CN108512699B - Block chain service server data anomaly detection method and equipment and block chain system - Google Patents

Abstract

The embodiment of the invention provides a method and equipment for detecting data exception of a block chain service server and a block chain system, relates to the field of block chains, and can enable the block chain system to perform self-detection on various faults and take corresponding measures. The method comprises the following steps: the method comprises the steps that a block chain core server obtains block chain service data generated by at least one block chain service server; then the block chain core server can judge whether the block chain service server in the at least one block chain service server has data abnormity according to a preset algorithm according to the block chain service data generated by the at least one block chain service server; when the target block chain service server is determined to have data abnormality, sending a processing instruction corresponding to the data abnormality to the SDN controller, so that the SDN controller generates corresponding router configuration parameters according to the processing instruction and sends the router configuration parameters to a service SDN router connected with the target block chain service server, and the SDN controller updates self configuration according to the router configuration parameters.

Description

Block chain business server data abnormality detection method, equipment and block chain system

technical field

The invention relates to the technical field of blockchain, and in particular, to a method, equipment and a blockchain system for detecting abnormality of data in a blockchain service server.

Background technique

The core of blockchain technology is a distributed ledger technology, which is a technical solution to collectively maintain a reliable database in a decentralized and trustless manner. At present, blockchain technology has evolved from Bitcoin-based version 1.0 to smart contract version 2.0, and has become a new technology with great potential to be applied to various industries. The technical characteristics of the blockchain have strong two sides: its openness, consensus, decentralization and trustless characteristics make the blockchain strong robustness and openness and transparency, but because the original block Each server node in the chain system stores the transaction information and property information of all users in the blockchain system, and because the data changes in the blockchain system cannot be modified and the blockchain user information is kept confidential and cannot be traced, so Once the entire blockchain system is attacked by hackers and network extortion, the blockchain system itself cannot guarantee the recovery of property and the location of criminals. For example, Bitfinex, a bitcoin trading platform based on blockchain technology, was stolen 120,000 bitcoins in 2016. Due to the defects of the blockchain technology itself, the trading platform cannot trace the source and trace the hackers, and can only share the losses equally by users.

SUMMARY OF THE INVENTION

The embodiments of the present invention provide a method, equipment and a blockchain system for detecting data anomaly of a blockchain service server, which can establish a blockchain system that can detect its own failure and avoid losses suffered by blockchain users.

To achieve the above object, the embodiments of the present invention adopt the following technical solutions:

In a first aspect, a data anomaly detection method for a blockchain business service in a blockchain system is provided, including:

The blockchain core server obtains at least one blockchain business data through a core SDN router connected to the blockchain core server, wherein at least one blockchain business data is generated by at least one blockchain business server, and passes through the respective connected business SDNs The router sends to the SDN router corresponding to the address data in the at least one blockchain service data and the core SDN router connected to the blockchain core server;

The blockchain core server judges, according to all the obtained blockchain business data, according to a preset algorithm, whether any blockchain business server in at least one blockchain business server has abnormal data;

When the blockchain core server determines that the target blockchain service server has data abnormality, the core SDN router connected to the blockchain core server and the control SDN router connected to the SDN controller send processing instructions corresponding to the data abnormality to the SDN controller. ; The target blockchain service server is any blockchain service server in at least one blockchain service server;

After receiving the processing instruction, the SDN controller generates router configuration parameters corresponding to the processing instruction, and sends the router configuration parameters to the service SDN router connected to the target blockchain service server through the control SDN router connected to the SDN controller;

The service SDN router connected to the target blockchain service server updates its own configuration according to the router configuration parameters.

Optionally, before sending the blockchain service data, the service SDN router connected to any blockchain service server further includes: the service SDN router connected to any blockchain service server sets a preset label for the blockchain service data , so that the service SDN router or core SDN router that receives the blockchain service data can identify and obtain the blockchain service data.

Optionally, the data anomalies of the target blockchain business server include at least: the target blockchain business server is attacked, causing its own blockchain business functions to be inconsistent with the presets, the target blockchain business server publishing illegal information and the target area. The amount of blockchain business data generated by the blockchain business server exceeds the preset standard;

The processing instruction is at least one of the following: the first processing instruction, the second processing instruction and the third processing instruction; the target blockchain service server is attacked and the blockchain service function it possesses does not match the preset corresponding to the first For the processing instruction, the target blockchain business server issues illegal information corresponding to the second processing instruction, and the target blockchain business server's blockchain business data exceeds the preset standard and corresponds to the third processing instruction.

Optionally, after receiving the processing instruction, the SDN controller generates router configuration parameters corresponding to the processing instruction, and sends the router configuration parameters to the service SDN router connected to the target blockchain service server through the control SDN router connected to the SDN controller. include:

When the SDN controller receives the first processing instruction, it generates router firewall configuration parameters, and sends the router firewall configuration parameters to the service SDN router connected to the target blockchain service server through the control SDN router connected to the SDN controller;

When the SDN controller receives the second processing instruction, it generates router port configuration parameters, and sends the router port configuration parameters to the service SDN router connected to the target blockchain service server through the control SDN router connected to the SDN controller;

When the SDN controller receives the third processing instruction, the router bandwidth configuration parameter is generated, and the router bandwidth configuration parameter is sent to the service SDN router connected to the target blockchain service server through the control SDN router connected to the SDN controller.

Further optionally, the service SDN router connected to the target blockchain service server updates its own configuration according to the router configuration parameters, including: the service SDN router connected to the target blockchain service server updates its own firewall configuration according to the router firewall configuration parameters; The service SDN router connected to the blockchain service server closes the port for publishing illegal information according to the router port configuration parameters; the service SDN router connected to the target blockchain service server adjusts the available bandwidth for data transmission according to the router bandwidth configuration parameters.

Optionally, when a new blockchain service server is added to the blockchain system, the method further includes: the SDN controller receives the service connected by the new blockchain service server through the control SDN router connected to the SDN controller. The docking instruction sent by the SDN router to complete the docking, and the docking instruction carries the address data of the new blockchain service server;

The blockchain core server connects the blockchain business data and address data of all blockchain business servers in the blockchain system stored by itself through the core SDN router connected to the blockchain core server and the new blockchain business server. The business SDN router is sent to the new blockchain business server;

After the blockchain core server completes the docking between the service SDN router connected to the new blockchain service server and the SDN controller, the core SDN router connected to the blockchain core server obtains a new blockchain service server to generate and connects through itself The blockchain business data sent by the business SDN router.

In a second aspect, a blockchain core server is provided, including: an acquisition module, a processing module and a sending module;

The obtaining module is used to obtain at least one blockchain service data sent by the core SDN router connected to the blockchain core server, wherein the at least one blockchain service data is generated by the at least one blockchain service server and passed through the respective connected service SDNs The router sends to the core SDN router connected to the blockchain core server;

The processing module is configured to judge, according to all the blockchain business data received by the acquiring module, according to a preset algorithm, whether any blockchain business server in at least one blockchain business server has abnormal data;

The sending module is used to send a processing instruction corresponding to the data abnormality to the core SDN router connected to the blockchain core server when the processing module determines that the target blockchain service server has data abnormality.

Specifically, the data anomalies in the target blockchain business server include: the target blockchain business server is attacked, causing its own blockchain business functions to be inconsistent with the presets, the target blockchain business server publishing illegal information and the target block The amount of blockchain business data generated by the chain business server exceeds the preset standard.

Optionally, the blockchain core server further includes a storage module; the storage module is used to store all blockchain business data obtained by the acquisition module and address data of all blockchain business servers;

When a new blockchain business server joins the blockchain system where the blockchain core server is located, the sending module is also used to send all blockchain business data stored in the storage module and address data of all blockchain business servers Send to the business SDN router connected to the new blockchain business server, so that the new blockchain business server can obtain all blockchain business data and address data of all blockchain business servers through its connected business SDN router;

The obtaining module is also used to obtain the blockchain business data of the new blockchain business server sent by the core SDN router connected to the blockchain core server, and the blockchain business data of the new blockchain business server is determined by the new block chain. The chain service server generates and sends to the core SDN router connected to the blockchain core server through the service SDN router connected to itself.

In a third aspect, an SDN controller is provided, including: a receiving module, a sending module, and a processing module;

The receiving module is used to receive processing instructions sent by the control SDN router connected to the SDN controller, and the processing instructions are generated by the blockchain core server and sent to the control SDN router connected to the SDN controller through the core SDN router connected to itself;

The processing module is used for generating router configuration parameters according to the processing instructions received by the receiving module;

The sending module is used for sending the router configuration parameters generated by the processing module to the controlling SDN router connected to the SDN controller.

Specifically, the processing instruction is at least one of the following: a first processing instruction, a second processing instruction, and a third processing instruction; the data exception of the target process corresponding to the first processing instruction is caused by the target blockchain service server being attacked The blockchain business functions it has are inconsistent with the presets. The data abnormality of the target process corresponding to the second processing instruction is illegal information issued by the target blockchain business server, and the data abnormality of the target process corresponding to the third processing instruction is the target block. The amount of blockchain business data of the chain business server exceeds the preset standard;

The processing module is specifically configured to: generate router firewall configuration parameters according to the first processing instruction; generate router port configuration parameters according to the second processing instruction; generate router bandwidth configuration parameters according to the third processing instruction.

Optionally, when a new blockchain service server is added to the blockchain system where the SDN controller is located, the receiving module is further configured to receive the docking instruction sent by the SDN router connected to the SDN controller, and the docking instruction is sent by the new block. The service SDN router connected to the new blockchain service server of the chain service server is sent to the control SDN router connected to the SDN controller, and the docking instruction carries the information of the service SDN router connected to the new blockchain service server address data.

A fourth aspect provides a service SDN router, characterized in that it includes: a receiving module, a sending module, and a processing module;

The receiving module is used to receive the blockchain service data generated by the blockchain service server connected to the service SDN router;

The sending module is used to send the blockchain service data received by the receiving module to the core SDN router connected to the blockchain core server and the service SDN router corresponding to the address data in the blockchain service data;

When the blockchain service server connected to the service SDN router has abnormal data, the receiving module is further configured to receive the router configuration parameters generated by the SDN controller and sent through the control SDN router connected to itself;

The processing module is used to change the configuration of the service SDN router according to the router configuration parameters.

Optionally, the processing module is further configured to set a preset label for the blockchain business data received by the receiving module before the sending module sends the blockchain business data, so that the core SDN router connected to the blockchain core server and the blockchain The service SDN router corresponding to the address data in the chain service data obtains and identifies the blockchain service data.

Optionally, when the router configuration parameters are router firewall configuration parameters, the processing module is configured to change the current firewall configuration of the service SDN router according to the router firewall configuration parameters;

When the router configuration parameter is the router port configuration parameter, the processing module is used to change the current port configuration of the service SDN router according to the router port configuration parameter;

When the router configuration parameter is the router bandwidth configuration parameter, the processing module is used to change the current available bandwidth of the service SDN router according to the router bandwidth configuration parameter.

A fifth aspect provides a blockchain system, including the blockchain core server provided in the second aspect, the SDN controller provided in the third aspect, and the SDN router provided in the fourth aspect.

The blockchain service server data anomaly detection method, device, and blockchain system provided by the embodiments of the present invention include: the blockchain core server obtains at least one blockchain service through a core SDN router connected to the blockchain core server data, wherein at least one blockchain service data is generated by at least one blockchain service server, and sent to the SDN router and the blockchain corresponding to the address data in the at least one blockchain service data through the respective connected service SDN routers The core SDN router connected to the core server; the blockchain core server judges, according to all the obtained blockchain business data, according to a preset algorithm, whether any blockchain business server in at least one blockchain business server has abnormal data; When the chain core server determines that the target blockchain service server has data abnormality, it sends processing instructions corresponding to the data abnormality to the SDN controller via the core SDN router connected to the blockchain core server and the control SDN router connected to the SDN controller; The blockchain service server is any blockchain service server in the at least one blockchain service server; the SDN controller generates router configuration parameters corresponding to the processing instruction after receiving the processing instruction, and controls the SDN router connected through the SDN controller The router configuration parameters are sent to the service SDN router connected to the target blockchain service server; the service SDN router connected to the target blockchain service server updates its own configuration according to the router configuration parameters. Therefore, during the use of the blockchain system, the blockchain core server can obtain the blockchain service data sent by at least one SDN router connected to the blockchain service server; The blockchain service data sent by the connected service SDN router can be determined according to the preset algorithm to determine whether any blockchain service server has data abnormality in all blockchain service servers; when it is determined that the target blockchain service server has data abnormality, Send a processing instruction that is abnormally connected to the data to the SDN controller, so that it can generate the corresponding router configuration parameters according to the processing instruction and send it to the service SDN router connected to the target blockchain service server, so that it can update itself according to the router configuration parameters. configuration. Therefore, the blockchain system provided by the embodiments of the present invention can control the blockchain system in time when the blockchain service server in the blockchain system is attacked by the outside world or fails through the participation of the SDN technology, so as to avoid user's loss.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained according to these drawings without creative efforts.

1 is a schematic flowchart of a data abnormality detection method for a blockchain service server in a blockchain system provided by an embodiment of the present invention;

FIG. 2 is a schematic flowchart of a data abnormality detection method for a blockchain service server in another blockchain system provided by an embodiment of the present invention;

3 is a schematic flowchart of a method for adding a new blockchain service server provided by an embodiment of the present invention;

4 is a schematic structural diagram of a blockchain system provided by an embodiment of the present invention;

5 is a schematic structural diagram of a blockchain core server according to an embodiment of the present invention;

6 is a schematic structural diagram of an SDN controller according to an embodiment of the present invention;

7 is a schematic structural diagram of a service SDN router according to an embodiment of the present invention;

FIG. 8 is a schematic diagram of the actual structure of a blockchain system according to an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

It should be noted that, in the embodiments of the present invention, words such as "exemplary" or "for example" are used to represent examples, illustrations, or descriptions. Any embodiments or designs described as "exemplary" or "such as" in the embodiments of the present invention should not be construed as preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "such as" is intended to present the related concepts in a specific manner.

It should also be noted that, in the embodiment of the present invention, "of", "corresponding (English: corresponding, relevant)" and "corresponding (English: corresponding)" can sometimes be mixed. It should be pointed out that , when not emphasizing the difference, the meaning to be expressed is the same.

In order to clearly describe the technical solutions of the embodiments of the present invention, in the embodiments of the present invention, words such as "first" and "second" are used to distinguish the same items or similar items with basically the same functions and functions. Those skilled in the art can understand that words such as "first" and "second" are not intended to limit the quantity and execution order.

The blockchain structure in the existing blockchain technology has strong robustness and transparency because of its openness, consensus, decentralization and trustlessness. Each server node in the blockchain system stores the transaction information and property information of all users in the blockchain system, and because the data changes in the blockchain system cannot be modified, and the blockchain user information is kept confidential and cannot be traced. Therefore, once the entire blockchain system is attacked by hackers and network extortion, the blockchain system itself cannot guarantee the safety of users' property.

In view of the above problems, referring to FIG. 1 , an embodiment of the present invention provides a data abnormality detection method for a blockchain business service in a blockchain system, including:

101. The blockchain core server obtains at least one blockchain service data through a core SDN (SoftwareDefined Network, software-defined network) router connected to the blockchain core server.

Wherein, at least one blockchain service data is generated by at least one blockchain service server, and is sent to the service SDN router and the blockchain corresponding to the address data in the at least one blockchain service data through the respective connected service SDN routers The core SDN router connected to the core server; in practice, because there will be more than one blockchain core server in the blockchain system, the blockchain service servers of the entire system are generally divided into several parts and belong to different blockchains Of course, the core server management can also be all managed by a blockchain core server, and no specific restrictions are made here.

In addition, because the network of the blockchain system needs to be distinguished from the public network, the business SDN router will add the blockchain business data to the blockchain business data when sending the blockchain business data generated by the blockchain business server. The label identified by the service SDN router or core router in the SDN router, so optional: Before sending the blockchain service data, the SDN router connected to any blockchain service server also includes: the service connected to any blockchain service server. The SDN router sets preset labels for the blockchain business data, so that the business SDN router or core SDN router that receives the blockchain business data can identify and obtain the blockchain business data;

It should be noted that, in the data transmission between the core SDN router, the service SDN router and the control SDN router, as long as the transmitted data belongs to the usage data in the blockchain system, the corresponding SDN router that sends the data will be responsible for the sent data. Set the preset label, here is only a schematic selection of a situation to explain;

Specifically, SDN routers use tunneling technology (such as MPLS (Multi-Protocol Label Switching, Multi-Protocol Label Switching), Vxlan (Virtual Extensible LAN, virtual extended local area network) and other technologies in the normal data forwarding function technology of the three-layer forwarding device of the communication network. ) encapsulates the forwarding messages in the blockchain system, so that the SDN routers in the entire blockchain system can identify each other and form a private network dedicated to the blockchain service server connected to each SDN router.

102. The blockchain core server determines, according to all the obtained blockchain business data, according to a preset algorithm, whether any blockchain business server in at least one blockchain business server has abnormal data.

In practice, in addition to judging the blockchain business server with abnormal data according to the data through a preset algorithm, the data can also be displayed to specific professional managers for judgment; the blockchain core server here not only needs to judge which blockchains The business server has data anomalies, and at the same time, it is determined which data anomaly occurs. In addition, a special case is that when the blockchain core server itself also performs the business activities of the blockchain business server, the blockchain core The server itself will also have data abnormality. At this time, the blockchain core server is also a special blockchain business server. At this time, the data abnormality of the blockchain core server is also judged by itself. The processing process and the processing of ordinary blockchain business servers The process is the same.

103. When the blockchain core server determines that the target blockchain service server has data abnormality, the core SDN router connected to the blockchain core server and the control SDN router connected to the SDN controller send a processing instruction corresponding to the data abnormality to the SDN controller.

Wherein, the target blockchain service server is any blockchain service server in at least one blockchain service server;

In practice, the processing instruction carries the preliminary processing strategy judged by the blockchain core server according to the specific data exception category of the blockchain business server with data exception (such as temporarily isolating the blockchain business server, adjusting the available network bandwidth).

104. After receiving the processing instruction, the SDN controller generates router configuration parameters corresponding to the processing instruction, and sends the router configuration parameters to the service SDN router connected to the target blockchain service server through the control SDN router connected to the SDN controller.

Exemplarily, the data abnormality of the target blockchain service server includes at least: the target blockchain service server is attacked, causing the blockchain service functions it has to be inconsistent with the presets, the target blockchain service server publishes illegal information and the target area. The amount of blockchain business data generated by the blockchain business server exceeds the preset standard; the processing instruction is at least one of the following: the first processing instruction, the second processing instruction and the third processing instruction; the target blockchain business server The attacked blockchain business function does not match the preset corresponding to the first processing instruction, the target blockchain business server issues illegal information corresponding to the second processing instruction, and the target blockchain business server The amount of blockchain business data exceeds The preset standard corresponds to the third processing instruction;

Exemplarily, referring to step 104 shown in FIG. 2, it specifically includes:

1041. When the SDN controller receives the first processing instruction, generate router firewall configuration parameters, and send the router firewall configuration parameters to the service SDN router connected to the target blockchain service server through the controlling SDN router connected to the SDN controller.

1042. Generate router port configuration parameters when the SDN controller receives the second processing instruction, and send the router port configuration parameters to the service SDN router connected to the target blockchain service server through the control SDN router connected to the SDN controller.

1043. Generate router bandwidth configuration parameters when the SDN controller receives the third processing instruction, and send the router bandwidth configuration parameters to the service SDN router connected to the target blockchain service server through the control SDN router connected to the SDN controller.

105. The service SDN router connected to the target blockchain service server updates its own configuration according to the router configuration parameters.

Specifically, referring to Figure 2, step 105 specifically includes:

1051. The service SDN router connected to the target blockchain service server updates its own firewall configuration according to the router firewall configuration parameters.

1052. The service SDN router connected to the target blockchain service server closes the port for publishing illegal information according to the router port configuration parameter.

1053. The service SDN router connected to the target blockchain service server adjusts the available bandwidth for data transmission according to the router bandwidth configuration parameter.

Because in practice, new users will join the blockchain system at any time, which will generate new blockchain service servers, so optional, as shown in Figure 3, when a new blockchain service server is added to the SDN control When the blockchain system where the server is located, the method further includes:

S1. The SDN controller receives the docking instruction sent by the new blockchain service server through the service SDN router connected to the SDN controller through the control SDN router to complete the docking, and the docking instruction carries the address of the new blockchain service server data.

Specifically, the address data of the new blockchain service server should include the address of the service SDN router to which it is connected, which is ultimately forwarded to the new blockchain service server through the service SDN router.

S2. The blockchain core server connects the blockchain business data and address data of all blockchain business servers in the blockchain system stored by itself through the core SDN router and the new blockchain business server connected to the blockchain core server. The connected business SDN router is sent to the new blockchain business server.

Specifically, because the blockchain system requires that each blockchain business server has all the business information generated by the blockchain system and the addresses of other blockchain business servers that can conduct business contacts, S2 exists.

S3. After the service SDN router connected to the new blockchain service server is connected with the SDN controller, the blockchain core server obtains a new blockchain service server through the core SDN router connected to the blockchain core server and generates and passes the The blockchain service data sent by the service SDN router connected to itself.

The method for detecting data anomaly of a blockchain service server in a blockchain system provided by an embodiment of the present invention includes: the blockchain core server obtains at least one blockchain service data through a core SDN router connected to the blockchain core server , wherein at least one blockchain service data is generated by at least one blockchain service server, and sent to the SDN router and the blockchain core corresponding to the address data in the at least one blockchain service data through the respective connected service SDN routers The core SDN router connected to the server; the blockchain core server judges at least one blockchain service server with data abnormality according to all the obtained blockchain service data according to the preset algorithm; When the core server determines that the target blockchain service server has data abnormality, it sends processing instructions corresponding to the data abnormality to the SDN controller via the core SDN router connected to the blockchain core server and the control SDN router connected to the SDN controller; the target block The chain service server is any block chain service server in the at least one block chain service server; the SDN controller generates router configuration parameters corresponding to the processing instructions after receiving the processing instructions, and controls the SDN router connected to the SDN controller through the SDN controller. The router configuration parameters are sent to the service SDN router connected to the target blockchain service server; the service SDN router connected to the target blockchain service server updates its own configuration according to the router configuration parameters. Therefore, during the use of the blockchain system, the blockchain core server can obtain the blockchain service data sent by at least one SDN router connected to the blockchain service server; The blockchain service data sent by the connected service SDN router can be determined according to the preset algorithm to determine whether any blockchain service server has data abnormality in all blockchain service servers; when it is determined that the target blockchain service server has data abnormality, Send a processing instruction that is abnormally connected to the data to the SDN controller, so that it can generate the corresponding router configuration parameters according to the processing instruction and send it to the service SDN router connected to the target blockchain service server, so that it can update itself according to the router configuration parameters. configuration. Therefore, the blockchain system provided by the embodiment of the present invention can control the blockchain system in time when the blockchain service server in the blockchain system is attacked by the outside world or fails through the participation of the SDN technology, thereby avoiding user's loss.

4, an embodiment of the present invention provides a blockchain system, including a blockchain core server 41, an SDN controller 42, and a service SDN router 43 (43-1, 43-2, 43-3); in addition The blockchain system also includes a core SDN router 44 and a control SDN router 45 with the same functions as the service SDN router 43 and at least one blockchain service server 46 (46-1, 46-2, 46-3); the block The blockchain system can complete the data abnormality detection method of the blockchain service server in the blockchain system provided in the above embodiment; in practice, the structure of the blockchain system is shown in FIG. 8 .

In addition, in the blockchain system provided by the embodiment of the present invention, the information interaction between the various components needs to conform to the protocol shown in Table 1 below:

Table 1

Specifically, the SDN routers in Table 1 include the core SDN routers, service SDN routers, and core SDN routers in the foregoing embodiments.

5, an embodiment of the present invention provides a blockchain core server 41 in a blockchain system, including: an acquisition module 411, a processing module 412, and a sending module 413;

The obtaining module 411 is used to obtain at least one blockchain service data sent by the core SDN router 44 connected to the blockchain core server 41, wherein the at least one blockchain service data is generated by the at least one blockchain service server and connected through the respective The service SDN router is sent to the core SDN router 44 connected to the blockchain core server 41;

The processing module 412 is configured to judge, according to all the blockchain business data received by the acquiring module 411, according to a preset algorithm, whether there is a data abnormality in any blockchain business server in the at least one blockchain business server;

The sending module 413 is configured to send a processing instruction corresponding to the data abnormality to the core SDN router 44 connected to the blockchain core server 41 when the processing module 412 determines that the target blockchain service server has data abnormality.

Specifically, the data anomalies in the target blockchain business server include: the target blockchain business server is attacked, causing its own blockchain business functions to be inconsistent with the presets, the target blockchain business server publishing illegal information and the target block The amount of blockchain business data generated by the chain business server exceeds the preset standard.

Optionally, the blockchain core server 41 further includes a storage module; the storage module is used to store all blockchain business data and address data of all blockchain business servers acquired by the acquisition module 411;

When a new blockchain service server is added to the blockchain system where the blockchain core server 41 is located, the sending module 413 is further configured to send all the blockchain service data stored in the storage module and the data of all the blockchain service servers. The address data is sent to the service SDN router 43-4 to which the new blockchain service server is connected, so that the new blockchain service server obtains all blockchain service data and all blockchain service servers through its connected service SDN router address data;

The obtaining module 411 is further configured to obtain the blockchain service data of the new blockchain service server sent by the core SDN router 44 connected to the blockchain core server 41, and the blockchain service data of the new blockchain service server is obtained by the new The blockchain service server generates and sends it to the core SDN router 44 connected to the blockchain core server 41 through the service SDN router 43-4 connected to itself.

In fact, in the blockchain system, the blockchain core server is a blockchain server that has all blockchain business functions (for example, in the Bitcoin system, a fully functional blockchain server needs to have: routing, mining, etc.) It is formed by adding a blockchain analysis and management system on the basis of mining, complete blockchain system data, wallet function, etc.) The operation of all servers in the blockchain system is analyzed; in the technical solution provided by the embodiment of the present invention, the blockchain core server only refers to the analysis and management system in the blockchain core server, and the part that implements business functions is listed in the zone A member of the blockchain business server; in fact, the blockchain business server is a blockchain server with some or all business functions in the blockchain system.

6, an embodiment of the present invention provides an SDN controller 42 in a blockchain system, including: a receiving module 421, a sending module 422, and a processing module 423;

The receiving module 421 is configured to receive the processing instruction sent by the control SDN router 45 connected to the SDN controller 42, and the processing instruction is sent by the core SDN router connected to the blockchain core server to the control SDN router connected to the SDN controller;

The processing module 423 is configured to generate router configuration parameters according to the processing instruction received by the receiving module 421;

The sending module 422 is configured to send the router configuration parameters generated by the processing module 423 to the controlling SDN router 45 connected to the SDN controller 42 .

Specifically, the processing instruction is at least one of the following: a first processing instruction, a second processing instruction, and a third processing instruction; the data exception of the target process corresponding to the first processing instruction is caused by the target blockchain service server being attacked The blockchain business functions it has are inconsistent with the presets. The data abnormality of the target process corresponding to the second processing instruction is illegal information issued by the target blockchain business server, and the data abnormality of the target process corresponding to the third processing instruction is the target block. The amount of blockchain business data of the chain business server exceeds the preset standard;

The processing module 423 is specifically configured to: generate router firewall configuration parameters according to the first processing instruction; generate router port configuration parameters according to the second processing instruction; and generate router bandwidth configuration parameters according to the third processing instruction.

Optionally, when a new blockchain service server is added to the blockchain system where the SDN controller 42 is located, the receiving module 421 is further configured to receive a docking instruction sent by the control SDN router 45 connected to the SDN controller 42, and the docking instruction The service SDN router connected by the new blockchain service server and the new blockchain service server is sent to the control SDN router connected by the SDN controller, and the docking instruction carries the connection of the new blockchain service server and the new blockchain service server. address data of the SDN router.

Referring to FIG. 7 , an embodiment of the present invention provides a service SDN router 43-1 in a blockchain system (in FIG. 7, only 43-1 is used as an example to illustrate, not as a limitation), including: a receiving module 431 , a sending module 432 and a processing module 433;

The receiving module 431 is configured to receive the blockchain service data generated by the blockchain service server 46-1 connected to the service SDN router 43-1;

The sending module 432 is configured to send the blockchain service data received by the receiving module 431 to the core SDN router 44 connected to the blockchain core server and the service SDN router 43-2 corresponding to the address data in the blockchain service data (Fig. In 7, only 43-2 is used as an example to illustrate, not as a restriction);

When the blockchain service server connected to the service SDN router 43 has abnormal data, the receiving module 431 is further configured to receive the router configuration parameters generated by the SDN controller and sent through the control SDN router 45 connected to itself;

The processing module 433 is configured to modify the configuration of the service SDN router 43 according to the router configuration parameters.

Optionally, the processing module 433 is further configured to set a preset label for the blockchain service data received by the receiving module 431 before the sending module 432 sends the blockchain service data, so that the core SDN router 44 connected to the blockchain core server is connected. And the service SDN router 43-2 corresponding to the address data in the blockchain service data acquires and identifies the blockchain service data.

Optionally, when the router configuration parameter is the router firewall configuration parameter, the processing module 433 is configured to change the current firewall configuration of the service SDN router 43-1 according to the router firewall configuration parameter;

When the router configuration parameter is the router port configuration parameter, the processing module 433 is configured to change the current port configuration of the service SDN router 43-1 according to the router port configuration parameter;

When the router configuration parameter is the router bandwidth configuration parameter, the processing module 433 is configured to change the current available bandwidth of the service SDN router 43-1 according to the router bandwidth configuration parameter.

To sum up, the method, device, and blockchain system for detecting abnormality of blockchain service server data provided by the embodiments of the present invention specifically include: the blockchain core server passes through the block chain service server when the data of the blockchain service server is abnormal. The core SDN router connected to the blockchain core server obtains at least one blockchain service data, wherein the at least one blockchain service data is generated by the at least one blockchain service server, and is sent to the at least one district through the respective connected service SDN routers. The SDN router corresponding to the address data in the blockchain business data and the core SDN router connected to the blockchain core server; the blockchain core server judges at least one blockchain business according to a preset algorithm according to all the obtained blockchain business data Whether any blockchain service server in the server has abnormal data; when the blockchain core server determines that the target blockchain service server has data abnormality, the control SDN connected via the core SDN router connected to the blockchain core server and the SDN controller The router sends a processing instruction corresponding to the abnormal data to the SDN controller; the target blockchain service server is any blockchain service server in at least one blockchain service server; the SDN controller generates and processes the instruction after receiving the processing instruction The corresponding router configuration parameters, and the control SDN router connected to the SDN controller sends the router configuration parameters to the service SDN router connected to the target blockchain service server; the service SDN router connected to the target blockchain service server is updated according to the router configuration parameters. self configuration. Therefore, during the use of the blockchain system, the blockchain core server can obtain the blockchain service data sent by at least one SDN router connected to the blockchain service server; The blockchain service data sent by the connected service SDN router can be determined according to the preset algorithm to determine whether any blockchain service server has data abnormality in all blockchain service servers; when it is determined that the target blockchain service server has data abnormality, Send a processing instruction that is abnormally connected to the data to the SDN controller, so that it can generate the corresponding router configuration parameters according to the processing instruction and send it to the service SDN router connected to the target blockchain service server, so that it can update itself according to the router configuration parameters. configuration. Therefore, the blockchain system provided by the embodiment of the present invention can control the blockchain system in time when the blockchain service server in the blockchain system is attacked by the outside world or fails through the participation of the SDN technology, thereby avoiding user's loss.

The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art who is familiar with the technical scope disclosed by the present invention can easily think of changes or substitutions. All should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be subject to the protection scope of the claims.

Claims (16)

1. A data anomaly detection method for block chain service in a block chain system comprises the following steps:

the block chain core server acquires at least one block chain service data through a core SDN router connected with the block chain core server, wherein the at least one block chain service data is generated by the at least one block chain service server and is sent to an SDN router corresponding to address data in the at least one block chain service data and the core SDN router connected with the block chain core server through service SDN routers connected with the block chain core server;

the block chain core server judges whether a block chain service server in at least one block chain service server has data abnormality according to all the acquired block chain service data and a preset algorithm;

when the blockchain core server determines that data abnormality exists in a target blockchain service server, sending a processing instruction corresponding to the data abnormality to an SDN controller through a core SDN router connected with the blockchain core server and a control SDN router connected with an SDN controller; the target block chain service server is any one of the at least one block chain service server;

the SDN controller generates router configuration parameters corresponding to the processing instruction after receiving the processing instruction, and sends the router configuration parameters to a service SDN router connected with the target block chain service server through a control SDN router connected with the SDN controller;

and the service SDN router connected with the target block chain service server updates the self configuration according to the router configuration parameters.

2. The method of claim 1, wherein before sending blockchain service data, the service SDN router connected to any blockchain service server further comprises:

and a service SDN router connected with any block chain service server sets a preset label for the block chain service data so that a service SDN router or a core SDN router receiving the block chain service data identifies and acquires the block chain service data.

3. The method of claim 1, wherein the data exception of the target blockchain service server at least comprises: the target block chain service server is attacked, so that the block chain service function and the preset of the target block chain service server are inconsistent, the target block chain service server issues illegal information, and the quantity of block chain service data generated by the target block chain service server exceeds a preset standard;

the processing instruction is at least one of: a first processing instruction, a second processing instruction, and a third processing instruction; the target block chain service server is attacked, so that block chain service functions and preset inconsistency of the target block chain service server correspond to the first processing instruction, the target block chain service server issues illegal information corresponding to the second processing instruction, and the number of block chain service data of the target block chain service server exceeds a preset standard and corresponds to the third processing instruction.

4. The method of claim 3, wherein the SDN controller generates router configuration parameters corresponding to the processing instructions after receiving the processing instructions, and sends the router configuration parameters to a service SDN router connected to the target blockchain service server through a control SDN router connected to the SDN controller comprises:

when the SDN controller receives a first processing instruction, generating router firewall configuration parameters, and sending the router firewall configuration parameters to a service SDN router connected with the target block chain service server through a control SDN router connected with the SDN controller;

when the SDN controller receives a second processing instruction, generating router port configuration parameters, and sending the router port configuration parameters to a service SDN router connected with the target block chaining service server through a control SDN router connected with the SDN controller;

and when the SDN controller receives a third processing instruction, generating router bandwidth configuration parameters, and sending the router bandwidth configuration parameters to a service SDN router connected with the target block chain service server through a control SDN router connected with the SDN controller.

5. The method of claim 4, wherein updating the self-configuration of the target blockchain service server connected service SDN router according to the router configuration parameters comprises:

a service SDN router connected with the target block chain service server updates the firewall configuration of the service SDN router according to the firewall configuration parameters of the router;

a service SDN router connected with the target block chain service server closes a port for releasing the illegal information according to the configuration parameters of the router port;

and the service SDN router connected with the target block chain service server adjusts the available bandwidth for data transmission according to the router bandwidth configuration parameter.

6. The method of claim 1, wherein when a new blockchain service server joins the blockchain system, further comprising:

the SDN controller receives a docking instruction sent by the new blockchain service server through a service SDN router connected with the SDN controller through a control SDN router connected with the SDN controller so as to complete docking, wherein the docking instruction carries address data of the new blockchain service server;

the blockchain core server sends blockchain service data and address data of all blockchain service servers in the blockchain system, which are stored by the blockchain core server, to the new blockchain service server through a core SDN router connected with the blockchain core server and a service SDN router connected with the new blockchain service server;

and after the service SDN router connected with the new blockchain service server is in butt joint with the SDN controller, the blockchain core server acquires blockchain service data generated by the new blockchain service server and sent by the service SDN router connected with the blockchain core server through the core SDN router connected with the blockchain core server.

7. A blockchain core server, comprising: the device comprises an acquisition module, a processing module and a sending module;

the acquiring module is used for acquiring at least one block chain service data sent by a core SDN router connected with a block chain core server, wherein the at least one block chain service data is generated by the at least one block chain service server and is sent to the core SDN router connected with the block chain core server through a service SDN router connected with the block chain service server;

the processing module is used for judging whether a block chain service server in at least one block chain service server has data abnormity according to all the block chain service data received by the acquisition module and a preset algorithm;

the sending module is used for sending a processing instruction corresponding to the data exception to a core SDN router connected with the block chain core server when the processing module determines that the target block chain service server has the data exception.

8. The blockchain core server of claim 7, wherein the data exception existing for the target blockchain service server includes: the target block chain service server is attacked, so that the block chain service function and the preset of the target block chain service server are inconsistent, the target block chain service server issues illegal information, and the quantity of block chain service data generated by the target block chain service server exceeds a preset standard.

9. The blockchain core server of claim 7, further comprising a storage module;

the storage module is used for storing all the blockchain service data acquired by the acquisition module and the address data of all the blockchain service servers;

when a new blockchain service server joins the blockchain system where the blockchain core server is located, the sending module is further configured to send all blockchain service data stored in the storage module and address data of all blockchain service servers to a service SDN router connected to the new blockchain service server, so that the new blockchain service server obtains all blockchain service data and address data of all blockchain service servers through the service SDN router connected to the new blockchain service server;

the obtaining module is further configured to obtain blockchain service data of the new blockchain service server, which is sent by a core SDN router connected to the blockchain core server, where the blockchain service data of the new blockchain service server is generated by the new blockchain service server and is sent to the core SDN router connected to the blockchain core server through a service SDN router connected to the new blockchain service server.

10. An SDN controller, comprising: the device comprises a receiving module, a sending module and a processing module;

the receiving module is used for receiving processing instructions sent by a control SDN router connected with the SDN controller, and the processing instructions are generated by a block chain core server and sent to the control SDN router connected with the SDN controller through a core SDN router connected with the block chain core server;

the processing module is used for generating router configuration parameters according to the processing instruction received by the receiving module;

the sending module is configured to send the router configuration parameters generated by the processing module to a controlling SDN router connected to the SDN controller.

11. The SDN controller of claim 10, wherein the processing instructions are at least one of: a first processing instruction, a second processing instruction, and a third processing instruction; the data exception of the target process corresponding to the first processing instruction is that the target block chain service server is attacked to cause that the block chain service function of the target process is inconsistent with the preset value, the data exception of the target process corresponding to the second processing instruction is that the target block chain service server issues illegal information, and the data exception of the target process corresponding to the third processing instruction is that the number of the block chain service data of the target block chain service server exceeds the preset standard;

the processing module is specifically configured to: generating a router firewall configuration parameter according to the first processing instruction; generating a router port configuration parameter according to the second processing instruction; and generating a router bandwidth configuration parameter according to the third processing instruction.

12. The SDN controller of claim 10, wherein when a new blockchain service server joins a blockchain system in which the SDN controller is located,

the receiving module is further configured to receive a docking instruction sent by an SDN router connected to the SDN controller, where the docking instruction is sent to a control SDN router connected to the SDN controller by a service SDN router connected to a new blockchain service server of the new blockchain service server, and the docking instruction carries address data of the service SDN router connected to the new blockchain service server of the new blockchain service server.

13. A service SDN router, comprising: the device comprises a receiving module, a sending module and a processing module;

the receiving module is used for receiving blockchain service data generated by a blockchain service server connected with the service SDN router;

the sending module is used for sending the blockchain service data received by the receiving module to a core SDN router connected with a blockchain core server and a service SDN router corresponding to address data in the blockchain service data;

when data abnormality exists in a blockchain service server connected with the service SDN router, the receiving module is further configured to receive router configuration parameters generated by the SDN controller and sent by a control SDN router connected with the receiving module;

the processing module is used for changing the configuration of the service SDN router according to the router configuration parameters.

14. The service SDN router of claim 13, wherein the processing module is further configured to set a preset tag to the blockchain service data received by the receiving module before the sending module sends the blockchain service data, so that a core SDN router connected to the blockchain core server and a service SDN router corresponding to address data in the blockchain service data acquire and identify the blockchain service data.

15. The service SDN router of claim 13,

when the router configuration parameter is a router firewall configuration parameter, the processing module is configured to change the current firewall configuration of the SDN router according to the router firewall configuration parameter;

when the router configuration parameter is a router port configuration parameter, the processing module is configured to change the current port configuration of the service SDN router according to the router port configuration parameter;

when the router configuration parameter is a router bandwidth configuration parameter, the processing module is configured to change a current available bandwidth of the service SDN router according to the router bandwidth configuration parameter.

16. A blockchain system comprising a blockchain core server according to any of claims 7 to 9, an SDN controller according to any of claims 10 to 12, a service SDN router according to any of claims 13 to 15.

Images