CN106295406A - A kind of block chain that is used for is from safe storage system and method thereof - Google Patents

Abstract

This invention provides a self-secure storage system and method for blockchain, comprising: (1) a daemon module, installed on the client, for providing file access services; (2) a source data evolution module, for creating a new version of the source data for each accessed file; (3) a monitoring window, for recording all data and source data for tracing and analyzing any inappropriate access; (4) a transaction data integrity maintenance module, for ensuring the integrity of all transaction data up to the point of intrusion by any intrusion occurring under the monitoring window; and (5) an isolation module, for ensuring that users are not exposed to transaction files whose trustworthiness is questionable, as these transaction files will lose transaction data during the intrusion process, and users will not be allowed to access files modified by the intruder without their knowledge. Using this self-secure storage system and method for blockchain, intruded transaction data files can be recovered more quickly and completely.

Description

A self-safe storage system and method for blockchain

technical field

The invention relates to the transaction data security problem of the block chain, in particular to a self-safe storage system and method of the block chain.

Background technique

The emergence of Bitcoin in 2009 brought a subversive result - block chain technology, block chain is a secure ledger database, composed of data blocks, users can continuously update and upgrade For financial institutions, blockchain can speed up transaction processing, reduce costs, reduce middlemen, improve market insight, and increase business transparency.

Computing and storage are the two basic tasks of computer systems. With the explosive growth of information, storage components will experience direct-connected storage based on a single server, cluster grid storage based on a LAN, and finally develop into a data grid based on a wide area network. Blockchain technology is at the very end of the current development. The intrinsic characteristics of this data storage medium include intelligent storage, storage service quality can guarantee service differentiation and performance guarantee for user applications, storage is object-oriented mass storage, and Network storage must be guaranteed to be confidential, complete and secure. The existing Internet does not have a good or convenient way to ensure the confidentiality, integrity, availability, and Non-repudiation and the reliable performance of the entire network storage system, especially the emergence of blockchain trusted computing technology in recent years, have put forward higher requirements for network storage security.

Contents of the invention

The purpose of the present invention is to provide a self-safe storage system and method for blockchain, including: (1) daemon module, installed on the client, for file access services; (2) original data evolution module , used to create a new version for the original data of each accessed file; (3) the monitoring window, used to record all data and original data, except for recording the explicit write operations of various modified data, every time the file is All visits will be recorded by updating the log of the file, which is used to trace and analyze any inappropriate visits; (4) the transaction data integrity maintenance module is used to monitor the intrusion that occurs under the monitoring window at any time, the system Can guarantee the integrity of all transaction data at the intrusion point; (5) an isolation module, used to ensure that the user will not be questioned by transaction files with trustworthiness problems, and the transaction files will lose transaction data during the intrusion process, And it will not allow users to access files changed by intruders without knowing it.

Preferably, a secondary transaction data recovery module is also included, which is used to recover the loss of transaction data caused by legitimate changes between the time of the intrusion and the discovery of the intrusion.

Preferably, the transaction files can be reliably restored to the last access before the intrusion, and after verifying the access logs of individual transaction files, if no inappropriate abnormal records are found, these transaction files can be completely restored.

Preferably, the transaction files are recorded from two aspects of time and space, one is to use the log-based original transaction data time recording method, and the second is to use the binary tree space recording method based on multi-version logs.

Preferably, the self-secure storage system of the blockchain does not provide a module to ensure confidentiality. Assuming that these self-secure disks are connected to a transaction file server using a standard authentication protocol, all requests sent to the self-secure storage system do not require additional Authentication and encryption.

Using the self-secure storage system of the blockchain, the hacked transaction data files can be recovered faster and more completely.

of the present invention.

Those skilled in the art will be more aware of the above and other objects, advantages and features of the present invention according to the following detailed description of specific embodiments of the present invention in conjunction with the accompanying drawings.

Description of drawings

Hereinafter, some specific embodiments of the present invention will be described in detail by way of illustration and not limitation with reference to the accompanying drawings. The same reference numerals in the drawings designate the same or similar parts or parts. Those skilled in the art will appreciate that the drawings are not necessarily drawn to scale. The objectives and features of the present invention will be more apparent in consideration of the following description in conjunction with the accompanying drawings, in the accompanying drawings:

Fig. 1 is a schematic structural diagram of a blockchain self-secure storage system according to an embodiment of the present invention.

detailed description

Before describing the specific implementation manners, in order to express the discussed content more clearly, some very important concepts are firstly defined.

Transaction: The essence of a transaction is a relational data structure, which contains information about the value transfer of transaction participants. These transaction information is called ledger ledger. Transactions need to go through three steps of creating, verifying, and writing to the blockchain. The transaction must be digitally signed to ensure the legality of the transaction.

Block: All transaction information is stored in the block, and a transaction information is a record, which is stored in the blockchain as an independent record. A block consists of a block header and a data part. The block header field contains various characteristics of the block itself, such as the previous block information, merkle value and timestamp. Among them, the block header hash value and block height are the two most important indicators for identifying blocks. The block master identifier is its encrypted hash value, a digital fingerprint obtained by hashing the block header twice through the SHA algorithm. The resulting 32-byte hash is called the block hash, or block header hash, and only the block header is used for the calculation. The block hash value can uniquely and unambiguously identify a block, and any node can independently obtain the block hash value by simply hashing the block header.

Blockchain: A data structure in which blocks are linked in an orderly manner according to a chain structure. A blockchain is like a vertical stack, with the first block being the first block at the bottom of the stack, and each subsequent block being placed on top of the others. When the block is written into the blockchain, it will never change and is backed up to other blockchain servers.

Example:

Confidentiality of any system can be breached in practice, so the primary goal is to prevent the breach of transaction data and capture the source of intrusion into the blockchain system through detection and diagnostics. See Figure 1, a self-secure storage system for blockchain. The storage principle is based on the distrust of the host operating system. Some basic operations are required to manage the file system. A daemon module is installed on the client to serve the file system. access. The self-secure storage system does not provide measures to ensure confidentiality. It assumes that these self-secure disks are connected to a transaction file server using a standard authentication protocol, and all requests sent to the self-secure storage system do not require additional authentication and encryption.

The blockchain's self-secure storage system includes an original data evolution module for creating a new version of the original data for each accessed file.

And it also includes a monitoring window, which is used to record all data and original data. In addition to recording the explicit write operations of various modified data, each access to the file will be recorded by updating the log of the file, so that any Unsuitable access can be traced and analyzed. Once the monitoring window is set, it is inevitable to be unprepared to monitor when approaching the data, thereby preventing intruders from changing the data in an undetected manner. It also includes a transaction data integrity maintenance module, which is used for intrusions that occur under the monitoring of the monitoring window at any time. The system can ensure the integrity of all transaction data at the point of intrusion. Through detailed records, the blockchain administrator After an intrusion is discovered, the files can be reliably restored to the last access before the intrusion. In addition, after verifying the access logs of individual transaction files, if no inappropriate abnormal records are found, these transaction files can be completely restored.

It also includes an isolation module. Those transaction files that are questioned about their trustworthiness will lose transaction data during the intrusion process. The isolation mechanism of the self-secure storage system ensures that users cannot receive these problematic files and will not let users know. access to files altered by intruders.

A secondary transaction data recovery module may also be included, which is used to recover the loss of transaction data caused by legitimate changes between the time of the intrusion and the detection of the intrusion, thereby improving the availability of transaction data and minimizing losses.

In view of the need to make a log for each transaction file access, this embodiment records from two aspects of time and space, one is to use the time recording method of the original transaction data based on the log, and the second is to use the binary tree based on the multi-version log Spatial recording method. Judging from the recovery time and recovery status of the transaction data after the intrusion of a certain transaction file, the system can achieve a speed improvement of more than twice that of the traditional system, and 100% recovery of transaction data.

While the invention has been described with reference to certain illustrative embodiments, it is not to be limited by these embodiments but only by the appended claims. Those skilled in the art should understand that changes and modifications can be made to the embodiments of the present invention without departing from the protection scope and spirit of the present invention.

Claims (10)

1. A self-safe storage system for blockchain, characterized in that it comprises: (1) a daemon module, installed on the client, for serving file access; (2) The original data evolution module is used to create a new version for the original data of each access file; (3) The monitoring window is used to record all data and original data. In addition to recording the explicit write operations of various modified data, each access to the file will be recorded by updating the log of the file for source tracing and analyze any inappropriate access; (4) The transaction data integrity maintenance module is used to ensure the integrity of all transaction data at the point of intrusion for the intrusion that occurs under the monitoring of the monitoring window at any time; (5) The isolation module is used to ensure that the user will not receive transaction files with questionable trustworthiness. The transaction files will lose transaction data during the intrusion process, and will not allow users to access without knowing it after being changed by the intruder document. 2. A self-safe storage system for blockchain according to claim 1, characterized in that: it also includes a secondary transaction data recovery module, which is used to recover legal data between the intrusion and the discovery of the intrusion. Transaction data lost as a result of the change. 3. A self-safe storage system for blockchain according to claim 1, characterized in that: the transaction file can be reliably restored to the last access before the intrusion, and when verifying a single transaction file After accessing the log, these transaction files can be completely restored if no inappropriate abnormal records are found. 4. A kind of self-safe storage system for blockchain according to claim 1, characterized in that: record the transaction file from two aspects of time and space, one is to use the original transaction data time based on log Recording method, the second is the binary tree space recording method based on multi-version logs. 5. A kind of self-safety storage system for block chain according to claim 1, is characterized in that: the self-safety storage system of described block chain does not provide the module that guarantees confidentiality, assuming these self-safety disks and A transaction file server connection using standard authentication protocols, all requests sent to this self-secure storage system do not require additional authentication and encryption. 6. A self-safe storage system for blockchain, characterized in that it comprises the steps of: (1) a daemon module, installed on the client, for serving file access; (2) The original data evolution module is used to create a new version for the original data of each access file; (3) The monitoring window is used to record all data and original data. In addition to recording the explicit write operations of various modified data, each access to the file will be recorded by updating the log of the file for source tracing and analyze any inappropriate access; (4) The transaction data integrity maintenance module is used to ensure the integrity of all transaction data at the point of intrusion for the intrusion that occurs under the monitoring of the monitoring window at any time; (5) The isolation module is used to ensure that the user will not receive transaction files with questionable trustworthiness. The transaction files will lose transaction data during the intrusion process, and will not allow users to access without knowing it after being changed by the intruder document. 7. A self-safe storage system for blockchain according to claim 6, characterized in that: it also includes a secondary transaction data recovery module, which is used to restore the legal data between the intrusion and the discovery of the intrusion Transaction data lost as a result of the change. 8. A self-safe storage system for blockchain according to claim 6, characterized in that: the transaction file can be reliably restored to the last access before the intrusion, and when verifying a single transaction file After accessing the log, these transaction files can be completely restored if no inappropriate abnormal records are found. 9. A self-safe storage system for blockchain according to claim 6, characterized in that: record the transaction file from two aspects of time and space, one is to use the log-based original transaction data time Recording method, the second is the binary tree space recording method based on multi-version logs. 10. A self-safe storage system for blockchain according to claim 6, characterized in that: the self-safe storage method of said blockchain does not provide a module to ensure confidentiality, assuming that these self-safe disks and A transaction file server connection using standard authentication protocols, all requests sent to this self-secure storage system do not require additional authentication and encryption.