CN110933015B

CN110933015B - Data transmission method, device and system

Info

Publication number: CN110933015B
Application number: CN201811096540.9A
Authority: CN
Inventors: 余珊; 姜继忠; 朱志辉; 常磊; 温曙光
Original assignee: Alibaba Group Holding Ltd
Current assignee: Alibaba Group Holding Ltd
Priority date: 2018-09-19
Filing date: 2018-09-19
Publication date: 2022-03-11
Anticipated expiration: 2038-09-19
Also published as: CN110933015A

Abstract

The application discloses a data transmission method, a data transmission device and a data transmission system. Wherein, the method comprises the following steps: the first application server acquires an access request sent by the second application server through a second intranet address, wherein the access request is used for accessing the blockchain nodes in the plurality of blockchain private networks; the first application server accesses the block chain node through the first intranet address based on the access request; the first application server sends an access result corresponding to the access request to the second application server through the second intranet address; the first intranet address and the second intranet address are allocated to the first application server by a network management module in the first block chain private network. The method and the device solve the technical problem that the data transmission system in the related technology cannot realize data communication between the block chain private network and the service private network.

Description

Data transmission method, device and system

Technical Field

The present application relates to the field of block chain technology, and in particular, to a data transmission method, apparatus, and system.

Background

The types of block chains include a public chain, a alliance chain and a private chain. The public chain is mainly oriented to individual users, and the application is mainly digital currency, tokens, ICO and the like; the alliance chain is mainly oriented to enterprise users or business alliances and the like, and is applied to very wide industries and business scenes, such as traceability of retail and manufacturing industries, supply chain finance, credit card and asset securitization of bank and financial industries, digital identity and credible deposit certificate of government industries, digital copyright of entertainment publishing industries, benevolence management of public welfare charities and the like, so that the alliance chain is the most important type which can embody the core value of constructing multi-party trust basis in enterprise-level markets.

The alliance chain type of blockchain serves primarily for multiple enterprises to form a blockchain technology-based business transaction network. Network intercommunication between any two blockchain nodes is required to be ensured among multiple enterprises so as to support the requirements of application access, blockchain account book data synchronization and the like, namely, a full-mesh type network access mode is required to be realized.

For enterprises, for security and controllability, the key business systems are generally deployed in private networks (e.g., VPC) or enterprise self-built or leased data center networks to secure business applications and business data and avoid attacks and intrusions from the outside.

In the related art, various schemes are provided for realizing the intercommunication among the link points of each block, which specifically include the following steps: the first is a network scheme based on public network IP, which can allocate one or more public network IPs to each block link point, so that the block link points of each enterprise can be communicated based on the public network, but exposing the block link nodes as the public network IPs brings greater security risk to the block link points themselves and the block link service application behind them; the second is a network scheme based on private lines or VPNs, which can realize the network communication between each participating enterprise, but the private lines or VPN modes are only connected in pairs and are not full-mesh in the true sense, and the scheme has the disadvantages of very complex configuration, high cost and low implementation efficiency; the third is a network scheme based on a single VPC, which can centralize block chain link points of different participating enterprises in a alliance chain into a single VPC, so that the nodes are communicated in the VPC network, but the scheme is only a private chain instead of a real alliance chain, so that centralized deployment is brought, and meanwhile, each enterprise loses the autonomous control right on the block chain account data and the nodes; the fourth is a network scheme based on a cloud enterprise network, which can connect VPCs of multiple enterprises in series through one CEN (similar to a ring network for connecting the VPCs), and realize full-mesh network access mode of block link points in different enterprise VPCs, however, service applications must be deployed in independent VPCs for safety, and because of the limitation of the CEN itself, the VPC where the connected block link points are located cannot be connected with the VPC where the service applications are located through a high-speed channel or a dedicated line mode.

For the problem that the data transmission system in the related art cannot realize data communication between the block chain private network and the service private network, no effective solution is proposed at present.

Disclosure of Invention

The embodiment of the application provides a data transmission method, a data transmission device and a data transmission system, which are used for at least solving the technical problem that a data transmission system in the related technology cannot realize data communication between a block chain private network and a service private network.

According to another aspect of the embodiments of the present application, there is provided a data transmission method, including: the method comprises the steps that a first application server obtains an access request sent by a second application server through a second intranet address, wherein the first application server is located in a first block chain private network in a plurality of block chain private networks, the second application server is located in a business private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks; the first application server accesses the block chain node through the first intranet address based on the access request; the first application server sends an access result corresponding to the access request to the second application server through the second intranet address; the first intranet address and the second intranet address are allocated to the first application server by a network management module in the first block chain private network.

According to an aspect of the embodiments of the present application, there is also provided a data transmission system, including: a plurality of blockchain private networks, each blockchain private network comprising at least one of: the system comprises block chain nodes, a first application server and a network management module, wherein communication relations exist among the block chain nodes in a plurality of block chain private networks; at least one service private network, each service private network having a communication relationship with a corresponding blockchain private network, wherein each service private network comprises: a second application server; the network management module is used for allocating a first internal network address and a second internal network address for a first application server in the same block chain private network, and the first application server performs data transmission with a region node in the same block chain private network through the first internal network address and performs data transmission with a second application server in a corresponding service private network through the second internal network address.

According to another aspect of the embodiments of the present application, there is also provided a data transmission apparatus, including: the acquisition module is used for acquiring an access request sent by a second application server through a second intranet address, wherein the first application server is positioned in a first block chain private network in a plurality of block chain private networks, the second application server is positioned in a service private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks; the access module is used for accessing the block chain node through the first intranet address based on the access request; the sending module is used for sending the access result corresponding to the access request to the second application server through the second intranet address; the first intranet address and the second intranet address are allocated to the first application server by a network management module in the first block chain private network.

According to another aspect of the embodiments of the present application, there is also provided a storage medium including a stored program, wherein when the program runs, a device on which the storage medium is located is controlled to perform the following steps: the method comprises the steps that a first application server obtains an access request sent by a second application server through a second intranet address, wherein the first application server is located in a first block chain private network in a plurality of block chain private networks, the second application server is located in a business private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks; the first application server accesses the block chain node through the first intranet address based on the access request; the first application server sends an access result corresponding to the access request to the second application server through the second intranet address; the first intranet address and the second intranet address are allocated to the first application server by a network management module in the first block chain private network.

According to another aspect of the embodiments of the present application, there is also provided a computing device, including: a processor for executing the program, wherein the following steps are performed when the program is executed: the method comprises the steps that a first application server obtains an access request sent by a second application server through a second intranet address, wherein the first application server is located in a first block chain private network in a plurality of block chain private networks, the second application server is located in a business private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks; the first application server accesses the block chain node through the first intranet address based on the access request; the first application server sends an access result corresponding to the access request to the second application server through the second intranet address; the first intranet address and the second intranet address are allocated to the first application server by a network management module in the first block chain private network.

According to another aspect of the embodiments of the present application, there is also provided a data transmission system, including: a processor; and a memory coupled to the processor for providing instructions to the processor for processing the following processing steps: the method comprises the steps that a first application server obtains an access request sent by a second application server through a second intranet address, wherein the first application server is located in a first block chain private network in a plurality of block chain private networks, the second application server is located in a business private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks; the first application server accesses the block chain node through the first intranet address based on the access request; the first application server sends an access result corresponding to the access request to the second application server through the second intranet address; the first intranet address and the second intranet address are allocated to the first application server by a network management module in the first block chain private network.

In this embodiment of the present application, communication relationships exist among the block link nodes in the multiple block chain private networks, each service private network has a communication relationship with the corresponding block chain private network, a network management module in a block chain private network may allocate a first intranet address and a second intranet address to a first application in the same block chain private network, and a first application server performs data transmission with a region node in the same block chain private network through the first intranet address and performs data transmission with a second application server in the corresponding service private network through the second intranet address. Compared with the prior art, the scheme provided by the embodiment of the application can realize the network scheme that the block chain alliance chain nodes are fully communicated between the VPCs of the enterprises and the service application safety isolation is ensured, the private network of each enterprise only needs to be accessed into the cloud enterprise network once, the technical effects of improving the service online speed and the operation and maintenance efficiency and saving the investment cost of the enterprises are achieved, and the technical problem that the data transmission system cannot realize the data communication between the block chain private network and the service private network in the related technology is solved.

Drawings

The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the application and together with the description serve to explain the application and not to limit the application. In the drawings:

FIG. 1 is a schematic diagram of a data transmission system according to an embodiment of the present application;

FIG. 2 is a schematic diagram of an alternative data transmission system according to an embodiment of the present application;

fig. 3 is a block diagram of a hardware structure of a computer terminal (or mobile device) for implementing a data transmission method according to an embodiment of the present application;

FIG. 4 is a flow chart of a method for data-based transmission according to an embodiment of the present application;

FIG. 5 is a schematic diagram of a data transmission device according to an embodiment of the present application; and

fig. 6 is a block diagram of a computer terminal according to an embodiment of the present application.

Detailed Description

In order to make the technical solutions better understood by those skilled in the art, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only partial embodiments of the present application, but not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.

It should be noted that the terms "first," "second," and the like in the description and claims of this application and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used is interchangeable under appropriate circumstances such that the embodiments of the application described herein are capable of operation in sequences other than those illustrated or described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

First, some terms or terms appearing in the description of the embodiments of the present application are applicable to the following explanations:

block chains: the method can be a distributed and multi-party shared ledger technology. The transaction data and the history records can not be tampered by a mathematical method, and the common confirmation and the account book records of all the participants on the transaction are realized by a consensus algorithm and an intelligent contract. The primary representatives include Etherns, Superbook (e.g., Hyperridge Fabric), Corda, and the like.

VPC: private or proprietary networks may refer to an isolated virtual network environment created by specifying IP address ranges and subnets, etc. configurations that belong to a user. Users create and use resources within a VPC, with complete isolation between different VPCs. This is the primary network form used by enterprises on cloud computing platforms.

The container clustering technology comprises the following steps: a container may be a technology represented by Docker that packages an operating system, applications, and their dependencies and provides a normalized running environment. And a technology for implementing management and scheduling of a container cluster on a large-scale, distributed node is called a container cluster technology. At the same time, it also provides the ability to abstract encapsulate and manage scheduling of underlying storage, network, computing, etc. resources. The industry is most typically represented by kubernets.

ENI: elastic Network Interface, Elastic Network card. May be a virtual network card that may be bound to a cloud host within a private network.

CEN: cloud Enterprise Network, Cloud Enterprise Network. The method can be a technology and a product which can realize building a private network communication channel between VPCs and between the VPCs and a local data center and realize automatic routing.

And (3) SDK: software Development Kit, Software Development Kit. May be a collection of development tools used by software engineers to build application software for a particular software package, software framework, hardware platform, operating system, etc. It may simply be a file that provides an application program interface API for a certain programming language, but may also include complex hardware that can communicate with a certain embedded system.

Example 1

The data transmission system in the related art cannot realize the data communication between the block chain private network and the service private network.

In order to solve the above technical problem, the present application provides a data transmission system, and fig. 1 is a schematic diagram of a data transmission system according to an embodiment of the present application, and as shown in fig. 1, the data transmission system may include: a plurality of blockchain private networks 12 and at least one business private network 14, each blockchain private network 12 including at least one of: a blockchain node 122, a first application server 124, and a network management module 126, each of the traffic private networks 14 including: a second application server 142.

The communication relation is reserved among the block chain link points in the plurality of block chain private networks; each business private network has a communication relation with the corresponding block chain private network; the network management module is used for distributing a first internal network address and a second internal network address for a first application server in the same block chain private network, and the first application server performs data transmission with a region node in the same block chain private network through the first internal network address and performs data transmission with a second application server in a corresponding service private network through the second internal network address.

Specifically, the plurality of blockchain private networks may be blockchain VPCs of different enterprises, each enterprise may manage and control its own blockchain VPC, and blockchain link points in the blockchain VPC of each enterprise are interconnected, so as to meet a requirement for accessing the blockchain alliance chain full-mesh network. In order to ensure the security of the service VPC, the service application of each enterprise can be deployed in the individual service VPC, and further can be deployed on a second application server, so that the isolation of the core service application and data of the enterprise is ensured, and the risk of attack and intrusion from an external network and other enterprises is avoided. The business VPC of each enterprise is only communicated with the block chain VPC of the enterprise, so that business applications in the business VPC can access the services of the block chain nodes in the block chain VPC of the enterprise.

Optionally, the plurality of block chain private networks establish communication connections through a cloud enterprise network, wherein the block chain nodes are used for communicating with block chain nodes in other block chain private networks through the cloud enterprise network.

Specifically, in order to implement intercommunication between blockchains VPCs of multiple enterprises, in the embodiment of the present application, a cloud enterprise network CEN is taken as an example for description, but the present application is not limited thereto, and other manners capable of implementing full connectivity of multiple VPCs may all implement the objects of the foregoing embodiments of the present application. Therefore, the block chain link point in any block chain VPC can access other block chain nodes in the block chain VPC or access block chain link points in other block chains VPC, and the full-mesh network access requirement is realized.

Optionally, the blockchain toolkit application accesses a service of a first blockchain node in the same blockchain private network through the blockchain toolkit and provides the service to a second application server in a corresponding business private network through an application programming interface.

Specifically, in order to implement any one of the enterprise's blockchain VPCs and the enterprise itself, a blockchain toolkit SDK application may be deployed in the blockchain VPC, and further, the blockchain SDK application may be deployed on the first application server. And the block chain SDK application accesses the service of the block chain node through the block chain SDK, executes an intelligent contract and operates the book data on the chain, performs upper-layer packaging on the basis of the function, and provides service calling capability for the business application in the forms of API and the like.

Further, a network management module may be deployed within the blockchain VPC, the network management module being responsible for allocating two intra-IPs for the blockchain SDK application, one intra-blockchain VPC IP (i.e. the first intra-network address mentioned above) and one intra-service VPC IP (i.e. the second intra-network address mentioned above). For an enterprise's blockchain VPC and service VPC, service applications within the service VPC can implement data communication with blockchain SDK applications based on IP within the service VPC, and blockchain SDK applications can implement data communication with blockchain nodes based on IP within the blockchain VPC. The business application can thus securely invoke the API services provided by the blockchain SDK application and not expose the business application itself to an external network or other enterprise's network.

It should be noted that, by setting two sets of IPs for the blockchain VPC and the service VPC, the service application calls the blockchain service on the premise of security isolation, that is, the service application can access the API service of the blockchain SDK application through the IP in the service VPC, and the blockchain SDK application can access the blockchain node in the enterprise blockchain VPC and the blockchain node in the other enterprise blockchain VPC through the IP in the blockchain VPC. However, any user or program within the enterprise blockchain VPC cannot access the business applications within the enterprise business VPC.

For example, as shown in fig. 2, a preferred embodiment of the present application is described by taking 3 enterprises as an example, and specifically includes an enterprise 1 blockchain VPC, an enterprise 2 blockchain VPC, an enterprise 3 blockchain VPC, and an enterprise 1 service VPC, where the enterprise 1 service VPC is not visible to enterprise 2 and enterprise 3. The enterprise 1 blockchain VPC, the enterprise 2 blockchain VPC and the enterprise 3 blockchain VPC are communicated through the CEN, and the blockchains VPC of all enterprises have the same structure. Taking enterprise 1 blockchain VPC as an example, the blockchain VPC may include a plurality of blockchain nodes, a federation chain network management module, and a blockchain SDK application container, and the federation chain network management module may automatically allocate one IP (e.g., IP1A) in the blockchain VPC and one IP (e.g., IP1B) in the service VPC to the blockchain SDK application container. Service applications within the enterprise 1 service VPC can implement data communications with blockchain SDK application containers within the enterprise 1 blockchain VPC based on IPs within the service VPC (e.g., IP1B), blockchain SDK application containers can implement data communications with blockchain nodes within the enterprise 1 blockchain VPC based on IPs within the blockchain VPC (e.g., IP1A), and can implement data communications with blockchain nodes within the enterprise 2 blockchain VPC and the enterprise 3 blockchain VPC based on connectivity capabilities of the CEN.

Based on the scheme provided by the above embodiment of the present application, communication relationships exist among the blockchain link points in the multiple blockchain private networks, each service private network has a communication relationship with the corresponding blockchain private network, a network management module in a blockchain private network can allocate a first intranet address and a second intranet address to a first application in the same blockchain private network, and the first application server performs data transmission with a regional node in the same blockchain private network through the first intranet address and performs data transmission with a second application server in the corresponding service private network through the second intranet address. Compared with the prior art, the scheme provided by the embodiment of the application can realize the network scheme that the block chain alliance chain nodes are fully communicated between the VPCs of the enterprises and the service application safety isolation is ensured, the private network of each enterprise only needs to be accessed into the cloud enterprise network once, the technical effects of improving the service online speed and the operation and maintenance efficiency and saving the investment cost of the enterprises are achieved, and the technical problem that the data transmission system cannot realize the data communication between the block chain private network and the service private network in the related technology is solved.

Optionally, in the foregoing embodiment of the present application, each blockchain private network further includes: and (5) an elastic network card.

The network management module is used for distributing the elastic network card for the first application server in the same block chain private network and distributing a first intranet address and a second intranet address for the elastic network card.

Optionally, the network management module is configured to allocate a first intranet address to the elastic network card according to a network segment of the first block chain private network, and allocate a second intranet address to the elastic network card according to a network segment of the corresponding service private network.

Specifically, because the first application server in the prior art has only one IP, in order to implement that the network management module allocates two IPs to the first application server, the elastic network card ENI may be allocated and managed for the blockchain SDK application through the network management module, and the elastic network card is bound to the blockchain SDK application and may be freely scheduled on different nodes along with the blockchain SDK application.

Further, the network management module can automatically allocate an IP in a block chain VPC and an IP in a service VPC to the flexible network card according to the block chain VPC network segment and the service VPC network segment of the enterprise, so as to realize the calling of the service application to the block chain service on the premise of safety isolation.

For example, as shown in fig. 2, the alliance-link network management module may allocate an elastic network card ENI to each blockchain SDK application container, and automatically allocate one blockchain VPC inner IP (e.g., IP1A) and one service VPC inner IP (e.g., IP1B) to the elastic network card according to the blockchain VPC network segment and the service VPC network segment of the enterprise.

Optionally, in the above embodiment of the present application, the first application server in each blockchain private network is deployed as multiple instances, where a first intranet address and a second intranet address allocated to each instance are different.

Further, the second application server is connected with any one instance in the corresponding block chain private network through a load balancing technology.

Specifically, in order to ensure high availability of the blockchain service to the service application, the blockchain SDK application may be expanded horizontally to deploy multiple instances, and the network management module may automatically allocate and manage the flexible network card and addresses in different VPCs for the multiple instances, so that any one blockchain SDK application instance may access a blockchain node, and the service application may also be connected to any one blockchain SDK application instance through a load balancing technique.

For example, as shown in fig. 2, instance 1 and instance 2 may be deployed with a horizontal extension of a blockchain SDK application container, and the federation chain network management module may allocate IP1A and IP1B for blockchain SDK application container instance 1 and IP2A and IP2B for blockchain SDK application container instance 2, each instance having a different intra-IP. When the block chain SDK application container example 1 fails, the service application can still call to obtain the block chain service through the block chain SDK application container example 2.

Optionally, in the above embodiments of the present application, the blockchain toolkit application is deployed on the first application server in the form of a container or a virtual machine, where in a case that the blockchain toolkit application is deployed on the first application server in the form of a container, blockchain link points in the same blockchain private network are deployed on the container cluster in the form of a container.

Specifically, in the embodiment of the present application, a container cluster technology is taken as an example for explanation, in a blockchain VPC of each enterprise, a blockchain node is deployed and runs on a container cluster (e.g., kubernets) in a container form, and a blockchain SDK application is deployed and runs in a container. Further, based on the deployment manner of the virtual machine, the deployment environment with the container as the carrier may be replaced with the deployment environment with the virtual machine VM as the carrier.

For example, as shown in fig. 2, the block chain SDK application runs in a container, and the alliance chain management module may allocate an elastic network card ENI to the block chain SDK application container and allocate two internal IPs.

Example 2

There is also provided, in accordance with an embodiment of the present application, an embodiment of a data transmission method, to note that the steps illustrated in the flowchart of the figure may be performed in a computer system, such as a set of computer-executable instructions, and that, although a logical order is illustrated in the flowchart, in some cases, the steps illustrated or described may be performed in an order different than here.

The method provided by the first embodiment of the present application may be executed in a mobile terminal, a computer terminal, or a similar computing device. Fig. 3 shows a hardware configuration block diagram of a computer terminal (or mobile device) for implementing the data transmission method. As shown in fig. 3, the computer terminal 10 (or mobile device 10) may include one or more (shown as 102a, 102b, … …, 102 n) processors 102 (the processors 102 may include, but are not limited to, a processing device such as a microprocessor MCU or a programmable logic device FPGA, etc.), a memory 104 for storing data, and a transmission device 106 for communication functions. Besides, the method can also comprise the following steps: a display, an input/output interface (I/O interface), a Universal Serial Bus (USB) port (which may be included as one of the ports of the I/O interface), a network interface, a power source, and/or a camera. It will be understood by those skilled in the art that the structure shown in fig. 3 is only an illustration and is not intended to limit the structure of the electronic device. For example, the computer terminal 10 may also include more or fewer components than shown in FIG. 3, or have a different configuration than shown in FIG. 3.

It should be noted that the one or more processors 102 and/or other data processing circuitry described above may be referred to generally herein as "data processing circuitry". The data processing circuitry may be embodied in whole or in part in software, hardware, firmware, or any combination thereof. Further, the data processing circuit may be a single stand-alone processing module, or incorporated in whole or in part into any of the other elements in the computer terminal 10 (or mobile device). As referred to in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistance termination path to interface with).

The memory 104 may be used to store software programs and modules of application software, such as program instructions/data storage devices corresponding to the data transmission method in the embodiment of the present application, and the processor 102 executes various functional applications and data processing by executing the software programs and modules stored in the memory 104, so as to implement the data transmission method described above. The memory 104 may include high speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include memory located remotely from the processor 102, which may be connected to the computer terminal 10 via a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The transmission device 106 is used for receiving or transmitting data via a network. Specific examples of the network described above may include a wireless network provided by a communication provider of the computer terminal 10. In one example, the transmission device 106 includes a Network adapter (NIC) that can be connected to other Network devices through a base station to communicate with the internet. In one example, the transmission device 106 can be a Radio Frequency (RF) module, which is used to communicate with the internet in a wireless manner.

The display may be, for example, a touch screen type Liquid Crystal Display (LCD) that may enable a user to interact with a user interface of the computer terminal 10 (or mobile device).

Fig. 3 shows a block diagram of a hardware structure, which may be taken as an exemplary block diagram of not only the computer terminal 10 (or the mobile device) but also the server, and in an alternative embodiment, fig. 1 shows an embodiment of using the computer terminal 10 (or the mobile device) shown in fig. 3 as a server in a block diagram. As shown in fig. 1, the computer terminal 10 may be a first application server, or a block link point, or a second application server.

Under the operating environment, the application provides a data transmission method as shown in fig. 4, and the method is applied to a first application server. Fig. 4 is a flowchart of a data transmission method according to an embodiment of the present application. As shown in fig. 4, the method may include the steps of:

step S42, the first application server obtains an access request sent by the second application server through the second intranet address, where the first application server is located in a first blockchain private network of the multiple blockchain private networks, the second application server is located in a service private network corresponding to the first blockchain private network, and the access request is used to access a blockchain node in the multiple blockchain private networks.

In step S44, the first application server accesses the node of the block chain through the first intranet address based on the access request.

And step S46, the first application server sends the access result corresponding to the access request to the second application server through the second intranet address.

The first intranet address and the second intranet address are allocated to the first application server by a network management module in the first block chain private network.

Based on the scheme provided by the foregoing embodiment of the present application, after obtaining the access request sent by the second application server through the second intranet address, the first application server may access the block link node through the first intranet address based on the access request, and further send the access result corresponding to the access request to the second application server through the second intranet address. Compared with the prior art, the scheme provided by the embodiment of the application can realize the network scheme that the block chain alliance chain nodes are fully communicated between the VPCs of the enterprises and the service application safety isolation is ensured, the private network of each enterprise only needs to be accessed into the cloud enterprise network once, the technical effects of improving the service online speed and the operation and maintenance efficiency and saving the investment cost of the enterprises are achieved, and the technical problem that the data transmission system cannot realize the data communication between the block chain private network and the service private network in the related technology is solved.

Optionally, in the foregoing embodiment of the present application, the first intranet address and the second intranet address are bound to an elastic network card bound to the first application server, and the elastic network card is allocated to the first application server by the network management module.

Further, the first intranet address is allocated by the network management module according to the network segment of the first block chain private network, and the second intranet address is allocated by the network management module according to the network segment of the service private network.

Optionally, in the foregoing embodiment of the present application, in a case that the blockchain node is located in the second blockchain private network, in step S44, the accessing, by the first application server, the blockchain node through the first intranet address based on the access request includes: the first application server accesses the block chain nodes in the first block chain private network through the first intranet address and accesses the block chain nodes through the cloud enterprise network, wherein the plurality of block chain private networks establish communication connection through the cloud enterprise network.

Optionally, in the above embodiments of the present application, the first application server is deployed as a plurality of instances, where a first intranet address and a second intranet address allocated to each instance are different.

Further, the second application server sends the access request to any one instance through a load balancing technique.

It should be noted that, for alternative or preferred embodiments of this embodiment, reference may be made to the description in embodiment 1, and details are not described herein.

It should be noted that, for simplicity of description, the above-mentioned method embodiments are described as a series of acts or combination of acts, but those skilled in the art will recognize that the present application is not limited by the order of acts described, as some steps may occur in other orders or concurrently depending on the application. Further, those skilled in the art should also appreciate that the embodiments described in the specification are preferred embodiments and that the acts and modules referred to are not necessarily required in this application.

Through the above description of the embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but the former is a better implementation mode in many cases. Based on such understanding, the technical solutions of the present application may be embodied in the form of a software product, which is stored in a storage medium (e.g., ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal device (e.g., a mobile phone, a computer, a server, or a network device) to execute the method according to the embodiments of the present application.

Example 3

According to an embodiment of the present application, there is also provided a data transmission apparatus for implementing the data transmission method, as shown in fig. 5, the apparatus 500 includes: an acquisition module 502, an access module 504, and a sending module 506.

The obtaining module 502 is configured to obtain an access request sent by a second application server through a second intranet address, where the first application server is located in a first blockchain private network of the multiple blockchain private networks, the second application server is located in a service private network corresponding to the first blockchain private network, and the access request is used to access a blockchain node in the multiple blockchain private networks; the access module 504 is configured to access a block chain node through a first intranet address based on the access request; the sending module 506 is configured to send the access result corresponding to the access request to the second application server through the second intranet address.

It should be noted here that the acquiring module 502, the accessing module 504 and the sending module 506 correspond to steps S42 to S46 in embodiment 2, and the three modules are the same as the corresponding steps in the implementation example and application scenario, but are not limited to the disclosure in embodiment 2. It should be noted that the above modules may be operated in the computer terminal 10 provided in embodiment 2 as a part of the apparatus.

Based on the scheme provided by the foregoing embodiment of the present application, after the first application server obtains, by the obtaining module, the access request sent by the second application server through the second intranet address, the first application server may access, by the access module, the block link node through the first intranet address based on the access request, and further send, by the sending module, the access result corresponding to the access request to the second application server through the second intranet address. Compared with the prior art, the scheme provided by the embodiment of the application can realize the network scheme that the block chain alliance chain nodes are fully communicated between the VPCs of the enterprises and the service application safety isolation is ensured, the private network of each enterprise only needs to be accessed into the cloud enterprise network once, the technical effects of improving the service online speed and the operation and maintenance efficiency and saving the investment cost of the enterprises are achieved, and the technical problem that the data transmission system cannot realize the data communication between the block chain private network and the service private network in the related technology is solved.

Example 4

According to an embodiment of the present application, there is also provided a data transmission system, including:

a processor; and

a memory coupled to the processor for providing instructions to the processor for processing the following processing steps:

the method comprises the steps that a first application server obtains an access request sent by a second application server through a second intranet address, wherein the first application server is located in a first block chain private network in a plurality of block chain private networks, the second application server is located in a business private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks;

the first application server accesses the block chain node through the first intranet address based on the access request;

the first application server sends an access result corresponding to the access request to the second application server through the second intranet address;

Example 5

The embodiment of the application can provide a computer terminal, and the computer terminal can be any one computer terminal device in a computer terminal group. Optionally, in this embodiment, the computer terminal may also be replaced with a terminal device such as a mobile terminal.

Optionally, in this embodiment, the computer terminal may be located in at least one network device of a plurality of network devices of a computer network.

In this embodiment, the computer terminal may execute program codes of the following steps in the data transmission method: the method comprises the steps that a first application server obtains an access request sent by a second application server through a second intranet address, wherein the first application server is located in a first block chain private network in a plurality of block chain private networks, the second application server is located in a business private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks; the first application server accesses the block chain node through the first intranet address based on the access request; the first application server sends an access result corresponding to the access request to the second application server through the second intranet address; the first intranet address and the second intranet address are allocated to the first application server by a network management module in the first block chain private network.

Optionally, fig. 6 is a block diagram of a computer terminal according to an embodiment of the present application. As shown in fig. 6, the computer terminal a may include: one or more processors 602 (only one of which is shown), and a memory 604.

The memory may be configured to store software programs and modules, such as program instructions/modules corresponding to the data transmission method and apparatus in the embodiments of the present application, and the processor executes various functional applications and data processing by running the software programs and modules stored in the memory, so as to implement the data transmission method. The memory may include high speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory may further include memory remotely located from the processor, and these remote memories may be connected to terminal a through a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The processor can call the information and application program stored in the memory through the transmission device to execute the following steps: the method comprises the steps that a first application server obtains an access request sent by a second application server through a second intranet address, wherein the first application server is located in a first block chain private network in a plurality of block chain private networks, the second application server is located in a business private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks; the first application server accesses the block chain node through the first intranet address based on the access request; the first application server sends an access result corresponding to the access request to the second application server through the second intranet address; the first intranet address and the second intranet address are allocated to the first application server by a network management module in the first block chain private network.

Optionally, the processor may further execute the program code of the following steps: the first intranet address and the second intranet address are bound to an elastic network card bound to the first application server, and the elastic network card is distributed to the first application server by the network management module.

Optionally, the processor may further execute the program code of the following steps: the first intranet address is allocated by the network management module according to the network segment of the first block chain private network, and the second intranet address is allocated by the network management module according to the network segment of the service private network.

Optionally, the processor may further execute the program code of the following steps: under the condition that the block chain link point is located in the second block chain private network, the first application server accesses the block chain node in the first block chain private network through the first intranet address and accesses the block chain node through the cloud enterprise network, wherein the plurality of block chain private networks establish communication connection through the cloud enterprise network.

Optionally, the processor may further execute the program code of the following steps: the first application server is deployed into a plurality of instances, wherein a first intranet address and a second intranet address allocated to each instance are different.

Optionally, the processor may further execute the program code of the following steps: the second application server sends the access request to any one instance through a load balancing technology.

By adopting the embodiment of the application, after the first application server obtains the access request sent by the second application server through the second intranet address, the first application server can access the block chain node through the first intranet address based on the access request, and further send the access result corresponding to the access request to the second application server through the second intranet address. Compared with the prior art, the scheme provided by the embodiment of the application can realize the network scheme that the block chain alliance chain nodes are fully communicated between the VPCs of the enterprises and the service application safety isolation is ensured, the private network of each enterprise only needs to be accessed into the cloud enterprise network once, the technical effects of improving the service online speed and the operation and maintenance efficiency and saving the investment cost of the enterprises are achieved, and the technical problem that the data transmission system cannot realize the data communication between the block chain private network and the service private network in the related technology is solved.

It can be understood by those skilled in the art that the structure shown in fig. 6 is only an illustration, and the computer terminal may also be a terminal device such as a smart phone (e.g., an Android phone, an iOS phone, etc.), a tablet computer, a palmtop computer, a Mobile Internet Device (MID), a PAD, and the like. Fig. 6 is a diagram illustrating a structure of the electronic device. For example, the computer terminal a may also include more or fewer components (e.g., network interfaces, display devices, etc.) than shown in fig. 6, or have a different configuration than shown in fig. 6.

Those skilled in the art will appreciate that all or part of the steps in the methods of the above embodiments may be implemented by a program instructing hardware associated with the terminal device, where the program may be stored in a computer-readable storage medium, and the storage medium may include: flash disks, Read-Only memories (ROMs), Random Access Memories (RAMs), magnetic or optical disks, and the like.

Example 6

Embodiments of the present application also provide a storage medium. Optionally, in this embodiment, the storage medium may be configured to store a program code executed by the data transmission method provided in the first embodiment.

Optionally, in this embodiment, the storage medium may be located in any one of computer terminals in a computer terminal group in a computer network, or in any one of mobile terminals in a mobile terminal group.

Optionally, in this embodiment, the storage medium is configured to store program code for performing the following steps: the method comprises the steps that a first application server obtains an access request sent by a second application server through a second intranet address, wherein the first application server is located in a first block chain private network in a plurality of block chain private networks, the second application server is located in a business private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks; the first application server accesses the block chain node through the first intranet address based on the access request; the first application server sends an access result corresponding to the access request to the second application server through the second intranet address; the first intranet address and the second intranet address are allocated to the first application server by a network management module in the first block chain private network.

The above-mentioned serial numbers of the embodiments of the present application are merely for description and do not represent the merits of the embodiments.

In the above embodiments of the present application, the descriptions of the respective embodiments have respective emphasis, and for parts that are not described in detail in a certain embodiment, reference may be made to related descriptions of other embodiments.

In the embodiments provided in the present application, it should be understood that the disclosed technology can be implemented in other ways. The above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units is only one type of division of logical functions, and there may be other divisions when actually implemented, for example, a plurality of units or components may be combined or may be integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, units or modules, and may be in an electrical or other form.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application may be substantially implemented or contributed to by the prior art, or all or part of the technical solution may be embodied in a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic or optical disk, and other various media capable of storing program codes.

The foregoing is only a preferred embodiment of the present application and it should be noted that those skilled in the art can make several improvements and modifications without departing from the principle of the present application, and these improvements and modifications should also be considered as the protection scope of the present application.

Claims

1. A method of data transmission, comprising:

a first application server acquires an access request sent by a second application server through a second intranet address, wherein the first application server is located in a first block chain private network in a plurality of block chain private networks, the second application server is located in a service private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks;

the first application server accesses the block chain node through a first intranet address based on the access request;

the first intranet address and the second intranet address are allocated to the first application server by a network management module in the first blockchain private network.

2. The method according to claim 1, wherein the first intranet address and the second intranet address are bound to a flexible network card bound to the first application server, and the flexible network card is allocated to the first application server by the network management module.

3. The method of claim 2, wherein the first intranet address is assigned by the network management module according to a network segment of the first blockchain private network, and the second intranet address is assigned by the network management module according to a network segment of the business private network.

4. The method of claim 1, wherein the first application server accessing the blockchain node through a first intranet address based on the access request with the blockchain node located in a second blockchain private network comprises:

the first application server accesses the block chain nodes in the first block chain private network through the first intranet address and accesses the block chain nodes through a cloud enterprise network, wherein the plurality of block chain private networks establish communication connection through the cloud enterprise network.

5. The method according to claim 4, wherein the first application server is deployed as a plurality of instances, wherein each instance is assigned a different first and second intranet address.

6. The method of claim 5, wherein the second application server sends the access request to any one instance through a load balancing technique.

7. A data transmission system comprising:

a plurality of blockchain private networks, each blockchain private network comprising: the system comprises block chain nodes, a first application server and a network management module, wherein communication relations exist among the block chain nodes in the plurality of block chain private networks;

at least one service private network, each service private network having a communication relationship with a corresponding blockchain private network, wherein each service private network comprises: a second application server;

the network management module is used for allocating a first internal network address and a second internal network address for a first application server in the same block chain private network, and the first application server performs data transmission with a region node in the same block chain private network through the first internal network address and performs data transmission with a second application server in a corresponding service private network through the second internal network address.

8. The system of claim 7, wherein each blockchain private network further comprises:

and the network management module is used for distributing the elastic network card for the first application server in the same block chain private network and distributing the first intranet address and the second intranet address for the elastic network card.

9. The system of claim 8, wherein the network management module is configured to allocate the first intranet address to the resilient network card according to a network segment of the first blockchain private network, and allocate the second intranet address to the resilient network card according to a network segment of a corresponding service private network.

10. The system of claim 7, wherein the plurality of blockchain private networks establish communication connections through a cloud enterprise network, wherein the blockchain nodes are configured to communicate with blockchain link points in other blockchain private networks through the cloud enterprise network.

11. The system of claim 7, wherein the first application server in each blockchain private network is deployed as a plurality of instances, wherein each instance is assigned a different first and second intranet address.

12. The system of claim 11, wherein the second application server connects any one instance of the corresponding blockchain private network through a load balancing technique.

13. The system of claim 7, wherein the blockchain toolkit application accesses services of a first blockchain node in the same blockchain private network through the blockchain toolkit and provides services to a second application server in a corresponding business private network through the application programming interface.

14. The system of claim 7, wherein a blockchain toolkit application is deployed on the first application server in the form of a container or a virtual machine, wherein in the case where the blockchain toolkit application is deployed on the first application server in the form of a container, blockchain link points in the same blockchain private network are deployed on a container cluster in the form of a container.

15. A data transmission apparatus provided in a first application server, the apparatus comprising:

an obtaining module, configured to obtain an access request sent by a second application server through a second intranet address, where the first application server is located in a first blockchain private network in a plurality of blockchain private networks, the second application server is located in a service private network corresponding to the blockchain private network, and the access request is used to access a blockchain node in the plurality of blockchain private networks;

the first access module is used for accessing the block chain node through a first intranet address based on the access request;

the sending module is used for sending the access result corresponding to the access request to the second application server through the second intranet address;

16. A storage medium comprising a stored program, wherein the program, when executed, controls an apparatus on which the storage medium is located to perform the steps of:

17. A computing device, comprising: a processor for executing a program, wherein the following steps are performed when the program is executed:

18. A data transmission system comprising:

a processor; and

a memory coupled to the processor for providing instructions to the processor for processing the following processing steps: a first application server acquires an access request sent by a second application server through a second intranet address, wherein the first application server is located in a first block chain private network in a plurality of block chain private networks, the second application server is located in a service private network corresponding to the first block chain private network, and the access request is used for accessing block chain nodes in the plurality of block chain private networks;