WO2020143196A1

WO2020143196A1 - Communication method and device between blockchain nodes, storage medium and electronic apparatus

Info

Publication number: WO2020143196A1
Application number: PCT/CN2019/094568
Authority: WO
Inventors: 胡俊; 戴广宇
Original assignee: 平安科技（深圳）有限公司
Priority date: 2019-01-11
Filing date: 2019-07-03
Publication date: 2020-07-16
Also published as: CN109873808A

Abstract

The present application relates to the field of blockchain, specifically a communication method and device between blockchain nodes, a storage medium and an electronic apparatus, the method includes: when a first blockchain node receives a communication request sent by a second blockchain node, determining whether the communication request is the first received communication request; if it is the first received communication request, determining whether there is a business correspondence between the second blockchain node and the first blockchain node; if there is, configuring the first blockchain node and the second blockchain node in the same local area network; establishing a communication connection between the first blockchain node and the second blockchain node in the local area network. In the present application, the first blockchain node and the second blockchain node having a business correspondence therebetween are configured in the same local area network, and the communication connection between the nodes is established in the local area network, such that the two nodes do not require to communicate across multi-level gateways, improving the data transmission speed and enhancing the user experience.

Description

Communication method and device between blockchain nodes, storage medium and electronic equipment

Technical field

This application requires the priority of the Chinese patent application CN201910025476.3 filed on January 11, 2019, with the invention titled "Communication Methods and Devices between Blockchain Nodes, Storage Media, and Electronic Equipment", which is hereby incorporated by reference All contents are merged here.

The present application relates to the field of blockchain technology, and in particular, to a communication method and apparatus between blockchain nodes, a computer-readable storage medium, and electronic equipment.

Background technique

As a branch of blockchain technology, alliance chain technology is gradually applied in more and more scenarios, such as product traceability and asset securitization. Alliance chain technology refers to the blockchain where the consensus process is controlled by pre-selected nodes, and it includes business nodes and consensus nodes. Among them, the business node is a business server of each institution that joins the alliance chain network, the server is installed with software for communicating with other nodes in the alliance chain network, and the consensus node is responsible for receiving business data sent by the business node for consensus verification. If the two nodes have a fixed business relationship, it is said that there is a business correspondence between the two nodes.

In this alliance chain, in order to improve the security of communication, a certificate authority (CA center) is usually set up. The CA center issues node certificates for each node participating in the blockchain communication, so that the nodes holding legal certificates can communicate with each other. communication. However, the inventor of the present application realized that once the security of the CA center is threatened, the communication security of the entire alliance chain will be threatened. Therefore, this kind of communication method based on CA center still has great security risks.

It should be noted that the information disclosed in the above background section is only used to enhance the understanding of the background of the present application, and therefore may include information that does not constitute prior art known to those of ordinary skill in the art.

technical problem

The purpose of the present application is to provide a communication method and device, storage medium and electronic equipment between blockchain nodes, so as to improve the security of the blockchain network at least to a certain extent.

Technical solution

Other characteristics and advantages of the present application will become apparent through the following detailed description, or partly learned through the practice of the present application.

According to the first aspect of the present application, a communication method between blockchain nodes is provided, which includes: when the first blockchain node receives the communication request sent by the second blockchain node, determine whether the communication request Is a communication request received for the first time; if it is judged that the communication request is received for the first time, it is judged whether the second blockchain node has a business correspondence with the first blockchain node; if there is a business correspondence, the The first blockchain node and the second blockchain node are configured in the same local area network; a communication connection between the first blockchain node and the second blockchain node is established in the local area network.

According to a second aspect of the present application, there is provided a communication device between blockchain nodes, including: a request verification module for a first blockchain node to receive a communication request sent by a second blockchain node, Determine whether the communication request is the first received communication request; the relationship verification module is used to determine whether the second blockchain node has business with the first blockchain node when determining that it is the first received communication request Correspondence; a relationship configuration module, configured to configure the first blockchain node and the second blockchain node in the same local area network when there is a business correspondence; a relationship establishment module, used in the local area network Establish a communication connection between the first blockchain node and the second blockchain node.

According to a third aspect of the present application, there is provided a computer-readable storage medium on which a computer program is stored, which when executed by a processor causes the processor to perform the following processing:

When the first blockchain node receives the communication request sent by the second blockchain node, it is determined whether the communication request is the first received communication request; if it is the first received communication request, the second block is judged Whether there is a business correspondence between the chain node and the first blockchain node; if there is a business correspondence, configure the first blockchain node and the second blockchain node on the same local area network; A communication connection between the first blockchain node and the second blockchain node is established in the local area network.

According to a fourth aspect of the embodiments of the present application, an electronic device is provided, including:

Processor; and

The memory is used to store one or more programs. When the one or more programs are executed by the one or more processors, the one or more processors implement the following processing: in the first blockchain When the node receives the communication request sent by the second blockchain node, it determines whether the communication request is the first received communication request; if it is the first received communication request, it determines whether the second blockchain node is in contact with the There is a business correspondence between the first blockchain node; if there is a business correspondence, configure the first blockchain node and the second blockchain node on the same local area network; establish the first A communication connection between a blockchain node and the second blockchain node.

Beneficial effect

The technical solutions provided by the embodiments of the present application may include the following beneficial effects:

In a communication method between blockchain nodes provided by an embodiment of the present application, when it is determined that the communication request is received for the first time, the first blockchain node and the second block that have a business correspondence relationship are determined The chain nodes are configured in the same local area network, and the communication connection between the nodes is established in the local area network, so that the two nodes no longer need to communicate across the multi-level gateway, which improves the data transmission speed and enhances the user experience.

It should be understood that the above general description and the following detailed description are only exemplary and explanatory, and do not limit the present application.

BRIEF DESCRIPTION

The drawings herein are incorporated into the specification and constitute a part of the specification, show embodiments consistent with the application, and are used together with the specification to explain the principles of the application.

FIG. 1 schematically shows a flowchart of a communication method between blockchain nodes in an exemplary embodiment of the present application;

2 schematically shows a flowchart of a method for configuring the first blockchain node and the second blockchain node on the same local area network in an exemplary embodiment of the present application;

3 schematically shows a schematic diagram of a communication architecture between blockchain nodes when multiple communication connections are established simultaneously in an exemplary embodiment of the present application;

4 schematically shows a flowchart of a method for generating a verification code in the virtual private network server and sending it to a gateway in the private network for verification in an exemplary embodiment of the present application;

FIG. 5 schematically shows a flowchart of a method for configuring the first blockchain node and the second blockchain node on the same local area network according to the matching information in an exemplary embodiment of the present application;

FIG. 6 schematically shows a composition diagram of a communication device between blockchain nodes in an exemplary embodiment of the present application;

7 is a schematic diagram showing the composition of another communication device between blockchain nodes in an exemplary embodiment of the present application;

FIG. 8 schematically shows a schematic structural diagram of a computer system suitable for implementing an electronic device of an exemplary embodiment of the present application;

FIG. 9 schematically shows a schematic diagram of a computer-readable storage medium according to some embodiments of the present application.

Embodiments of the invention

Example embodiments will now be described more fully with reference to the drawings. However, the example embodiments can be implemented in various forms and should not be construed as being limited to the examples set forth herein; on the contrary, providing these embodiments makes the application more comprehensive and complete, and fully conveys the concept of the example embodiments For those skilled in the art. The described features, structures, or characteristics may be combined in one or more embodiments in any suitable manner.

In addition, the drawings are only schematic illustrations of the present application and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and thus their repeated description will be omitted. Some of the block diagrams shown in the drawings are functional entities and do not necessarily have to correspond to physically or logically independent entities. These functional entities may be implemented in the form of software, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and/or processor devices and/or microcontroller devices.

In this exemplary embodiment, first, a communication method between blockchain nodes is provided. Referring to FIG. 1, the above communication method between blockchain nodes may include the following steps:

S110: When the first blockchain node receives the communication request sent by the second blockchain node, determine whether the communication request is the first received communication request;

S120: If it is determined that the communication request is received for the first time, determine whether there is a business correspondence between the second blockchain node and the first blockchain node;

S130: If there is a business correspondence, configure the first blockchain node and the second blockchain node on the same local area network;

S140: Establish a communication connection between the first blockchain node and the second blockchain node in the local area network.

According to the communication method between the blockchain nodes provided in the present exemplary embodiment, by judging that the communication request is received for the first time, the first blockchain node and the second block that judge that there is a business correspondence relationship The chain nodes are configured in the same local area network, and the communication connection between the nodes is established in the local area network, so that the two nodes no longer need to communicate across the multi-level gateway, which improves the data transmission speed and enhances the user experience.

Hereinafter, each step of the communication method between blockchain nodes in this exemplary embodiment will be described in more detail with reference to the accompanying drawings and embodiments.

In step S110, when receiving the communication request sent by the second blockchain node, the first blockchain node determines whether the communication request is the first received communication request.

In an example embodiment of the present application, the first reception may be that the first blockchain node receives the communication request of the second blockchain node for the first time on all historical timelines, or it may be a preset The communication request of the second blockchain node is received for the first time in the verification cycle. The preset verification period may be determined according to time, for example, each verification period is 10 minutes, 1 hour, etc.; or may be determined according to frequency, for example, refreshing the verification period once every 50 communication connections.

In other exemplary embodiments of the present application, the first reception may further include after determining that there is no business correspondence between the second blockchain node and the first blockchain node, the first blockchain node The communication request of the second blockchain node is received for the first time or after the communication connection is disconnected, the first blockchain node receives the communication request of the second blockchain node for the first time. For example, when judging whether the second blockchain node has a business correspondence with the first blockchain node, an unexpected error (such as entering an incorrect verification code during verification) results in the judgment that there is no business between the two nodes After the correspondence, the second blockchain node sends a communication request again, and the reception of the first blockchain node can also be defined as the first reception; again, for example, between the first blockchain node and the second blockchain node The communication connection is disconnected due to the cancellation of the business correspondence. After the two nodes re-establish the business correspondence, the second blockchain node sends a communication request, and the reception of the first blockchain node can also be defined as the first reception.

In step S120, if it is determined that the communication request is received for the first time, it is determined whether there is a business correspondence between the second blockchain node and the first blockchain node.

In an exemplary embodiment of the present application, the business correspondence relationship refers to a fixed business relationship between the first blockchain node and the second blockchain node. For example, different business nodes provide services for different applications (Application, APP). The business node sends the business data generated by the APP to the consensus node for consensus verification. Assuming that a business node is a server corresponding to an app related to an approval transaction, and another business node is a server corresponding to an application related to an app. After a user makes an application through the app related to the app, the app can approve the app related to the app. Each business node will participate in the same business, and there is a business correspondence between the two business nodes.

In an example embodiment of the present application, the judgment of the business correspondence relationship may be verified using third-party technology. For example, mobile terminal technologies such as SMS authentication, WeChat authentication, and mail verification can be used to confirm the business correspondence, or the physical genetic characteristics of the device and the user's biological genetic characteristics can be used to confirm the business correspondence. In addition, for financial or government platforms, third-party information preservation technology can also be used to achieve independent information fairness, evidence chain preservation, and judicial certificate storage to assist in the judgment of business correspondence. When determining whether the second blockchain node has a business correspondence with the first blockchain node, third-party technology can be used for verification to avoid potential security risks due to the use of CA certificates while enriching business correspondence verification The diversity of methods improves the user experience during verification.

In step S130, if there is a business correspondence, the first blockchain node and the second blockchain node are configured on the same local area network.

In an exemplary embodiment of the present application, the first blockchain node and the second blockchain node are configured on the same local area network, and the user may manually connect the first blockchain node and the second blockchain node Blockchain nodes are configured in the same local area network or can be configured automatically.

In an example configuration provided in an example embodiment of the present application, an automatic configuration method includes adding a LAN configuration node to a blockchain network to which the first blockchain node and the second blockchain node belong; wherein , The local area network configuration node includes a virtual private network server and a gateway in the private network. In an exemplary embodiment of the present application, the local area network configuration node may configure a plurality of blockchain nodes that have a business correspondence relationship in different local area networks to establish multiple communication connections at the same time. When multiple communication connections are established at the same time, the communication architecture between blockchain nodes is shown in FIG. 3.

In the case where the above-mentioned local area network configuration node is added, the first blockchain node and the second blockchain node are configured in the same local area network, as shown in FIG. 2, including the following steps S210 to S230, the following details To elaborate:

In step S210, a verification code is generated in the virtual private network server and sent to the gateway in the private network for verification.

In an example embodiment of the present application, the verification code may include a virtual private network server identifier. To further improve security, you can configure the RSA private key in the virtual private network server in advance, and then use the RSA private key to encrypt the verification code message, and then send the encrypted verification code message to the virtual private network. The gateway performs verification. By using the RSA public key and private key to encrypt the verification code, the security performance through verification of the verification code is improved, thereby further improving the communication security between blockchain nodes.

Specifically, the verification code generated in the virtual private network server and sent to the gateway in the private network for verification, as shown in FIG. 4, includes the following steps:

Step S410: Generate a verification code in the virtual private network server, and encrypt the verification code according to a preset RSA private key to obtain an encrypted verification code.

Step S420: Send the encrypted verification code to the gateway in the private network.

Step S430, in the gateway in the private network, decrypt the encrypted verification code according to a preset RSA public key, and verify the decrypted verification code; wherein, the preset RSA public key and the The RSA private key corresponds.

In step S220, if the verification is passed, the virtual private network server is configured and sent matching information.

In an exemplary embodiment of the present application, the matching information configured and sent to the virtual private network server includes a private network IP address segment and an encryption key.

In step S230, when the virtual private network server receives the request that the first blockchain node and the second blockchain node join the local area network, the first blockchain is converted according to the matching information The node and the second blockchain node are configured on the same local area network.

In an exemplary embodiment of the present application, the matching information includes a private network IP address segment and an encryption key. Correspondingly, the first blockchain node and the second Blockchain nodes are configured in the same local area network, as shown in Figure 5, including the following steps:

Step S510, the virtual private network server assigns IP addresses to the first blockchain node and the second blockchain node within the private network IP address segment;

Step S520, based on the IP address, using the encryption key to transmit the data of the first blockchain node and the second blockchain node to the gateway in the private network, so that the first The blockchain node and the second blockchain node are arranged in the same local area network.

In an example embodiment of the present application, the first blockchain node and the second blockchain node can also be configured in the same local area network by other means, for example, a dedicated gateway device can be used, etc. Make special restrictions.

In step S140, a communication connection between the first blockchain node and the second blockchain node is established in the local area network.

In an exemplary embodiment of the present application, after establishing a communication connection between the first blockchain node and the second blockchain node in the local area network, the method further includes: The first blockchain node and/or the second blockchain node actively disconnects the local area network connection, then disconnects the communication connection.

In an exemplary embodiment of the present application, if the first reception is the first reception within a preset verification period, the method further includes: if at least one of the following conditions is detected, disconnecting the communication connection; wherein, The situation includes: the end of the preset verification period and the attribute of the communication connection meeting the refresh condition of the preset verification period. For example, when the preset verification period is 10 minutes, the communication connection is disconnected 10 minutes after the communication connection is established; for another example, when the preset period is 50 communication connections, the preset is refreshed after 50 communication connections Verification cycle.

It should be noted that the above drawings are only schematic illustrations of the processing included in the method according to the exemplary embodiment of the present application, and are not intended to limit the purpose. It is easy to understand that the processes shown in the above drawings do not indicate or limit the chronological order of these processes. In addition, it is also easy to understand that these processes may be performed synchronously or asynchronously in multiple modules, for example.

In addition, in an exemplary embodiment of the present application, a communication device between blockchain nodes is also provided. Referring to FIG. 6, the communication device 600 between the blockchain nodes includes a request verification module 610, a relationship verification module 620, a relationship configuration module 630, and a relationship establishment module 640. among them:

The request verification module 610 may be used for the first blockchain node to determine whether the communication request is the first received communication request when receiving the communication request sent by the second blockchain node.

The relationship verification module 620 may be used to determine whether there is a business correspondence between the second blockchain node and the first blockchain node when determining that the communication request is received for the first time.

The relationship configuration module 630 may be used to configure the first blockchain node and the second blockchain node on the same local area network when there is a business correspondence.

The relationship establishing module 640 may be used to establish a communication connection between the first blockchain node and the second blockchain node in the local area network.

In another exemplary embodiment of the present application, based on the foregoing solution, referring to FIG. 7, the apparatus further includes: a connection control module 650; the connection control module 650 may be used to detect the first When the blockchain node and/or the second blockchain node actively disconnects the local area network connection, the communication connection is disconnected.

In an exemplary embodiment of the present application, based on the foregoing solution, the connection control module 650 may be used to disconnect the communication connection when at least one of the following conditions is detected; wherein, the conditions include: The preset verification period ends and the attribute of the communication connection satisfies the refresh condition of the preset verification period.

In an exemplary embodiment of the present application, the relationship configuration module 630 is further used to add a LAN configuration node to the blockchain network to which the first blockchain node and the second blockchain node belong ; Wherein, the local area network configuration node includes a virtual private network server and a gateway in the private network.

The relationship configuration module 630 includes:

A verification code generating unit, configured to generate a verification code in the virtual private network server and send it to the gateway in the private network for verification;

A matching information sending unit, configured to configure and send matching information to the virtual private network server if the verification is passed;

The configuration unit is configured to: when the virtual private network server receives the request for the first blockchain node and the second blockchain node to join the local area network, according to the matching information, the first blockchain The node and the second blockchain node are configured on the same local area network.

In an exemplary embodiment of the present application, the verification code generating unit includes:

A verification code obtaining subunit, configured to generate a verification code in the virtual private network server, and encrypt the verification code according to a preset RSA private key to obtain an encrypted verification code;

A sending subunit, configured to send the encrypted verification code to the gateway in the dedicated network;

A check subunit, configured to decrypt the encrypted verification code according to a preset RSA public key in a gateway in the dedicated network, and verify the decrypted verification code; wherein, the preset RSA public key The key corresponds to the RSA private key.

In an exemplary embodiment of the present application, the matching information includes a private network IP address segment and an encryption key;

The configuration unit includes:

An allocation subunit for the virtual private network server to allocate IP addresses for the first blockchain node and the second blockchain node in the private network IP address segment;

A transmission subunit for transmitting the data of the first blockchain node and the second blockchain node to the gateway in the private network based on the IP address, using the encryption key The first blockchain node and the second blockchain node are arranged in the same local area network.

In an exemplary embodiment of the present application, the first reception includes the first reception within a preset verification period, and the communication device further includes:

The detection module is configured to disconnect the communication connection if at least one of the following conditions is detected; wherein, the conditions include:

The preset verification period ends and the attribute of the communication connection satisfies the refresh condition of the preset verification period.

Since each functional module of the communication device between the blockchain nodes of the example embodiment of the present application corresponds to the steps of the above example embodiment of the communication method between the blockchain nodes, it is not disclosed in the device embodiment of the present application For details, please refer to the embodiment of the communication method between blockchain nodes described above in this application.

It should be noted that although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present application, the features and functions of the two or more modules or units described above may be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided into multiple modules or units to be embodied.

In addition, in an exemplary embodiment of the present application, an electronic device capable of implementing communication between the above-mentioned blockchain nodes is also provided.

Those skilled in the art can understand that various aspects of the present application can be implemented as a system, method, or program product. Therefore, various aspects of the present application may be specifically implemented in the form of: a complete hardware embodiment, a complete software embodiment (including firmware, microcode, etc.), or a combination of hardware and software embodiments, which may be collectively referred to herein as "Circuit", "Module" or "System".

The electronic device 800 according to this embodiment of the present application is described below with reference to FIG. 8. The electronic device 800 shown in FIG. 8 is only an example, and should not bring any limitation to the functions and use scope of the embodiments of the present application.

As shown in FIG. 8, the electronic device 800 is represented in the form of a general-purpose computing device. Components of the electronic device 800 may include, but are not limited to: the at least one processing unit 810, the at least one storage unit 820, a bus 830 connecting different system components (including the storage unit 820 and the processing unit 810), and a display unit 840.

Wherein, the storage unit stores a program code, and the program code may be executed by the processing unit 810, so that the processing unit 810 executes various exemplary according to the present application described in the "exemplary method" section of the above description of the specification Example steps. For example, the processing unit 810 may perform step S110 as shown in FIG. 1: when receiving the communication request sent by the second blockchain node, the first blockchain node determines whether the communication request is the first received communication Request; S120: If it is determined that this is the first communication request received, determine whether there is a business correspondence between the second blockchain node and the first blockchain node; S130: If there is a business correspondence, then convert the The first blockchain node and the second blockchain node are configured in the same local area network; S140: establishing a communication connection between the first blockchain node and the second blockchain node in the local area network .

The storage unit 820 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 821 and/or a cache storage unit 822, and may further include a read-only storage unit (ROM) 823.

The storage unit 820 may further include a program/utility tool 824 having a set of (at least one) program modules 825. Such program modules 825 include but are not limited to: an operating system, one or more application programs, other program modules, and program data, Each of these examples or some combination may include an implementation of the network environment.

The bus 830 may be one or more of several types of bus structures, including a storage unit bus or a storage unit controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local area using any of a variety of bus structures bus.

The electronic device 800 may also communicate with one or more external devices 870 (eg, keyboard, pointing device, Bluetooth device, etc.), and may also communicate with one or more devices that enable a user to interact with the electronic device 800, and/or with This enables the electronic device 800 to communicate with any device (eg, router, modem, etc.) that communicates with one or more other computing devices. This communication can be performed through an input/output (I/O) interface 850. Moreover, the electronic device 800 can also communicate with one or more networks (such as a local area network (LAN), a wide area network (WAN), and/or a public network, such as the Internet) through the network adapter 860. As shown in the figure, the network adapter 860 communicates with other modules of the electronic device 800 through the bus 830. It should be understood that although not shown in the figure, other hardware and/or software modules may be used in conjunction with the electronic device 800, including but not limited to: microcode, device driver, redundant processing unit, external disk drive array, RAID system, tape drive And data backup storage system.

Through the description of the above embodiments, those skilled in the art can easily understand that the example embodiments described here can be implemented by software, or can be implemented by software in combination with necessary hardware. Therefore, the technical solution according to the embodiments of the present application may be embodied in the form of a software product, which may be stored in a non-volatile storage medium (which may be a CD-ROM, U disk, mobile hard disk, etc.) or on the network , Including several instructions to enable a computing device (which may be a personal computer, server, terminal device, or network device, etc.) to execute the method according to the embodiments of the present application.

In an exemplary embodiment of the present application, there is also provided a computer-readable storage medium on which a program product capable of implementing the above method of this specification is stored. In some possible embodiments, various aspects of the present application may also be implemented in the form of a program product, which includes program code, and when the program product runs on a terminal device, the program code is used to enable the The terminal device executes the steps according to various exemplary embodiments of the present application described in the "Exemplary Method" section of this specification.

With reference to FIG. 9, a program product 900 for implementing the above method according to an embodiment of the present application is described, which may use a portable compact disk read-only memory (CD-ROM) and include program code, and may be used in a terminal device, such as a personal Run on the computer. However, the program product of the present application is not limited to this. In this document, the readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, apparatus, or device.

The program product may employ any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: electrical connections with one or more wires, portable disks, hard disks, random access memory (RAM), read only memory (ROM), erasable Programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the foregoing.

The computer-readable signal medium may include a data signal that is transmitted in baseband or as part of a carrier wave, in which readable program code is carried. This propagated data signal can take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. The readable signal medium may also be any readable medium other than a readable storage medium, and the readable medium may send, propagate, or transmit a program for use by or in combination with an instruction execution system, apparatus, or device.

The program code contained on the readable medium may be transmitted on any appropriate medium, including but not limited to wireless, wired, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

The program code for performing the operations of the present application can be written in any combination of one or more programming languages, which includes object-oriented programming languages such as Java, C++, etc., and also includes the conventional procedural formula Programming language-such as "C" language or similar programming language. The program code may be executed entirely on the user computing device, partly on the user device, as an independent software package, partly on the user computing device and partly on the remote computing device, or entirely on the remote computing device or server To execute. In situations involving remote computing devices, the remote computing device may be connected to the user computing device through any kind of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (for example, using Internet service provision Business to connect via the Internet).

Furthermore, the above-mentioned drawings are only schematic illustrations of processes included in the method according to the exemplary embodiment of the present application, and are not intended to limit the purpose. It is easy to understand that the processes shown in the above drawings do not indicate or limit the chronological order of these processes. In addition, it is also easy to understand that these processes may be performed synchronously or asynchronously in multiple modules, for example.

After considering the description and practicing the invention disclosed herein, those skilled in the art will easily think of other embodiments of the present application. This application is intended to cover any variations, uses, or adaptations of this application, which follow the general principles of this application and include common general knowledge or customary technical means in the technical field not disclosed in this application . The description and examples are only considered exemplary, and the true scope and spirit of this application are pointed out by the claims.

It should be understood that the present application is not limited to the precise structure that has been described above and shown in the drawings, and various modifications and changes can be made without departing from the scope thereof. The scope of this application is limited only by the appended claims.

Claims

A communication method between blockchain nodes, which is characterized by:

When the first blockchain node receives the communication request sent by the second blockchain node, it is determined whether the communication request is the first received communication request;

If it is determined that the communication request is received for the first time, it is determined whether there is a business correspondence between the second blockchain node and the first blockchain node;

If there is a business correspondence, configure the first blockchain node and the second blockchain node on the same local area network;

Establish a communication connection between the first blockchain node and the second blockchain node in the local area network.
The method according to claim 1, wherein a local area network configuration node is provided in the blockchain network to which the first blockchain node and the second blockchain node belong, wherein the local area network configuration Nodes include virtual private network servers and gateways in private networks;

The configuration of the first blockchain node and the second blockchain node on the same local area network includes:

Generate a verification code in the virtual private network server and send it to the gateway in the private network for verification;

If the verification is passed, configure and send matching information to the virtual private network server;

When the virtual private network server receives the request of the first blockchain node and the second blockchain node to join the local area network, the first blockchain node and the second blockchain node are combined according to the matching information. The two blockchain nodes are configured on the same local area network.
The method according to claim 2, wherein the generating a verification code in the virtual private network server and sending it to the gateway in the private network for verification includes:

Generating a verification code in the virtual private network server, and encrypting the verification code according to a preset RSA private key to obtain an encrypted verification code;

Send the encrypted verification code to the gateway in the dedicated network;

Decrypt the encrypted verification code according to a preset RSA public key in the gateway in the private network, and verify the decrypted verification code; wherein, the preset RSA public key and the RSA private key correspond.
The method according to claim 2, wherein the matching information includes a private network IP address segment and an encryption key;

The configuring the first blockchain node and the second blockchain node on the same local area network according to the matching information includes:

The virtual private network server assigns IP addresses to the first blockchain node and the second blockchain node within the private network IP address segment;

Based on the IP address, the encryption key is used to transmit the data of the first blockchain node and the second blockchain node to the gateway in the private network, so that the first blockchain The node and the second blockchain node are configured on the same local area network.
The method according to claim 1, wherein the method further comprises:

If it is detected that the first blockchain node and/or the second blockchain node actively disconnects the local area network connection, the communication connection is disconnected.
A communication device between blockchain nodes, characterized in that it includes:

The request verification module is used for the first blockchain node to determine whether the communication request is the first received communication request when receiving the communication request sent by the second blockchain node;

The relationship verification module is used to determine whether there is a business correspondence between the second blockchain node and the first blockchain node when determining that it is the first communication request received;

A relationship configuration module, configured to configure the first blockchain node and the second blockchain node on the same local area network when there is a business correspondence relationship;

The relationship establishment module is used to establish a communication connection between the first blockchain node and the second blockchain node in the local area network.
The communication device according to claim 6, wherein the device further comprises:

The connection control module is configured to disconnect the communication connection when detecting that the first blockchain node and/or the second blockchain node actively disconnects the local area network connection.
The communication device according to claim 7, wherein the relationship configuration module is further configured to set a local area network configuration in the blockchain network to which the first blockchain node and the second blockchain node belong A node, wherein the local area network configuration node includes a virtual private network server and a gateway in the private network;

The relationship configuration module includes:

A verification code generating unit, configured to generate a verification code in the virtual private network server and send it to the gateway in the private network for verification;

A matching information sending unit, configured to configure and send matching information to the virtual private network server if the verification is passed;

The configuration unit is configured to: when the virtual private network server receives the request for the first blockchain node and the second blockchain node to join the local area network, according to the matching information, the first blockchain The node and the second blockchain node are configured on the same local area network.
The communication device according to claim 7, wherein the verification code generating unit comprises:

A verification code obtaining subunit, configured to generate a verification code in the virtual private network server, and encrypt the verification code according to a preset RSA private key to obtain an encrypted verification code;

A sending subunit, configured to send the encrypted verification code to the gateway in the dedicated network;

A check subunit, configured to decrypt the encrypted verification code according to a preset RSA public key in a gateway in the dedicated network, and verify the decrypted verification code; wherein, the preset RSA public key The key corresponds to the RSA private key.
The communication device according to claim 9, wherein the matching information includes a private network IP address segment and an encryption key;

The configuration unit includes:

An allocation subunit for the virtual private network server to allocate IP addresses for the first blockchain node and the second blockchain node in the private network IP address segment;

A transmission subunit for transmitting the data of the first blockchain node and the second blockchain node to the gateway in the private network based on the IP address, using the encryption key The first blockchain node and the second blockchain node are arranged in the same local area network.
A computer-readable storage medium on which a computer program is stored, characterized in that, when the computer program is executed by a processor, the processor causes the processor to perform the following processing:

When the first blockchain node receives the communication request sent by the second blockchain node, it is determined whether the communication request is the first received communication request;

If it is determined that the communication request is received for the first time, it is determined whether there is a business correspondence between the second blockchain node and the first blockchain node;

If there is a business correspondence, configure the first blockchain node and the second blockchain node on the same local area network;

Establish a communication connection between the first blockchain node and the second blockchain node in the local area network.
The storage medium according to claim 11, wherein the computer program, when executed by the processor, causes the processor to block the blockchain to which the first blockchain node and the second blockchain node belong A LAN configuration node is provided in the network, wherein the LAN configuration node includes a virtual private network server and a gateway in the private network;

Wherein, when the computer program is executed by the processor, the processor executes the following processes to configure the first blockchain node and the second blockchain node on the same local area network:

Generate a verification code in the virtual private network server and send it to the gateway in the private network for verification;

If the verification is passed, configure and send matching information to the virtual private network server;

When the virtual private network server receives the request of the first blockchain node and the second blockchain node to join the local area network, the first blockchain node and the second blockchain node are combined according to the matching information. The two blockchain nodes are configured on the same local area network.
The storage medium according to claim 12, wherein when the computer program is executed by the processor, the processor causes the processor to generate a verification code in the virtual private network server and send it to the Check the gateway in the private network:

Generating a verification code in the virtual private network server, and encrypting the verification code according to a preset RSA private key to obtain an encrypted verification code;

Send the encrypted verification code to the gateway in the dedicated network;

Decrypt the encrypted verification code according to a preset RSA public key in the gateway in the private network, and verify the decrypted verification code; wherein, the preset RSA public key and the RSA private key correspond.
The storage medium according to claim 12, wherein the matching information includes a private network IP address segment and an encryption key; when the computer is executed by the processor, the processor causes the processor to perform Generate a verification code in the dedicated network server, and encrypt the verification code according to a preset RSA private key to obtain an encrypted verification code:

The virtual private network server assigns IP addresses to the first blockchain node and the second blockchain node within the private network IP address segment;

Based on the IP address, the encryption key is used to transmit the data of the first blockchain node and the second blockchain node to the gateway in the private network, so that the first blockchain The node and the second blockchain node are configured on the same local area network.
The storage medium according to claim 11, wherein the computer program, when executed by the processor, causes the processor to further perform the following processing:

If it is detected that the first blockchain node and/or the second blockchain node actively disconnects the local area network connection, the communication connection is disconnected.
An electronic device, characterized in that it includes:

Processor; and

The memory is used to store one or more programs, and when the one or more programs are executed by the one or more processors, the one or more processors implement the following processing:

When the first blockchain node receives the communication request sent by the second blockchain node, it is determined whether the communication request is the first received communication request;

If it is determined that the communication request is received for the first time, it is determined whether there is a business correspondence between the second blockchain node and the first blockchain node;

If there is a business correspondence, configure the first blockchain node and the second blockchain node on the same local area network;

Establish a communication connection between the first blockchain node and the second blockchain node in the local area network.
The electronic device according to claim 16, wherein when the one or more programs are executed by the one or more processors, the one or more processors are located in the first block A local area network configuration node is provided in the blockchain network to which the chain node and the second blockchain node belong, wherein the local area network configuration node includes a virtual private network server and a gateway in the private network;

Wherein, when the one or more programs are executed by the one or more processors, the one or more processors implement the following processing:

Generate a verification code in the virtual private network server and send it to the gateway in the private network for verification;

If the verification is passed, configure and send matching information to the virtual private network server;

When the virtual private network server receives the request of the first blockchain node and the second blockchain node to join the local area network, the first blockchain node and the second blockchain node are combined according to the matching information. The two blockchain nodes are configured on the same local area network.
The electronic device according to claim 17, wherein when the one or more programs are executed by the one or more processors, the one or more processors are implemented in the The verification code is generated in the virtual private network server and sent to the gateway in the private network for verification:

Generating a verification code in the virtual private network server, and encrypting the verification code according to a preset RSA private key to obtain an encrypted verification code;

Send the encrypted verification code to the gateway in the dedicated network;

Decrypt the encrypted verification code according to a preset RSA public key in the gateway in the private network, and verify the decrypted verification code; wherein, the preset RSA public key and the RSA private key correspond.
The electronic device according to claim 17, wherein the matching information includes a private network IP address segment and an encryption key; when the one or more programs are executed by the one or more processors, such that The one or more processors perform the following processes to generate a verification code in the virtual private network server, and encrypt the verification code according to a preset RSA private key to obtain an encrypted verification code:

The virtual private network server assigns IP addresses to the first blockchain node and the second blockchain node within the private network IP address segment;

Based on the IP address, the encryption key is used to transmit the data of the first blockchain node and the second blockchain node to the gateway in the private network, so that the first blockchain The node and the second blockchain node are configured on the same local area network.
The electronic device according to claim 16, wherein when the one or more programs are executed by the one or more processors, the one or more processors further implement the following processing:

If it is detected that the first blockchain node and/or the second blockchain node actively disconnects the local area network connection, the communication connection is disconnected.