CN114036577A - Coalition chain-oriented supervision method and supervision digital twin model - Google Patents
Coalition chain-oriented supervision method and supervision digital twin model Download PDFInfo
- Publication number
- CN114036577A CN114036577A CN202111324023.4A CN202111324023A CN114036577A CN 114036577 A CN114036577 A CN 114036577A CN 202111324023 A CN202111324023 A CN 202111324023A CN 114036577 A CN114036577 A CN 114036577A
- Authority
- CN
- China
- Prior art keywords
- transaction
- account
- supervision
- node
- state
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 41
- 230000007704 transition Effects 0.000 claims abstract description 52
- 238000013507 mapping Methods 0.000 claims abstract description 44
- 230000006399 behavior Effects 0.000 claims description 55
- 238000010586 diagram Methods 0.000 claims description 38
- 230000008569 process Effects 0.000 claims description 17
- 238000012546 transfer Methods 0.000 claims description 13
- 238000012544 monitoring process Methods 0.000 claims description 10
- 238000012216 screening Methods 0.000 claims description 5
- 238000012384 transportation and delivery Methods 0.000 claims description 4
- 230000009286 beneficial effect Effects 0.000 claims description 3
- 230000009191 jumping Effects 0.000 claims description 3
- 230000001105 regulatory effect Effects 0.000 claims description 3
- 238000012795 verification Methods 0.000 description 10
- 230000007246 mechanism Effects 0.000 description 9
- 230000008901 benefit Effects 0.000 description 6
- 238000005516 engineering process Methods 0.000 description 6
- 230000000694 effects Effects 0.000 description 3
- 230000009471 action Effects 0.000 description 2
- 125000002015 acyclic group Chemical group 0.000 description 2
- 238000013506 data mapping Methods 0.000 description 2
- 238000007689 inspection Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000004806 packaging method and process Methods 0.000 description 2
- 238000007781 pre-processing Methods 0.000 description 2
- 230000002860 competitive effect Effects 0.000 description 1
- 230000006835 compression Effects 0.000 description 1
- 238000007906 compression Methods 0.000 description 1
- 238000007796 conventional method Methods 0.000 description 1
- 238000013499 data model Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 235000019580 granularity Nutrition 0.000 description 1
- 230000000977 initiatory effect Effects 0.000 description 1
- 238000011835 investigation Methods 0.000 description 1
- 230000001788 irregular Effects 0.000 description 1
- 238000007726 management method Methods 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
- 230000008520 organization Effects 0.000 description 1
- 238000012856 packing Methods 0.000 description 1
- 238000013439 planning Methods 0.000 description 1
- 238000012545 processing Methods 0.000 description 1
- 238000003672 processing method Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/27—Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management
Abstract
The invention discloses a supervision method facing a alliance chain, which comprises the following steps: transaction supervision, account transaction behavior supervision and node behavior supervision, wherein a mapping from a transaction needing supervision to a corresponding node in a model is created by establishing a state transition model graph for certain specific accounts in a specific time period, and the supervision on the transaction is converted into supervision on the node in the model. The invention can be applied to dynamic supervision of a alliance chain system and has wide application scenes.
Description
Technical Field
The invention relates to a block chain supervision mapping model based on digital twin, in particular to a digital twin mapping model facing alliance chain supervision and a supervision implementation method.
Background
From the advent of Bizhou, the block chain technology is continuously developed, the block chain technology is widely applied in real life, and the alliance chain technology is also developed in a fierce manner in an application scene of enterprise collaboration.
In a traditional blockchain system, a node refers to a server which has computing resources and storage capacity and can be connected with a network, and any node can be accessed into the network of the blockchain system to perform activities such as transaction submission, competitive billing right, block packing, block synchronization and the like. The number of nodes is usually very large, and some malicious nodes are also contained in the nodes, but the proportion of the number of the malicious nodes to the number of the nodes of the whole blockchain system is usually smaller than a fixed value (1/2 or 1/3), and the safety of the blockchain system is guaranteed through the basic assumption and a series of mechanism designs. The most important thing of the blockchain system is to achieve consensus, and to ensure that the content in the blockchain stored locally by the nodes is consistent as much as possible, but because the number of the nodes is very large and malicious nodes exist, achieving consensus in the conventional blockchain system is often costly, and alliance chain technology comes up.
The federation chain technology focuses on an application scenario that several enterprises or units cooperate to share some data and services, and enterprises participating in cooperation usually maintain some nodes bearing different tasks in a federation chain system, and realize the sharing of specific service data by a mode of achieving consensus in the federation chain system. Compared with the traditional block chain system, the node number of the alliance chain system is much less, the node number of the general alliance chain system is usually single digit or dozens of nodes, and the nodes added into the alliance chain also have a certain identity authentication mechanism.
The inventor of the present application has found that there are many problems caused by the irregular management and use of the federation chain. At present, the common consensus nodes in the federation chain system are all verifiable, and the authority provided by the member service provider is also needed for initiating the transaction. The strong identity permission of the alliance chain brings the advantage of interface standardization, but at the same time, the strong identity permission often conflicts with the purpose of privacy protection; moreover, due to the incremental characteristics of the block chain data, how to efficiently process the incremental data by the supervision model aiming at the alliance chain is also a problem to be considered. In the existing alliance chain supervision scheme, a mode of firstly collecting and preprocessing data and then analyzing related data is mostly adopted. However, the large data volume of the block chain causes high complexity of time and space required by preprocessing and low overall operation efficiency; meanwhile, the supervision mode also has the risk of generating interference on the running alliance chain system and causing safety problems generated by the supervisors.
Therefore, establishing a federation chain-oriented, secure and efficient data mapping model to achieve effective policing is critical to establishing a security protection architecture.
Disclosure of Invention
Aiming at the defects of the prior art, the technical problem to be solved by the invention is to provide a digital twin-based alliance chain data mapping model, and different supervision algorithms are operated on the established data model according to different requirements to realize a more targeted and efficient supervision target.
The application provides a supervision method facing to a alliance chain, which is characterized in that: supervision server applied to a coalition chain supervision system, comprising:
transaction supervision, namely establishing a state transition model diagram for certain specific accounts in a specific time period, creating a mapping from the transaction to be supervised to a circular node in the model, and converting the supervision of the transaction into the supervision of a transaction node in the model;
and account transaction behavior supervision, wherein the transaction behavior of the account is abstracted to a transaction node on the state transition mapping diagram, the account atomic state node points to the transaction node and represents that the account participates in the transaction, the transaction node points to an account atomic state node with a later timestamp and represents the state of the account after the transaction is executed, and all the specific transaction information is completely recorded on the corresponding transaction node in the state transition model diagram.
And the node behavior supervision module is used for comparing the transaction submitted by the node with the originally expected transaction execution sequence so as to judge whether the node behavior meets the supervision requirement.
The technical scheme of the supervision method of the invention is further limited as follows: the transaction supervision comprises the following steps:
step 101, inputting a state transition model diagram G;
step 102, reading an unread transaction Tx from G;
step 103, reading the nodes pointing to the Tx multi-account into a list S1, and recording the nodes pointed to the multi-account by the Tx into a list S2;
104, judging whether the related signature information in the Tx accords with the consensus protocol of the block chain;
step 105, checking whether the related transfer and contract information are matched in S1 and S2 according to the transaction content in Tx;
step 106, calling an algorithm for judging whether the contract has the vulnerability, and judging whether the contract has the vulnerability;
step 107, outputting that the transaction is illegal;
step 108, outputting the transaction legality and outputting the related information of the searched vulnerability;
step 109, outputting that the transaction is legal and the contract has no vulnerability;
step 110, judging whether unread transaction nodes exist in the graph or not;
and step 111, finishing the process.
The technical scheme of the supervision method of the invention is further limited as follows: the account transaction behavior administration comprises the following steps:
step 201: establishing a state transition mapping chart according to transaction information in a block chain, and maintaining a priority queue l for storing all unseen accounts with suspicion, wherein each account has an attribute H and records suspicion degrees of the accounts;
step 202: selecting an account S with the highest suspicion degree H from the I for checking, and randomly selecting an account for checking under the condition of consistent suspicion degree; under the initial condition, the suspicion degrees H of all accounts are consistent;
step 203: when transaction involving account S is asTwo linked lists l representing S as a payee or payer are added in sequence1And l2If (S, v) ∈ E, l1＝l1∪{(S,v)}， (v,S)∈E,l2＝l2∪{(v,S)}；
Step 204: intercepting the transaction information related to the account in a certain time period, operating an algorithm on a subgraph consisting of edges representing the transactions, and judging whether an illegal behavior exists; if yes, go to step 205, otherwise go to step 207;
step 205: outputting the account with illegal behaviors, and screening fine grit through transaction supervision for the transaction related to the account in the transaction with illegal behaviors, and performing step 206;
step 206: updating the suspicion degree of the account associated with the transaction, if the account is not checked in the current round of supervision, adding the account into a priority queue l, and performing step 208;
step 207: outputting the account without illegal behaviors;
step 208: if l is not empty, go to step 202, otherwise go to step 209;
step 209: the supervision process is ended.
The technical scheme of the supervision method of the invention is further limited as follows: the node behavior supervision comprises the following steps:
step 301: establishing a state transition mapping chart according to the transaction information in the block chain and accounts which can be colluded with the node;
step 302, intercepting a time period corresponding to a block packed by a managed node, and traversing through a dynamic programming algorithm to obtain a related transaction;
step 303: reordering the transactions according to rules agreed by the blockchain system;
step 304: comparing the sequence of the transactions in the chain with the reordered transactions, and jumping to step 306 if the compared sequence is basically consistent; if the comparison sequence is very different, go to step 305;
step 305: analyzing accounts of advanced transactions and corresponding profits in a specific transaction sequence, and investigating whether the accounts and related accounts of the operation nodes are beneficial to delivery;
step 306: the supervision process is ended.
The invention also discloses a digital twin model facing alliance chain supervision and used by the supervision method, which comprises an alliance chain supervision system and is characterized in that: the alliance chain monitoring system comprises a state transition model diagram established on a bottom alliance chain system model and an upper layer module established on the state transition model diagram, wherein the upper layer module comprises a transaction monitoring module, an account transaction behavior monitoring module and a node behavior monitoring module;
the transaction supervision module establishes a state transition model graph aiming at certain specific accounts in a specific time period, creates a mapping from the transaction needing supervision to a specific transaction node in the model, and converts the supervision of the transaction into the supervision of the transaction node in the model; judging whether the transaction has a legal signature which accords with the regulation in the protocol according to a signature policy which is regulated in a block chain consensus protocol, verifying whether related information in the transaction accords with the requirement of the consensus protocol according to the supervision requirement after the signature policy passes, and comparing and verifying the related information according to the corresponding attributes of the account node which is pointed to and pointed to by the related information in the state transition model diagram;
the account transaction behavior supervision module abstracts the transaction behavior of the account into a transaction node on the state transition mapping graph, the account atomic state node points to the transaction node and represents that the account participates in the transaction, the transaction node points to the account atomic state node with the later timestamp and represents the state of the account after the transaction is executed, and all the specific transaction information is recorded on the account node corresponding to the state transition model graph;
the node behavior supervision module: and comparing the transaction submitted by the node with the originally expected transaction execution sequence so as to judge whether the node behavior meets the requirement of supervision.
The technical scheme of the supervision mapping model provided by the invention is further defined as follows: :
said shapeThe state transition model diagram is a directed graph and is marked as G ═ V, E; where G is the symbol of the graph, V represents the set of vertices of the graph, and E represents the set of edges of the graph; v is the union of two vertex sets S and W, wherein S and W respectively refer to an account atomic state node and a transaction node; e is ERAnd EWUnion of two edge sets, ERAnd EWRespectively a read edge and a write edge.
The technical scheme of the supervision mapping model provided by the invention is further defined as follows:
the S is a set of account atomic state nodes, comprises a special created state and only appears when a state transition model graph is initialized, other elements of the S are common account state nodes and comprise a timestamp of an account, an account address and account asset information, and the S can be uniquely determined by the account address and the timestamp;
the W is a set of transaction nodes, the elements of the W correspond to the transactions of the federation chain one by one, and each element represents one transaction and stores the related information of the transaction;
said ERIs the collection of read edge, which is used to indicate that the account node participates in a certain transaction; each read edge represents that a transaction reads the state of a specific account at a specific time stamp moment, and at most only one read edge is sent out by each account atomic state node;
said EWThe method is a set of write edges, and is used for indicating that the state of an account is changed after the execution of the transaction is finished, each write edge represents that a new state is generated due to the transaction, and each account atomic state node can only accept one write edge at most.
Has the advantages that: the invention provides a block chain supervision mapping model based on a digital twin, which can convert account book information recorded in a block chain into a state transition diagram, and based on the state transition diagram, different supervision modules, such as an affair supervision module, an account transaction behavior supervision module and a node behavior supervision module, are realized according to different supervision targets. The invention can be applied to dynamic supervision of a alliance chain system and has wide application scenes.
Drawings
FIG. 1 is a diagram of a state mapping model for account A transferring to account B in the embodiment of the present application;
FIG. 2 is a mapping diagram of a multi-account transfer state transition in an embodiment of the application;
FIG. 3 is a state transition map of a transaction supervision module according to an embodiment of the present disclosure;
FIG. 4 is a state transition diagram of an account transaction monitoring module according to an embodiment of the present disclosure;
FIG. 5 is a schematic diagram illustrating a process for supervising a transaction supervision module according to an embodiment of the present disclosure;
FIG. 6 is a flow chart of an account transaction behavior monitoring module according to an embodiment of the present disclosure;
fig. 7 is a schematic flow chart of a node behavior supervision module according to an embodiment of the present application.
Detailed Description
The basic mapping model adopted by the embodiment of the application is established on a bottom layer alliance chain system model. The federation chain system is a distributed system built around three concepts of nodes, ledgers and consensus mechanisms. The alliance chain system is composed of nodes, the nodes are main bodies for forming and maintaining the distributed system, each organization generally runs one or more nodes, and different nodes can bear different tasks in different consensus protocols. The block chain maintained by the federation chain system is also referred to as an account book, and the account book is a structure for storing and maintaining main information of the federation chain, generally contains transaction information, contract information, global state and the like, and has the excellent characteristic of being not able to be tampered. The account book has a maintained local clone at each node, and consistency is ensured through a consensus mechanism. In a federation chain system, a consensus mechanism is a mechanism and a method which can still ensure that previously stored ledgers of nodes are consistent under the condition that malicious nodes perform malicious operations or equipment failure exists.
Based on understanding of the alliance chain system model, the invention summarizes and provides elements and characteristics which the alliance chain mapping model based on the digital twin has, and provides a mapping rule and a mapping model for dynamic supervision.
The state transition model diagram is a directed graph and is marked as G ═ V, E. Where G is the symbol of the graph, V represents the set of vertices of the graph, and E represents the set of edges of the graph. V is the union of two vertex sets S and W, which refer to account atomic state nodes and transaction nodes, respectively. E is ERAnd EWUnion of two edge sets, ERAnd EWRespectively a read edge and a write edge. Formal interpretation of elements in G:
s: s is a collection of account atomic state nodes, the elements of which are drawn with squares in the figure. S contains a special creation state, which only appears when the state transition model diagram is initialized, and some properties of the alliance chain such as consensus mechanism, total assets and the like are appointed. Other elements of S are common account status nodes, including information such as the timestamp the account is located, the address of the account, the asset of the account, etc., and S can be uniquely determined by the account address and the timestamp.
W: w is a collection of transactional nodes, the elements of which are drawn with circles in the figure. The elements of W are in one-to-one correspondence with the transactions of the federation chain, each element representing a transaction and storing information about the transaction, such as:
ER：ERis the set of read edge edges, represented in the figure by the arrow pointing from the account atomic state node in S to the transaction node in W, to indicate that the account node is involved in a certain transaction. Each read edge represents that a transaction reads the state of a specific account at a specific time stamp, and the state of the account changes after the transaction is executed, so that at most one read edge is issued by each account atomic state node.
EW：EWIs the set of write edges, represented in the figure by the arrow pointing from the transaction node in W to the account atomic state node in S, to indicate that the state of the account has changed after the transaction has completed. Each write edge represents that new state is generated because of the transaction, so each account atomic state node can accept only one write edge at most.
As shown in fig. 1, is a state mapping model diagram in which account a transfers to account B at timestamp 2, with transaction nodes, i.e., circles in the diagram, and account atomic state nodes, i.e., squares in the diagram. A legal state transition graph is directed acyclic because edges always point to nodes with larger timestamps; and the account state atomic node in the middle of the graph should have an entry of 1 because the account atomic state changes to a new atomic state after participating in a transaction; every transaction should have the correct input and output, i.e. not expending non-existent assets, nor double spending, noting that the transaction itself may be participating in more than 2 accounts. Thus, a graph G has the following properties when it is a state transition model graph:
1. g only contains one creation state node, and the node has no write edge direction, namely the degree of entry is 0.
2. Each account atomic state node of the created state nodes has a write edge pointing to it.
3. Each account atomic state node has at most one read edge.
4. The graph is weakly connected.
5. The figure is acyclic.
6. The account atomic state nodes connected by the transaction incoming edge and the outgoing edge meet the identity equation with the same balance sum.
There are often a large number of account addresses and transactions in the blockchain, but in the specific supervision process, not all accounts and transactions are supervised extensively, but rather, relatively important accounts and transactions are extracted for supervision. Therefore, the invention adopts a divide-and-conquer strategy, and a single account state node in the graph can be a union of a plurality of accounts and is used for carrying out development and supervision when needed. Meanwhile, the graph can be reduced at a certain time point, original graph data are compressed into a pseudo-creation state, and a new model graph is constructed. This can effectively reduce the size of the graph and help for efficient supervision algorithms.
Multi-account status node: and taking the addresses of a plurality of accounts and adding the assets to form a new node. The node replaces the state node of the account, and all the transactions related to the account are directly bordered by the node, so that the node preferably satisfies a certain association and guarantees a certain meaning of the node. This portion of the graph can be expanded by means of a backtracking blockchain, if desired.
Constructing a new model: and integrating the state node with the out degree of 0 of the original image as a pseudo-creation state through one transaction, and expanding the state through the transaction. And then only the model diagram in the pseudo-creation state can be maintained, and the scale of the diagram is reduced.
By using the compression method, the account number and the time can be compressed in two dimensions, and meanwhile, different supervision modules are pertinently realized by using a dynamic programming algorithm by using some characteristics of the state transition diagram.
A set of specific transactions is used for explanation, assuming account a has a time balance of 20 at time stamp 0, account B has a time balance of 0 at time stamp 0, account C has a time balance of 100 at time stamp 0, account D has a time balance of 10 at time stamp 0, account a transfers 5 to account B at time stamp 2, account B transfers 1 to account C at time stamp 3, and account C transfers 10 to account D at time stamp 4. Here, the agreed account a and the account B are heavily supervised accounts, and other account addresses are not heavily supervised, so that a specific state transition mapping chart is shown in fig. 2.
The basic mapping process of the digital twin is realized from the block chain data to the state transfer mapping chart, a basic data structure is provided for the specific supervision process, supervision modules with different granularities and different emphasis points can be realized on the basis of the state transfer mapping chart, and a transaction supervision module, an account transaction behavior supervision module and a node behavior supervision module are realized.
In order to better understand the technical solutions, the technical solutions will be described in detail with reference to fig. 3 to 7 and the specific embodiments of the specification.
Example one
The embodiment provides a block chain supervision mapping model based on a digital twin, in particular to a block chain supervision mapping model for alliance chain supervision and an implementation method of an upper-layer supervision module, and specifically introduces a transaction supervision module, an account transaction behavior supervision module and a node behavior supervision module.
1) Transaction supervision module
In a blockchain system, transactions are the most core model building. The nodes which acquire the accounting right sort and pack the monitored transactions according to the rules agreed in the block chain protocol, and distribute the transactions to most nodes in the network along with the blocks through a common identification mechanism to realize uplink, so that the common identification between the nodes is realized and is used as a basis for the nodes to update the global state of the block chain account. The supervision and verification of a general transaction is to read the data of a block chain, and according to a specific transaction protocol, the data is checked and verified by using common cryptographic tools such as an asymmetric encryption system. However, as mentioned in the introduction of the federation chain mapping model based on the digital twin, there is a certain optimization space in terms of efficiency in this reading method, and for a long-running block chain system, processing of data that is increasing progressively also poses a challenge in the processing method of the conventional method. For the transaction supervision upper-layer module based on the digital twin mapping model, which is proposed at present, a state transition model diagram for certain specific accounts in a specific time period can be established, a mapping from a transaction to be supervised to a circular node in the model is created, and the supervision of the transaction is converted into the supervision of a transaction node in the model, so that the supervision efficiency is improved. Meanwhile, by using the idea of dynamic planning, the affairs can be retrieved and focused according to certain conditions, so that the flexibility of affair checking and inspection is improved. On the other hand, according to the property of the state transition model diagram, after a certain transaction is focused, the transaction nodes related to the account atomic state nodes participating in the transaction can be easily found, so that the account state related to the transaction is also monitored and verified.
In the state transition model diagram shown in fig. 3, the module focuses on the dark circle nodes marked by circles in the diagram. For a transaction node, we can run various transaction-based blockchain supervision and check algorithms on it. The most basic supervision and verification method is to determine whether the transaction has a legal signature which is in accordance with the rules of the block chain common identification protocol according to the signature policy which is defined in the block chain common identification protocol, after the signature policy passes, according to the requirements which are supervised by the user, the basic information of the relevant information in the transaction, such as transfer information or contract information, is verified whether the basic information meets the requirements of the common identification protocol, and the comparison and verification are respectively carried out on the states of the account which participates in the transaction before the transaction chain and after the chain is performed by combining the corresponding attributes of the account atomic state node which is pointed to the account in the state transition model diagram and is pointed to by the account atomic state node. Of course, it is emphasized that most of the currently existing regulatory verification methods for federation chain transactions, other than the most basic verification for block chain digital signatures and the validity of basic information, can also be applied to the state transition model graph by this module. For example, a state transition model diagram may be established by focusing on transactions for intelligent contract creation and update, and a supervision algorithm may be run on the contracts on the transaction nodes to detect potential contract vulnerabilities, and fig. 5 shows a specific algorithm flow diagram of a transaction supervision module, taking the supervision algorithm as an example:
step 101, inputting a state transition model diagram G;
step 102, reading an unread transaction Tx from G;
step 103, reading the nodes pointing to the Tx multi-account into a list S1, and recording the nodes pointed to the multi-account by the Tx into a list S2;
104, judging whether the related signature information in the Tx accords with the consensus protocol of the block chain;
step 105, checking whether the related transfer and contract information are matched in S1 and S2 according to the transaction content in Tx;
step 106, calling an algorithm for judging whether the contract has the vulnerability, and judging whether the contract has the vulnerability;
step 107, outputting that the transaction is illegal;
step 108, outputting the transaction legality and outputting the related information of the searched vulnerability;
step 109, outputting that the transaction is legal and the contract has no vulnerability;
step 110, judging whether unread transaction nodes exist in the graph or not;
and step 111, finishing the process.
On the other hand, in the process of performing the above verification, if a problem exists in the verification of a certain transaction, it is more likely that the account related to the transaction or the node for ordering and packaging the transaction is reasonably inferred to perform non-compliance. Therefore, the greedy strategy can be utilized to improve the verification priorities of the accounts or the nodes, and a mapping model is preferentially established for the accounts and the nodes with high verification priorities in the subsequent supervision, so that the efficiency and the accuracy of the subsequent check and verification are improved.
2) Account transaction behavior supervision module
In a blockchain system, a user may create an account through some mechanism for transactions in the blockchain system. The process of creating an account typically utilizes an asymmetric cryptography system to generate a set of public and private keys, where the private key is kept by the user and the public key can be published. This public key uniquely identifies the account and is therefore also commonly referred to as the address of the account, and the specific transaction activity of the account is identified by the address of the account.
In the mapping model of the digital twin, the transaction behavior of an account is abstracted as directed edges on a state transition map. The two vertexes of the directed edge are respectively the things related to the transaction and the account participating in the transaction, and the direction of the directed edge indicates the income and expenditure condition of the account in the transaction and the time precedence relationship between the states of the accounts and the states of the transactions. The map is recorded as a directed graph G, and the set of nodes formed by transactions is recorded as G.VTThe set of states of the account yard is G.VAThen in a map, there are
u∈ G.VT∧v∈G.VAOr v e G.VT∧u∈G.VAAnd has ut≤vt。
In the mapping chart, the main mode of supervising the transaction behavior of the account is to analyze and judge the transaction behavior of the account according to the out-degree and the in-degree of the account address in the state transfer mapping chart. As shown in fig. 4, according to the state transition map, the transaction information of an account participating in the transaction can be easily obtained, other participants in the transaction can be queried, and the source of the balance in the account can be traced. The modeling mode can monitor more basic problems such as 'double flowers' in the block chain in a mode of tracing back balance sources in the accounts, and can monitor and analyze illegal violation problems possibly existing in the alliance chain more pertinently by utilizing the characteristic that the transaction connection generated between two account numbers is directly related through transaction nodes more clearly than a block chain data structure. For example, considering that a normal user has a relatively fixed characteristic and pattern in a transaction behavior within a certain fixed time period, after a reasonable screening index is established, an account with a large suspicion can be quickly located, so that fine-grained screening is performed. Meanwhile, the distribution characteristics of the transactions of specific transactions also represent the closeness degree between accounts, and the transaction behaviors between the accounts and the possible transaction relationship can be analyzed by utilizing a clustering algorithm, so that better supervision is realized. As shown in fig. 6, the process of conducting account transaction behavior administration on the federation chain includes the following steps:
step 201: establishing a state transition mapping chart according to transaction information in a block chain, and maintaining a priority queue l for storing all unseen accounts with suspicion, wherein each account has an attribute H and records suspicion degrees of the accounts;
step 202: and (3) selecting an account S with the highest suspicion degree H from the I for checking, and randomly selecting an account for checking if the suspicion degrees are consistent. Under the initial condition, the suspicion degrees H of all accounts are consistent;
step 203: adding the transaction participated by the account S into two linked lists l representing the account S as a payee or a payer respectively according to the time sequence1And l2In (1). I.e. if (S, v) ∈ E, l1＝l1∪{(S,v)}， (v,S)∈E,l2＝l2∪{(v,S)}；
Step 204: and intercepting the transaction information related to the account in a certain time period, and operating an algorithm on a subgraph consisting of edges representing the transactions to judge whether the illegal action exists. If yes, go to step 205, otherwise go to step 207;
step 205: outputting the account with illegal behaviors, and screening fine grit through transaction supervision for the transaction related to the account in the transaction with illegal behaviors, and performing step 206;
step 206: updating the suspicion degree of the account associated with the transaction, if the account is not checked in the current round of supervision, adding the account into a priority queue l, and performing step 208;
step 207: outputting the account without illegal behaviors;
step 208: if l is not empty, go to step 202, otherwise go to step 209;
step 209: the supervision process is ended.
It can be seen that the supervision based on the state transition map does not depend on single transaction supervision and account transaction behavior supervision, and both can provide information for each other, so as to order the inspection priority of the transactions or accounts, thereby achieving better supervision effect.
3) Node behavior supervision module
In a blockchain system, nodes that have computing resources and storage space and access to the network generally take on the tasks of distributing blockchains, maintaining blockchains locally, election billing rights, and packaging transactions (or some nodes are responsible for some specific tasks). When the node acquires the accounting right, the node acquires the right for determining the execution sequence of the transactions in the block, and the execution sequence of the transactions is very important for the user to execute some transactions, for example, in the application scene of auction, if the user and the accounting node collude, there may be an action of executing a certain transaction in advance, so as to acquire the benefit which should not belong to the user. Specifically, for the supervision of node behavior, the core is to compare the transaction submitted by the node with the originally expected execution sequence of the transaction, so as to determine whether the node behavior meets the supervision requirement. In the digital twin mapping model, transactions in a certain block are continuous in time, if a certain node needs to be supervised, discrete time periods of transactions packaged by the node can be intercepted, specific information of the transactions is acquired by using a state mapping diagram in the time periods, then a certain group of transactions are sequenced according to a well-defined transaction sequence, and compared with the transaction sequence actually on a block chain, if the difference is larger, the node can be basically determined not to well fulfill the function of the node, and corresponding punishment is carried out.
Fig. 7 is a schematic flow chart of the node behavior supervision module.
Step 301: and establishing a state transition mapping chart according to the transaction information in the block chain and accounts possibly colluded with the node.
Step 302, intercepting the time period corresponding to the block packed by the managed node, and traversing through a dynamic programming algorithm to obtain the related transaction.
Step 303: the transactions are reordered according to rules agreed upon by the blockchain system.
Step 304: comparing the sequence of the transactions in the chain with the reordered transactions, and jumping to step 306 if the compared sequence is basically consistent; if the comparison sequence is very different, go to step 305.
Step 305: and analyzing accounts of advanced transactions and corresponding benefits in a specific transaction sequence, and investigating whether the accounts and the related accounts of the operation nodes are beneficial to delivery.
Step 306: the supervision process is ended.
Through the steps, whether certain transactions are executed in advance by the node can be investigated, and whether a benefit delivery relationship exists between a specific account and the account of the running node or not can be determined by combining the supervision of the transfer relationship between the account of the running node and the benefit account of the transaction in advance, so that corresponding investigation and treatment are carried out.
The present invention provides a block chain supervision mapping model based on digital twin and an implementation method of an upper module, and a method and a way for implementing the technology are many, and the above description is only a preferred embodiment of the present invention, and it should be noted that, for a person of ordinary skill in the art, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications should also be regarded as the protection scope of the present invention. All the components not specified in the present embodiment can be realized by the prior art.
Claims (7)
1. A supervision method facing a alliance chain is applied to a supervision server of an alliance chain supervision system, and is characterized in that: the method comprises the following steps:
transaction supervision, namely creating a mapping from a transaction to be supervised to a corresponding node in the model by establishing a state transition mapping model diagram of certain specific accounts in a specific time period, and converting the supervision of the transaction into the supervision of the node in the model;
the account transaction behavior is monitored, the transaction behavior of the account is abstracted to be a transaction node on the state transition mapping model graph, the account atomic state node points to the transaction node and represents that the account participates in the transaction, the transaction node points to the account atomic state node with the later timestamp and represents the state of the account after the transaction is executed, and all the specific transaction information is completely recorded on the corresponding transaction node in the state transition model graph;
and (4) node behavior supervision, namely comparing the transaction submitted by the node with the originally expected transaction execution sequence so as to judge whether the node behavior meets the supervision requirement.
2. A federation chain-oriented supervision method as claimed in claim 1 wherein: the transaction supervision comprises the following steps:
step 101, inputting a state transition model diagram G;
step 102, reading an unread transaction Tx from G;
step 103, reading the nodes pointing to the Tx multi-account into a list S1, and recording the nodes pointed to the multi-account by the Tx into a list S2;
step 104, judging whether the related signature information in the Tx conforms to the consensus protocol of the block chain or not
Step 105, checking whether the related transfer and contract information are matched in S1 and S2 according to the transaction content in Tx;
step 106, calling an algorithm for judging whether the contract has the vulnerability, and judging whether the contract has the vulnerability;
step 107, outputting that the transaction is illegal;
step 108, outputting the transaction legality and outputting the related information of the searched vulnerability;
step 109, outputting that the transaction is legal and the contract has no vulnerability;
step 110, judging whether unread transaction nodes exist in the graph or not;
and step 111, finishing the process.
3. A federation chain-oriented supervision method as claimed in claim 1 wherein: the account transaction behavior administration comprises the following steps:
step 201: establishing a state transition mapping chart according to transaction information in a block chain, and maintaining a priority queue l for storing all unseen accounts with suspicion, wherein each account has an attribute H and records suspicion degrees of the accounts;
step 202: selecting an account S with the highest suspicion degree H from the I for checking, and randomly selecting an account for checking under the condition of consistent suspicion degree; under the initial condition, the suspicion degrees H of all accounts are consistent;
step 203: adding the transaction participated by the account S into two linked lists l representing the account S as a payee or a payer respectively according to the time sequence1And l2If (S, v) ∈ E, l1＝l1∪{(S,v)}，(v,S)∈E,l2＝l2∪{(v,S)}；
Step 204: intercepting the transaction information related to the account in a certain time period, operating an algorithm on a subgraph consisting of edges representing the transactions, and judging whether an illegal behavior exists; if yes, go to step 205, otherwise go to step 207;
step 205: outputting the account with illegal behaviors, and screening fine grit through transaction supervision for the transaction related to the account in the transaction with illegal behaviors, and performing step 206;
step 206: updating the suspicion degree of the account associated with the transaction, if the account is not checked in the current round of supervision, adding the account into a priority queue l, and performing step 208;
step 207: outputting the account without illegal behaviors;
step 208: if l is not empty, go to step 202, otherwise go to step 209;
step 209: the supervision process is ended.
4. A federation chain-oriented supervision method as claimed in claim 1 wherein: the node behavior supervision comprises the following steps:
step 301: establishing a state transition mapping chart according to the transaction information in the block chain and accounts which can be colluded with the node;
step 302, intercepting a time period corresponding to a block packed by a managed node, and traversing through a dynamic programming algorithm to obtain a related transaction;
step 303: reordering the transactions according to rules agreed by the blockchain system;
step 304: comparing the sequence of the transactions in the chain with the reordered transactions, and jumping to step 306 if the compared sequence is basically consistent; if the comparison sequence is very different, go to step 305;
step 305: analyzing accounts of advanced transactions and corresponding profits in a specific transaction sequence, and investigating whether the accounts and related accounts of the operation nodes are beneficial to delivery;
step 306: the supervision process is ended.
5. A digital twin model facing alliance chain supervision comprises an alliance chain supervision system and is characterized in that: the alliance chain monitoring system comprises a state transition model diagram established on a bottom alliance chain system model and an upper layer module established on the state transition model diagram, wherein the upper layer module comprises a transaction monitoring module, an account transaction behavior monitoring module and a node behavior monitoring module;
the transaction supervision module establishes a state transition model graph aiming at certain specific accounts in a specific time period, creates a mapping from the transaction needing supervision to a specific transaction node in the model, and converts the supervision of the transaction into the supervision of the transaction node in the model; judging whether the transaction has a legal signature which accords with the regulation in the protocol according to a signature policy which is regulated in a block chain consensus protocol, verifying whether related information in the transaction accords with the requirement of the consensus protocol according to the supervision requirement after the signature policy passes, and comparing and verifying the related information according to the corresponding attributes of the account node which is pointed to and pointed to by the related information in the state transition model diagram;
the account transaction behavior supervision module abstracts the transaction behavior of the account into a transaction node on the state transition mapping graph, the account atomic state node points to the transaction node and represents that the account participates in the transaction, the transaction node points to the account atomic state node with the later timestamp and represents the state of the account after the transaction is executed, and all the specific transaction information is recorded on the corresponding transaction node in the state transition model graph;
the node behavior supervision module: and comparing the transaction submitted by the node with the originally expected transaction execution sequence so as to judge whether the node behavior meets the requirement of supervision.
6. A federation chain supervision-oriented digital twin model as claimed in claim 5, wherein:
the state transition model diagram is a directed diagram and is marked as G ═ V, E; where G is the symbol of the graph, V represents the set of vertices of the graph, and E represents the set of edges of the graph; v is the union of two vertex sets S and W, wherein S and W respectively refer to an account atomic state node and a transaction node; e is ERAnd EWUnion of two edge sets, ERAnd EWRespectively a read edge and a write edge.
7. A federation chain supervision-oriented digital twin model as claimed in claim 6 wherein:
the S is a set of account atomic state nodes, comprises a special created state and only appears when a state transition model graph is initialized, other elements of the S are common account state nodes and comprise a timestamp of an account, an account address and account asset information, and the S can be uniquely determined by the account address and the timestamp;
the W is a set of transaction nodes, the elements of the W correspond to the transactions of the federation chain one by one, and each element represents one transaction and stores the related information of the transaction;
said ERIs the collection of read edge, which is used to indicate that the account node participates in a certain transaction; each read edge represents that a transaction reads the state of a specific account at a specific time stamp moment, and at most only one read edge is sent out by each account atomic state node;
said EWThe method is a set of write edges, and is used for indicating that the state of an account is changed after the execution of the transaction is finished, each write edge represents that a new state is generated due to the transaction, and each account atomic state node can only accept one write edge at most.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111324023.4A CN114036577A (en) | 2021-11-09 | 2021-11-09 | Coalition chain-oriented supervision method and supervision digital twin model |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111324023.4A CN114036577A (en) | 2021-11-09 | 2021-11-09 | Coalition chain-oriented supervision method and supervision digital twin model |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN114036577A true CN114036577A (en) | 2022-02-11 |
Family
ID=80137051
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111324023.4A Pending CN114036577A (en) | 2021-11-09 | 2021-11-09 | Coalition chain-oriented supervision method and supervision digital twin model |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114036577A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117527832A (en) * | 2024-01-03 | 2024-02-06 | 杭州趣链科技有限公司 | Transaction ordering method and device for blockchain, electronic equipment and storage medium |
-
2021
- 2021-11-09 CN CN202111324023.4A patent/CN114036577A/en active Pending
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117527832A (en) * | 2024-01-03 | 2024-02-06 | 杭州趣链科技有限公司 | Transaction ordering method and device for blockchain, electronic equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Leng et al. | Blockchain security: A survey of techniques and research directions | |
| Lone et al. | Forensic-chain: Blockchain based digital forensics chain of custody with PoC in Hyperledger Composer | |
| US11694110B2 (en) | Aggregated machine learning verification for database | |
| Shalaby et al. | Performance evaluation of hyperledger fabric | |
| CN115210741B (en) | Partially ordered blockchain | |
| US11562228B2 (en) | Efficient verification of machine learning applications | |
| CN110795755B (en) | Building project scene type evidence storing and non-tampering method and system based on block chain | |
| EP3841546A1 (en) | Method of generating globally verifiable unique identifiers using a scalable interlinked blockchain structure | |
| US20210350363A1 (en) | Transaction system and method of operation thereof | |
| US20220067730A1 (en) | Data processing method and device and computer-readable storage medium | |
| Wang et al. | Performance benchmarking and optimization for blockchain systems: A survey | |
| US10956204B1 (en) | Free-riding node identification for blockchain | |
| CN111047316A (en) | Tamper-resistant intelligent block chain system and implementation method | |
| CN111709718A (en) | Intelligent warranty asset service platform, method and storage medium based on artificial intelligence | |
| CN110660466A (en) | Personal health data chaining method and system of Internet of things by combining block chains | |
| CN114036577A (en) | Coalition chain-oriented supervision method and supervision digital twin model | |
| CN113037824B (en) | Cloud computing-oriented high-performance block chain construction method | |
| KR20230005353A (en) | Sanctioned Events in a Decentralized Database | |
| CN110458541B (en) | Object replacement method and device based on block chain | |
| CN112102118A (en) | Collaborative law enforcement and case handling method based on block chain | |
| Rajasekar et al. | Blackchain-based Identity Management Systems in Digital Forensics | |
| Xu et al. | A lightweight two-layer blockchain mechanism for reliable crossing-domain communication in smart cities | |
| CN117113425B (en) | Privacy compliance method for lake and warehouse integrated data analysis | |
| US11563558B2 (en) | Behavior driven graph expansion | |
| US20230208648A1 (en) | Htlc with proof of elapsed time |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |