same transaction information are ranked up, the Transaction Information for belonging to earliest time in sequence is packaged into the transaction of corresponding application Information data block, and the trading information data block is sent to memory node.
In some instances, the common recognition ordering joint is used for for other same Transaction Information in sequence, to corresponding institute State the expression information that transaction processing node sends Fail Transaction;The transaction processing node, for by the table of the Fail Transaction Show that information is sent to the application and participates in platform, so that the application participates in platform and cancels the Transaction Information.
In some instances, the second block chain node gateway participates in looking into for platform transmission for receiving the application Information is ask, the application for determining that the query information carries participates in platform identity information to be verified and second identity verifying information Whether match;The transaction processing node, if determining corresponding second power of second identity verifying information for matching Whether limit information includes search access right;If comprising, will be described by the second block chain node gateway and inquiry channel Query information is sent to query node, so that the query node is according to the keyword in the query information, match query Data result, and the data result is sent to the application and participates in platform.
In some instances, the system also includes O&M nodes;The O&M node, for according to first body Part information, disposes the service environment of the transaction processing node.
In some instances, the operation node is also used to receive the tiers e'tat information using operation platform and answers With information, after the tiers e'tat information and the application message are by audit, by the tiers e'tat information and institute It states application message and is sent to O&M node;The O&M node, for testing the application message, after test passes through, According to the tiers e'tat information and the application message, the application using operation platform is disposed.
In some instances, the operation node is responsible for the network insertion identity and safety management of transaction processing node, hands over The identity and safe communication certificate that easy to handle node and common recognition ordering joint are issued by operation node are linked into network;Common recognition Ordering joint, for provide unified public use common recognition sort cluster service, with guarantee Transaction Information consistency and can By property.
In some instances, the transaction processing node is the various block chains application operation of the system users publication Carrier;Client disposes a variety of block chain industrial applications on transaction processing node, shares and is provided using the service of transaction processing node Source;Transaction processing node issues access letter of identity and communication security certificate, to guarantee permission access and use block chain Industrial application;The user right of application is configured and is managed in operation portal by application publisher, and synchronization distribution is to each Transaction processing node;By node gateway access be deployed in transaction processing node in application, node gateway can first verify user Identity, further according to application identities and User Identity verifying user's access function privilege.
The embodiment of the present application also provides a kind of method for network authorization based on block chain, comprising: receives the first authentication Information;The operation node is accessed by first authentication information, and by first authentication information, is obtained First business service of the operation node;Platform is participated in application, and the second authentication information is provided;Pass through second body Part verification information, allows the application to participate in platform access;And by second authentication information, participated in the application Platform provides the second business service.
The embodiment of the present application also provides a kind of method for network authorization based on block chain, comprising: mentions to transaction processing node For the first authentication information;By first authentication information, the transaction processing node is allowed to access;And pass through institute The first authentication information is stated, Xiang Suoshu transaction processing node provides the first business service.
The embodiment of the present application also provides a kind of calculating equipment, comprising: including memory, processor and communication component;Institute Memory is stated, for storing computer program;The communication component, for receiving the first authentication information;It is participated in application Platform provides the second authentication information;The processor, for executing the computer program, to be used for: passing through described One authentication information accesses the operation node, and by first authentication information, obtains the operation node First business service;By second authentication information, the application is allowed to participate in platform access;And pass through described second Authentication information participates in platform to the application and provides the second business service.
The embodiment of the present application provides a kind of calculating equipment, comprising: including memory, processor and communication component;It is described Memory, for storing computer program;The communication component, for providing the first authentication letter to transaction processing node Breath;The processor, for executing the computer program, to be used for: by first authentication information, described in permission Transaction processing node access;And by first authentication information, Xiang Suoshu transaction processing node provides the first business clothes Business.
The embodiment of the present application also provides a kind of computer readable storage medium for being stored with computer program, and feature exists In causing one or more of processors to realize network authentication side when computer program is executed by one or more processors Step in method.
In the embodiment of the present application, node is runed, for providing the first authentication information to transaction processing node;City Node obtains the first business service of operation node by the first authentication information access operation node;Trading processing section Point provides the second authentication information for participating in platform to application;And by the second authentication information, allow using participation Platform access;And platform is participated in application, the second business service is provided.Different cities is arranged in multiple transaction processing nodes; Node and multiple transaction processing nodes will be runed as relay device, by authentication, realize that real-time confirmation, data can not The consistent characteristic of height is distorted and kept, allows and shares a set of credible, information for recognizing each other using participating in each side, fortune can be improved The degree of automation of efficiency and process is sought, and reduces operating cost.
Detailed description of the invention
The drawings described herein are used to provide a further understanding of the present application, constitutes part of this application, this Shen Illustrative embodiments and their description please are not constituted an undue limitation on the present application for explaining the application.In the accompanying drawings:
Fig. 1 is the structural schematic diagram of one example network system of the application;
Fig. 2 is the flow diagram of the method for network authorization of one exemplary embodiment of the application;
Fig. 3 is the flow diagram for the network authentication that the application another exemplary embodiment provides;
Fig. 4 is the structural schematic diagram for the authentication device that one exemplary embodiment of the application provides;
Fig. 5 is the structural schematic diagram for the authentication device that the application another exemplary embodiment provides;
Fig. 6 is the structural schematic diagram for the calculating equipment that the application another exemplary embodiment provides;
Fig. 7 is the structural schematic diagram for the calculating equipment that the application another exemplary embodiment provides.
Specific embodiment
To keep the purposes, technical schemes and advantages of the application clearer, below in conjunction with the application specific embodiment and Technical scheme is clearly and completely described in corresponding attached drawing.Obviously, described embodiment is only the application one Section Example, instead of all the embodiments.Based on the embodiment in the application, those of ordinary skill in the art are not doing Every other embodiment obtained under the premise of creative work out, shall fall in the protection scope of this application.
Below in conjunction with attached drawing, the technical scheme provided by various embodiments of the present application will be described in detail.
Fig. 1 is a kind of structural schematic diagram for network system based on block chain that one exemplary embodiment of the application provides. As shown in Figure 1, the system 100 includes: operation node 101 and multiple transaction processing nodes 102.Multiple transaction processing nodes 102 are arranged in different cities.
Wherein, operation node 101 can be main block chain service network platform or network operation platform, can be service Device;Transaction processing node 102 can be metropolitan district block chain serving network node, can be referred to as urban node, can be service Device.
Block chain is verified using block linked data structure knows together algorithm with storing data, using distributed node to generate More new data, the safety for being guaranteed data transmission and access in the way of cryptography are formed using by automatized script code Intelligent contract program the completely new distributed basis framework and calculation of one kind with operation data.Block chain can be in net Reliable trust between point-to-point is established in network, so that the interference of value delivery process removal intermediary, not only public information but also had protected privacy, Not only Shared Decision Making but also enetity equity had been protected, this mechanism improves the efficiency of value interaction and reduced costs.
Block chain is one kind by safeguarding jointly in many ways, with block chain structure storing data, guarantees transmission using cryptography and visits It pays one's respects complete, can be realized the technical system that data are unanimously stored, can not distort, can not be denied.It is each to participate in block catenary system The transaction data that main body generates can be packaged into a data block, and data block is arranged successively sequentially in time, form number According to the chain of block, each main body that participates in possesses same data chain, and can not unilaterally distort, and the modification of any information only has Main body agreement by about certainty ratio can carry out, and can only add new information, and old information can not be deleted or modified, from And realize the information sharing between multiagent and consistent decision, it is ensured that between each subject identity and main body Transaction Information can not distort and It is open and clear.
Main block chain service network platform, is referred to as block chain service network, to be deployed in multiple prefecture-level city IDC It is reliable by network operator based on the basic network running unit of computer room-urban node (e.g., transaction processing node 102) Communication link is formed by connecting, and is a node physical isolation and energy efficiently intercommunication, the whole area based on mature technology building Block chain network.Main block chain service network platform can dispose common recognition ordering joint (being referred to as ordering joint), service network Endorsement node, accounting nodes and chain code node of network etc..Common recognition ordering joint, endorsement node, accounting nodes and chain code node The basic technology network for collectively constituting the operation of block chain is that the technology of account book and intelligent bond service is provided to business application Infrastructure.The transaction that common recognition ordering joint major responsibility sends each node is ranked up.In the case where transaction is concurrent, The successive timing of each node transaction needs to determine and reach common understanding by common recognition ordering joint.Ordering joint of knowing together is according to one After set pattern then determines trading order, issues each node and transaction is persisted in the account book of block chain.Common recognition ordering joint The multiple channels being mutually isolated are supported, so that transaction is simply sent to interdependent node.
Transaction processing node 102 is the carrier of the various block chains application operation of numerous service network client publications.It can portion Administration can dispose a variety of block chain industrial applications in mostly area, service network client (applying publisher) on transaction processing node, The shared Service Source using transaction processing node is such as: storage calculates power and network bandwidth.Transaction processing node 102 can portion Affix one's name to endorsement node, accounting nodes and the chain code node of service network.Endorsement node, accounting nodes and chain code node collectively constitute The basic technology network of block chain operation is set to the technical foundation of business application offer account book and intelligent bond service It applies.Endorsement node, accounting nodes and chain code node are the fundamentals of service network, are block chain service network decentralizations Peer node, be broadly divided into endorsement node and accounting nodes according to function.Endorsement node mainly to transaction prediction scheme verified, Simulation execution and endorsement, accounting nodes are responsible for examining the legitimacy of transaction, and update and safeguard block chain data and account book state. In actual deployment, endorsement node and accounting nodes can both be deployed in same physical node, can also separate and dispose.In addition, Chain code node is that the node of executable function code is provided for functional node, to realize these corresponding functions.Trading processing section Point 102 also issues access letter of identity and communication security certificate for service network client (user of industrial application) to guarantee visitor The licensed authorization of the system at family oneself accesses and using the block chain industrial application on service network.
It should be noted that an endorsement, an accounting nodes and a chain code node can form a service section Point.Multiple service nodes, each service section can be disposed according to different services from transaction processing node 102 by runing node 101 Point is for providing a kind of service.Service node can be memory node, query node etc..
The user right of various block chain industrial applications is configured and is managed in operation portal by application publisher, and same Step is distributed to each transaction processing node 102.Trading processing section is deployed in by node gateway access using user or its system Point in application, the identity that node gateway can first verify user (is tested by the letter of identity that transaction processing node is presented to user Card), further according to the function privilege of application identities and User Identity verifying user's access.
Node 101 is runed, for providing the first authentication information to transaction processing node 102.
Transaction processing node 102 passes through the first authentication by the first authentication information access operation node 101 Information obtains the first business service of operation node 101.
Wherein, the first authentication information can be digital ID card book, may include code key and Encryption Algorithm etc..
First business service refers to each service that can be provided, for example, transaction storage service, query service etc..It answers Understand, the first business service is corresponding with the operation service node of node 101.
In some instances, operation node 101 can also include the first block chain node gateway and First Certificate node; Transaction processing node 102 for sending the first identity information of transaction processing node 102 to operation node 101, and receives first The first authentication information that block chain node gateway returns.First Certificate node, for according to the first identity information, generating the One authentication information, and the first authentication information is sent to the first block chain node gateway.Node 101 is runed, is used for Determine corresponding first authority information of the first authentication information;According to the first authority information, pass through the first block chain node net Pass and corresponding with service channel provide the first business service to transaction processing node 102.
Wherein, the first identity information can refer to the registration information of transaction processing node 102, for example, registion time, registration Title and registered address and registration network address etc..
First authority information refers to that transaction processing node 102 has specific resources use right benefit, for example, inquiry power Limit, storage permission etc..
First block chain node gateway refers to the entrance of access block chain serving network node.Each urban node is all disposed Have node gateway, for the access through urban node provide it is unified with authentication, operation authorization, high security chain on industry It is engaged in access service, completing operation system under chain, to the calling of business service on chain, data write business datum inquiry etc. on chain and chain Function.These node gateways are a kind of gateway systems of lightweight, are substantially carried out urban node and run suitable between node 101 Match, and application participates in being adapted between platform (being referred to as application business system) and urban node, can allow block chain The complexity of service network is hidden application business system, at the same by provide it is general, stable, reliably service and connect Mouthful, help application client is simple, efficiently uses block chain service network.The function that node gateway provides includes: to provide completely The private key of localization takes care of function;Secret protection is realized using End to End Encryption means;Block chain node and channel access are provided Service;Authorization, management and the control etc. of application access are provided.
First Certificate node refers to the node for issuing the identity digital certificate of service network operation node authorization, issues Identity digital certificate could when urban node be added in service network.
Service channel refers to the exclusive communications conduit of the service, for example, trading channel, inquiry channel etc..In the channel The transaction of transmission and data only have service node belonging to the channel as it can be seen that being also considered as special service in the service node Privately owned communication " subnet ".Operation node 101 can exist simultaneously multiple channels being isolated from each other, the corresponding service in each channel Node.
For example, transaction processing node 102 sends its registration information to operation node 101, the first block of node 101 is runed After chain node gateway receives the registration information, which is stored, and the registration information can be sent to fortune The certificate node (being referred to as CA node) of 101 On-premise of node is sought, which can be raw according to the registration information At its digital identity certificate, digital identity certificate may include code key and Encryption Algorithm, and CA node can be by the digital identity Certificate is back to the first block chain node gateway, and the first block chain node gateway stores digital identity certificate, and by digital identity Certificate is sent to transaction processing node 102, so that transaction processing node 102 saves the digital identity certificate received. Meanwhile node 101 is runed according to digital ID card inteilectual into the corresponding permission of transaction processing node 102, which can be friendship When easy to handle node 102 sends registration information to operation node 101, the request permissions of carrying.Run the firstth area in node 101 Block chain node gateway can activate corresponding digital identity certificate according to registration information.
It should be noted that multistage ARBAC Application-Role-Based can be defined according to business characteristic Access Control is i.e. based on application-role access control model) administrative model, make the platform of different role that there is difference Using with data processing permission.Permission chain will be uniformly stored in ARBAC model.Runing node 101 can be from model The corresponding permission that middle determination is requested with transaction processing node 102.
Transaction processing node 102 provides the second authentication information for participating in platform to application;Transaction processing node 102 by the second authentication information, allows using participation platform access;And by the second authentication information, join to application The second business service is provided with platform.
Wherein, refer to third-party service platform or third-party server, such as Third-party payment platform using participation platform Or Third-party payment server etc..
Second authentication information can be digital ID card book, may include code key and Encryption Algorithm etc..
Second business service refers to each service that can be provided, for example, transaction storage service, query service etc..It answers Understand, the second business service is corresponding with the service node of transaction processing node 102.
In some instances, transaction processing node 102 includes the second block chain node gateway and the second certificate node;The Two block chain node gateways for obtaining the second identity information using participation platform, and are sent to the second certificate node;Second Certificate node, for generating the second authentication information according to the second identity information;Transaction processing node 102, for determining Corresponding second authority information of two authentication informations;According to the second authority information, by the second block chain node gateway and Corresponding with service channel participates in platform to application and provides the second business service.
Second identity information can refer to using participate in platform registration information, for example, registion time, register name and Registered address and registration network address etc..
Second authority information, which refers to, has specific resources use right benefit using participation platform, for example, search access right, is deposited Store up permission etc..
In addition, the second block chain node gateway, the second certificate node and service channel and the section of service network operation above Content described in point is same or similar, is not described in more detail here.
For example, according to described previously, second block chain node net of the Third-party payment platform into transaction processing node 102 Pass sends its registration information and stores after the second block chain node gateway receives the registration information to the registration information, and It is sent to the certificate node (being referred to as CA node) of 102 On-premise of transaction processing node, CA node can be according to the note Volume information, is generated its digital identity certificate, can be included code key and Encryption Algorithm with digital ID card school bag, and by digital ID card Book is sent to the second block chain node gateway, and the second block chain node gateway stores digital identity certificate, by digital identity certificate It is sent to Third-party payment platform, so that Third-party payment platform saves the digital identity certificate received.Meanwhile it handing over Easy to handle node 102 can be third party according to the corresponding permission of digital identity certificates constructing Third-party payment platform, the permission When payment platform sends registration information to transaction processing node 102, the request permissions of carrying.In transaction processing node 102 Two block chain node gateways can activate corresponding digital identity certificate according to registration information.
It should be noted that transaction processing node 102 also can use ARBAC model carry out permission management and really It is fixed.In addition, the network system 100 can also include that application participates in platform 103.
In some instances, the second block chain node gateway, for receiving the transaction letter sent using platform 103 is participated in Breath, the application for determining that Transaction Information carries participate in whether the identity information to be verified of platform 103 matches with the second identity verifying information; Transaction processing node 102, for upon a match, determining whether corresponding second authority information of the second identity verifying information includes to hand over Easy permission;If comprising Transaction Information is sent to operation node 101;First block chain node gateway, for receiving transaction letter Whether breath, the node identity information to be verified for determining that Transaction Information carries match with the first identity verifying information;Run node 101, for upon a match, determining whether corresponding first authority information of the first identity verifying information includes trading privilege, if packet Contain, then by the first block chain node gateway and trading channel, Transaction Information is sent to memory node, store transaction letter Breath, and storage result is sent to transaction processing node 102;Transaction processing node 102, for storage result to be sent to application Participate in platform 103.
Wherein, trading privilege can be transaction storage permission.
For example, according to described previously, when Third-party payment platform receives digital identity certificate, importing digital letter of identity Afterwards, the transaction processing node 102 in city where accessing it, and the Transaction Information encrypted by digital identity certificate is sent, As " xx pays the fees 100 yuan of water rate, and payment order number is yyy ".The second block chain node gateway in transaction processing node 102 receives When to the Transaction Information, first according to digital identity certificate, the identity of Third-party payment platform is verified, transaction letter is obtained after decryption Breath, it is legal to verify the Third-party payment platform identity, transaction processing node 102 further according to the digital identity certificate, determine this There are trading privileges in the permission of tripartite's payment platform, then the second block chain node gateway passes through trading channel to Third-party payment Platform provides transaction storage service.The second block chain node gateway in transaction processing node 102 is to the Transaction Information got Message assembling is carried out, which is carried out to write chain, and by endorsement node therein and accounting nodes to the transaction message It is verified, verifies whether the transaction is legal, such as determine that the water rate to be paid of the payment order is 100 yuan, when the transaction is legal, Then Transaction Information in the transaction message is write the process of chain by simulation, after simulating successfully, by the transaction message and analog result And valid result is sent to operation node 101, the first block chain node gateway runed in node 101 receives the transaction report Text and analog result and valid result after, the identity of transaction processing node 102 is verified first, verification process with test The process for demonstrate,proving the identity of Third-party payment platform is identical, and details are not described herein again.When the identity of transaction processing node 102 is legal, First block chain node gateway gets the Transaction Information, meanwhile, node 101 is runed according to the number of transaction processing node 102 Letter of identity determines that its permission includes transaction storage permission, then can will be handed over by the first block chain node gateway by trading channel Easy information is sent to memory node, and e.g., accounting nodes store the Transaction Information, and storage result is sent to trading processing section Point 102, transaction processing node 102 by the storage result, such as stores successfully and storage address, are being sent to Third-party payment and put down Platform.
In some instances, node 101 is runed, for Transaction Information to be distributed to other transaction processing nodes 102, so that Other transaction processing nodes 102 are updated Transaction Information by respective memory node.
For example, node 101 is runed after having stored Transaction Information according to described previously, it can also be by the Transaction Information point It is sent to the transaction processing node 102 in other cities, so that the transaction processing node 102 in other cities passes through respective memory node, Such as, accounting nodes store the Transaction Information, so that the Transaction Information of the transaction processing node 102 in each city is one It causes, completes the update of Transaction Information.
In some instances, operation node 101 further includes common recognition ordering joint;Common recognition ordering joint, in service network To provide transaction sequence processing for mostly application in network, to guarantee the concurrent transaction uniformity for the treatment of of each application, if the first body Corresponding first authority information of part check information includes trading privilege, then will carry out temporal sequence simultaneously according to application packet Transaction Information after sequence is packaged into using respective trading information data block, the trading information data block is sent to institute State the memory node in operation node.
Since network system is the distributed system across more areas, the various block chains application transaction run thereon is needed Want service network provide unified public use common recognition sequence cluster service, with guarantee transaction data consistency and can By property.
For example, the memory node in operation node 101 is before storing the Transaction Information, common recognition according to described previously Ordering joint can also be applied according to application packet for this, and such as payment application is ordered according to the payment in the Transaction Information Odd numbers, determines whether current operation node 101 also has received the application, is somebody's turn to do by what other transaction processing nodes 102 were sent Other Transaction Informations of payment order number, if it does not exist, then the common recognition ordering joint runed in node 101 can be by Transaction Information The trading information data block for being packaged into the application is carried out, and the trading information data block is sent to memory node.
In some instances, common recognition ordering joint, if for receiving multiple same transaction information, then according to the time pair Multiple same transaction information are ranked up, and the transaction that the Transaction Information for belonging to earliest time in sequence is packaged into corresponding application is believed Breath data block (for example, when the Transaction Information received belongs to the Transaction Information of earliest time in sequence), then ordering joint of knowing together Transaction Information can be carried out to the trading information data block for being packaged into the application, and the trading information data block is sent to storage Node.
For example, according to described previously, if so, common recognition ordering joint is temporal to these identical Transaction Informations progress Sequence, and determine whether its Transaction Information got belongs to the Transaction Information of earliest time in the ranking, if so, common recognition sequence Transaction Information can be carried out the trading information data block for being packaged into the application by node, and the trading information data block is sent to Memory node.
In some instances, common recognition ordering joint, for (being received for example, working as Transaction Information other same in sequence To Transaction Information be not belonging to the Transaction Information of earliest time in sequence), then send Fail Transaction to transaction processing node 102 Indicate information;Transaction processing node 102, for being sent to the expression information of Fail Transaction using platform 103 is participated in, so that answering The Transaction Information is cancelled with platform 103 is participated in.
For example, according to described previously, common recognition ordering joint in node 101 is runed by the Fail Transaction of other Transaction Informations Expression information be sent to transaction processing node 102, the expression information of Fail Transaction will be sent to by transaction processing node 102 again Using platform 103 is participated in, so that application participates in platform 103 and cancels the Transaction Information, and it is returned to its payment of user.
In some instances, the second block chain node gateway, for receiving the inquiry letter sent using platform 103 is participated in Breath, the application for determining that query information carries participate in whether the identity information to be verified of platform 102 matches with the second identity verifying information; Transaction processing node 102, if determining whether corresponding second authority information of the second identity verifying information includes inquiry for matching Permission;If comprising, by the second block chain node gateway and inquiry channel, query information is sent to query node, with It is sent to query node using participation according to the keyword in query information, the data result of match query, and data result Platform 103.
For example, according to described previously, when Third-party payment platform receives digital identity certificate, importing digital letter of identity Afterwards, the transaction processing node 102 in city where accessing it, and the query information encrypted by digital identity certificate is sent, Such as " payment information that payment order number is yyy ".The second block chain node gateway in transaction processing node 102 receives this and looks into When asking information, first according to digital identity certificate, the identity of Third-party payment platform is verified, query information is obtained after decryption, is tested It is legal to demonstrate,prove the Third-party payment platform identity, transaction processing node 102 determines third party's branch further according to the digital identity certificate It pays in the permission of platform there are search access right, then the second block chain node gateway is mentioned by inquiring channel to Third-party payment platform For query service.The second block chain node gateway in transaction processing node 102 carries out message group to the query information got Dress, and by the query node in transaction processing node 102, such as accounting nodes are inquired the transaction message, according to payment Order number inquires the payment information of the payment order number, such as " paid the fees, payment amount is 100 yuan, is paid the fees user " xx " " etc., Data result " having paid the fees, payment amount is 100 yuan, is paid the fees user " xx " " is sent to third party's branch by transaction processing node 102 Platform is paid, Third-party payment platform again sends the data result " paid the fees, payment amount is 100 yuan, is paid the fees user " xx " " Terminal to where web terminal or the end app, is checked for user.
In some instances, system 100 further include: O&M node 104;O&M node 104, for according to the first identity Information disposes the service environment of transaction processing node 102.
Wherein, O&M node 104 is responsible for the formulation, maintenance and upgrading of service network standard and specification according to service network Situation is promoted, formulates access standard and specification, the maintenance and upgrade job of service network jointly with operator.According to base power Construction situation, formulate the access of base power and use standard and specification, maintenance and upgrade job.According to the open-minded of service network Situation is formulated and supports standard and specification, maintenance and upgrade job for the service network technical support of application client and O&M.Also It is responsible for the optimization of service network block chain technology, updates and persistently upgrading collateral security service network is lasting, stables, high-performance is run Angle start with, continue to optimize service network block chain technological frame, while introducing the more various block chain bottom of applicability Technology, the application adaptation range of extended theorem network.It is also responsible for providing the special maintenances platforms such as the layout of service network resource, deployment Resource layout, management and maintenance special maintenance platform based on container technique are provided, the deployment of block chain network and node is solved The automated maintenance energy of maintenance platform is constantly reinforced and promoted to difficult point for new demand appeared in O&M process, new direction Power.The maintenance work for being also responsible for urban node in service network guarantees that service network keeps high reliability, in resource utilization Reach fine balance with aspect of performance, is handled in time for the equipment fault in each urban node, the system failure.It is also negative Blame the typical use-case that base power service development and O&M are applied from analysis enterprise, continuous design, exploitation and optimization basis Ability application, it is ensured that the base power that service network provides can be widely used in the common requirements of enterprise, improve service network The market competitiveness.It is also responsible for Client application publication test, deployment and O&M and technical guidance is carried out to Client application exploitation, really Protecting application client can simple, fast and efficient exploitation service network block chain industrial application.To Client application carry out function and Performance test and feedback test and improve opinion.The O&M monitoring capacity Persisting exploitation of Persisting exploitation and perfect service network and excellent The O&M monitoring system for changing service network, provides complete, quick, visual O&M monitoring capacity.Shape is run in collection system The machine resources of state data, amount of access, time-consuming, the health status of node and more bottom including system are (CPU, memory, hard Disk) behaviour in service etc., understand entire service network state in real time by visual control.It is more serious to what is occurred in system Situations such as situation such as cheats node, account book is distorted, mechanical disorder notifies related personnel by mail mode, to locate in time Reason.
Service environment refers to the software environment, such as network environment, polling routine environment etc. for providing service.
For example, O&M node 104 can get transaction processing node 102 from operation node 101 according to described previously Registration information, according to registration information obtain transaction processing node 102 network address and affiliated computer room, can directly to transaction at Reason node 102 carries out installing and deploying automatically for program, or the address of the computer room according to belonging to transaction processing node 102, carries out The installation and deployment of manual program.
In some instances, node 101 is runed, is also used to receive using the tiers e'tat information of operation platform and application Tiers e'tat information and application message are sent to clothes after tiers e'tat information and application message are by audit by information O&M node 104;O&M node 104, for testing application message, after test passes through, according to tiers e'tat information with And application message, the application of application deployment operation platform.
Wherein, the platform of application and development, publication and operation, such as server, and application ginseng be can be using operation platform With the platform of the examination & approval management and rights management of platform, such as server.
For example, carrying out account by terminal where the web terminal of operation node 101 using operation platform 103 according to described previously Number registration and real-name authentication etc. operation, while uploading using publication qualification proof and business license etc.;It can also upload The essential information of application such as applies chain code, defines application function and role and selects to be deployed in where transaction processing node 102 City, these information are uploaded to operation node 101 by terminal where web terminal, and operation node 101 is answered according to these information It is shown the charging with charging, and by terminal where web terminal, runs node 101 to service network using operation platform 103 Sending application submits request, and service network runs node 101 and responds the request, carries out first trial to these information of upload, originally It examines after passing through, is tested to application chain code and using role, after being successfully tested, where operation node 101 to web terminal eventually Sending application is held to issue contract, and the terminal display where web terminal is given and applies operation platform 103, using operation platform 103 to this Charging (i.e. publication expense) in contract is paid the fees, and after paying the fees successfully, terminal where web terminal is paid to the operation transmission of node 101 Take success message, operation node 101 responds the message, carries out being published to the transaction processing node 102 to Yingcheng City using publication On.It should be noted that the network system also may include using operation platform 105.
Further, it is also possible to which the system 100 can also be realized using participation platform 105 in the transaction processing node to Yingcheng City On 102, application is opened.
For example, carrying out account by terminal where the web terminal of operation node 101 using platform 105 is participated according to described previously Number registration and real-name authentication etc. operation, are carrying out in terminal using applying for registration of where web terminal, selection is answered later With function and role and select the city and the access way that are deployed in 102 place of transaction processing node, terminal where web terminal These information are uploaded to operation node 101, operation node 101 is carried out according to these information using charging, and passes through web terminal institute It is shown the charging in terminal, is paid the fees using platform 105 is participated in the charging, after paying the fees successfully, terminal where web terminal Success message of paying the fees is sent to operation node 101, terminal where web terminal participates in platform 105 to application and shows " using operation platform 103 are audited " interface, can show whether carry out the option that access via telephone line is audited on the interface, it is flat using participating in If platform 105 selects access via telephone line to be audited, terminal where web terminal sends special line audit request, fortune to operation node 101 Battalion's node 101 responds request access special line and is audited, and participates in these letters of platform 105 to application using operation platform special line Breath is audited, and after the approval, determines that application participates in the permission of platform 105, and these permissions are stored to operation node 101 And on the transaction processing node 102 of Yingcheng City, and by storage result, it is sent to where web terminal eventually by operation node 101 End is showed using platform 105 is participated in, and application is open-minded.If selecting not access via telephone line to be audited using platform 105 is participated in, Then terminal where web terminal sends not special line audit request to operation node 101, and operation node 101 responds the request and do not access specially Line is audited, and can be audited by operation node 101, when after the approval, determines that application participates in the permission of platform 105, And store these permissions to operation node 101 and on the transaction processing node 102 of Yingcheng City, and by storage result, by Terminal where operation node 101 is sent to web terminal is showed using platform 105 is participated in, and application is open-minded.
In the embodiment of the present application, the network system 100 fully ensure that between each urban node, on chain between business, Communication efficiency, Stability and dependability on chain under business and chain between business, this be also application operation in service network not The primary condition that can or lack.The urban node of carrying client application, can be deployed in the carrier class computer room of each prefecture-level city, and Possessed O&M strength is relied on, urban node is monitored in real time, provides strong guarantee for the reliability service of node.
After the network system 100 is built up, block chain computing capability and resource are saved by the city for being located at more than 300 a prefecture-level cities Point is provided in a manner of physically-isolated.The investment service of numerous physical nodes, not only ensure that the area based on algorithm of knowing together Effective performance of block chain ability ensures the fair and reasonable property of business, can not distort etc. outside basic demands, also having fully ensured that business Reliability of operation not will lead to and cause service disconnection because of the wherein delay machine of a or two a node.
It, can also be to participate in platform 103 closest to application using distribution platform 105 with the expansion of application publisher's business Mode to its user provide computing capability, not only reduced the cost input of publisher, but improve participant experience perception.
In the present embodiment, the urban node that IDC machine room resource can also be used to build, additionally it is possible to be service network application Client provides the Service Sources such as bandwidth, storage, the computing capability outside Except block chain computing capability and resource, allows to using most Mode close to block chain service network is built and is applied under chain, is not only promoted with the efficiency of docking applied under chain on chain, is also clothes Business network client saving exploitation, Disposition & Operation cost.
In the network system 100, although application participates in the limited amount of platform, enough, platform property and platform Between the existing high configuration resource of network and Intranet communication capacity, provide the basic condition of high performance service for service network.
In the network system 100, using algorithm of knowing together efficiently and adaptively, guaranteeing that common recognition is completed is trade confirmation, and And other links in transaction confirmation, such as signature algorithm, account book storage mode are optimized, realize second grade really Recognize transaction.Service network supports the various ways such as local data base storage, file system storage and cloud storage.
The network system 100 provides the other all-position safety guarantee of financial level, from bottom running environment, communication process, deposits The many aspects such as storage safety, made safe, data safety realize perfect safety assurance.For example, Host Security: supporting to master Machine carries out security sweep, host reinforcing and security audit.Communication security: safety certification and content-encrypt before supporting communication are prevented Only communication intercept and request are forged.It is communicated using the node of TLS encryption, asymmetrical digital signature can guarantee applied business Data are not tampered and steal in the operation of whole network node and communication process.Data safety: the more copies of data are supported Storage, data transmission procedure are transmitted based on TLS exit passageway, support that the modes such as data encryption, linked data structure are come real in chain The ability with secret protection can not now be distorted.The data isolation of chain rank is provided using flexible multichain mechanism simultaneously.For Stored data carry out multiple spot and verify to guarantee that data are not tampered.Key safety: PKI infrastructure and CA safety body are based on System realizes that key certificate encrypts the security management mechanism of the perfect digital cipher certificate such as distributing, update, revoking.Safe operation: It devises sophisticated service weight discriminating and permission controls, by setting up urban node, accounting nodes, user, administrator, client Polygonal color identification authentication and the valid operation controlling mechanisms such as end ensure the access and operation peace of service network bottom and service application Entirely.
The network system 100 is real by redundant storage, node equity, failure Autonomic Migration Framework and perfect O&M alarm mechanism The high availability of existing system data and service.Accounting nodes and common recognition based on Kubernetes and Docker building service network Ordering joint has quick pull-up, node and member's elastic telescopic ability and the automatic recovery capability of node failure, from framework The High Availabitity ability of block chain service network is ensured.The network system 100 will gradually have the deployment of block chain all parts of the country city Ability will utmostly realize the multicenter ability of block chain, ensure the safety and High Availabitity of block chain service network.
In present application example, the transaction processing node being used in conjunction with for numerous block chain applications and common recognition sequence are provided Service allows block chain not need the operation and maintenance of management bottom layer node using publisher, only carries out the exploitation and fortune of operation layer Battalion.In addition, distinctive node gateway and unified application rights management mechanism ensure that each application access be it is licensed and Certification control.
Fig. 2 is a kind of process signal of method for network authorization based on block chain of the application another exemplary embodiment Figure.This method 200 provided by the embodiments of the present application is executed by transaction processing node, for example, server;This method 200 include with Lower step:
201: receiving the first authentication information.
202: operation node being accessed by the first authentication information, and by the first authentication information, obtains operation First business service of node.
203: participating in platform to application and the second authentication information is provided.
204: by the second authentication information, allowing using participation platform access;And pass through the second authentication information, Platform is participated in application, and the second business service is provided.
Since above-mentioned steps 201-204 had been elaborated above, be not described in more detail here.
Fig. 3 is a kind of process signal of method for network authorization based on block chain of the application another exemplary embodiment Figure.This method 300 provided by the embodiments of the present application is executed by service network operation node, for example, server, this method 300 is wrapped Include following steps:
301: providing the first authentication information to transaction processing node.
302: by the first authentication information, transaction processing node being allowed to access;And pass through the first authentication information, The first business service is provided to transaction processing node.
Since above-mentioned steps 301-302 had been elaborated above, be not described in more detail here.
Fig. 4 is that the structural framing for the network authentication device based on block chain that the application another exemplary embodiment provides shows It is intended to.The device 400 can be applied to calculate in equipment, which includes receiving module 401, obtain module 402, provide Module 403 and permission module 404, are explained in detail below for the function of modules:
Receiving module 401, for receiving the first authentication information.
Module 402 is obtained, for runing node by the access of the first authentication information, and is believed by the first authentication Breath obtains the first business service of operation node.
Module 403 is provided, provides the second authentication information for participating in platform to application.
Allow module 404, for by the second authentication information, allowing using participation platform access;And pass through second Authentication information participates in platform to application and provides the second business service.
Fig. 5 is that the structural framing for the network authentication device based on block chain that the application another exemplary embodiment provides shows It is intended to.The device 500 can be applied to calculate in equipment, which includes providing module 501 and allowing module 502, with It is explained in detail for the function of modules down:
Module 501 is provided, for providing the first authentication information to transaction processing node.
Allow module 502, for allowing transaction processing node to access by the first authentication information;And pass through first Authentication information provides the first business service to transaction processing node.
The foregoing describe the built-in functions and structure of device 400 shown in Fig. 4, in a possible design, shown in Fig. 4 The structure of device 400 can realize as server, as shown in fig. 6, the server 600 may include: processor 601, memory 602 and communication component 603;
Memory 601, for storing computer program;
Communication component 603, is used for;Receive the first authentication information;Platform is participated in application, and the second authentication is provided Information.
Processor 602, for executing the computer program, to be used for: being accessed and runed by the first authentication information Node, and by the first authentication information, obtain the first business service of operation node;By the second authentication information, Allow using participation platform access;And by the second authentication information, platform is participated in application, the second business service is provided.
In addition, computer program is handled by one or more the embodiment of the invention provides a kind of computer storage medium When device executes, the step of causing one or more processors to realize the method for network authorization in Fig. 2 embodiment of the method.
The foregoing describe the built-in functions and structure of device 500 shown in fig. 5, in a possible design, shown in Fig. 5 The structure of device 500 can realize as server, as shown in fig. 7, the server 700 may include: processor 701, memory 702 and communication component 703;
Memory 701, for storing computer program;
Communication component 703, is used for;The first authentication information is provided to transaction processing node.
Processor 702, for executing the computer program, to be used for: by the first authentication information, allowing to trade Handle node visit;And by the first authentication information, the first business service is provided to transaction processing node.
In addition, computer program is handled by one or more the embodiment of the invention provides a kind of computer storage medium When device executes, the step of causing one or more processors to realize the method for network authorization in Fig. 3 embodiment of the method.
In addition, containing in some processes of the description in above-described embodiment and attached drawing according to particular order appearance Multiple operations, but it should be clearly understood that these operations can not execute or parallel according to its sequence what appears in this article It executes, serial number of operation such as 201,202,203 etc. is only used for distinguishing each different operation, and serial number itself does not represent Any executes sequence.In addition, these processes may include more or fewer operations, and these operations can be held in order Capable or parallel execution.It should be noted that the description such as " first " herein, " second ", is for distinguishing different message, setting Standby, module etc. does not represent sequencing, does not also limit " first " and " second " and is different type.
The apparatus embodiments described above are merely exemplary, wherein described, unit can as illustrated by the separation member It is physically separated with being or may not be, component shown as a unit may or may not be physics list Member, it can it is in one place, or may be distributed over multiple network units.It can be selected according to the actual needs In some or all of the modules achieve the purpose of the solution of this embodiment.Those of ordinary skill in the art are not paying creativeness Labour in the case where, it can understand and implement.
Through the above description of the embodiments, those skilled in the art can be understood that each embodiment can It is realized by the mode of required general hardware platform is added, naturally it is also possible to which reality is come in conjunction with by way of hardware and software It is existing.Based on this understanding, substantially the part that contributes to existing technology can be to calculate in other words for above-mentioned technical proposal The form of machine product embodies, and it wherein includes the meter of computer usable program code that the present invention, which can be used in one or more, The computer journey implemented in calculation machine usable storage medium (including but not limited to magnetic disk storage, CD-ROM, optical memory etc.) The form of sequence product.
The present invention be referring to according to the method for the embodiment of the present invention, the process of equipment (system) and computer program product Figure and/or block diagram describe.It should be understood that every one stream in flowchart and/or the block diagram can be realized by computer program instructions The combination of process and/or box in journey and/or box and flowchart and/or the block diagram.It can provide these computer programs Instruct the processing of general purpose computer, special purpose computer, Embedded Processor or other programmable media data processing equipments Device is to generate a machine, so that the finger executed by the processor of computer or other programmable media data processing equipments It enables and generates to specify in one or more flows of the flowchart and/or one or more blocks of the block diagram The device of function.
These computer program instructions, which may also be stored in, is able to guide computer or other programmable media data processings are set In standby computer-readable memory operate in a specific manner, so that instruction stored in the computer readable memory generates Manufacture including command device, the command device are realized in one or more flows of the flowchart and/or one, block diagram The function of being specified in box or multiple boxes.
These computer program instructions can also be loaded on computer or other programmable media data processing equipments, be made It obtains and executes series of operation steps on a computer or other programmable device to generate computer implemented processing, thus counting The instruction executed on calculation machine or other programmable devices is provided for realizing in one or more flows of the flowchart and/or side The step of function of being specified in block diagram one box or multiple boxes.
In a typical configuration, calculating equipment includes one or more processors (CPU), input/output interface, net Network interface and memory.
Memory may include the non-volatile memory in computer-readable medium, random access memory (RAM) and/or The forms such as Nonvolatile memory, such as read-only memory (ROM) or flash memory (flash RAM).Memory is computer-readable medium Example.
Computer-readable medium includes permanent and non-permanent, removable and non-removable media can be by any method Or technology come realize information store.Information can be computer readable instructions, data structure, the module of program or other data. The example of the storage medium of computer includes, but are not limited to phase change memory (PRAM), static random access memory (SRAM), moves State random access memory (DRAM), other kinds of random access memory (RAM), read-only memory (ROM), electric erasable Programmable read only memory (EEPROM), flash memory or other memory techniques, read-only disc read only memory (CD-ROM) (CD-ROM), Digital versatile disc (DVD) or other optical storage, magnetic cassettes, tape magnetic disk storage or other magnetic storage devices Or any other non-transmission medium, can be used for storage can be accessed by a computing device information.As defined in this article, it calculates Machine readable medium does not include temporary computer readable media (transitory media), such as the data-signal and carrier wave of modulation.
Finally, it should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, rather than its limitations;Although Present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that: it still may be used To modify the technical solutions described in the foregoing embodiments or equivalent replacement of some of the technical features; And these are modified or replaceed, technical solution of various embodiments of the present invention that it does not separate the essence of the corresponding technical solution spirit and Range.

Claims (18)

1. a kind of network system based on block chain characterized by comprising operation node and multiple transaction processing nodes, Different cities is arranged in the multiple transaction processing node;
The operation node, for providing the first authentication information to the transaction processing node;
The transaction processing node accesses the operation node by first authentication information, and passes through first body Part verification information obtains the first business service of the operation node;
The transaction processing node provides the second authentication information for participating in platform to application;
The transaction processing node allows the application to participate in platform access by second authentication information;And pass through Second authentication information participates in platform to the application and provides the second business service.
2. system according to claim 1, which is characterized in that the operation node include the first block chain node gateway with And First Certificate node;
The transaction processing node, for sending the first identity information of the transaction processing node to the operation node, and Receive first authentication information that the first block chain node gateway returns;
The First Certificate node, for according to first identity information, generating first authentication information, and by institute It states the first authentication information and is sent to the first block chain node gateway;
The operation node, for determining corresponding first authority information of first authentication information;According to described first Authority information, by the first block chain node gateway and corresponding with service channel, Xiang Suoshu transaction processing node provides institute State the first business service.
3. system according to claim 2, which is characterized in that the transaction processing node includes the second block chain node net Pass and the second certificate node;
The second block chain node gateway participates in the second identity information of platform for obtaining the application, and is sent to institute State the second certificate node;
The second certificate node, for generating second authentication information according to second identity information;
The transaction processing node, for determining corresponding second authority information of second authentication information;According to described Second authority information is participated in platform to the application and is mentioned by the second block chain node gateway and corresponding with service channel For second business service.
4. system according to claim 3, which is characterized in that
The second block chain node gateway participates in the Transaction Information that platform is sent for receiving the application, determines the friendship The application that easy information carries participates in whether platform identity information to be verified matches with second identity verifying information;
The transaction processing node, for upon a match, determining corresponding second permission of second identity verifying information Whether information includes trading privilege;If comprising the Transaction Information is sent to the operation node;
The first block chain node gateway, for receiving the Transaction Information, the node for determining that the Transaction Information carries is waited for Whether verification identity information matches with first identity verifying information;
The operation node, for upon a match, determining corresponding first authority information of first identity verifying information It whether include trading privilege, if comprising by the first block chain node gateway and trading channel, the transaction is believed Breath is sent to memory node, stores the Transaction Information, and the storage result is sent to the transaction processing node;
The transaction processing node participates in platform for the storage result to be sent to the application.
5. system according to claim 4, which is characterized in that
The operation node, for the Transaction Information to be distributed to other transaction processing nodes, so that other described friendships Easy to handle node is updated Transaction Information by respective memory node.
6. system according to claim 4, which is characterized in that the operation node further includes common recognition ordering joint;
The common recognition ordering joint, if including transaction for corresponding first authority information of first identity verifying information The Transaction Information is then carried out temporal sequence and is packaged into the Transaction Information after sequence by permission according to application packet Using respective trading information data block, the trading information data block is sent to the memory node in the operation node.
7. system according to claim 6, which is characterized in that
The common recognition ordering joint, if being believed according to the time multiple same transactions for receiving multiple same transaction information Breath is ranked up, and the Transaction Information for belonging to earliest time in sequence is packaged into the trading information data block of corresponding application, and will The trading information data block is sent to memory node.
8. system according to claim 7, which is characterized in that
The common recognition ordering joint, for being sent out to the correspondence transaction processing node for other same Transaction Information in sequence Send the expression information of Fail Transaction;
The transaction processing node participates in platform for the expression information of the Fail Transaction to be sent to the application, so that The application participates in platform and cancels the Transaction Information.
9. system according to claim 3, which is characterized in that
The second block chain node gateway participates in the query information that platform is sent for receiving the application, looks into described in determination It askes the application that information carries and participates in whether platform identity information to be verified matches with second identity verifying information;
The transaction processing node, if determining the corresponding second permission letter of second identity verifying information for matching Whether breath includes search access right;If comprising by the second block chain node gateway and inquiry channel, by the inquiry Information is sent to query node, so that the query node is according to the keyword in the query information, the data of match query As a result, and the data result be sent to the application and participate in platform.
10. system according to claim 2, which is characterized in that the system also includes: O&M node;
The O&M node, for disposing the service environment of the transaction processing node according to first identity information.
11. system according to claim 10, which is characterized in that
The operation node is also used to receive tiers e'tat information and application message using operation platform, in the third After identity information and the application message pass through audit, the tiers e'tat information and the application message are sent to fortune Tie up node;
The O&M node, for testing the application message, after test passes through, according to the tiers e'tat information with And the application message, dispose the application using operation platform.
12. system according to claim 6, which is characterized in that the operation node is responsible for the network of transaction processing node The identity and safe communication that access identity and safety management, transaction processing node and common recognition ordering joint are issued by runing node Certificate is linked into network;
Common recognition ordering joint, for providing the common recognition sequence cluster service of unified public use, to guarantee the one of Transaction Information Cause property and reliability.
13. system according to claim 1, which is characterized in that
The transaction processing node is the carrier of the various block chains application operation of the system users publication;Client is at transaction A variety of block chain industrial applications are disposed on reason node, share the Service Source using transaction processing node;
Transaction processing node issues access letter of identity and communication security certificate, to guarantee permission access and use block chain Industrial application;
The user right of application is configured and is managed in operation portal by application publisher, and synchronization distribution is at each transaction Manage node;
By node gateway access be deployed in transaction processing node in application, node gateway can first verify the identity of user, then According to the function privilege of application identities and User Identity verifying user's access.
14. a kind of method for network authorization based on block chain characterized by comprising
Receive the first authentication information;
The operation node is accessed by first authentication information, and by first authentication information, is obtained First business service of the operation node;
Platform is participated in application, and the second authentication information is provided;
By second authentication information, the application is allowed to participate in platform access;And pass through second authentication Information participates in platform to the application and provides the second business service.
15. a kind of method for network authorization based on block chain characterized by comprising
The first authentication information is provided to transaction processing node;
By first authentication information, the transaction processing node is allowed to access;And pass through first authentication Information, Xiang Suoshu transaction processing node provide the first business service.
16. a kind of calculating equipment, comprising: including memory, processor and communication component;
The memory, for storing computer program;
The communication component, is used for;Receive the first authentication information;Platform is participated in application, and the second authentication letter is provided Breath;
The processor, for executing the computer program, to be used for:
The operation node is accessed by first authentication information, and by first authentication information, is obtained First business service of the operation node;
By second authentication information, the application is allowed to participate in platform access;And pass through second authentication Information participates in platform to the application and provides the second business service.
17. a kind of calculating equipment, comprising: including memory, processor and communication component;
The memory, for storing computer program;
The communication component, is used for;The first authentication information is provided to transaction processing node;
The processor, for executing the computer program, to be used for:
By first authentication information, the transaction processing node is allowed to access;And pass through first authentication Information, Xiang Suoshu transaction processing node provide the first business service.
18. a kind of computer readable storage medium for being stored with computer program, which is characterized in that computer program by one or When multiple processors execute, one or more of processors is caused to realize the step in claims 14 or 15 the method.
CN201910535948.XA 2019-06-20 2019-06-20 Block chain-based network system, authentication method, equipment and storage medium Active CN110348830B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910535948.XA CN110348830B (en) 2019-06-20 2019-06-20 Block chain-based network system, authentication method, equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910535948.XA CN110348830B (en) 2019-06-20 2019-06-20 Block chain-based network system, authentication method, equipment and storage medium

Publications (2)

Publication Number Publication Date
CN110348830A true CN110348830A (en) 2019-10-18
CN110348830B CN110348830B (en) 2022-09-27

Family

ID=68182497

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910535948.XA Active CN110348830B (en) 2019-06-20 2019-06-20 Block chain-based network system, authentication method, equipment and storage medium

Country Status (1)

Country Link
CN (1) CN110348830B (en)

Cited By (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110769010A (en) * 2019-11-03 2020-02-07 长沙豆芽文化科技有限公司 Data management authority processing method and device and computer equipment
CN110868466A (en) * 2019-11-13 2020-03-06 上海焜耀网络科技有限公司 Storage method, system and equipment for distributed storage network
CN110955725A (en) * 2019-11-25 2020-04-03 北京工业大学 Industrial internet identification analysis root node data synchronization method
CN111010372A (en) * 2019-11-20 2020-04-14 国家信息中心 Block chain network identity authentication system, data processing method and gateway equipment
CN111147253A (en) * 2019-12-23 2020-05-12 联想(北京)有限公司 Information processing method, information processing device, electronic equipment and storage medium
CN111339097A (en) * 2020-02-25 2020-06-26 腾讯科技(深圳)有限公司 Data processing method and related equipment
CN111381863A (en) * 2020-03-17 2020-07-07 成都创流科技有限责任公司 APP transaction and automatic online method and system based on block chain technology
CN111399987A (en) * 2020-03-26 2020-07-10 国金公用通链(海南)信息科技有限公司 Universal block chain sandbox supervision technology
CN111934919A (en) * 2020-07-28 2020-11-13 厦门潭宏信息科技有限公司 Network convergence and networking method, equipment and storage medium thereof
CN112100064A (en) * 2020-09-02 2020-12-18 中国联合网络通信集团有限公司 Software purchasing method, authentication node and purchaser node based on block chain
CN112468537A (en) * 2020-11-02 2021-03-09 国家信息中心 Block chain network building structure based on local area network environment and data processing method
CN112465359A (en) * 2020-12-01 2021-03-09 中国联合网络通信集团有限公司 Calculation power calling method and device
CN112561510A (en) * 2020-12-21 2021-03-26 北京红枣科技有限公司 Payment system, method, device, equipment and storage medium
CN112702389A (en) * 2020-12-07 2021-04-23 深圳供电局有限公司 Data rights management method, device, equipment and storage medium
CN112732676A (en) * 2021-01-12 2021-04-30 成都库珀区块链科技有限公司 Data migration method, device, equipment and storage medium based on block chain
CN112801786A (en) * 2021-01-18 2021-05-14 中国工商银行股份有限公司 Block chain system and method for joint operation based on same
CN113721921A (en) * 2021-09-01 2021-11-30 杭州云象网络技术有限公司 Offline compiling method and system for alliance-chain multi-language external link code
CN113867690A (en) * 2021-12-07 2021-12-31 中移(上海)信息通信科技有限公司 Generation method and device of random number in block chain and block chain link point
CN114218556A (en) * 2021-12-23 2022-03-22 中国建设银行股份有限公司 Access authentication method, device, equipment, computer readable storage medium and product
CN115118457A (en) * 2022-05-27 2022-09-27 国家信息中心 Block chain-based distributed permission verification method, device and platform
CN115314375A (en) * 2022-07-22 2022-11-08 京东科技信息技术有限公司 Block chain network cross-domain networking method, device, storage medium and program product
CN115914243A (en) * 2021-08-17 2023-04-04 中移物联网有限公司 Information processing method and device and storage medium

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107273760A (en) * 2017-06-09 2017-10-20 济南浪潮高新科技投资发展有限公司 One kind is based on many CA application authentication methods of block chain
CN109088866A (en) * 2018-08-02 2018-12-25 北京百悟科技有限公司 Cloudy platform unified identity authentication method and device based on alliance's chain
CN109871669A (en) * 2019-03-14 2019-06-11 哈尔滨工程大学 A kind of data sharing solution based on block chain technology

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107273760A (en) * 2017-06-09 2017-10-20 济南浪潮高新科技投资发展有限公司 One kind is based on many CA application authentication methods of block chain
CN109088866A (en) * 2018-08-02 2018-12-25 北京百悟科技有限公司 Cloudy platform unified identity authentication method and device based on alliance's chain
CN109871669A (en) * 2019-03-14 2019-06-11 哈尔滨工程大学 A kind of data sharing solution based on block chain technology

Cited By (31)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110769010A (en) * 2019-11-03 2020-02-07 长沙豆芽文化科技有限公司 Data management authority processing method and device and computer equipment
CN110868466A (en) * 2019-11-13 2020-03-06 上海焜耀网络科技有限公司 Storage method, system and equipment for distributed storage network
CN111010372A (en) * 2019-11-20 2020-04-14 国家信息中心 Block chain network identity authentication system, data processing method and gateway equipment
CN110955725A (en) * 2019-11-25 2020-04-03 北京工业大学 Industrial internet identification analysis root node data synchronization method
CN110955725B (en) * 2019-11-25 2023-12-22 北京工业大学 Industrial Internet identification analysis root node data synchronization method
CN111147253A (en) * 2019-12-23 2020-05-12 联想(北京)有限公司 Information processing method, information processing device, electronic equipment and storage medium
CN111339097A (en) * 2020-02-25 2020-06-26 腾讯科技(深圳)有限公司 Data processing method and related equipment
CN111381863A (en) * 2020-03-17 2020-07-07 成都创流科技有限责任公司 APP transaction and automatic online method and system based on block chain technology
CN111381863B (en) * 2020-03-17 2023-03-07 成都创流科技有限责任公司 APP transaction and automatic online method and system based on block chain technology
CN111399987B (en) * 2020-03-26 2023-04-18 海口海辰宇信息科技有限公司 Universal block chain sandbox supervision technology
CN111399987A (en) * 2020-03-26 2020-07-10 国金公用通链(海南)信息科技有限公司 Universal block chain sandbox supervision technology
CN111934919A (en) * 2020-07-28 2020-11-13 厦门潭宏信息科技有限公司 Network convergence and networking method, equipment and storage medium thereof
CN111934919B (en) * 2020-07-28 2022-02-08 厦门潭宏信息科技有限公司 Network convergence and networking method, equipment and storage medium thereof
CN112100064A (en) * 2020-09-02 2020-12-18 中国联合网络通信集团有限公司 Software purchasing method, authentication node and purchaser node based on block chain
CN112100064B (en) * 2020-09-02 2023-06-02 中国联合网络通信集团有限公司 Software purchasing method based on blockchain, authentication node and purchaser node
CN112468537A (en) * 2020-11-02 2021-03-09 国家信息中心 Block chain network building structure based on local area network environment and data processing method
CN112465359B (en) * 2020-12-01 2024-03-15 中国联合网络通信集团有限公司 Calculation force calling method and device
CN112465359A (en) * 2020-12-01 2021-03-09 中国联合网络通信集团有限公司 Calculation power calling method and device
CN112702389A (en) * 2020-12-07 2021-04-23 深圳供电局有限公司 Data rights management method, device, equipment and storage medium
CN112561510A (en) * 2020-12-21 2021-03-26 北京红枣科技有限公司 Payment system, method, device, equipment and storage medium
CN112732676A (en) * 2021-01-12 2021-04-30 成都库珀区块链科技有限公司 Data migration method, device, equipment and storage medium based on block chain
CN112732676B (en) * 2021-01-12 2023-12-05 库珀科技集团有限公司 Block chain-based data migration method, device, equipment and storage medium
CN112801786A (en) * 2021-01-18 2021-05-14 中国工商银行股份有限公司 Block chain system and method for joint operation based on same
CN115914243A (en) * 2021-08-17 2023-04-04 中移物联网有限公司 Information processing method and device and storage medium
CN113721921A (en) * 2021-09-01 2021-11-30 杭州云象网络技术有限公司 Offline compiling method and system for alliance-chain multi-language external link code
CN113867690B (en) * 2021-12-07 2022-03-04 中移(上海)信息通信科技有限公司 Generation method and device of random number in block chain and block chain link point
CN113867690A (en) * 2021-12-07 2021-12-31 中移(上海)信息通信科技有限公司 Generation method and device of random number in block chain and block chain link point
CN114218556A (en) * 2021-12-23 2022-03-22 中国建设银行股份有限公司 Access authentication method, device, equipment, computer readable storage medium and product
CN115118457A (en) * 2022-05-27 2022-09-27 国家信息中心 Block chain-based distributed permission verification method, device and platform
CN115314375A (en) * 2022-07-22 2022-11-08 京东科技信息技术有限公司 Block chain network cross-domain networking method, device, storage medium and program product
CN115314375B (en) * 2022-07-22 2024-02-06 京东科技信息技术有限公司 Blockchain network cross-domain networking method, equipment, storage medium and program product

Also Published As

Publication number Publication date
CN110348830B (en) 2022-09-27

Similar Documents

Publication Publication Date Title
CN110348830A (en) A kind of network system based on block chain, authentication method, equipment and storage medium
Baza et al. B-ride: Ride sharing with privacy-preservation, trust and fair payment atop public blockchain
CN109302415B (en) A kind of authentication method, block chain node and storage medium
CN110490305A (en) Machine learning model processing method and node based on block chain network
CN110532323A (en) Pupilage information processing method, device, electronic equipment and storage medium in block chain network
KR102026580B1 (en) A control system for unmanned moving vechicle using blockchain and a control method thereof
CN110417558A (en) Verification method and device, the storage medium and electronic device of signature
CN109379382A (en) Data managing method, device, medium and the electronic equipment of block catenary system
WO2020173499A1 (en) Public chain-based sub-blockchain construction method and system
KR102039852B1 (en) A communication control system for unmanned moving vechicle using blockchain and a communication method thereof
KR20190089506A (en) System and method for e-contract with shared and distributed ledger coupled with outer storage devices
CN109948371A (en) The method and relevant apparatus of letter of identity are provided for block chain node
CN109658097A (en) Authentication management method, apparatus, medium and the electronic equipment of block catenary system
CN111294339B (en) Homogeneous alliance chain cross-chain method and device based on Fabric architecture
CN110517020A (en) The node of project development method and block chain network based on block chain network
CN109003185A (en) A kind of method for building up, device, calculating equipment and the storage medium of intelligence contract
CN108156232A (en) Data sharing method and device
TW202027459A (en) Hybrid blockchain architecture with computing pool
CN112702402A (en) System, method, device, processor and storage medium for realizing government affair information resource sharing and exchange based on block chain technology
CN109379381A (en) Data managing method, device, medium and the electronic equipment of block catenary system
Tkachuk et al. A survey on blockchain-based telecommunication services marketplaces
CN110148003A (en) A kind of carbon emissions trading method and system
Shivers Toward a secure and decentralized blockchain-based ride-hailing platform for autonomous vehicles
CN112231741A (en) Data processing method, device, medium and electronic equipment based on block chain system
CN111179113A (en) Power demand response method based on block chain technology

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant