CN108876370B

CN108876370B - System architecture for sharing open data by crossing block chains under heterogeneous multi-chain architecture

Info

Publication number: CN108876370B
Application number: CN201810598437.8A
Authority: CN
Inventors: 胡凯; 罗戡; 余维; 王思远; 张学翰
Original assignee: Beihang University
Current assignee: Beihang University
Priority date: 2018-06-12
Filing date: 2018-06-12
Publication date: 2021-12-17
Anticipated expiration: 2038-06-12
Also published as: CN108876370A

Abstract

The invention provides a system architecture for sharing open data by crossing block chains under a heterogeneous multi-chain architecture, which comprises the following steps: (1) an application layer: the system comprises an OpenData module, an intelligent contract module, a multi-account book inquiry module and a data analysis module; (2) multi-chain protocol: the system comprises a cross-link transmission protocol used for transaction standards and transmission modes; a cross-consistency protocol for transaction confirmation and transaction feedback; a heterogeneous blockchain cross-chain data communication and transaction protocol; route management, used for gateway management and number management; a multi-chain management strategy used for longitudinal management and transverse management; (3) a middleware layer: the system is used for transaction and query outside the blockchain and synchronous secret keys inside the blockchain, and has functions of building blocks, voting and broadcasting; (4) basic block chain layer: including Fabric, Ethereum, bitcoin and Corda; (5) a base platform layer: this layer is based on the cloud environment and virtual machines. The method helps users to safely share data and services provided by third parties and solves the problem of 'data fragmentation'.

Description

System architecture for sharing open data by crossing block chains under heterogeneous multi-chain architecture

Technical Field

The invention relates to the technical field of block chains, in particular to a heterogeneous block chain interconnection technology, which is used for realizing safe, credible and open sharing of data across organizations.

Background

Data islands are a loss of society. For example, you have deposits at a business bank, loan a house at a secure bank, trade stocks at an internal security company, and have credit cards at a tenderer bank. Individuals are producers and owners of financial transaction data, while these 4 financial institutions are custodians of data. But the data of the same individual is fractured due to different financial institutions. Since data is of significant commercial value to organizations, they are not easily and actively open to the outside.

For example, in the financial industry, the lack of opening of financial data has some impact on all parties. The most immediate loss for an individual is the inability to easily compare services and costs, and thus to select a cheap and good financial product. A greater loss is that individuals do not have access to full range financial data, thus limiting effective asset allocation and planning. Advanced technologies such as big data analysis and artificial intelligence investment financing become furnishings due to lack of complete and comprehensive data support. Although there are many ways for a finance and technology company to obtain non-financial data, the financial content of the data is not comparable to that of personal financial transaction data in banks. If the bank data barrier cannot be broken, the finance and technology company is always in a disadvantage, and the development of the finance and technology company is necessarily restricted. The data is not public for the bank, and the data is a temporary protection for self business. However, the data sealing cost is that the bank loses the opportunity to use the shared data and the innovative technology of the financial technology company, so that more diversified products and services are difficult to provide for the customers. Under the high tide that customers have higher and higher requirements for financial services, the huge cross-border competition of the scientific and technological field is more and more intense, and the call for open data by society and supervision is more and more intense, the closed self-defense bank loses the opportunity of constructing a platform ecosphere, and the bank has narrower and narrower paths.

Data splitting is not limited to financial industry, data islands also exist in the field of medical information, nowadays, more than 90% of hospitals adopt electronic medical record management modes, but these electronic medical record systems only electronize medical records, and currently used electronic medical record systems only have basic functions of medical record storage, index searching and the like. The functions only accelerate the recording speed of the medical records and reduce the manual labor and the repeated labor of doctors. The functions of the electronic medical record are not fully exerted. When informatization is continuously developed, an electronic medical record system is bound to be changed into a verification mechanism which takes a patient as a center and has authenticity and integrity of the electronic medical record, a channel for data medical sharing is provided, data sharing of hospitals, drugstores, patients, insurance institutions and scientific research institutions can be realized, a foundation is provided for medicine separation, data support is provided for development of medical science careers, and convenience is brought to the patient for keeping data and protecting privacy.

At present, the mainstream blockchain system and blockchain project in the market belong to an independent blockchain system, and no channel and path for data exchange exist between the blockchain system and the blockchain project. With the development and evolution of blockchain technology, the need for data exchange between enterprises and enterprise blockchain systems inevitably arises.

At present, the degree of informatization is deepened, and various industries are continuously developed and perfected, but the data security, the sharing performance and the privacy still face important challenges, which is the place where the block chain can be considered to be in force. However, in order to implement secure and trusted open data, there are the following problems:

1. the problem of cross-organization data connectivity and the problem of data interaction speed;

2. the data quality of the source data is not guaranteed, and the data integrity and authenticity cannot be guaranteed;

3. user data privacy issues; and leakage and abuse of private data.

The block chain technology can well protect the privacy of data and provide a verification mechanism of data integrity and authenticity, but the existing block chain has the problems of poor storage performance, limited scale, no unified standard and the like.

In the current research, the parallel of a plurality of independent block chains becomes the most mainstream method for expanding the scale of the block chains and breaking through the functional limitation, the invention constructs a structure based on the parallel of a plurality of independent and heterogeneous block chains to realize an intelligent data flow pipeline, and an integral framework is shown in fig. 2 to allow data flow between systems to flow in a seamless and controllable manner.

Disclosure of Invention

The invention is characterized in that firstly, a data open model (OpenDataModel) is established, and opendata provides data of a user for a third-party organization under the condition of user authorization through an Application Program Interface (APIs). The framework specifies the mechanisms for generation, sharing, and access of data. And the defect of centralized data storage is overcome by data storage based on the block chain. Under the framework of OpenData, the method can help users to safely share data, enables the users to safely enjoy services provided by a third party, also provides high-quality, complete and reliable data for research institutions, and solves the problem of 'data fragmentation'; the other is to provide a system architecture for secure and trusted data sharing of OpenData for practical problems, and solve an interconnection protocol between multi-chain fused block chain systems under a new extensible system architecture by using a feasible key technology.

The invention aims to provide an architecture for sharing open data across block chains under a heterogeneous multi-chain architecture, which comprises the following steps:

(1) an application layer: the system comprises an OpenData module, an intelligent contract module, a multi-account book inquiry module and a data analysis module;

(2) multi-chain protocol: the system comprises a cross-link transmission protocol used for transaction standards and transmission modes; a cross-consistency protocol for transaction confirmation and transaction feedback; a heterogeneous blockchain cross-chain data communication and transaction protocol; route management, used for gateway management and number management; a multi-chain management strategy used for longitudinal management and transverse management;

(3) a middleware layer: the system is used for transaction and query outside the blockchain and synchronous secret keys inside the blockchain, and has functions of building blocks, voting and broadcasting;

(4) basic block chain layer: the system comprises the following basic modules, namely Fabric, Ethereum, Bixie and Corda;

(5) a base platform layer: this layer is based on the cloud environment and virtual machines.

Preferably, the OpenData module is based on an OpenData model under a heterogeneous multi-chain architecture, and the model includes four sub-modules: (1) the consent authorization submodule is used for the third party to put forward the data requirement, and the user gives the third party authority to obtain the access user data; (2) the authentication submodule is used for authenticating the user identity by the data storage and management party; (3) the authorization submodule is used for a user to confirm a request of a corresponding third party for data acquisition; (4) canceling the authorization submodule; the OpenData implementation function comprises: fast billing, line, fund, loan, information implementation sharing, and secure use of innovative technology services.

Preferably, the intelligent contract module comprises: contract template, contract audit, contract virtual machine and contract language.

Preferably, the multi-ledger query module includes: association query, classification query, merge query, and sort query.

Preferably, the data analysis module includes a data analysis and mining module, a distributed computation module, a memory computation module and a stream computation module.

Preferably, the multi-chain protocol is based on an Inter-blockchain interconnection model (IBCM), wherein cross-chain transaction transmission is encapsulated, analyzed and forwarded by a blockchain router, and a blockchain system accessed to a network only needs to realize an interface provided by a route to convert different types of transactions into standard transactions, that is, the cross-chain transaction transmission can be connected with homogeneous and heterogeneous blockchain systems, and the cross-chain transaction transmission is transmitted in a point-to-point manner without passing through any equipment provided by a third party, so that the privacy of transmission is ensured, the blockchain router is a blockchain system, cheating can be prevented, and meanwhile, each node can be expanded into a cluster to provide services to the outside; the method comprises three conditions of successful execution of cross-chain transaction, failure of execution of cross-chain transaction and overtime retransmission of cross-chain transaction.

Preferably, the successful execution process of the cross-chain transaction is as follows:

assume that address a1 in blockchain system S1 initiates a cross-chain transaction to address a2 in blockchain system S2,

(1) after receiving the cross-chain transaction T', the blockchain system S1 enters a pre-preparation phase to lock the related assets and transfer the assets to the temporary address A of the route R1_t1In (A), there is TRANSFER₁,A_t1Value) value transfer function represents address a₁Medium-volume value assets transfer to address A_t1Then sends the transaction T' to the route R1 connected to it;

(2) after receiving the transaction T', the route R1 PACKAGEs the local cross-link transaction using a function PACKAGE, and finally sends the packaged transaction to the route R2, and the route R2 forwards the packaged transaction to the blockchain system S2, where the function PACKAGE is a packaging function;

(3) route R2, which is connected to blockchain system S2, after receiving the cross-chain transaction T ', UNPACKAGEs the transaction T' into the transaction T "defined in local blockchain system S2 using function unpackackage and sends the transaction T" to blockchain system S2;

(4) after receiving the transaction T ″ forwarded by the route R2, the blockchain system S2 puts the transaction T ″ in a local transaction cache, enters a pre-commit stage after passing through internal consensus, and sends a confirmation transaction to the route R1 connected to the blockchain system S1 through the route R2;

(5) after receiving the confirmation transaction, the router R1 forwards the confirmation message to the blockchain system S1, and places the confirmation message in its transaction buffer, and waits for internal consensus of the blockchain system S1, at which point the blockchain system can complete the transaction after internal consensus, and the asset from a can be submitted_t1Temporary address A transferred to route R2_t2In the middle, there is TRANSFER (At)₁At2, value) value transfer function represents the address At₁Medium-volume value assets transfer to address A_t2And sends the confirmation transaction to route R1, route R1 to blockchain system S2;

(6) after receiving the confirmation transaction forwarded by route R2, blockchain system S2 will complete the transaction and submit the asset from A_t2Transfer to Address A₂In (A), there is TRANSFER_t2,A₂Value) value transfer function represents the address At₂Medium-volume value assets transfer to address A₂And storing the data into the blockchain system, and finishing the execution of the cross-chain transaction.

Preferably, the cross-chain transaction execution process that the cross-chain transaction execution fails is that, when a user initiates a cross-chain transaction to the user in the blockchain system S2 in the blockchain system S1, if the execution fails in the blockchain system S1, the cross-chain transmission is not needed, and only the feedback failure in the local blockchain system S1 is needed; if the execution is successful in the blockchain system S1, cross-chain transmission is required to communicate with the blockchain system S2. Executing the failed cross-chain transaction execution process in the blockchain system S2 includes:

(1) the blockchain system S1 is connectedAfter receiving the cross-chain transaction T', the method enters a pre-preparation phase, locks related assets and transfers the assets to a temporary address A of a route R1_t1In (A), there is TRANSFER₁,A_t1Value) value transfer function represents address a₁Medium-volume value assets transfer to address A_t1Then sends the transaction T' to the route R1 connected to it;

(2) after receiving the transaction T ', the route R1 packs the local cross-link transaction T' by using a function PACKAGE, finally sends the packed transaction to the route R2, and forwards the packed transaction to the blockchain system S2 by using the route R2, wherein the function PACKAGE is a packing function;

(3) route R2, which is connected to blockchain system S2, after receiving the cross-chain transaction T, unpackacks the transaction T to the transaction T "defined in local blockchain system S2 using function unpackackage and sends the transaction T" to blockchain system S2;

(4) after receiving the transaction T ″ forwarded by the route R2, the blockchain system S2 puts the transaction T ″ in a local transaction cache, rejects the transaction if the transaction T ″ fails to be verified or executed during the internal consensus, and forwards the rejection information to the blockchain system S1 through the route R2;

(5) after the blockchain system S1 receives the rejection information forwarded via route R1, the previously locked asset is unlocked and the asset is removed from address A_t1Transit to Address A₁In (A), there is TRANSFER_t1,A₁Value) value transfer function represents address a_t1Medium-volume value assets transfer to address A₁In the middle, the transaction is completed.

Preferably, the retransmission timeout of the cross-chain transaction indicates that during the execution of the cross-chain transaction, since the cross-chain transmission belongs to point-to-point transmission, a transaction transmission loss occurs, the address a1 in the blockchain system S1 initiates a cross-chain transaction to the address a2 in the blockchain system S2, and after the transaction loss is confirmed, the execution of the cross-chain transaction that the retransmission timeout occurs includes:

(1) after receiving the cross-chain transaction T', the blockchain system S1 enters a pre-preparation phase for locking related resourcesProduction, transfer asset to temporary address A of route R1_t1In (A), there is TRANSFER₁At1, value) value transfer function represents address a₁Medium-volume value assets transfer to address A_t1Then sends the transaction T' to the route R1 connected to it;

(3) route R2, which is connected to blockchain system S2, after receiving the cross-chain transaction T, UNPACKAGEs the transaction as defined in local blockchain system S2 using function UNPACKAGE, which is an unpacking function, and sends the transaction T "to blockchain system S2;

(5) the confirmation transaction forwarded by route R2 fails to be forwarded to route R1 due to a network failure. The route R1 will send the transaction T to the route R2 again after waiting for a period of time without receiving the message of the route R2;

(6) after the route R2 receives the transaction T, the analysis finds that the transaction has been received and verified, and sends the confirmation transaction to the route R1 again;

(7) after receiving the confirmation transaction, the router R1 forwards the confirmation message to the blockchain system S1, and places the confirmation message in its transaction buffer, waits for internal consensus of the blockchain system S1, and after the blockchain system passes the internal consensus, can complete the transaction, and submit the asset from a_t1Temporary address A transferred to route R2_t2In, there is TRANSFER (At)₁,A_t2Value) value transfer function represents the address At₁Medium-volume value assets transfer to address A_t2And sending a confirmation transaction toRoute R1, route R1 to blockchain system S2;

(8) after receiving the confirmation transaction forwarded by route R2, blockchain system S2 will complete the transaction and submit the asset from A_t2Transfer to Address A₂In (A), there is TRANSFER_t2,A₂Value) value transfer function represents the address At₂Medium-volume value assets transfer to address A₂And storing the data into the blockchain system, and finishing the execution of the cross-chain transaction.

Preferably, the system further comprises an identity confirmation module, wherein the identity confirmation module is realized by adopting a node identity authentication mechanism based on a multi-factor identity authentication technology and based on a threshold encryption method, the information is protected by cooperatively processing fault-tolerant calculation through a plurality of computers, the key is divided into a plurality of sub-keys by the threshold encryption method, and the key is recombined when the number of the sub-keys reaches a threshold value. More specifically, the pattern of the threshold encryption method can be represented as (t, n), where n represents the number of sub-keys after the key is decomposed, t is a threshold value specified by the application, and when the number of owned sub-keys reaches t, the key is completely reassembled.

The invention establishes an OpenData model based on a heterogeneous multi-chain architecture, solves the interconnection and intercommunication problems among a plurality of heterogeneous block chains, the node identity authentication problem in a multi-chain system, the traceability problem of data and the privacy problem of user data during cross-chain data interaction, prevents private data from being leaked and abused, and the secure and trusted OpenData data sharing system architecture specifies the generation, sharing and access mechanisms of data.

The above and other objects, advantages and features of the present invention will become more apparent to those skilled in the art from the following detailed description of specific embodiments thereof, taken in conjunction with the accompanying drawings.

Drawings

Some specific embodiments of the invention will be described in detail hereinafter, by way of illustration and not limitation, with reference to the accompanying drawings. The same reference numbers in the drawings identify the same or similar elements or components. Those skilled in the art will appreciate that the drawings are not necessarily drawn to scale. The objects and features of the present invention will become more apparent in view of the following description taken in conjunction with the accompanying drawings, in which:

fig. 1 is a schematic diagram of an overall architecture for sharing open data under a heterogeneous multi-chain architecture according to an embodiment of the present invention;

FIG. 2 is a schematic diagram of a data open model according to an embodiment of the present invention;

FIG. 3 is a block chain transaction format diagram according to an embodiment of the invention;

FIG. 4 is a schematic diagram of a corresponding sequence number for a blockchain transaction according to an embodiment of the invention;

FIG. 5 is a diagram illustrating a Merkle tree structure of a block chain according to an embodiment of the present invention;

FIG. 6 is a block chain structure diagram according to an embodiment of the present invention;

FIG. 7 is a block chain interconnection model according to an embodiment of the invention;

FIG. 8 is a flowchart of a successful execution of a cross-chain transaction, according to an embodiment of the invention;

FIG. 9 is a flowchart of a cross-chain transaction that fails to execute according to an embodiment of the present invention;

FIG. 10 is a flowchart of a cross-chain transaction for timeout retransmission according to an embodiment of the present invention.

Detailed Description

The mainstream block chain system and block chain project in the market at present belong to an independent block chain system, and there is no channel and way for data exchange between them, this embodiment breaks through the technical obstacle that there is no data exchange between this independent block chain, and proposes a system architecture for sharing open data across block chains under a heterogeneous multi-chain architecture, see fig. 1, and the system architecture includes:

(1) an application layer: the system comprises an OpenData module, an intelligent contract module (comprising a contract template, a contract audit, a contract virtual machine and a contract language), a multi-account book query module (comprising association query, classification query, combination query and sequencing query) and a data analysis module (comprising a data analysis and mining module, a distributed computation module, a memory computation module and a stream computation module);

The OpenData module is based on an OpenData model under a heterogeneous multi-chain architecture, and refers to a data flow diagram of a data open model in fig. 2. The model includes four sub-modules: (1) the consent authorization submodule is used for the third party to put forward the data requirement, and the user gives the third party authority to obtain the access user data; (2) the authentication submodule is used for authenticating the user identity by the data storage and management party; (3) the authorization submodule is used for a user to confirm a request of a corresponding third party for data acquisition; (4) canceling the authorization submodule; the OpenData implementation function comprises: fast billing, line, fund, loan, information implementation sharing, and secure use of innovative technology services. The extension of the model can realize deeper functions, including:

● supervision (governance): a decentralization and completely independent supervision data sharing mechanism is provided; the participants are allowed to fulfill obligations and rights.

● Security policy: the user can be made aware of the content of the consent form (present), and data security is ensured. The user private data must be approved by the self-authorization.

● data Standard: the existing data standard, data set and data structure can be fully utilized. Or to create a data model. Establishing a data standard can simplify the global financial data exchange (ISO 20022 final index message scheme); json, HTTP, Restful were used.

The interconnection protocol is mainly designed from the aspects of safety, privacy and operation efficiency, and the cross-chain protocol mainly solves the problem of data consistency in the data exchange process among multiple chains, and comprises two main parts, namely infrastructure design and block chain interconnection model design.

Designing a basic structure: the extensible system structure based on the interconnection chain adopts a layered modular design, and each layer can realize the extension of the block chain through the plugging and unplugging of the modules. The scalability of the blockchain layer is essential in terms of the extension of a single blockchain system, clarifying the meaning of the following technical features and the role in the infrastructure design to assist the skilled person in understanding the solution of the present invention.

(1) Transaction and signature

In the blockchain system, all information is transmitted and translated in the form of "transactions", which are therefore part of the relative core in the whole blockchain system. A transaction is a series of encrypted computer instructions that operate on data using corresponding rules to ensure proper operation of the blockchain system. In order to be compatible with homogeneous and heterogeneous blockchain systems, a standard transaction format needs to be defined, so that interconnection and intercommunication of data between different blockchain systems are realized. The transaction defined by the invention comprises a transfer transaction similar to a real transfer transaction, and also comprises data which needs to be stored and is sent to a blockchain system by the uppermost application layer business logic. In a blockchain system, where each block stores a list of transactions, the invention uses symbols

Representing a transaction list (transactionList), symbolizedT denotes a transaction. The transaction format is shown in fig. 3, the standard transaction defines three transaction types, which are distinguished by type fields, including three types, namely local transaction, cross-chain transaction and confirmation transaction.

A blockchain is a network for value transfer, and in the process of value transfer, Address (Address) information is used to determine the belonging of value, that is, a certain amount of value is stored in one Address, and if value transfer occurs, a process of transferring the value from one Address to another Address occurs. In a transaction in a blockchain system, the initiator and recipient of the transaction are represented by addresses, which are denoted by the lower case letter a. One user may have multiple addresses, e.g. a₁，a₂，...，a_n∈u_iRepresents user u_iHas a₁，a₂，...，a_n. Considering privacy protection issues, the address constant is designed as a string of 20-byte hash values, i.e. a hash value

Wherein

A sequence of characters is referred to as,

is a 20 byte character sequence.

To accommodate a number of different transaction types, three transaction types are defined in the present invention: local transactions, cross-chain transactions, confirmation transactions all contain the following fields:

(a) source address (from): an address constant representing the originator of the value or data is a 20-byte address, and for ordinary transactions or transactions that create smart contracts this field is empty and can be used here

To indicate. This field uses the character T_fTo indicate that, as a result,

or

(b) Destination address (to): an address constant representing the recipient of the value or data is a 20-byte address, and for ordinary transactions or transactions created through the use of smart contracts, this field is empty and may be used here

To indicate. This field uses the character T_tIt is shown that, therefore,

or

(c) Timestamp (timestamp): the time stamp of the transaction initiation is represented by a 64-bit binary positive integer, and this field is represented by the character T_sIt is shown that,

wherein

A set of positive integers is represented which are,

it represents a set of n-bit binary positive integers, i.e. all numbers in the set are less than 2ⁿ。

(d) Number (number): the serial number of the exchange is represented by a 128-bit binary positive integer, as shown in FIG. 4, and this field is denoted by the symbol T_nTo indicate that, as a result,

wherein the first 64 bits represent the time stamp of the transaction transmission and the middle 32 bits represent the region where the transaction originatedThe last 32 bits of the blockchain system ID indicate the number under the blockchain ID under the timestamp, counted from 0.

(e) Acknowledgement number (ackNumber): only for confirming the transaction, and the rest transaction types are null for confirming a certain sequence number transaction. Expressed by a 128-bit binary positive integer, this field being denoted by the symbol T_aTo indicate that, as a result,

or

(f) Type (type): the type constant of the transaction is represented by an 8-bit binary positive integer, and the field uses a character T_pIt is shown that, therefore,

(g) transaction information (data): the data storage system is used for storing relevant data of transactions, is designed according to different blockchain system characteristics, and has no fixed size and no limitation on the size. The symbol T for this field_dTo indicate.

(h) Signature information (v, r, w): related information for transaction signatures, variables v, r, w being T, respectively_v，T_r，T_wTo indicate.

Thus, a transaction T may be represented as:

T≡(T_f，T_t，T_s，T_n，T_a，T_p，T_d，T_v，T_r，T_w) (1.1)

and is

And is

And is

And is

However, determining whether a transaction is valid requires not only that the above conditions be met, but also that the correctness of the transaction signature be met. Signing transactions is similar to electronic signatures, and the present invention signs transactions using a curvilinear encryption algorithm. First assume that each transaction sender has a legitimate private key, using p_rTo indicate. The private key is a 256-bit binary positive integer, stored using 32 bytes, and has

Defining a function signature (ECDSASIGN), generating a public key (ecdprivate key), and verifying a signature (ECDSARECOVER), the functions of which are as follows:

wherein p is_uIs the public key corresponding to the private key and is represented by a positive integer of 64 bytes, and the public key is formed by splicing two positive integers of 32 bytes. v denotes a decryption number, expressed using a one-byte positive integer, and specifies the sign and the finiteness of the curve point. Judgment ofA signature is valid and the following conditions need to be met:

0＜r＜secp256k1n∧ (2.4)

0＜w＜secp256k1n∧ (2.5)

v∈{27.28) (2.6)

wherein:

for a given private key p_r20 bytes of address A (p) according to the above definition_r) I.e., 160 bits, defined as the rightmost 160 bits after the key cak-256 hash algorithm hashes the ECDSA public key, as follows:

when signing a transaction, a Keccak-256 Hash encryption algorithm is used for converting the transaction into data with a certain length, and through the use of the Hash algorithm, on one hand, the data with different lengths can be converted into the data with the same length, on the other hand, whether the data is tampered or not can be judged, and if the data is missing or tampered, the Hash values will be different. The application uses a Keccak-256 hash algorithm to encrypt data into 32 bytes of data, and a hash encryption function is represented by KEC. When hashing a transaction, T_v，T_r，T_wWithout including in the calculation, the hash of the transaction is denoted as h (t), and after the calculation by the Keccak hash algorithm, the following is:

transaction G (T, p) after signature_r) Calculated as follows:

if and only if

(T_v，T_r，T_w)＝ECDSASIGN(h(T)，p_r) (3.4)

Defining a transaction sending function as S, and sending a transaction T as follows:

therefore, according to the above derivation, it is determined whether a transaction signature is valid, and it is only necessary to determine whether the transaction signature is the same as the address of the sender after the transaction sending function is calculated, that is:

(2) merkle Tree

The block stores a list of transactions, and when the block is transmitted to other nodes for execution, on one hand, it needs to be ensured that the transactions contained in the transaction list are not tampered or increased or reduced, and on the other hand, it needs to be ensured that the transactions are not mistaken in the transmission process. The traditional approach is to encrypt the transaction, then transmit it, and decrypt it at the receiving node. However, the block transmission is frequent, the transaction amount is large, the frequent encryption and decryption and the key management are relatively complex, so that the traditional method cannot be used, and the use of the Merkle tree not only solves the problem of the correctness of the transaction list in the transmission aspect, but also reduces the transmission link, thereby accelerating the overall speed. The Merkle tree itself is a binary tree that has evolved from the HashList, as shown in fig. 5. The leaf nodes of the Merkle tree are data blocks, i.e., each transaction, and hash layer by layer from bottom to top to finally obtain the root of the Merkle tree. Through the establishment of the Merkle tree, the Merkle tree is additionally transmitted together in the transmission process, and only one layer of data on each leaf node is needed at a receiver. If the transaction information is tampered, the root of the Merkle tree is changed, and the tampered transaction information can be found through binary search.

Defining the Merkle tree as denoted by the symbol M, and each layer is encrypted using the Keccak-256 hash algorithm, the representation shown in fig. 5 can be expressed as:

if the transaction number is odd, the last transaction does not need to be combined, the Keccak-256 Hash algorithm is directly used for encryption, and M is defined^tFor the set of all nodes at level t of the Merkle tree,

for the ith node of the t-th layer of the Merkle tree, the calculation function of the Merkle tree, Mk, has:

wherein

(3) Block chain structure

The block chain is a data book with blocks arranged according to the time stamps, so that the blocks are the minimum units for storing data in the block chain system, each block is independent and interdependent, and the blocks are connected end to end through block hash to finally form a chain. The block stores all data in the system, including but not limited to a previous block hash, a block height, a timestamp, a state root (global state), a Merkle root, and a version number, and corresponding field addition is performed according to different application scenarios. The block chain structure employed by the present invention is shown in fig. 6.

As shown in FIG. 6, the structure of the block is mainly divided into two main parts, one is a block head H and one is a block body T, which are respectively B_HAnd B_rTo indicate. Blocks are connected end to end through block hash to form a chain by characters

A chain of blocks, i.e. a collection of blocks, is represented.

Wherein the block header includes the following information:

(a) previous block hash (pre hash): the hash value of the head of the previous block is the hash value encrypted by a Keccak-256 hash algorithm, the size of the hash value is 32 bytes, and the sign H is used_pIs shown and is provided with

(b) Block hash (hash): the hash value of the head of the current block is the hash value encrypted by a Keccak-256 hash algorithm, the size of the hash value is 32 bytes, and a symbol H is used_cIs shown and is provided with

(c) Timestamp (timestamp): refers to the time when the block is generated. By time stamping the tiles, the difficulty of counterfeiting or tampering with the tiles may be increased and may serve as proof of transaction execution and presence. The timestamp field is represented by a 64-bit binary positive integer, which is denoted by the character H_tIt is shown that,

(d) version number (version): for distinguishing the current version of the blockchain protocol, if the version numbers are found to be inconsistent or incompatible, the calculation can be optionally suspended. The size is 8 bytes in size and,by the symbol H_vIs shown and is provided with

(e) Block height (height): representing the number of current blocks in the block chain, the created block height is set to 0, and the block height is incremented as the blocks increase. Character H for this field_hIs represented as a 64-bit binary integer, and therefore, has

(f) State root (stateRoot): the root of the global state tree is the global state of the system after the transactions contained in the block have been executed. Size 32 bytes, with symbol H_sIs shown and is provided with

(g) Previous state root (preStateRoot): the global state tree root of the previous block, i.e. the global state value of the system after the previous block has performed its transactions involved. Size 32 bytes, with symbol H_psIs shown and is provided with

(h) Merkle root (merkleRoot): the block contains the Merkle root value of the transaction list after Merkle calculation. Size 32 bytes, with symbol H_mIs shown and is provided with

The block body contains the following information:

(a) transaction list (tranList): located in the block body for storing the transaction list contained in the current block, denoted by the symbol H_trIs shown and is provided with

(b) Making a businessEasy number (txLength): the number of transactions included in the current block is represented and corresponds to the transaction list. If there is no transaction in the block, i.e. if there is no transaction in the block

The value is 0. By the symbol H_lIs a 32-bit binary integer and thus has

Thus, a block can be represented as:

wherein

And is provided with

And is

And is

And is

The basic structure of the block is defined, and the conditions required to be met by each field are given, however, after the conditions are met, only the data can be described to have the properties of the block, and further verification is required for whether the block is valid or not. The chunk header contains eight fields, previous chunk hash, timestamp, version number, chunk height, state root, previous state root, Merkle root. However, when the hash is taken for the block head, because the block chain belongs to the distributed system, each node of the block chain is executed asynchronously, and when the calculation is performed, the calculation performance and the storage performance of the node are different, part of data is generated successively, and the state root belongs to the data, so the state root is not listed. Meanwhile, the block hash is a block header hash value, which is a final result of the calculation, and therefore, the calculation of the block header hash is not included.

Defining the function HEADER to compute the chunk HEADER hash, then:

after the fields of the block head hash value are taken out, the fields are encrypted by using a Keccak-256 hash algorithm, and finally the block head hash H is obtained_c：

For the validity of a chunk, the four fields of the previous chunk hash, Merkle root, previous state root, and chunk height also need to be verified. Definition of P (B)_H) Is a parent block of block B, where B_HIs the head of block B. The parent block of block B, denoted by symbol B', has:

the previous chunk hash can be expressed as:

the Merkle root can be expressed as:

the previous state root can be expressed as:

the block height can be expressed as:

blocks in the block chain not only have constraints between block hashes, but also have constraints on timestamps, and the timestamp of any one block is larger than that of its parent block, so that:

then for block B the following holds:

and if the timestamps of two blocks are the same or the block heights are the same, then the two blocks are the same block. The following holds true:

state root in Block H_sIs to execute the transaction H contained in the block after the block is executed_trThe results obtained thereafter, therefore, are:

wherein

The block chain internal expansion method and mode are provided in an interconnection chain-based expandable architecture, and the interconnection chain-based expandable architecture is provided with a plurality of chains, the block chain internal expansion method can solve the business expansion, but the block chain internal expansion method can not meet the development of the current block chain technology only by internal expansion. The multi-chain architecture is a model which can adapt to interconnection and intercommunication among different block chains on the basis of a block chain extensible system architecture, and data among the block chains are shared and intercommunicated on the basis of ensuring that the block chains can operate independently, so that a trans-block chain value transfer network is realized, and resources in the block chains are fully utilized. As shown in fig. 7, a multi-chain protocol based block chain interconnection model (IBCM) is constructed, the block chain interconnection model considers the actual situation in the design, the block chain system accessed to the network may have the homogeneous or heterogeneous situation, and the transaction formats are different, and in order to solve the problems, the block chain interconnection model introduces the concept of routing for forwarding the transaction. In the model, if any blockchain system wants to join the network, it needs to be accessed together with a route. The connections through the route eventually form a large network. The routing in the network adopts an organization form similar to a block chain, the routing exists simultaneously in a node mode, and all the routing forms a block chain system for storing and maintaining the routing information of each block chain system in the network. Since block links have non-tamper-ability and high fault tolerance, it is relatively safe to use block links to preserve routing information. Meanwhile, when routing information is newly added, the information needs to be commonly identified as the traditional block chain system, and finally the consistency is achieved. And the information updating is also processed in an information adding mode due to the particularity of the block chain system, and only the routing information with the maximum 32 bits before the priority is required to be obtained when the routing information is read. As time goes on, the number of blockchain systems added to the network increases, and nodes in the routing blockchain increase accordingly, which inevitably reduces the speed of routing information consensus. Meanwhile, the information on the routing block chain is relatively stable, the routing information cannot be frequently changed, and the consensus and the network cannot be greatly influenced. After the routing block chain data consensus is finished, the routing connected with each block chain system has the communication addresses of all the block chain systems, so that when cross-chain transaction exists, data can be exchanged among the block chain systems in a point-to-point communication mode without any third-party equipment or third-party organization, and the privacy of business transaction is ensured. The cross-chain transaction transmission is packaged, analyzed and forwarded by a block chain router, the block chain system accessed into the network only needs to realize an interface provided by a route, different types of transactions are converted into standard transactions, the block chain system with the isomorphism and the isomorphism can be connected, the cross-chain transaction transmission adopts a point-to-point mode for transmission, and does not pass through equipment provided by any third party, so that the transmission privacy is ensured, the block chain router is a block chain system, cheating can be prevented, and meanwhile, each node can be expanded into a cluster to provide services for the outside.

In IBCM, the main core idea is to realize external scalability of the blockchain system, i.e. different blockchain systems can be connected to satisfy the value transfer between different blockchain systems. In the process of value transfer between block chains, a cross-chain protocol is required to be used for specification and constraint, and the safety and reliability of value transfer are ensured. In the process of executing the transaction between the cross-chain block systems, because a plurality of block chain systems are involved, the transaction can also be classified into a distributed problem, and the process of executing the cross-chain transaction is given on the basis of the value transfer between the address A1 in the block chain system S1 and the address A2 in the block chain system S2 by utilizing the idea of solving the distributed problem, wherein the process comprises three conditions of successful execution of the cross-chain transaction, failure of execution of the cross-chain transaction and overtime retransmission of the cross-chain transaction. The value TRANSFER function TRANSFER is defined as follows: TRANSFER (A)₁，A₂Value) indicates that the assets of the address a1 with the number of value are transferred to the address a 2. Fig. 8-10 show a heterogeneous blockchain inter-chain data communication and transaction protocol based on value transfer between an address a1 in a blockchain system S1 and an address a2 in a blockchain system S2, and illustrate the inter-chain transaction execution process, which includes three cases, i.e., successful inter-chain transaction execution, failed inter-chain transaction execution, and timeout retransmission of inter-chain transaction, respectively.

The successful execution of the cross-chain transaction belongs to the normal condition, and most transactions can be successfully executed under the condition of eliminating the extreme condition, so that the value transfer is realized. FIG. 8 shows the address A in the blockchain system S1₁Address A into blockchain system S2₂The successful execution process of the cross-chain transaction is as follows：

(1) After receiving the cross-chain transaction T', the blockchain system S1 enters a pre-preparation phase, locks the related assets, and transfers the assets to the temporary address A of the route R1_t1In (A), there is TRANSFER₁,A_t1Value) and then sends the transaction T' to the route R1 connected to it;

(2) after receiving the transaction T', the route R1 PACKAGEs the local cross-link transactions using a function pack, and finally sends the packaged transactions to the route R2, and the route R2 forwards the packaged transactions to the blockchain system S2, where the function pack is a packaging function;

(3) route R2, which is connected to blockchain system S2, after receiving the cross-chain transaction T ', UNPACKAGEs the transaction T' using the function unpackackage to the transaction T "defined in the local blockchain system S2 and sends the transaction T" to blockchain system S2;

(5) after receiving the confirmation transaction, the router R1 forwards the confirmation message to the blockchain system S1, and places the confirmation message in its transaction buffer, and waits for internal consensus of the blockchain system S1, at which point the blockchain system can complete the transaction after internal consensus, and the asset from a can be submitted_t1Temporary address A transferred to route R2_t2In the middle, there is TRANSFER (At)₁,A_t2Value) and sends an acknowledgement transaction to route R1, route R1 to blockchain system S2;

(6) after receiving the confirmation transaction forwarded by route R2, blockchain system S2 will complete the transaction and submit the asset from A_t2Transfer to Address A₂In (A), there is TRANSFER_t2,A₂Value) and stored in the blockchain system, and the cross-chain transaction is executed completely.

(II) failure of cross-chain transaction execution: the cross-chain transaction is the same as the local transaction to a certain extent, and the execution failure also exists, when a user initiates the cross-chain transaction to the user in the blockchain system S2 in the blockchain system S1, if the execution fails in the blockchain system S1, the cross-chain transmission is not needed, and only the feedback failure in the local blockchain system S1 is needed; if the execution is successful in the blockchain system S1, cross-chain transmission is required to communicate with the blockchain system S2. The execution fails in the blockchain system S2 as shown in fig. 9. The execution process comprises the following steps:

(1) after receiving the cross-chain transaction T', the blockchain system S1 enters a pre-preparation phase to lock the related assets and transfer the assets to the temporary address A of the route R1_t1In (A), there is TRANSFER₁,A_t1Value) and then sends the transaction T' to the route R1 connected to it;

(5) after the blockchain system S1 receives the rejection information forwarded via route R1, the previously locked asset is unlocked and the asset is removed from address A_t1Transit to Address A₁In (A), there is TRANSFER_t1,A₁Value) function, the transaction is completed.

(III) the retransmission overtime in the cross-chain transaction indicates that in the execution process of the cross-chain transaction, since the cross-chain transmission belongs to the point-to-point transmission, the transaction transmission is lost, referring to fig. 10, the address a1 in the blockchain system S1 initiates a cross-chain transaction to the address a2 in the blockchain system S2, and after confirming that the transaction is lost, the execution process of the cross-chain transaction for retransmission overtime includes:

(7) after receiving the confirmation transaction, the router R1 forwards the confirmation message to the blockchain system S1, and places the confirmation message in its transaction buffer, waits for internal consensus of the blockchain system S1, and after the blockchain system passes the internal consensus, can complete the transaction, and submit the asset from a_t1Transfer to temporary of route R2The time address At2, in which there is TRANSFER (At)₁,A_t2Value) and sends an acknowledgement transaction to route R1, route R1 to blockchain system S2;

(8) after receiving the confirmation transaction forwarded by route R2, blockchain system S2 will complete the transaction and submit the asset from A_t2Transfer to Address A₂In (A), there is TRANSFER_t2,A₂Value) and stored in the blockchain system, and the cross-chain transaction is executed completely.

The architecture includes an identity confirmation module. In the current block chain technology, multiple types of nodes exist in one block chain system, and in a real application scene, a large number of roles also exist, and different roles have different permissions. In a plurality of block chain system interconnection models, different authentication mechanisms and different authentication processes exist, and superposition of multiple times of simple identity authentication is a simple solution, but a plurality of problems exist, and the flexibility of identity authentication is greatly reduced. Identity confirmation is an important component in a multi-link system, and limits the read-write permission of data by different users and nodes through identity authentication. Through an identity confirmation mechanism, the permission level required by transaction can be determined when the blockchain network is established, and the blockchain network can be defined to be open when the network is established, so that the access difficulty is reduced, the rapid and efficient popularization is supported, or more restrictions are defined for a highly controllable environment. Identification management services are provided through the validation of different identities and management of participant identification in a multi-chain system in conjunction with role reading and authorization. The multi-party identity authentication and management mechanism needs to be further improved so as to meet the requirements of more fine-grained authority management and more complex and flexible business. More specifically, the method comprises the following steps:

(1) in the research of multi-party identity authentication, a data storage party, a data using party and a user exist in an OpenData model, and different roles should correspond to different authorities and functions. Meanwhile, reliable identity authentication can effectively realize identity management.

(2) The cross-link user data ownership can well control the data ownership through the public and private keys in an independent block chain system, so that data abuse is prevented; in a multi-chain architecture, it is very important to ensure that data cross-chain relates to multiple authentications and improve authentication efficiency and authentication reliability.

(3) The monitoring of the cross-link data is an important step for realizing open data, namely, for user data, a user has ownership of the data, for data flow direction and used conditions, the user should have right of knowledge, and for the cross-link data monitoring, the monitoring of the cross-link data is an important step for realizing the open data.

The invention adopts a multi-factor identity authentication technology to solve the problem that a plurality of parties participate in a multi-level key authentication system, which is the current authentication method with the advantages of no loss and highest security. Authorization is the process of verifying the identity of a user entity. The multi-factor authentication technique may consist of multiple simple authentication processes to ensure secure identity verification and eliminate key or token leakage in a single simple authentication process. However, in this method, simply adding multiple simple authentication processes is not a good multi-factor authentication method, which greatly reduces the flexibility of the encryption process.

The invention adopts the multi-factor authentication technology realized based on the threshold encryption method, and is more flexible, efficient and convenient. The core idea of the threshold encryption method is to protect information by cooperative processing of fault-tolerant calculation by a plurality of computers, the most critical problem in the threshold encryption is how to safely share a secret key, a secret key sharing mode allows the secret key to be stored on a plurality of servers in a distributed mode, and the following requirements are met: the number of good servers exceeds a threshold value; when the key reorganization is needed, the number of participating servers exceeds a threshold value. The implementation process based on the invention is as follows: the threshold encryption method divides the key into a plurality of sub-keys, and the key is recombined when the number of the sub-keys reaches a threshold value. More specifically, the mode of the threshold encryption method can be represented as (t, n), where n represents the number of sub-keys after the key is decomposed, t is a threshold value specified by the application, and when the number of owned sub-keys reaches t, the key is completely reassembled.

The embodiment establishes an OpenData model based on a heterogeneous multi-chain architecture, solves the interconnection and intercommunication problems among a plurality of heterogeneous block chains, solves the node identity authentication problem in a multi-chain system, solves the traceability problem of data and the privacy problem of user data during cross-chain data interaction, prevents private data from being leaked and abused, and provides a data generation, sharing and access mechanism for a secure and trusted data sharing system architecture of the secure and trusted data sharing OpenData.

While the present invention has been described with reference to the particular illustrative embodiments, it is not to be restricted by the embodiments but only by the appended claims. It will be understood by those skilled in the art that variations and modifications of the embodiments of the present invention can be made without departing from the scope and spirit of the invention.

Claims

1. A data processing method based on a block chain is characterized in that the method is based on an architecture for sharing open data across the block chain under a heterogeneous multi-chain architecture, and the architecture comprises the following steps:

(3) a middleware layer: the synchronous secret key is used for transaction and query outside the block chain and synchronous secret key inside the block chain, and has the functions of block building, voting and broadcasting;

(4) basic block chain layer: the system comprises a basic module, Fabric, Ethereum, Bixie and Corda;

(5) a base platform layer: the layer is based on a cloud environment and virtual machines;

the OpenData module is based on an OpenData model under a heterogeneous multi-chain architecture, and comprises four sub-modules: (1) the consent authorization submodule is used for giving the third party authority to the user to obtain the access user data when the third party puts forward the data requirement; (2) the authentication submodule is used for authenticating the user identity by the data storage and management party; (3) the authorization submodule is used for confirming that the custody party can respond to the request of the third party for data acquisition by the user; (4) canceling the authorization submodule; the functions realized by the OpenData model comprise: fast check-out, real-time share of the amount, real-time share of the fund, real-time share of the loan, real-time share of the information;

the intelligent contract module comprises: contract template, contract audit, contract virtual machine and contract language;

the multi-account book query module comprises: association query, classification query, combination query and sequencing query;

the data analysis module comprises a data analysis and mining module, a distributed computing module, a memory computing module and a streaming computing module;

the multi-chain protocol is based on a block chain interconnection model, wherein cross-chain transaction transmission is packaged, analyzed and forwarded by a block chain router, the block chain system accessed into the network only needs to realize an interface provided by a route, different types of transactions are converted into standard transactions, and the block chain system with the same structure and the heterogeneous structure can be connected, the cross-chain transaction transmission is transmitted in a point-to-point mode and cannot pass through equipment provided by any third party, so that the privacy of transmission is ensured, the block chain router is a block chain system, cheating can be prevented, and meanwhile, each node can be expanded into a cluster to provide service to the outside; the cross-chain transaction comprises three conditions of successful execution of the cross-chain transaction, failed execution of the cross-chain transaction and overtime retransmission of the cross-chain transaction;

the successful execution process of the cross-chain transaction is as follows:

address a1 in the blockchain system S1 initiates a cross-chain transaction to address a2 in the blockchain system S2,

(5) after receiving the confirmation transaction, the router R1 forwards the confirmation message to the blockchain system S1, and places the confirmation message in its transaction buffer, and waits for internal consensus of the blockchain system S1, at which point the blockchain system can complete the transaction after internal consensus, and the asset from a can be submitted_t1Temporary address A transferred to route R2_t2In the middle, there is TRANSFER (At)₁,A_t2Value) value transfer function represents the address At₁Medium-volume value assets transfer to address A_t2And sends the confirmation transaction to route R1, route R1 to blockchain system S2;

(6) after receiving the confirmation transaction forwarded by route R2, blockchain system S2 will complete the transaction and submit the asset from A_t2Transfer to Address A₂In (A), there is TRANSFER_t2,A₂Value) value transfer function represents the address At₂Median numberValue-worth asset transfer to address A₂And storing the data into the blockchain system, and finishing the execution of the cross-chain transaction.

2. The blockchain-based data processing method of claim 1, wherein the execution process of the cross-chain transaction that fails to execute the cross-chain transaction is that when a user initiates the cross-chain transaction to the user in the blockchain system S2 in the blockchain system S1, if the execution fails in the blockchain system S1, the cross-chain transmission is not needed, and only the feedback failure in the local blockchain system S1 is needed; if the execution is successful in the blockchain system S1, cross-chain transmission is required to communicate with the blockchain system S2; executing the failed cross-chain transaction execution process in the blockchain system S2 includes:

(3) route R2, which is connected to blockchain system S2, after receiving the cross-chain transaction T, unpackacks the transaction T' to the transaction T "defined in local blockchain system S2 using function unpackackage and sends the transaction T" to blockchain system S2;

(5) the blockchain system S1 receives a rejection forwarded via route R1After the information, the previously locked asset is unlocked and the asset is driven from address A_t1Transit to Address A₁In (A), there is TRANSFER_t1,A₁Value) value transfer function represents address a_t1Medium-volume value assets transfer to address A₁In the middle, the transaction is completed.

3. The method as claimed in claim 1, wherein the transaction timeout retransmission indicates that a transaction transmission loss occurs due to the fact that the inter-chain transmission is peer-to-peer transmission during the execution of the inter-chain transaction, the address a1 in the blockchain system S1 initiates an inter-chain transaction to the address a2 in the blockchain system S2, and the execution of the inter-chain transaction timeout retransmission includes:

(3) route R2, which is connected to blockchain system S2, unpacks the transaction, after receiving the cross-chain transaction T, to the transaction T "defined in local blockchain system S2 using function UNPACKAGE, which is an unpacking function, and sends the transaction T" to blockchain system S2;

(5) the confirmation transaction forwarded by route R2 failed to forward to route R1 due to a network failure; the route R1 will send the transaction T to the route R2 again after waiting for a period of time without receiving the message of the route R2;

(7) after receiving the confirmation transaction, the router R1 forwards the confirmation message to the blockchain system S1, and places the confirmation message in its transaction buffer, waits for internal consensus of the blockchain system S1, and after the blockchain system passes the internal consensus, can complete the transaction, and submit the asset from a_t1Temporary address A transferred to route R2_t2In, there is TRANSFER (At)₁,A_t2Value) value transfer function represents the address At₁Medium-volume value assets transfer to address A_t2And sends the confirmation transaction to route R1, route R1 to blockchain system S2;

4. The data processing method based on the block chain as claimed in any one of claims 1 to 3, further comprising an identity confirmation module, wherein the identity confirmation module is implemented based on a threshold encryption method by adopting a node identity authentication mechanism set based on a multi-factor identity authentication technology, and protects information by cooperatively processing fault-tolerant calculation through a plurality of computers, the key is divided into a plurality of sub-keys by the threshold encryption method, and the key is recombined when the number of the sub-keys reaches a threshold value; more specifically, the pattern of the threshold encryption method can be represented as (t, n), where n represents the number of sub-keys after the key is decomposed, t is a threshold value specified by the application, and when the number of owned sub-keys reaches t, the key is completely reassembled.