WO2021042851A1

WO2021042851A1 - Data signature method and device for use in blockchain, computer apparatus, and storage medium

Info

Publication number: WO2021042851A1
Application number: PCT/CN2020/099555
Authority: WO
Inventors: 张玉坚
Original assignee: 平安科技（深圳）有限公司
Priority date: 2019-09-06
Filing date: 2020-06-30
Publication date: 2021-03-11
Also published as: CN110781140B; CN110781140A

Abstract

A data signature method and device for use in a blockchain, a computer apparatus, and a storage medium. The data signature method for use in a blockchain comprises: during a digital signature process, caching a random number array in advance by means of a random number cache channel, such that a random number is directly acquired during signing by means of the random number cache channel, thereby bypassing a possible file lock competition caused by multiple threads performing signing in parallel, ensuring the performance of the CPU, and improving the parallel processing capability of a processor. Moreover, signature information has undergone multiple hash operations before being encrypted, thus preventing data from being easily tampered with, and ensuring the security of the data.

Description

Method, device, computer equipment and storage medium for data signature in blockchain

This application requires the priority of a Chinese patent application filed with the Chinese Patent Office on September 6, 2019, the application number is 201910842139.3, and the invention title is "Methods, devices, computer equipment and storage media for data signing in blockchain". The entire content is incorporated into this application by reference.

Technical field

This application relates to the field of data processing, and in particular to a method, device, computer equipment, and storage medium for data signing in a blockchain.

Background technique

Blockchain is generally understood as a distributed ledger, and its essence is also a distributed database. In the alliance chain scenario, in order to ensure that the data in the proposal phase is not tampered with, the content data in the proposal request needs to be signed, and a random number section array is used in the signing process. In the existing system, obtaining the random number section array is realized through the urandom file lock. The inventor realized that every time a data signature needs to call system resources in real time to obtain a random number, it takes too long. And when multiple threads need to sign data at the same time, it is easy to cause file lock competition, which in turn affects the performance of the CPU itself, and reduces the concurrency of the processor.

Summary of the invention

The embodiments of the present application provide a method, device, computer equipment, and storage medium for data signing in a blockchain to solve the problem of affecting the concurrency of the processor during the data signing process.

A method for signing data in a blockchain includes:

Acquiring a data signature request, where the data signature request includes signature information;

Obtaining node identity information and signing key according to the data signing request;

Combine the signature information and the node identity information to obtain the information to be signed;

Perform a hash operation on the information to be signed to obtain the first hash number;

Obtain a random number array from the random number cache channel as a signature random number;

Performing a hash operation on the signature key, the signature random number, and the first hash number to obtain a second hash number;

Encrypt the second hash number by an asymmetric encryption algorithm to obtain the encrypted hash number;

Send the encrypted hash number and node identity information to the client.

A device for signing data in a blockchain includes:

A signature request acquisition module, configured to acquire a data signature request, the data signature request including signature information;

A signature key acquisition module, configured to acquire node identity information and a signature key according to the data signature request;

The combination module is used to combine the signature information and the node identity information to obtain the information to be signed;

The first hash operation module is configured to perform a hash operation on the information to be signed to obtain the first hash number;

Random number acquisition module, used to acquire a random number array from the random number cache channel as a signature random number;

A second hash operation module, configured to perform a hash operation on the signature key, the signature random number, and the first hash number to obtain a second hash number;

The encryption module is used to encrypt the second hash number through an asymmetric encryption algorithm to obtain the encrypted hash number;

The sending module is used to send the encrypted hash number and node identity information to the client.

A computer device includes a memory and a processor, the processor and the memory are connected to each other, wherein the memory is used to store a computer program, the computer program includes program instructions, and the processor is used to execute the The program instructions of the memory, wherein:

Send the encrypted hash number and node identity information to the client.

A computer-readable storage medium, the computer-readable storage medium stores a computer program, the computer program includes program instructions, and when the program instructions are executed by a processor, they are used to implement the following steps:

Send the encrypted hash number and node identity information to the client.

In the above-mentioned method, device, computer equipment and storage medium for data signature in the blockchain, after obtaining the data signature request, obtain the node identity information and the signature key according to the data signature request; then combine the signature information with the The node identity information is combined to obtain the information to be signed; the information to be signed is hashed to obtain the first hash number; an array of random numbers is obtained from the random number cache channel as the signature random number; the signature is encrypted The key, the signature random number, and the first hash number are hashed to obtain the second hash number; the second hash number is encrypted by an asymmetric encryption algorithm to obtain the encrypted hash number; finally The encrypted hash number and node identity information are sent to the client. In the process of digital signature, this method caches the random number array in advance through the random number cache channel, and directly obtains the random number through the random number cache channel when signing, thereby avoiding file lock competition that may be caused by multi-threaded concurrent signatures, which is better This guarantees the performance of the CPU and improves the concurrency of the processor. Moreover, by performing multiple hash operations on the signature information and then encrypting it, it is possible to ensure that the data is not easily tampered with, and the security of the data is also ensured.

Description of the drawings

FIG. 1 is a schematic diagram of an application environment of a method for data signing in a blockchain in an embodiment of the present application;

FIG. 2 is a flowchart of a method for data signing in a blockchain in an embodiment of the present application;

FIG. 3 is another flowchart of a method for data signing in a blockchain in an embodiment of the present application;

FIG. 4 is another flowchart of a method for data signing in a blockchain in an embodiment of the present application;

FIG. 5 is another flowchart of a method for data signing in a blockchain in an embodiment of the present application;

Fig. 6 is another flowchart of a method for data signing in a blockchain in an embodiment of the present application;

FIG. 7 is a schematic diagram of a data signing device in a blockchain in an embodiment of the present application;

FIG. 8 is another schematic diagram of a data signing device in a blockchain in an embodiment of the present application;

FIG. 9 is another schematic diagram of a data signing device in a blockchain in an embodiment of the present application;

Fig. 10 is a schematic diagram of a computer device in an embodiment of the present application.

detailed description

The technical solutions in the embodiments of the present application will be described clearly and completely in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of them. Based on the embodiments in this application, all other embodiments obtained by a person of ordinary skill in the art without creative work shall fall within the protection scope of this application.

The method for data signature in the blockchain provided by the embodiment of the present application can be applied in the application environment as shown in FIG. 1, in which the client (computer equipment) communicates with the server through the network. The server obtains the data signing request sent by the client, the data signing request includes signature information; obtains the node identity information and the signing key according to the data signing request; combines the signature information and the node identity information to obtain Information to be signed; hash the information to be signed to obtain the first hash number; obtain an array of random numbers from the random number cache channel as the signature random number; to the signature key and the signature random Perform a hash operation on the number and the first hash number to obtain the second hash number; encrypt the second hash number by an asymmetric encryption algorithm to obtain the encrypted hash number; combine the encrypted hash number with the node The identity information is sent to the client. Among them, the client (computer equipment) can be, but is not limited to, various personal computers, notebook computers, smart phones, tablet computers, and portable wearable devices. The server can be implemented with an independent server or a server cluster composed of multiple servers.

In one embodiment, as shown in FIG. 2, a method for data signing in a blockchain is provided. Taking the method applied to the server in FIG. 1 as an example for description, the method includes the following steps:

S10: Obtain a data signature request, where the data signature request includes signature information.

Wherein, the data signature request is a trigger request for initiating a signature on data. Optionally, the data signing request can be initiated by the client or triggered by the server. The data signature request includes signature information, and the signature information may be original data that needs to be signed, or processed signature data. Exemplarily, a hash operation may be performed for the data that needs to be signed to obtain a hash value to form signature information. In this scenario, the client can also send the data that needs to be signed to the server, and the server then hashes the data that needs to be signed to obtain a hash value to form the signature information, and then generate a data signature request.

S20: Obtain the node identity information and the signature key according to the data signing request.

Specifically, the node identity information and signature key corresponding to the sending end can be obtained according to the identifier corresponding to the sending end (client) of the data signing request. The node identity information is the identity information of the corresponding client, and the identity information can be embodied in different forms, such as at least one of numbers, letters, symbols, or words. The signature key is a key carried by different clients.

Optionally, the node identity information and signature key can be obtained by querying local MSP (Membership service provider) information. MSP is a component that provides a management framework for virtual member operations. MSP extracts all the encryption mechanisms and protocols behind issuing and verifying certificates and user authentication. MSP can define its own identity concept, as well as these identity management rules (identity verification) and identity verification (signature generation and verification).

S30: Combine the signature information and the node identity information to obtain information to be signed.

Specifically, the signature information and the node identity information can be directly combined to form the information to be signed. Exemplarily, a combination of "signature information + node identity information" or "node identity information + signature information" can be used to obtain the information to be signed. Further, the node identity information can also be inserted into any position in the signature information, and a position identification is formed for subsequent verification to perform corresponding operations, which further provides data security.

S40: Perform a hash operation on the information to be signed to obtain a first hash number.

Hash operation is usually implemented through a hash function, a hash function, which is also called a hash function or hash function. The hash function is a public function that can map a message M of any length into a shorter and fixed-length value H(M), which is called hash value, hash value (Hash Value), and hash Value or Message Digest. The hash function is a one-way cryptosystem, that is, an irreversible mapping from plaintext to ciphertext, with only an encryption process and no decryption process. Exemplarily, the information to be signed may be hashed by MD5, SHA-1 or SHA-2 algorithms. Since the MD5 encryption algorithm generates a 32-bit MD5 code, and the SHA encryption algorithm generates a 40-bit SHA code, in terms of the security of cryptanalysis, using the SHA encryption algorithm (SHA-1 or SHA-2 algorithm) is better than using MD5. Algorithm encryption is less susceptible to cryptanalysis attacks; in terms of operating speed, encryption using MD5 algorithm runs faster and has higher performance than encryption using SHA algorithm. Therefore, when considering the encryption speed of data encryption, you can choose the MD5 encryption algorithm, and when considering the security of data encryption, you can choose the SHA encryption algorithm. By performing a hash operation on the information to be signed, a first hash number with a preset number of bits is obtained. Exemplarily, the first hash number is a 32-bit hash number.

S50: Obtain a random number array from the random number cache channel as the signature random number.

The random number cache channel is a pre-established cache channel for caching random arrays. The random number cache channel can be implemented by starting a coroutine. Define a random number cache channel in advance, and then store the generated random array in the random number cache channel. The traditional way to obtain the random number section array is realized through urandom file lock. However, every time a data signature needs to call system resources in real time to obtain a random number, it takes too long. And when multiple threads need to sign data at the same time, it is easy to cause file lock competition. In this embodiment, this step obtains a random number array from the random number cache channel. As a signature random number, the random number can be directly obtained through the random number cache channel, thereby bypassing the file lock that may be caused by multi-threaded concurrent signatures. competition. Optionally, the signature random number is a 32-bit random number array.

S60: Perform a hash operation on the signature key, the signature random number, and the first hash number to obtain a second hash number.

In this step, after integrating the signature key, the signature random number, and the first hash number, a hash operation is performed again to obtain a second hash number. Optionally, the signature key, the signature random number, and the first hash number may be hashed by using the SHA-512 algorithm to obtain the second hash number.

S70: Encrypt the second hash number by using an asymmetric encryption algorithm to obtain the encrypted hash number.

An asymmetric encryption algorithm requires two keys: a public key (publickey: public key for short) and a private key (privatekey: private key for short). The public key and the private key are a pair. If the public key is used to encrypt data, only the corresponding private key can be used to decrypt it. Since encryption and decryption use two different keys, this algorithm is called an asymmetric encryption algorithm. For each node, a public key and a private key are pre-allocated. Optionally, a key management center can be used to generate a key pair (public key and private key) for each node (client). The Key Management Center (KMC, Key Management Center) is an important part of the public key infrastructure and is responsible for providing key generation, storage, backup, update, restoration, or query for the certification authority (CA, Certification Authority) system. Key service to solve the key management problems caused by large-scale cryptographic technology applications in distributed enterprise application environments. The second hash number is encrypted by the private key of the node using an asymmetric encryption algorithm to obtain the encrypted hash number. Optionally, an asymmetric encryption algorithm such as RSA or Elgamal may be used to encrypt the second hash number.

S80: Send the encrypted hash number and node identity information to the client.

Send the encrypted hash number and node identity information after the data signature is completed to the client.

In this embodiment, after obtaining the data signature request, obtain the node identity information and the signature key according to the data signature request; then combine the signature information and the node identity information to obtain the information to be signed; The information to be signed is hashed to obtain the first hash number; an array of random numbers is obtained from the random number cache channel as the signature random number; the signature key, the signature random number, and the first hash are obtained The Greek number performs a hash operation to obtain the second hash number; the second hash number is encrypted by an asymmetric encryption algorithm to obtain the encrypted hash number; finally the encrypted hash number and node identity information are sent to the client . In the process of digital signature, this method caches the random number array in advance through the cached channel, and obtains the random number directly through the channel when signing, thereby bypassing the file lock competition that may be caused by multi-threaded concurrent signing, and better guarantees the CPU The performance improves the concurrency of the processor. Moreover, by performing multiple hash operations on the signature information and then encrypting it, it is possible to ensure that the data is not easily tampered with, and the security of the data is also ensured.

In an embodiment, as shown in FIG. 3, combining the signature information and the node identity information may include:

S31: Use a random function to generate a random number.

Set the range of random numbers to be generated in advance, and use a random function to generate a random number. Optionally, the rand() function can be used to produce random numbers. The range of the random number can be determined according to the data length of the signature information or the node identity information. Exemplarily, if the range of the random number is set according to the data length of the node identity information, taking the data length of the node identity information as an example, the range of the random number generated can be set to be 1-8 or 0-7. Integer.

S32: Determine an information insertion position from the signature information or the node identity information according to the random number.

After the random number is obtained, the information insertion position is determined from the signature information or the node identity information according to the random number. The information insertion position is used to indicate the specific combination position of the two pieces of information when combining the signature information and the node identity information. Specifically, taking the insertion of the signature information into the node identity information as an example, the insertion position is determined from the node identity information according to a random number. The node identity information can be used to determine the information insertion position from the node identity information based on random numbers in a left-to-right or right-to-left manner. Understandably, the process of inserting the node identity information into the signature information is similar to the foregoing process of inserting the signature information into the node identity information, and will not be repeated here.

S33: Combine the signature information and the node identity information according to the information insertion position to obtain combined information.

After the information insertion position is determined, the signature information and the node identity information are combined according to the information insertion position. Specifically, both the signature information and the node identity information are inserted into the other party according to the information insertion position (the signature information is inserted into the node identity information or the node identity information is inserted into the signature information) to obtain a combination information.

S34: Add the random number to the combined information to obtain information to be signed.

Then the random number is added to the combined information to obtain the information to be signed, so that the subsequent data can be restored based on the random number.

In this embodiment, first a random function is used to generate a random number; then the information insertion position is determined from the signature information or the node identity information according to the random number; the signature information and the node identity information are combined according to the insertion position. The identity information is combined to obtain combined information; finally, the random number is added to the combined information to obtain the information to be signed. In the process of combining the signature information and the node identity information, more diversified choices are made for the combined location, which better guarantees the security of the information.

In an embodiment, as shown in FIG. 4, before the random number array is obtained from the random number cache channel, the method for signing data in the blockchain further includes:

S51: Create a random number cache channel with a preset capacity.

Specifically, a coroutine is started to create a random number cache channel with a preset capacity. Specifically, a buffer can be used to create the random number cache channel. The random number buffer channel in the buffer will prevent data transmission to the random number buffer channel when the buffer data storage is full. When the data in the buffer is empty, data reception to the random number buffer channel will be blocked. The random number cache channel can be created as follows:

ch:=make(chan type, capacity). The data type is defined by "type", and the capacity of the cache channel is defined by "capacity". In this embodiment, the data type of the random number buffer channel can be defined as an array type.

S52: Generate a random number array repeatedly in a preset manner, and store the generated random number array in the random number buffer channel, and stop generating the random number array until the random number buffer channel is full.

The preset method refers to a method of generating a random number array. The random number array can be generated through the random function rand(), and each generated random number array is stored in the random number buffer channel. When the random number buffer channel is full, the step of generating the random number array is stopped.

Specifically, the length in the random number buffer channel can be read to determine whether the random number buffer channel is full. length refers to the number of elements in the current buffer channel. By comparing the size of the two values of length and capacity, if the value of length is equal to capacity, it means that the random number buffer channel is full, and the generation of the random number array is stopped.

In this embodiment, a random number cache channel with a preset capacity is first created, and a random number array is repeatedly generated in a preset manner, and the generated random number array is stored in the random number cache channel, Until the random number buffer channel is full, stop generating the random number array. This ensures the efficiency of caching the random number array in the random number cache channel, further ensures the efficiency of subsequent reading of the random number array, and improves the concurrency of the processor.

In one embodiment, as shown in FIG. 5, before the random number array is obtained from the random number cache channel, the method for signing data in the blockchain further includes:

S51’: Create a random number cache channel with a preset capacity, and build an array object pool.

Specifically, a coroutine is started to create a random number cache channel with a preset capacity. It can be created as follows:

ch:=make(chan type, capacity). The data type is defined by "type", and the capacity of the cache channel is defined by "capacity". In this embodiment, the data type of the random number buffer channel is defined as an array.

S52': Generate a random number array repeatedly in a preset manner, and store the generated random number array in the random number buffer channel, and stop generating the random number array until the random number buffer channel is full .

The random number array can be generated by the random function rand(), and each generated random number array can be stored in the random number buffer channel. When the random number buffer channel is full, the step of generating the random number array is stopped.

S53': Obtain a preset number of random number arrays from the random number cache channel, and transfer the acquired random number arrays to the array object pool.

Wherein, the preset number is determined according to the size of the array object pool, and the preset number of random number arrays obtained from the random number cache channel are transferred to the array object pool to improve the subsequent acquisition efficiency of the random number array.

In this embodiment, on the basis of creating the random number cache channel, an array object pool is also constructed, and after the random number array is filled in the random number cache channel, a preset number of random number arrays are transferred to the array object pool In order to facilitate subsequent acquisition of random number arrays, increase the speed of data acquisition, and reduce the impact on CPU performance.

In one embodiment, before obtaining a random number array from the random number cache channel, the method for signing data in the blockchain further includes:

Build a temporary object pool.

Construct a temporary object pool through the coroutine to recycle the used random number array and increase the reuse of array objects.

After the random number array is obtained from the random number cache channel, as shown in FIG. 6, the method for signing data in the blockchain further includes:

S53: Generate a new random number array in a preset manner, and store the newly generated random number array in the random number buffer channel.

After obtaining the random number array from the random number cache channel, the server randomly generates a new random number array through a preset method, and stores the newly generated random number array in the random number cache channel to ensure data Timeliness of generation.

S54: Put the signed random number into the temporary object pool.

After the signature random number is obtained from the random number cache channel, the signature random number is put into the temporary object pool to facilitate subsequent reuse of the signature random number to facilitate data recycling.

In this embodiment, a temporary object pool is first constructed, and after the random number array is obtained from the random number cache channel, a new random number array is generated in a preset manner, and the newly generated random number array is stored in The random number cache channel. Put the signed random number into the temporary object pool. The timeliness of data update is guaranteed, and the multiplexing of signed random numbers is increased to facilitate the recycling of data.

It should be understood that the size of the sequence number of each step in the foregoing embodiment does not mean the order of execution. The execution sequence of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application.

In one embodiment, a device for signing data in a blockchain is provided, and the device for signing data in the blockchain corresponds to the method for signing data in the blockchain in the above-mentioned embodiment in a one-to-one correspondence. As shown in FIG. 7, the device for signing data in the blockchain includes a signature request acquiring module 10, a signature key acquiring module 20, a combination module 30, a first hash operation module 40, a random number acquiring module 50, and a second hash module. Greek arithmetic module 60, encryption module 70 and sending module 80. The detailed description of each functional module is as follows:

The signature request acquiring module 10 is configured to acquire a data signature request, where the data signature request includes signature information;

The signature key acquisition module 20 is configured to acquire the node identity information and the signature key according to the data signature request;

The combination module 30 is configured to combine the signature information and the node identity information to obtain the information to be signed;

The first hash operation module 40 is configured to perform a hash operation on the information to be signed to obtain a first hash number;

The random number acquisition module 50 is used to acquire a random number array from the random number cache channel as a signature random number;

The second hash operation module 60 is configured to perform a hash operation on the signature key, the signature random number, and the first hash number to obtain a second hash number;

The encryption module 70 is used to encrypt the second hash number by an asymmetric encryption algorithm to obtain the encrypted hash number;

The sending module 80 is configured to send the encrypted hash number and node identity information to the client.

Preferably, as shown in FIG. 8, the combination module includes a random number generation unit 31, an insertion position determination unit 32, a combination information acquisition unit 33 and a to-be-signed information acquisition unit 34.

The random number generating unit 31 is configured to generate a random number by using a random function;

The insertion position determining unit 32 is configured to determine the information insertion position from the signature information or the node identity information according to the random number;

The combined information obtaining unit 33 is configured to combine the signature information and the node identity information according to the information insertion position to obtain combined information;

The information to be signed acquisition unit 34 is configured to add the random number to the combined information to obtain the information to be signed.

Preferably, as shown in FIG. 9, the device for signing data in the blockchain further includes a creation module 51, a cache channel storage module 52 and an object pool construction module 53.

The creation module 51 is used to create a random number cache channel with a preset capacity and build an array object pool;

The cache channel storage module 52 is configured to repeatedly generate a random number array in a preset manner, and store the generated random number array in the random number cache channel, and stop generating until the random number cache channel is full The random number array;

The object pool construction module 53 is configured to obtain a preset number of random number arrays from the random number cache channel, and transfer the obtained random number arrays to the array object pool.

Preferably, the device for signing data in the blockchain is also used to create a random number cache channel with a preset capacity; repeatedly generate a random number array in a preset manner, and store the generated random number array in the random number array. In the number buffer channel, until the random number buffer channel is full, stop generating the random number array.

Preferably, the data signing device in the blockchain is also used to construct a temporary object pool; and, after the random number array is obtained from the random number cache channel, the data signing device in the blockchain is also used To generate a new random number array in a preset manner, and store the newly generated random number array in the random number cache channel; and put the signed random number into the temporary object pool.

Regarding the specific limitation of the data signing device in the blockchain, please refer to the above limitation on the data signing method in the blockchain, which will not be repeated here. Each module in the device for data signing in the above-mentioned blockchain can be implemented in whole or in part by software, hardware, and a combination thereof. The above-mentioned modules may be embedded in the form of hardware or independent of the processor in the computer equipment, or may be stored in the memory of the computer equipment in the form of software, so that the processor can call and execute the operations corresponding to the above-mentioned modules.

In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. 10. The computer equipment includes a processor, a memory, a network interface, and a database connected through a system bus. Among them, the processor of the computer device is used to provide calculation and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The database of the computer equipment is used for the data used in the method for data signing in the blockchain described in the above embodiment. The network interface of the computer device is used to communicate with an external terminal through a network connection. The computer program is executed by the processor to realize a method of data signature in the blockchain.

In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and capable of running on the processor, and the processor implements the following steps when the processor executes the computer program:

Send the encrypted hash number and node identity information to the client.

In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

Send the encrypted hash number and node identity information to the client.

Wherein, the computer-readable storage medium may be non-volatile or volatile. A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage. In the medium, when the computer program is executed, it may include the procedures of the above-mentioned method embodiments. Wherein, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and/or volatile memory. Non-volatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not a limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain Channel (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

The above are only specific implementations of this application, but the protection scope of this application is not limited to this. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed in this application. Should be covered within the scope of protection of this application. Therefore, the protection scope of this application should be subject to the protection scope of the claims.

Claims

A method for signing data in a blockchain, which includes:

Acquiring a data signature request, where the data signature request includes signature information;

Obtaining node identity information and signing key according to the data signing request;

Combine the signature information and the node identity information to obtain the information to be signed;

Perform a hash operation on the information to be signed to obtain the first hash number;

Obtain a random number array from the random number cache channel as a signature random number;

Performing a hash operation on the signature key, the signature random number, and the first hash number to obtain a second hash number;

Encrypt the second hash number by an asymmetric encryption algorithm to obtain the encrypted hash number;

Send the encrypted hash number and node identity information to the client.
The method for data signing in a blockchain according to claim 1, wherein said combining said signature information and said node identity information to obtain the information to be signed comprises:

Use a random function to generate a random number;

Determining the information insertion position from the signature information or the node identity information according to the random number;

Combine the signature information and the node identity information according to the information insertion position to obtain combined information;

The random number is added to the combined information to obtain the information to be signed.
The method for data signing in the blockchain according to claim 1, wherein, before said obtaining the random number array from the random number cache channel, the method for data signing in the blockchain further comprises:

Create a random number cache channel of preset capacity;

The random number array is repeatedly generated in a preset manner, and the generated random number array is stored in the random number buffer channel, and the generation of the random number array is stopped until the random number buffer channel is full.
The method for data signing in the blockchain according to claim 1, wherein, before said obtaining the random number array from the random number cache channel, the method for data signing in the blockchain further comprises:

Create a random number cache channel with a preset capacity, and build an array object pool;

Generate a random number array repeatedly in a preset manner, and store the generated random number array in the random number buffer channel, and stop generating the random number array until the random number buffer channel is full;

A preset number of random number arrays are obtained from the random number cache channel, and the obtained random number arrays are transferred to the array object pool.
The method for data signing in the blockchain according to claim 1, wherein, before said obtaining the random number array from the random number cache channel, the method for data signing in the blockchain further comprises:

Build a temporary object pool;

After the random number array is obtained from the random number cache channel, the method for signing data in the blockchain further includes:

Generating a new random number array in a preset manner, and storing the newly generated random number array in the random number buffer channel;

Put the signed random number into the temporary object pool.
A device for signing data in a blockchain, which includes:

A signature request acquisition module, configured to acquire a data signature request, the data signature request including signature information;

A signature key acquisition module, configured to acquire node identity information and a signature key according to the data signature request;

The combination module is used to combine the signature information and the node identity information to obtain the information to be signed;

The first hash operation module is configured to perform a hash operation on the information to be signed to obtain the first hash number;

Random number acquisition module, used to acquire a random number array from the random number cache channel as a signature random number;

A second hash operation module, configured to perform a hash operation on the signature key, the signature random number, and the first hash number to obtain a second hash number;

The encryption module is used to encrypt the second hash number through an asymmetric encryption algorithm to obtain the encrypted hash number;

The sending module is used to send the encrypted hash number and node identity information to the client.
The device for data signing in the blockchain according to claim 6, wherein the combination module comprises:

Random number generating unit, used to generate a random number by using a random function;

An insertion position determining unit, configured to determine an information insertion position from the signature information or the node identity information according to the random number;

A combined information obtaining unit, configured to combine the signature information and the node identity information according to the information insertion position to obtain combined information;

The information to be signed acquisition unit is configured to add the random number to the combined information to obtain the information to be signed.
7. The device for signing data in the blockchain according to claim 6, wherein the device for signing data in the blockchain further comprises a first processing module, and the first processing module is configured to:

Create a random number cache channel of preset capacity;

The random number array is repeatedly generated in a preset manner, and the generated random number array is stored in the random number buffer channel, and the generation of the random number array is stopped until the random number buffer channel is full.
7. The device for signing data in the blockchain according to claim 6, wherein the device for signing data in the blockchain further comprises:

The creation module is used to create a random number cache channel with a preset capacity and build an array object pool;

The cache channel storage module is used to repeatedly generate a random number array in a preset manner, and store the generated random number array in the random number cache channel, until the random number cache channel is full, then stop generating all the random numbers. The random number array;

The object pool construction module is used to obtain a preset number of random number arrays from the random number cache channel, and transfer the obtained random number arrays to the array object pool.
7. The device for signing data in the blockchain according to claim 6, wherein the device for signing data in the blockchain further comprises a second processing module, and the second processing module is used for:

Build a temporary object pool;

The second processing module is also used for:

Generating a new random number array in a preset manner, and storing the newly generated random number array in the random number buffer channel;

Put the signed random number into the temporary object pool.
A computer device includes a memory and a processor, the processor and the memory are connected to each other, wherein the memory is used to store a computer program, the computer program includes program instructions, and the processor is used to execute the The program instructions of the memory, wherein:

Acquiring a data signature request, where the data signature request includes signature information;

Obtaining node identity information and signing key according to the data signing request;

Combine the signature information and the node identity information to obtain the information to be signed;

Perform a hash operation on the information to be signed to obtain the first hash number;

Obtain a random number array from the random number cache channel as a signature random number;

Performing a hash operation on the signature key, the signature random number, and the first hash number to obtain a second hash number;

Encrypt the second hash number by an asymmetric encryption algorithm to obtain the encrypted hash number;

Send the encrypted hash number and node identity information to the client.
The computer device of claim 11, wherein the processor is configured to:

Use a random function to generate a random number;

Determining the information insertion position from the signature information or the node identity information according to the random number;

Combine the signature information and the node identity information according to the information insertion position to obtain combined information;

The random number is added to the combined information to obtain the information to be signed.
The computer device of claim 11, wherein the processor is configured to:

Create a random number cache channel of preset capacity;

The random number array is repeatedly generated in a preset manner, and the generated random number array is stored in the random number buffer channel, and the generation of the random number array is stopped until the random number buffer channel is full.
The computer device of claim 11, wherein the processor is configured to:

Create a random number cache channel with a preset capacity, and build an array object pool;

Generate a random number array repeatedly in a preset manner, and store the generated random number array in the random number buffer channel, and stop generating the random number array until the random number buffer channel is full;

A preset number of random number arrays are obtained from the random number cache channel, and the obtained random number arrays are transferred to the array object pool.
The computer device of claim 11, wherein the processor is configured to:

Build a temporary object pool;

The processor is also used for:

Generating a new random number array in a preset manner, and storing the newly generated random number array in the random number buffer channel;

Put the signed random number into the temporary object pool.
A computer-readable storage medium, the computer-readable storage medium stores a computer program, the computer program includes program instructions, and when the program instructions are executed by a processor, they are used to implement the following steps:

Acquiring a data signature request, where the data signature request includes signature information;

Obtaining node identity information and signing key according to the data signing request;

Combine the signature information and the node identity information to obtain the information to be signed;

Perform a hash operation on the information to be signed to obtain the first hash number;

Obtain a random number array from the random number cache channel as a signature random number;

Performing a hash operation on the signature key, the signature random number, and the first hash number to obtain a second hash number;

Encrypt the second hash number by an asymmetric encryption algorithm to obtain the encrypted hash number;

Send the encrypted hash number and node identity information to the client.
15. The computer-readable storage medium of claim 16, wherein when the program instructions are executed by the processor, they are further used to implement the following steps:

Use a random function to generate a random number;

Determining the information insertion position from the signature information or the node identity information according to the random number;

Combine the signature information and the node identity information according to the information insertion position to obtain combined information;

The random number is added to the combined information to obtain the information to be signed.
15. The computer-readable storage medium of claim 16, wherein when the program instructions are executed by the processor, they are further used to implement the following steps:

Create a random number cache channel of preset capacity;

The random number array is repeatedly generated in a preset manner, and the generated random number array is stored in the random number buffer channel, and the generation of the random number array is stopped until the random number buffer channel is full.
15. The computer-readable storage medium of claim 16, wherein when the program instructions are executed by the processor, they are further used to implement the following steps:

Create a random number cache channel with a preset capacity, and build an array object pool;

Generate a random number array repeatedly in a preset manner, and store the generated random number array in the random number buffer channel, and stop generating the random number array until the random number buffer channel is full;

A preset number of random number arrays are obtained from the random number cache channel, and the obtained random number arrays are transferred to the array object pool.
15. The computer-readable storage medium of claim 16, wherein when the program instructions are executed by the processor, they are further used to implement the following steps:

Build a temporary object pool;

When the program instructions are executed by the processor, they are also used to implement the following steps:

Generating a new random number array in a preset manner, and storing the newly generated random number array in the random number buffer channel;

Put the signed random number into the temporary object pool.