KR102294569B1 - Block Chain Management System To Build Block Chain Network - Google Patents

Abstract

A block chain management system capable of building a block chain network according to an aspect of the present invention that can provide users with a page on which to set up a block chain network is input to the node registration page from any one of the pre-registered servers a node registration unit for registering nodes constituting the block chain network to the server in a block chain network platform according to the node information; an organization registration unit for registering an organization including the node according to organization information input to an organization creation page from any one of the registered servers; a channel registration unit for registering a channel sharing a block chain according to channel information input to a channel creation page from any one of the registered servers; and a network environment configuration unit for building a blockchain network with the registered nodes, organizations, and channels using the blockchain network platform.

Description

A block chain management system that can build a block chain network {Block Chain Management System To Build Block Chain Network}

The present invention relates to a blockchain network.

Blockchain technology, also called Distributed Ledger technology, is a decentralized distributed database technology characterized by decentralization, transparency, tamper resistance, and reliability. Blockchain technology is generally used to record transactions in public or private peer-to-peer networks, and records all historical data of asset transactions that occur between peer nodes in the network permanently in blocks. can be recorded

Here, a private peer-to-peer network, a blockchain network, is built using a permissioned blockchain platform. Permissioned blockchain platforms are used in various business areas of companies. Due to the characteristics of permissioned blockchain platforms, only authorized users can participate in the blockchain network, making it difficult to build compared to public peer-to-peer networks.

Therefore, it is difficult to build a blockchain network without background knowledge on blockchain, and even an expert on blockchain, the process is complicated and difficult, so it takes a lot of time to build a blockchain network.

The present invention is to solve the above problems, and it is a technical task to provide a block chain management system that can build a block chain network that can provide a page for users to set up a block chain network.

In addition, the present invention makes it a technical task to provide a block chain management system that can automatically build a block chain network in conjunction with a block chain network platform.

In addition, it is a technical task of the present invention to provide a blockchain management system that can build a blockchain network by applying the node, organization, and channel registered by the user to the blockchain network platform.

In order to achieve the above object, a block chain management system capable of constructing a block chain network according to an aspect of the present invention is a block chain network according to node information input to a node registration page from any one of pre-registered servers. a node registration unit that registers the nodes constituting the block chain network on the platform to the server; an organization registration unit for registering an organization including the node according to organization information input to an organization creation page from any one of the registered servers; a channel registration unit for registering a channel sharing a block chain according to channel information input to a channel creation page from any one of the registered servers; and a network environment configuration unit for building a blockchain network with the registered nodes, organizations, and channels using the blockchain network platform.

According to the present invention, a page for setting up a block chain network can be provided to the user, so even a beginner without background knowledge can easily build a block chain network.

In addition, since the present invention can automatically build a block chain network in conjunction with a block chain network platform, it is possible to quickly build a block chain network compared to manually constructing a block chain network for user convenience and efficiency. This has the effect of improving it.

In addition, the present invention has an effect that it is possible to build a block chain network optimized for the user's setting by applying the node, organization, and channel registered by the user to the block chain network platform.

1 is a diagram showing a block chain management system capable of constructing a block chain network according to an embodiment of the present invention.
2 is a diagram illustrating an example of a server registration page provided by a server registration unit.
3 is a diagram illustrating an example of a node registration page provided by a node registration unit.
4 is a diagram illustrating an example of a node inquiry page provided by a node registration unit.
5 is a diagram illustrating an example of an organization registration page provided by the organization registration unit.
6 is a diagram illustrating that a channel registration unit creates a channel.
7 is a diagram illustrating an example of a channel inquiry page provided by a channel registration unit.
8 is a diagram illustrating an example of a network environment configuration page provided by the network environment configuration unit.
9 is a view showing an example of a general status page.
10 is a view showing an example of the authentication center dApp developed by the certificate API and the document forgery verification dApp developed by the document forgery verification API.

The meaning of the terms described herein should be understood as follows.

The singular expression is to be understood as including the plural expression unless the context clearly defines otherwise, and the terms "first", "second", etc. are used to distinguish one element from another, The scope of rights should not be limited by these terms.

It should be understood that terms such as “comprise” or “have” do not preclude the possibility of addition or existence of one or more other features or numbers, steps, operations, components, parts, or combinations thereof.

The term “at least one” should be understood to include all possible combinations from one or more related items. For example, the meaning of “at least one of the first, second, and third items” means 2 of the first, second, and third items as well as each of the first, second, or third items. It means a combination of all items that can be presented from more than one.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram showing a block chain management system capable of constructing a block chain network according to an embodiment of the present invention.

The blockchain management system (hereinafter referred to as 'blockchain management system', 100) capable of building a blockchain network according to the present invention enables users to easily build a blockchain network. To this end, the block chain management system 100 according to the present invention includes a block chain management agent 200 and a block chain network platform 300 as shown in FIG. 1 .

The block chain management agent 200 receives the information necessary for the block chain network configuration and inputs it into the block chain network platform 300 to build the block chain network. Specifically, the block chain management agent 200 receives information required for block chain network configuration from the user, and generates a file for block chain network configuration accordingly. The block chain management agent 200 inputs the file and control command to the block chain network platform 300 to build the block chain network.

To this end, the blockchain management agent 200 includes a server registration unit 210 , a node registration unit 220 , an organization creation unit 230 , and a channel registration unit 240 .

The server registration unit 210 registers a server participating in the blockchain network according to the server information input on the server registration page. Specifically, the server registration unit 210 registers the server participating in the block chain network according to the server information, the user inputs the server information on the server registration page, receives the server information according to the server information. In this case, the server information may include a server name, server description, IP address, host, CPU information, OS information, RAM information, and the like.

For example, the server registration unit 210 may provide a server registration page as shown in FIG. 2 . The user can enter server information on the server registration page. When the user selects the server information inquiry icon 410, the server registration unit 210 may extract the specification of the corresponding server and provide it to the user through the server registration page. When the user inputs server information and selects the confirmation icon 420 , the server registration unit 210 registers the user's server according to the input server information.

The server registration unit 210 may register a server in a server table stored in a server database (not shown).

The node registration unit 220 may register nodes constituting the blockchain network according to node information input to the node registration page from any one of the servers registered by the server registration unit 210 . Specifically, the node registration unit 220 may register a node in the corresponding server according to node information input to the node registration page from any one of the registered servers. In this case, the node information may include a node type, port information, a Docker image, a Docker image version, and the like.

For example, when the node registration unit 220 provides a node registration page to a user as shown in FIG. 3 , the user may input node information into the node registration page. When the user selects any one of the node types, the node registration unit 220 may extract port information, a Docker image, and a Docker image version matching the corresponding type, and provide it to the user. When the user selects the confirmation icon 510 , the node registration unit 220 may register a node in the corresponding server according to the node information. In this case, the node registered in the server may be a node selected by the user from among the node types. For example, when a user selects a peer node, the node registration unit 220 registers a peer with the corresponding server.

In one embodiment, the node is a Certificate Authority (CA) node, a Peer node, an Orderer node, a Kafka node, a Zookeeper node, a CouchDB node. and the like. Here, the certification authority node performs authentication and communication between nodes. Peer nodes manage ledger data. The orderer node arranges transactions and performs block generation and propagation. Kafka nodes queue and consume transactions in order. ZooKeeper node distributes clustered Kafka nodes and synchronizes each Kafka node. CouchDB nodes store the latest data in the form of key-values in transactions.

Hereinafter, the certification authority node is the first node, the peer node is the second node, the orderer node is the third node, the Kafka node is the fourth node, the ZooKeeper node is the fifth node, and the CouchDB node is the second node. It can also be written as 6 nodes.

In an embodiment, the node registration unit 220 may create a virtual space in the server where the node is registered and register the node in the space. According to this embodiment, since each node can be registered in an independent space of the server, there is an effect that nodes can operate independently regardless of the presence or absence of errors in other nodes.

For example, when the node selected by the user is a peer node, the node registration unit 220 may create a virtual space in the server and register the node in the space. Also, when the node selected by the user is an orderer node, the node registration unit 220 may create a virtual space in the server and register the orderer node in the corresponding space. In this case, the peer node and the orderer node may operate independently.

The node registration unit 220 may provide a node inquiry page for checking registered nodes in real time. For example, as shown in FIG. 4 , the node registrar may provide a node inquiry page.

The organization registration unit 230 may create an organization according to organization information input to the organization registration page from any one of the registered servers. Organization is a logical grouping of members. In this case, the organization information may include server information, network information, organization ID, organization name, participating peer information, and anchor peer node information. Participating peer information refers to peers participating in an organization. Anchor peer node information refers to a leader peer node within an organization.

For example, the organization registration unit 230 provides an organization registration page as shown in FIG. 5, and the user selects server information and network information from the organization registration page. In addition, the user sets the organization name on the organization registration page. In addition, the user selects a participating peer on the organization registration page. In this case, the organization registrar 230 may generate an organization ID and provide it to the user. A user can select an anchor peer node. When the user selects the confirmation icon 610, the organization registration unit 230 creates an organization according to the organization information.

The channel generator 240 creates a channel according to channel information input to the channel creation page from any one of the registered servers. Specifically, the channel generator 240 creates a channel according to channel information input to the channel creation page from the server where the organization is created. The channel information may include server information, network information, channel name, authority information, organization information to participate in, and peer information to participate in. In this case, only peers registered in the organization can participate in the channel.

For example, the channel registration unit 240 provides a channel creation page to the user as shown in FIG. 6A . When the user enters a channel name on the channel creation page, selects an organization and authority to participate, and selects the next icon 710, a peer participation page is provided as shown in FIG. 6B . When the user selects a peer to participate in the peer participation page and selects the confirmation icon 720 , the channel registration unit 240 creates a channel according to the channel information.

The channel registration unit 240 may provide a channel inquiry page for inquiring the created channel. For example, as shown in FIG. 7 , the channel registration unit 240 may provide a channel inquiry page.

The network environment configuration unit 250 builds a blockchain network with registered nodes, organizations, and channels using the blockchain network platform 300 .

The network environment configuration unit 250 configures a block chain network environment using server information, node information, organization information, and channel information. For example, the network environment configuration unit provides a network environment configuration page to the user as shown in FIG. 8 , and when the user selects the start icon 810 , the network environment is configured using respective pieces of information.

The network environment configuration unit 250 creates an organization file. Specifically, the network environment configuration unit 250 creates an organization file based on the organization information. When the organization file is created, the network environment configuration unit 250 generates a membership service provider by inputting a predetermined command to the block chain network platform 300 and organizes the organization in the block chain network platform 300 . Register the organization by loading the file. At this time, the nodes included in the organization are registered with the membership service provider.

For example, the network environment configuration unit 250 generates a crypto-config.yaml file based on the organization name of the peer node and the orderer node included in the organization, the number of members participating in the organization, and domain information. The network environment configuration unit 250 inputs the crytogen generate command to the block chain network platform 300 to create a membership service provider, and reads the crypto-config.yaml file to register it in the membership service.

The network environment configuration unit 250 creates a channel file. Specifically, the network environment configuration unit 250 generates a channel file based on the channel information. When the channel file is created, the network environment configuration unit 250 loads the channel file into the blockchain network platform 300 and registers information for channel configuration.

For example, the network environment configuration unit 250 sets membership service provider information, sets an anchor peer node among nodes, sets the type of orderer to a Kafka node, and sets brokers for the Kafka node to Kafka. -Set as Zookeeper node, and set block generation cycle and transaction size through BatchTimeout and BatchSzie. Create a configtx.yaml file containing information about the organization of the consortium and peer nodes by adding a Profile entry. The network environment configuration unit 250 inputs the configtxgen command to the blockchain network platform 300 to execute the configtx.yaml file. Accordingly, the blockchain network platform 300 generates a Genesis Block for connection and communication with a peer node, an orderer node, a Kafka node, and a Zookeeper node, and at the same time a channel transaction and an anchor peer node setting transaction By creating , information for channel creation is registered.

The network environment configuration unit 250 creates a node file. Specifically, the network environment configuration unit 250 generates a node file including port information and domain information of the node based on the node information. The network environment configuration unit 250 propagates the node file to the registered server. Accordingly, the node environment of each server is synchronized.

For example, the network environment configuration unit 250 creates an env file capable of recognizing domain information and port information as node information. The network environment configuration unit 250 propagates the env file to the registered servers so that the environment of each server is set identically.

The network environment configuration unit 250 generates a driving file for driving a node, and transmits the driving file to each server. The network environment configuration unit 250 causes the driving file of each server to be executed.

For example, the network environment configuration unit 250 generates docker-compose-zookeeper.yaml, docker-compose-kafka.yaml, and docker-compose.yaml files. The network environment configuration unit 250 drives each server through a docker-compose command. In this case, the network environment configuration unit 250 may drive docker-compose-zookeeper.yaml, docker-compose-kafka.yaml, and docker-compose.yaml in order.

The network environment configuration unit 250 sets a master node among nodes by inputting a predetermined node setting command to the block chain network platform 300 . The network environment configuration unit 250 inputs a predetermined node setting command to the block chain network platform 300 to engage each node in the master node. In this case, each participating node may be a slave node. Accordingly, each node is configured by clustering. Accordingly, a blockchain network will be built.

Meanwhile, the blockchain management agent 200 according to the present invention may further include a monitoring unit 260 .

The monitoring unit 260 may provide comprehensive information related to the block chain. Specifically, the monitoring unit 260 may provide a server, a transaction, a log, a network status, real-time chart information, and a search function.

For example, the monitoring unit 260 may provide a first comprehensive status page for monitoring various types of information as shown in FIG. 9A .

In addition, the monitoring unit 260 may monitor the system load, CPU, memory, network, disk status, etc. for the server, as well as monitor information such as transaction information and logs generated in the node.

For example, as shown in FIG. 9B , a second comprehensive status page capable of monitoring various types of information may be provided.

The blockchain management agent 200 according to the present invention may further include an API providing unit 270 .

The API providing unit 270 provides a certificate application programming interface (API) and a document forgery verification API. Specifically, the API providing unit 260 may provide a certificate API or a document forgery verification API as a server for developing a DApp (Decentralized Application, DApp).

The certificate API provided by the API providing unit 270 may perform certificate issuance, reissuance, renewal, and revocation using a public key-based authentication technology (PKI). Accordingly, an authentication center dApp can be developed using the certificate API. The certificate API can be utilized and applied to various fields requiring authentication as authentication management through certificates is possible in the blockchain network.

For example, the authentication center dApp developed by the certificate API may be developed as shown in FIG. 10A . Hereinafter, the certificate issuance sequence of the Certification Center dApp is as follows.

The client receiving the certificate requests challenge information including random character string, server digital signature and time stamp information from the server. Accordingly, the server generates a challenge and delivers it to the client, and the client performs server digital signature verification. Server digital signature verification refers to the procedure of verifying whether the server digital signature received from the server is a valid value using the server's public key. In this case, the ECDSA algorithm may be used.

When the server digital signature verification is completed, the client generates a private key and a public key, and then performs the client electronic signature. The client digital signature refers to the generation of the client's digital signature using the client's encryption key for the value of the challenge received from the server. In this case, the ECDSA algorithm may be used.

The client transmits a response including a client digital signature, a client public key, a time stamp, and a challenge value to the server. The server verifies the client digital signature by using the client public key to verify that the client digital signature of the response received from the client is a valid value. In this case, the ECDSA algorithm may be used. The client makes a transaction record request to the certificate management chaincode, and after the chaincode validates, the client's certificate issuance transaction is recorded. The server that receives the normally processed value from the chaincode informs the client, and the client is issued a certificate containing encryption key information.

The document forgery verification API provided by the API providing unit 270 may perform document hash extraction required for document forgery verification, and document information registration and inquiry in the blockchain network. A document forgery verification dApp developed using the document forgery verification API can be developed.

For example, the document forgery verification dApp developed by the document forgery verification API may be developed as shown in FIG. 10B Hereinafter, the document forgery verification procedure of the document forgery verification dApp is as follows. First, the document is registered. At this time, the document forgery verification dApp extracts the document information as a hash. The document forgery verification dApp uses the document name of the extracted information and the information of the extracted hash as a key value and maps the hash information of the document to a value value. The document forgery verification dApp calls and saves a function that stores the key-value in the document forgery management chaincode. Afterwards, when the document forgery verification dApp performs document forgery verification, when a registered document is attached, the document name and document are hashed to create a key-value, and the previously stored key-value is compared. If these values are the same, the document forgery verification dApp determines that the document has not been forged, and if different, the document forgery verification dApp determines that the document has been forged.

The blockchain network platform 300 builds a blockchain network. Specifically, the blockchain network platform 300 builds a blockchain network by the blockchain management agent 200 .

The blockchain network platform 300 may be a private blockchain network platform. Here, the private blockchain network platform builds a private blockchain network that only authorized users can participate in.

Accordingly, unlike a public blockchain network in which multiple users can participate, in a private blockchain network, only users authorized by the membership service provider can participate, and a blockchain is created between the authorized users.

For example, when an organization according to the present invention is registered with a membership service provider, only the corresponding organization can use the blockchain network, and an organization that is not registered with the membership service provider cannot use the blockchain network.

Accordingly, since the private blockchain network platform allows only authorized organizations to participate in the blockchain network, not only confidentiality is enhanced, but also the transaction creation speed can be increased.

In one embodiment, the blockchain network platform 300 may be a hyper-ledger fabric architecture.

Those skilled in the art to which the present invention pertains will understand that the above-described present invention may be embodied in other specific forms without changing the technical spirit or essential characteristics thereof.

Therefore, it should be understood that the embodiments described above are illustrative in all respects and not restrictive. The scope of the present invention is indicated by the following claims rather than the above detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalent concepts should be interpreted as being included in the scope of the present invention. do.

100: Blockchain management system 200: Blockchain management agent
210: server register 220: node register
230: organization register 240: channel register
250: network environment configuration unit 260: monitoring unit
270: API provider 300: blockchain network platform

Claims (13)

a node registration unit for registering nodes constituting the block chain network to the server in a block chain network platform according to node information input to a node registration page from any one of the pre-registered servers;
an organization registration unit for registering an organization including the node according to organization information input to an organization creation page from any one of the registered servers;
a channel registration unit for registering a channel sharing a block chain according to channel information input to a channel creation page from any one of the registered servers; and
It includes a network environment configuration unit that builds a blockchain network with the registered nodes, organizations, and channels using a blockchain network platform,
The network environment configuration unit,
To create a membership service provider by inputting a predetermined command to the block chain network platform,
A block chain management system capable of constructing a block chain network, characterized in that generating an organization file based on the organization information, and registering the organization by loading the organization file to the membership service provider. delete delete According to claim 1,
The network environment configuration unit,
A block chain management system capable of constructing a block chain network, characterized in that a channel file is created based on the channel information, and information for channel configuration is registered by loading the channel file on the block chain network platform. According to claim 1,
The network environment configuration unit,
A block chain management system capable of constructing a block chain network, characterized in that it generates a node file based on the node information and synchronizes the node environment of the server by propagating the node file to the registered server. According to claim 1,
The network environment configuration unit,
A block chain management system capable of constructing a block chain network, characterized in that by inputting a predetermined node setting command to the block chain network platform, a master node and a slave node are set to build a block chain network. According to claim 1,
The node registration unit,
A blockchain management system capable of constructing a blockchain network, characterized in that by creating a virtual space in the server and registering the node in the space. According to claim 1,
A block chain management system capable of building a block chain network, characterized in that it further comprises a server register for registering servers participating in the block chain network according to the server information input on the server registration page. According to claim 1,
The organizational information is
Any one of the registered servers' server name, network information, organization ID, organization name, peer node information participating in the organization, and an anchor peer node that can represent information exchange between peers among peer nodes within the organization A blockchain management system capable of building a blockchain network, characterized in that it includes at least one of information. According to claim 1,
The node information is a block chain management system capable of constructing a block chain network, characterized in that it includes at least one of a node selected among node types, port information, a Docker image, and a Docker image version. According to claim 1,
The node is
A first node for performing authentication and communication between nodes, a second node for managing ledger data, a third node for arranging transactions and generating and propagating blocks, and a fourth node for queuing and consuming transactions in order , a fifth node that distributes the fourth node composed of a cluster, and a sixth node that stores the latest data in the form of key-value in a transaction. Blockchain management system. According to claim 1,
The channel information
A block chain management system capable of constructing a block chain network, comprising at least one of server information, network information, channel name, authority information, organization information to participate, and peer information to participate in. According to claim 1,
The blockchain network platform is a blockchain management system that can build a blockchain network, characterized in that it is a private blockchain network platform.

Images