CN108924092A - Based on block chain can open arbitration distribution cloud storage method and system - Google Patents
Based on block chain can open arbitration distribution cloud storage method and system Download PDFInfo
- Publication number
- CN108924092A CN108924092A CN201810579654.2A CN201810579654A CN108924092A CN 108924092 A CN108924092 A CN 108924092A CN 201810579654 A CN201810579654 A CN 201810579654A CN 108924092 A CN108924092 A CN 108924092A
- Authority
- CN
- China
- Prior art keywords
- storage
- user
- contract
- chain
- service provider
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000003860 storage Methods 0.000 title claims abstract description 278
- 238000000034 method Methods 0.000 title claims abstract description 57
- 238000012546 transfer Methods 0.000 claims description 23
- 230000005540 biological transmission Effects 0.000 claims description 6
- 238000013500 data storage Methods 0.000 claims description 5
- 230000001186 cumulative effect Effects 0.000 claims description 3
- 230000009977 dual effect Effects 0.000 claims 2
- PCHJSUWPFVWCPO-UHFFFAOYSA-N gold Chemical compound [Au] PCHJSUWPFVWCPO-UHFFFAOYSA-N 0.000 claims 2
- 239000010931 gold Substances 0.000 claims 2
- 229910052737 gold Inorganic materials 0.000 claims 2
- 238000012550 audit Methods 0.000 abstract description 9
- 238000010586 diagram Methods 0.000 description 8
- 238000012795 verification Methods 0.000 description 6
- 230000014759 maintenance of location Effects 0.000 description 4
- 238000004590 computer program Methods 0.000 description 2
- 230000007423 decrease Effects 0.000 description 2
- 238000009472 formulation Methods 0.000 description 2
- 239000000463 material Substances 0.000 description 2
- 239000000203 mixture Substances 0.000 description 2
- 238000013461 design Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 239000002360 explosive Substances 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/04—Payment circuits
- G06Q20/06—Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
- G06Q20/065—Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme using e-cash
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/22—Payment schemes or models
- G06Q20/28—Pre-payment schemes, e.g. "pay before"
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- G06Q40/04—Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
- H04L9/0643—Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Accounting & Taxation (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- General Business, Economics & Management (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Signal Processing (AREA)
- Finance (AREA)
- Strategic Management (AREA)
- Power Engineering (AREA)
- Technology Law (AREA)
- Marketing (AREA)
- Economics (AREA)
- Development Economics (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
本发明公开了一种基于区块链的可公开仲裁分布式云存储方法及系统,其中,方法包括:制定服务合约并进行第一次用户匹配,以建立用户与存储服务提供者之间的第一次链下连接;通过第一次链下连接建立包含存储押金和存储服务费的存储合约并发布至全网;根据发布至全网的存储合约进行数据存储,且根据存储记录进行第二次用户匹配,以建立用户与存储服务提供者之间的第二次链下连接;通过第二次链下连接建立链下微支付通道,以进行查询交易,并将最后一笔交易内容签名提交至全网以进行认证。该方法可以有效利用全网节点的本地存储空间,且不需要可信第三方进行审计操作就可以智能合约规范全网的服务,保证存储和查询过程的公平性。
The invention discloses a block chain-based public arbitration distributed cloud storage method and system, wherein the method includes: formulating a service contract and performing the first user matching, so as to establish the first relationship between the user and the storage service provider One off-chain connection; through the first off-chain connection, a storage contract including storage deposit and storage service fee is established and released to the whole network; data is stored according to the storage contract released to the whole network, and the second time is carried out according to the storage record User matching to establish a second off-chain connection between the user and the storage service provider; establish an off-chain micropayment channel through the second off-chain connection to perform query transactions, and submit the last transaction signature to The entire network for authentication. This method can effectively utilize the local storage space of nodes in the entire network, and smart contracts can regulate the services of the entire network without the need for trusted third-party audit operations, ensuring the fairness of the storage and query process.
Description
技术领域technical field
本发明涉及云计算安全技术领域,特别涉及一种基于区块链的可公开仲裁分布式云存储方法及系统。The present invention relates to the technical field of cloud computing security, in particular to a block chain-based distributed cloud storage method and system that can be disclosed and arbitrated.
背景技术Background technique
随着大数据时代的来临,网络中的数据量呈现爆炸式增长,其增长速度已经超越了几何量级。如果要将产生的数据存储下来,必然需要极大的网络存储能力。这对云存储技术也提出了更高的要求。With the advent of the era of big data, the amount of data in the network has shown explosive growth, and its growth rate has exceeded the geometric order. If the generated data is to be stored, a huge network storage capacity is bound to be required. This also puts forward higher requirements for cloud storage technology.
如今用户往往采用第三方存储商提供的云存储服务存储海量数据,导致了中心化问题严重。另外,当前基于第三方的云存储模型中往往都需要TTP(Third Trusted Party,可信第三方)来保证数据的完整性和可用性,这也使得审计操作变得更加中心化。一旦TTP审计错误或者执行恶意操作,就会导致存储服务参与方受到损失。反观,一方面,存储服务需求非常旺盛,另一方面,大量用户的本地存储并没有得到有效的利用,供需失衡问题严重。因此,构建安全、公开、稳定的分布式云存储系统是当前云存储服务面临的一个重大挑战。Nowadays, users often use cloud storage services provided by third-party storage providers to store massive amounts of data, which leads to serious centralization problems. In addition, the current third-party-based cloud storage model often requires TTP (Third Trusted Party, trusted third party) to ensure data integrity and availability, which also makes audit operations more centralized. Once the TTP audit is wrong or malicious operations are performed, storage service participants will suffer losses. In contrast, on the one hand, the demand for storage services is very strong, on the other hand, the local storage of a large number of users has not been effectively utilized, and the imbalance between supply and demand is serious. Therefore, building a secure, open, and stable distributed cloud storage system is a major challenge for current cloud storage services.
因此,设计能够保证数据正确存储的健壮安全的方案尤为重要。针对海量数据云存储,一方面需要解决海量数据的存储空间和完整性的问题,另一方面要引入去中心化的仲裁验证方法。Therefore, it is particularly important to design a robust and secure scheme that can ensure the correct storage of data. For massive data cloud storage, on the one hand, it is necessary to solve the storage space and integrity problems of massive data, and on the other hand, it is necessary to introduce a decentralized arbitration verification method.
区块链诞生自中本聪的比特币,自2009年以来,出现了各种各样的基于公有区块链的类比特币数字货币。区块链本质上是一个去中心化的数据库,具有去中心化、信息防篡改、公开透明、健壮性高等优点。智能合约是二十世纪九十年代由尼克萨博提出的理念,它是运行在可复制、共享的账本上的计算机程序,可以处理信息,接收、储存和发送价值。智能合约就是传统合约的数字化版本。它们是在区块链数据库上运行的计算机程序,可以在满足其源代码中写入的条件时自行执行。智能合约一旦编写好就可以被用户信赖,合约条款不能被改变,因此合约是不可更改的。The blockchain was born from Satoshi Nakamoto's Bitcoin. Since 2009, various Bitcoin-like digital currencies based on public blockchains have emerged. Blockchain is essentially a decentralized database, which has the advantages of decentralization, information tamper-proof, openness and transparency, and high robustness. A smart contract is a concept proposed by Nick Szabo in the 1990s. It is a computer program running on a replicable and shared ledger that can process information, receive, store and send value. A smart contract is a digital version of a traditional contract. They are computer programs that run on a blockchain database and can execute themselves when conditions written in their source code are met. Once a smart contract is written, it can be trusted by users, and the terms of the contract cannot be changed, so the contract is immutable.
发明内容Contents of the invention
本发明旨在至少在一定程度上解决相关技术中的技术问题之一。The present invention aims to solve one of the technical problems in the related art at least to a certain extent.
为此,本发明的一个目的在于提出一种基于区块链的可公开仲裁分布式云存储方法,该方法具有不需要可信第三方进行审计操作就可以智能合约规范全网的服务,保证存储和查询过程的公平性的优点。For this reason, an object of the present invention is to propose a blockchain-based public arbitration distributed cloud storage method, which can regulate the service of the entire network through smart contracts without requiring a trusted third party to perform audit operations, and ensure storage and fairness of the inquiry process.
本发明的另一个目的在于提出一种基于区块链的可公开仲裁分布式云存储系统。Another object of the present invention is to propose a blockchain-based distributed cloud storage system that can be publicly arbitrated.
为达到上述目的,本发明一方面实施例提出了一种基于区块链的可公开仲裁分布式云存储方法,包括以下步骤:制定服务合约并进行第一次用户匹配,以建立用户与存储服务提供者之间的第一次链下连接;通过所述第一次链下连接建立包含存储押金和存储服务费的存储合约并发布至全网;根据发布至全网的所述存储合约进行数据存储,且根据存储记录进行第二次用户匹配,以建立所述用户与所述存储服务提供者之间的第二次链下连接;以及通过所述第二次链下连接建立链下微支付通道,以进行查询交易,并将最后一笔交易内容签名提交至全网以进行认证。In order to achieve the above purpose, an embodiment of the present invention proposes a block chain-based public arbitration distributed cloud storage method, including the following steps: formulate a service contract and perform the first user matching to establish a user and storage service The first off-chain connection between providers; through the first off-chain connection, a storage contract including storage deposit and storage service fee is established and released to the entire network; data is processed according to the storage contract released to the entire network store, and perform a second user match according to the stored records to establish a second off-chain connection between the user and the storage service provider; and establish an off-chain micropayment through the second off-chain connection channel to query transactions, and submit the signature of the last transaction content to the entire network for authentication.
本发明实施例的基于区块链的可公开仲裁分布式云存储方法,通过向全网矿工提交一个包含存储押金的存储合约,以有效利用全网节点的本地存储空间,并建立规范的链下微支付通道,以进行交易和查询,具有不需要可信第三方进行审计操作就可以智能合约规范全网的服务,保证存储和查询过程的公平性的优点。The block chain-based public arbitration distributed cloud storage method of the embodiment of the present invention submits a storage contract including a storage deposit to the miners of the entire network to effectively utilize the local storage space of the nodes of the entire network and establish a standardized off-chain The micropayment channel for transactions and queries has the advantage of being able to standardize the services of the entire network through smart contracts without the need for trusted third-party audit operations, and to ensure the fairness of the storage and query process.
另外,根据本发明上述实施例的基于区块链的可公开仲裁分布式云存储方法还可以具有以下附加的技术特征:In addition, the blockchain-based public arbitration distributed cloud storage method according to the above-mentioned embodiments of the present invention may also have the following additional technical features:
进一步地,在本发明的一个实施例中,所述制定服务合约并进行第一次用户匹配,以建立用户与存储服务提供者之间的第一次链下连接,进一步包括:制定所述服务合约,并将所述存储押金转服务合约账户地址以及声明所述存储服务提供者设定的存储时间;根据所述用户在区块链上查询的所需服务建立所述用户与所述存储服务提供者之间的所述第一次链下连接。Furthermore, in an embodiment of the present invention, the formulation of the service contract and the first user matching to establish the first off-chain connection between the user and the storage service provider further include: formulation of the service contract, and transfer the storage deposit to the service contract account address and declare the storage time set by the storage service provider; establish the user and the storage service according to the required service that the user inquires on the blockchain Said first off-chain connection between providers.
进一步地,在本发明的一个实施例中,所述通过所述第一次链下连接,建立包含存储押金和存储服务费的存储合约,并将所述存储合约发布至全网,进一步包括:通过分块算法将待存数据M分块得到k个等大小的数据块{M1,M2…,Mk},加密每一块数据得到{C1,C2…,Ck},保留加密后数据块的哈希{Hash(C1),Hash(C2)…,Hash(Ck)}及对应索引;将含所述索引的所有分块和任意一个随机挑战值c(c∈[1,k])发送给所述存储服务提供者,且所述存储服务提供者返回有效的存储证明至所述用户;如果所述用户验证通过,则根据所述存储押金和所述存储服务费达成所述存储合约C并声明协商好的存储量和存储时间,并将所述存储合约发布至全网。Further, in one embodiment of the present invention, establishing a storage contract including a storage deposit and a storage service fee through the first off-chain connection, and releasing the storage contract to the entire network, further includes: Divide the data M to be stored into blocks by the block algorithm to obtain k data blocks of equal size {M1, M2..., Mk}, encrypt each block of data to obtain {C1, C2..., Ck}, and retain the hash of the encrypted data block {Hash(C1), Hash(C2)..., Hash(Ck)} and the corresponding index; send all blocks containing the index and any random challenge value c(c∈[1,k]) to the A storage service provider, and the storage service provider returns a valid storage certificate to the user; if the user passes the verification, the storage contract C is reached according to the storage deposit and the storage service fee and the negotiation is declared Good storage capacity and storage time, and publish the storage contract to the whole network.
进一步地,在本发明的一个实施例中,所述建立链下微支付通道流程,进一步包括:假设所述用户锁定N·γ到所述存储合约账户作为查询费;在第一次查询时,根据所述用户锁定给所述存储服务提供者的γ查询费,记录所述查询费为γ1,发送数据至所述用户;在所述存储服务提供者获取到向存储合约转的总存储押金的前提下,所述存储服务提供者获得所述查询费γ1;在每次查询中,通过所述用户签订累加转账费用γ给所述存储服务提供者,剩余转账给所述用户的交易,在收到合法签名的交易后,发送数据给所述用户;待查询操作完成后,对所述交易进行签名,将包含双重签名的交易发送到全网;通过验证所述矿工交易签名,若通过,则接受所述交易,资金转移过程完成。Further, in one embodiment of the present invention, the process of establishing an off-chain micropayment channel further includes: assuming that the user locks N·γ to the storage contract account as a query fee; at the time of the first query, According to the γ query fee locked by the user to the storage service provider, record the query fee as γ 1 , and send data to the user; the storage service provider obtains the total storage deposit transferred to the storage contract Under the premise of , the storage service provider obtains the query fee γ 1 ; in each query, the accumulated transfer fee γ is signed by the user to the storage service provider, and the remaining transactions are transferred to the user, After receiving the legally signed transaction, send the data to the user; after the query operation is completed, sign the transaction, and send the transaction containing the double signature to the entire network; verify the transaction signature of the miner, if passed , the transaction is accepted and the funds transfer process is complete.
进一步地,在本发明的一个实施例中,所述链下数据传输采用http协议或IPFS协议。Further, in an embodiment of the present invention, the off-chain data transmission adopts http protocol or IPFS protocol.
为达到上述目的,本发明另一方面实施例提出了一种基于区块链的可公开仲裁分布式云存储系统,包括:第一次匹配模块,用于制定服务合约并进行第一次用户匹配,以建立用户与存储服务提供者之间的第一次链下连接;存储合约建立模块,用于通过所述第一次链下连接,建立包含存储押金和存储服务费的存储合约并发布至全网;第二次匹配模块,用于根据发布至全网的所述存储合约进行数据存储,且根据存储记录进行第二次用户匹配,以建立所述用户与所述存储服务提供者之间的第二次链下连接;以及微支付通道建立模块,用于通过所述第二次链下连接建立链下微支付通道,以进行查询交易,并将最后一笔交易内容签名提交至全网以进行认证。In order to achieve the above purpose, another embodiment of the present invention proposes a blockchain-based public arbitration distributed cloud storage system, including: the first matching module, which is used to formulate service contracts and perform the first user matching , to establish the first off-chain connection between the user and the storage service provider; the storage contract establishment module is used to establish a storage contract including storage deposit and storage service fee through the first off-chain connection and publish it to The whole network; the second matching module is used to store data according to the storage contract released to the whole network, and perform a second user matching according to the storage records to establish a relationship between the user and the storage service provider The second off-chain connection; and a micro-payment channel establishment module, which is used to establish an off-chain micro-payment channel through the second off-chain connection to perform query transactions, and submit the signature of the last transaction content to the entire network for authentication.
本发明实施例的基于区块链的可公开仲裁分布式云存储系统,通过向全网矿工提交一个包含存储押金的存储合约,以有效利用全网节点的本地存储空间,并建立规范的链下微支付通道,以进行交易和查询,具有不需要可信第三方进行审计操作就可以智能合约规范全网的服务,保证存储和查询过程的公平性的优点。The open arbitration distributed cloud storage system based on the block chain of the embodiment of the present invention submits a storage contract including a storage deposit to the miners of the entire network to effectively utilize the local storage space of the nodes of the entire network and establish a standardized off-chain The micropayment channel for transactions and queries has the advantage of being able to standardize the services of the entire network through smart contracts without the need for trusted third-party audit operations, and to ensure the fairness of the storage and query process.
另外,根据本发明上述实施例的基于区块链的可公开仲裁分布式云存储系统还可以具有以下附加的技术特征:In addition, the blockchain-based public arbitration distributed cloud storage system according to the above-mentioned embodiments of the present invention may also have the following additional technical features:
进一步地,在本发明的一个实施例中,所述第一次匹配模块,进一步用于:制定所述服务合约,并将所述存储押金转服务合约账户地址以及声明所述存储服务提供者设定的存储时间;根据所述用户在区块链上查询的所需服务,建立所述用户与所述存储服务提供者之间的所述第一次链下连接。Further, in an embodiment of the present invention, the first matching module is further used to: formulate the service contract, transfer the storage deposit to the service contract account address and declare the storage service provider setting A certain storage time; according to the required service that the user inquires on the block chain, establish the first off-chain connection between the user and the storage service provider.
进一步地,在本发明的一个实施例中,所述存储合约建立模块,进一步用于:通过分块算法将待存数据M分块得到k个等大小的数据块{M1,M2…,Mk},加密每一块数据得到{C1,C2…,Ck},保留加密后数据块的哈希{Hash(C1),Hash(C2)…,Hash(Ck)}及对应索引;将含所述索引的所有分块和任意一个随机挑战值c(c∈[1,k])发送给所述存储服务提供者,且所述存储服务提供者返回有效的存储证明至所述用户;如果所述用户验证通过,则根据所述存储押金和所述存储服务费达成所述存储合约C并声明协商好的存储量和存储时间,并将所述存储合约发布至全网。Further, in one embodiment of the present invention, the storage contract establishment module is further used to: divide the data M to be stored into blocks by a block algorithm to obtain k data blocks {M1, M2..., Mk} of equal size , encrypt each block of data to get {C1, C2..., Ck}, keep the hash {Hash(C1), Hash(C2)..., Hash(Ck)} and the corresponding index of the encrypted data block; All blocks and any random challenge value c(c∈[1,k]) are sent to the storage service provider, and the storage service provider returns a valid storage proof to the user; if the user verifies If passed, the storage contract C is reached according to the storage deposit and the storage service fee, and the negotiated storage amount and storage time are declared, and the storage contract is released to the entire network.
进一步地,在本发明的一个实施例中,所述下微支付通道建立流程,进一步包括:假设所述用户锁定N·γ到所述存储合约账户作为查询费;在第一次查询时,根据所述用户锁定给所述存储服务提供者的γ查询费,记录所述查询费为γ1,发送数据至所述用户;在所述存储服务提供者获取到向存储合约转的总存储押金的前提下,所述存储服务提供者获得所述查询费γ1;在每次查询中,通过所述用户签订累加转账费用γ给所述存储服务提供者,剩余转账给所述用户的交易,在收到合法签名的交易后,发送数据给所述用户;待查询操作完成后,对所述交易进行签名,将包含双重签名的交易发送到全网;通过验证所述矿工交易签名,若通过,则接受所述交易,资金转移过程完成。Furthermore, in one embodiment of the present invention, the establishment process of the next micro-payment channel further includes: assuming that the user locks N·γ to the storage contract account as a query fee; at the time of the first query, according to The user locks the γ query fee to the storage service provider, records the query fee as γ 1 , and sends data to the user; when the storage service provider obtains the total storage deposit transferred to the storage contract Under the premise, the storage service provider obtains the query fee γ 1 ; in each query, the user signs the accumulative transfer fee γ to the storage service provider, and the remaining transactions transferred to the user, in After receiving the legally signed transaction, send the data to the user; after the query operation is completed, sign the transaction, and send the transaction containing the double signature to the entire network; verify the miner's transaction signature, if passed, The transaction is then accepted and the funds transfer process is complete.
进一步地,在本发明的一个实施例中,所述链下数据传输采用http协议或IPFS协议。Further, in an embodiment of the present invention, the off-chain data transmission adopts http protocol or IPFS protocol.
本发明附加的方面和优点将在下面的描述中部分给出,部分将从下面的描述中变得明显,或通过本发明的实践了解到。Additional aspects and advantages of the invention will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention.
附图说明Description of drawings
本发明上述的和/或附加的方面和优点从下面结合附图对实施例的描述中将变得明显和容易理解,其中:The above and/or additional aspects and advantages of the present invention will become apparent and easy to understand from the following description of the embodiments in conjunction with the accompanying drawings, wherein:
图1为根据本发明实施例的基于区块链的可公开仲裁分布式云存储方法的流程图;Fig. 1 is a flow chart of a blockchain-based publicly arbitrated distributed cloud storage method according to an embodiment of the present invention;
图2为根据本发明一个实施例的基于区块链的可公开仲裁分布式云存储方法数据存储过程的示意图;Fig. 2 is a schematic diagram of a data storage process of a public arbitration distributed cloud storage method based on blockchain according to an embodiment of the present invention;
图3为根据本发明一个实施例的基于区块链的可公开仲裁分布式云存储方法数据查询过程的示意图;Fig. 3 is a schematic diagram of a data query process based on a block chain-based public arbitration distributed cloud storage method according to an embodiment of the present invention;
图4为根据本发明一个实施例的基于区块链的可公开仲裁分布式云存储方法的服务合约参数的示意图;FIG. 4 is a schematic diagram of service contract parameters of a blockchain-based publicly arbitrated distributed cloud storage method according to an embodiment of the present invention;
图5为根据本发明一个实施例的基于区块链的可公开仲裁分布式云存储方法存储合约参数的示意图;Fig. 5 is a schematic diagram of storing contract parameters based on a block chain-based public arbitration distributed cloud storage method according to an embodiment of the present invention;
图6为根据本发明一个实施例的基于区块链的可公开仲裁分布式云存储方法存储合约伪代码的示意图;FIG. 6 is a schematic diagram of a pseudocode of a blockchain-based public arbitration distributed cloud storage method storage contract according to an embodiment of the present invention;
图7为根据本发明一个实施例的基于区块链的可公开仲裁分布式云存储方法的链下微支付通道的流程图;FIG. 7 is a flow chart of an off-chain micropayment channel based on a block chain-based publicly arbitrated distributed cloud storage method according to an embodiment of the present invention;
图8为根据本发明一个实施例的基于区块链的可公开仲裁分布式云存储方法存储证明的结构示意图;FIG. 8 is a schematic structural diagram of a blockchain-based public arbitration distributed cloud storage method storage proof according to an embodiment of the present invention;
图9为根据本发明实施例的基于区块链的可公开仲裁分布式云存储系统的结构示意图。Fig. 9 is a schematic structural diagram of a blockchain-based public arbitration distributed cloud storage system according to an embodiment of the present invention.
附图标记说明:Explanation of reference signs:
在图2中,c为User-A发送给Server-B的随机挑战值;In Figure 2, c is the random challenge value sent by User-A to Server-B;
在图3中,Restore为存储记录单;In Figure 3, Restore is the storage record sheet;
在图4中,PGserve为存储者的押金,Nserve为可提供的存储量,Tserve为存储时间,TEsever-i为存储者Server-i的联系地址;In Figure 4, PGserve is the deposit of the depositor, Nserve is the available storage capacity, Tserve is the storage time, and TEsever-i is the contact address of the depositor Server-i;
在图5中,PGstore为总共需要支付的押金额,Tstore为存储服务时间,RM为数据M的默克尔树根;PGcheck为查询费用;In Figure 5, PGstore is the total deposit amount that needs to be paid, Tstore is the storage service time, RM is the Merkel tree root of data M; PGcheck is the query fee;
在图7中,Nγ为用户锁定的查询费用;γ1为第一次查询某一块数据的查询费;In Figure 7, Nγ is the query fee locked by the user; γ1 is the query fee for the first query of a certain piece of data;
在图8中,Nmax为索引的最大值,RM为存储数据的默克尔树根,c为用户对于某索引的挑战值。In Figure 8, Nmax is the maximum value of the index, RM is the root of the Merkle tree that stores the data, and c is the user's challenge value for an index.
具体实施方式Detailed ways
下面详细描述本发明的实施例,实施例的示例在附图中示出,其中自始至终相同或类似的标号表示相同或类似的元件或具有相同或类似功能的元件。下面通过参考附图描述的实施例是示例性的,旨在用于解释本发明,而不能理解为对本发明的限制。Embodiments of the present invention are described in detail below, and examples of the embodiments are shown in the drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below by referring to the figures are exemplary and are intended to explain the present invention and should not be construed as limiting the present invention.
下面参照附图描述根据本发明实施例提出的基于区块链的可公开仲裁分布式云存储方法及系统,首先将参照附图描述根据本发明实施例提出的基于区块链的可公开仲裁分布式云存储方法,首先对符号及算法进行解释:The following describes the blockchain-based publicly arbitrable distributed cloud storage method and system proposed according to the embodiments of the present invention with reference to the accompanying drawings. Cloud storage method, first explain the symbols and algorithms:
(1)c代表User-A发送给Server-B的随机挑战值,该值对应某数据块的索引值;(1) c represents the random challenge value sent by User-A to Server-B, which corresponds to the index value of a data block;
(2)RM代表存储数据的默克尔树根;(2) R M represents the root of the Merkle tree that stores the data;
(3)pkA、skA为User-A的公私钥对,pkB、skB为Server-B的公钥对;(3) pk A and sk A are the public-private key pair of User-A, and pk B and sk B are the public key pair of Server-B;
(4)Hash(M)→ω,M∈{0,1}*,表示将数据M做哈希运算得到ω;(4) Hash(M)→ω,M∈{0,1} * means to hash the data M to get ω;
(5)Sig(ski,M)→σ,M∈{0,1}*,表示用私钥ski对M进行签名得到σ;(5) Sig(sk i ,M)→σ, M ∈ {0, 1} * , means to sign M with private key sk i to get σ;
(6)C-SER代表服务合约的内容,C-STO代表存储合约的内容;(6) C-SER represents the content of the service contract, and C-STO represents the content of the storage contract;
(7)ADDseve-i代表i创建的服务合约账户地址,ADDstore代表存储合约的账户地址;(7) ADD seve-i represents the account address of the service contract created by i, and ADD store represents the account address of the storage contract;
(8)Nγ代表User-A锁定到存储合约的查询费用,每个数据分块的查询费为γ。γ1代表第一次查询某块数据的查询费,若不查询γ1为0,否则为γ;;(8) Nγ represents the query fee locked by User-A to the storage contract, and the query fee for each data block is γ. γ 1 represents the query fee for querying a piece of data for the first time, if not querying γ 1 is 0, otherwise it is γ;
(9)PGserve代表服务合约账户金额,PGstore代表交易双方需要向存储合约转的总存储押金,PGtotal代表存储合约账户总的金额,PGcheck代表User-A的查询押金;(9) PG serve represents the amount of the service contract account, PG store represents the total storage deposit that both parties need to transfer to the storage contract, PG total represents the total amount of the storage contract account, and PG check represents the query deposit of User-A;
(10)Tserve代表服务合约中存储者声明的存储时长,Nserve代表存储者可提供的存储量,Price-unit代表当前存储市场单价,有PGserve=Tserve×Nserve×Price-unit;(10) T serve represents the storage duration declared by the depositor in the service contract, N serve represents the storage capacity that the depositor can provide, and Price-unit represents the current storage market unit price, PG serve = T serve ×N serve ×Price-unit;
(11)Tstore代表存储合约中的存储时长,Tcer代表用户容忍的存储证明返回时延;(11) T store represents the storage duration in the storage contract, and T cer represents the storage certificate return delay tolerated by the user;
(12)Cerstore-c代表挑战c对应的存储证明,证明包括c作为索引的数据块内容Mc及其到RM的路径;Restore代表存储记录单,记录特定数据和其对应存储者。(12) Cer store-c represents the storage certificate corresponding to the challenge c, which includes the data block content M c indexed by c and its path to R M ; Re store represents the storage record sheet, recording specific data and its corresponding storage.
图1为根据本发明实施例的基于区块链的可公开仲裁分布式云存储方法的流程图。Fig. 1 is a flow chart of a block chain-based public arbitration distributed cloud storage method according to an embodiment of the present invention.
如图1所示,该基于区块链的可公开仲裁分布式云存储方法包括数据存储阶段和数据查询阶段,其中,数据存储阶段包括步骤S101和S102,数据查询阶段包括S103和S104,具体为:As shown in Figure 1, the blockchain-based public arbitration distributed cloud storage method includes a data storage stage and a data query stage, wherein the data storage stage includes steps S101 and S102, and the data query stage includes steps S103 and S104, specifically :
在步骤S101中,制定服务合约并进行第一次用户匹配,以建立用户与存储服务提供者之间的第一次链下连接。In step S101, formulate a service contract and perform the first user matching to establish the first off-chain connection between the user and the storage service provider.
结合图2-4,在本发明的一个实施例中,Server-B制定服务合约C-SERB,。Server-B将服务押金转入ADDseve-B并声明存储时间Tstore。Tstore是由Server-B设定,在合约有效期内固定不变。Nserve随PGserve和市场存储价格Price-unit线性变动(当PGserve减少或者Price-unit上升时,Nserve会自动减少,反之亦然)。User-A到区块链上查询所需要的服务,在链下与相应的Server-B建立连接。Referring to Figures 2-4, in one embodiment of the present invention, Server-B formulates a service contract C-SER B . Server-B transfers the service deposit to ADD seve-B and declares the storage time T store . T store is set by Server-B and is fixed during the validity period of the contract. N serve changes linearly with PG serve and market storage price Price-unit (when PG serve decreases or Price-unit increases, N serve will automatically decrease, and vice versa). User-A queries the required services on the blockchain, and establishes a connection with the corresponding Server-B off the chain.
在步骤S102中,通过第一次链下连接建立包含存储押金和存储服务费的存储合约并发布至全网。In step S102, a storage contract including a storage deposit and a storage service fee is established through the first off-chain connection and published to the entire network.
在本发明的一个实施例中,User-A将待存数据M分块得到k个等大小的数据块{M1,M2…,Mk},并把所有分块、分块对应索引和一个随机挑战值c(c∈[1,k])发送给Server-B,Server-B计算Cerstore-c发给User-A验证;In one embodiment of the present invention, User-A divides the data M to be stored into blocks to obtain k data blocks of equal size {M 1 , M 2 ..., M k }, and divides all blocks, block corresponding indexes and A random challenge value c(c∈[1,k]) is sent to Server-B, and Server-B calculates Cer store-c and sends it to User-A for verification;
如图5所示验证通过后User-A制定存储合约内容Cstore,计算签名Sstore=Sig(skA,Hash(Cstore))。将Cstore和Sstore一起发给Server-B;As shown in Figure 5, after passing the verification, User-A formulates the storage contract content Cstore, and calculates the signature Sstore=Sig(sk A , Hash(Cstore)). Send Cstore and Sstore together to Server-B;
Server-B验证成功后若同意该合约,计算Sstore-B=Sig(skB,Hash(Cstore)),将Cstore、Sstore-A和Sstore-B发布到网络;If Server-B agrees to the contract after successful verification, calculate S store-B = Sig(sk B , Hash(Cstore)), and publish Cstore, Sstore-A and S store-B to the network;
矿工验证该合约,包括检测合约内容的完整性,双重签名的正确性。矿工验证有效后再将该合约打包进区块,获得该合约的服务费;Miners verify the contract, including checking the integrity of the contract content and the correctness of the double signature. After the miner verifies that it is valid, the contract is packaged into the block and the service fee for the contract is obtained;
双方向合约地址ADDstore提交押金转账,在规定时间Ttrans内若押金成功转入,合约生效,User-A将此次存储交易记录到Restore。否则转入的押金退还,合约无效;Both parties submit a deposit transfer to the contract address ADD store . If the deposit is successfully transferred within the specified time T trans , the contract will take effect, and User-A will record the storage transaction in the Re store . Otherwise, the transferred deposit will be refunded and the contract will be invalid;
Tstore到达后,若Server-B没有不诚实存储行为(即Server-B每次都能正确返回查询结果或者存储证明给User-A),PGstore都转给Server-B,否则PGstore都转给User-A。After the T store arrives, if Server-B has no dishonest storage behavior (that is, Server-B can correctly return the query result every time or store the proof to User-A), the PG store will be transferred to Server-B, otherwise the PG store will be transferred to to User-A.
在步骤S103中,根据发布至全网的存储合约进行数据存储,且根据存储记录进行第二次用户匹配,以建立用户与存储服务提供者之间的第二次链下连接。In step S103, the data is stored according to the storage contract released to the whole network, and the second user matching is performed according to the storage records, so as to establish the second off-chain connection between the user and the storage service provider.
在本发明的一个实施例中,User-A根据存储记录单Restore获取Server-B的联系地址,与Server-B建立链下的连接。链下数据传输可采用http协议或IPFS协议。In one embodiment of the present invention, User-A obtains the contact address of Server-B according to the Re store , and establishes an off-chain connection with Server-B. Off-chain data transmission can use http protocol or IPFS protocol.
在步骤S104中,通过第二次链下连接建立链下微支付通道,以进行查询交易,并将最后一笔交易内容签名提交至全网以进行认证。In step S104, an off-chain micropayment channel is established through the second off-chain connection to perform query transactions, and the last transaction content signature is submitted to the entire network for authentication.
如图6-8所示,在本发明的一个实施例中,微支付通道建立的流程为:As shown in Figures 6-8, in one embodiment of the present invention, the process of establishing a micropayment channel is as follows:
(1)假设User-A锁定N·γ到存储合约账户ADDstore作为查询费PGcheck;(1) Suppose User-A locks N·γ to the storage contract account ADD store as the query fee PG check ;
(2)第一次查询时,User-A锁定给Server-B的γ查询费(记此查询费为γ1),Server-B发送一份数据给User-A。在Server-B获取到PGstore的前提下,Server-B才能获得γ1,否则在Tstore后将该费用退还给User-A;(2) During the first query, User-A locks the γ query fee for Server-B (denote this query fee as γ 1 ), and Server-B sends a copy of data to User-A. Only on the premise that Server-B obtains PG store , Server-B can obtain γ 1 , otherwise, the fee will be refunded to User-A after T store ;
(3)在之后的每次查询中,User-A每次签订累加转账费用γ给Server-B,剩余转账给User-A的交易,收到合法签名的交易后,Server-B发送一份数据给User-A。例如在第2次查询时,对转γ给Server-B且转(N-2)γ给User-A的交易签名后发送给Server-B;第3次查询时,对转2γ给Server-B且转(N-3)γ给User-A的交易签名后发给Server-B……依次进行;(3) In each subsequent query, User-A signs the cumulative transfer fee γ to Server-B each time, and transfers the rest to User-A. After receiving the legally signed transaction, Server-B sends a copy of the data to User-A. For example, in the second query, transfer γ to Server-B and transfer (N-2)γ to User-A's transaction signature and send it to Server-B; in the third query, transfer 2γ to Server-B And transfer (N-3)γ to User-A's transaction signature and send it to Server-B...in order;
(4)待查询操作完成后,Server-B对其中最后一笔交易进行签名,将包含双重签名的交易发送到全网;(4) After the query operation is completed, Server-B signs the last transaction and sends the transaction containing the double signature to the entire network;
(5)矿工验证交易签名,若通过,则接受交易,资金转移过程完成;(5) The miner verifies the transaction signature, and if it passes, the transaction is accepted, and the fund transfer process is completed;
(6)当User-A付了钱而Server-B却没有返回某数据块时,User-A向全网提交对于Server-B的存储挑战交易,要求Server-B给出针对该数据块的存储证明(包括数据块的内容及其到RM的路径,见图7)。若Server-B不能在Tcer内向全网矿工提交有效的存储证明,待Tstore到达后γ1转给User-A;若Server-B没有不诚实存储行为被User-A发现,则待Tstore到达后γ1转给User-A。(6) When User-A pays but Server-B does not return a certain data block, User-A submits a storage challenge transaction for Server-B to the entire network, asking Server-B to provide storage for the data block Proof (including the content of the data block and its path to RM , see Figure 7). If Server-B cannot submit a valid storage certificate to the miners of the entire network within T cer , γ 1 will be transferred to User-A after T store arrives ; After arriving, γ1 is transferred to User- A .
在建立链下微支付通道,进行查询交易后,进行数据更新,其具体流程如下所示:After establishing an off-chain micro-payment channel and performing query transactions, update data. The specific process is as follows:
(1)在链下,User-A将更新数据所需的信息(索引,新数据块)和对该数据的操作指令(插入、删除、更新)发送给Server-B,计算新默克尔树根值,并将该值签名发送给Server-B;(1) Under the chain, User-A sends the information required to update the data (index, new data block) and operation instructions (insert, delete, update) on the data to Server-B, and calculates the new Merkle tree root value, and send the value signature to Server-B;
(2)Server-B对应更新存储结构计算出新的默克尔树根,与User-A提供的值进行比较,若相等,将该值双重签名并返回;(2) Server-B calculates a new Merkle tree root corresponding to the updated storage structure, compares it with the value provided by User-A, and if they are equal, double-signs the value and returns it;
(3)User-A验证Server-B返回签名的正确性;(3) User-A verifies the correctness of the signature returned by Server-B;
(4)User-A生成一笔更新交易将新默克尔树根值、双重签名与时间戳提交给全网矿工;(4) User-A generates an update transaction and submits the new Merkle tree root value, double signature and timestamp to the miners of the entire network;
(5)矿工验证通过后将该交易作为对应存储合约的输入,以修改存储合约的默克尔树根值。(5) After the miner passes the verification, the transaction is used as the input of the corresponding storage contract to modify the root value of the Merkle tree of the storage contract.
此外,在本发明的实施例中,以上方案都是采用一对一的具体实施例,本发明的其他实施例还可以满足一对多、多对一和多对多的情况。In addition, in the embodiments of the present invention, the above solutions all adopt a one-to-one specific embodiment, and other embodiments of the present invention can also satisfy the situations of one-to-many, many-to-one and many-to-many.
一对多:即一个用户的数据存储给多个存储者,用户为了增强数据的鲁棒性,可以使用两种方式来实现一对多的方案,包括数据整体的多次存储或数据分块放到不同存储者空间,具体为:One-to-many: that is, one user's data is stored to multiple storers. In order to enhance the robustness of the data, the user can use two methods to implement the one-to-many solution, including multiple storage of the entire data or data block storage to different storage spaces, specifically:
方式一:用户与多个存储者建立连接;对应不同的存储者,用户对同一数据切片后使用不同的对称加密密钥加密,然后将加密后的数据发送给存储者。Method 1: The user establishes a connection with multiple storages; corresponding to different storages, the user slices the same data and encrypts it with different symmetric encryption keys, and then sends the encrypted data to the storages.
方式二:用户与多个存储者建立连接;用户对数据整体按纠删码(Erasure codes)的方式进行编码;用户使用对称加密方式加密编码后的数据块,将这些数据块分散发送给不同的存储者。Method 2: The user establishes a connection with multiple storages; the user encodes the data as a whole in the form of erasure codes; the user uses symmetric encryption to encrypt the encoded data blocks, and distributes these data blocks to different storer.
多对一:即多个用户对应同一存储数据,多个用户均可对存储数据进行查询、更新。此方式实际上是通常意义上的数据分享。用户完成与存储者的存储交易,然后将存储者的联系方式、自身私钥、数据的哈希和索引、数据的解密方式等链下分享给该用户信任的其他用户。Many-to-one: That is, multiple users correspond to the same stored data, and multiple users can query and update the stored data. This method is actually data sharing in the usual sense. The user completes the storage transaction with the depositor, and then shares the depositor's contact information, its own private key, data hash and index, data decryption method, etc. off-chain with other users trusted by the user.
多对多:将上述多对一和一对多实施例结合形成,在此就不在赘述。Many-to-many: it is formed by combining the above-mentioned many-to-one and one-to-many embodiments, which will not be repeated here.
本发明实施例的基于区块链的可公开仲裁分布式云存储方法,通过向全网矿工提交一个包含存储押金的存储合约,以有效利用全网节点的本地存储空间,并建立规范的链下微支付通道,以进行交易和查询,具有不需要可信第三方进行审计操作就可以智能合约规范全网的服务,保证存储和查询过程的公平性的优点。The block chain-based public arbitration distributed cloud storage method of the embodiment of the present invention submits a storage contract including a storage deposit to the miners of the entire network to effectively utilize the local storage space of the nodes of the entire network and establish a standardized off-chain The micropayment channel for transactions and queries has the advantage of being able to standardize the services of the entire network through smart contracts without the need for trusted third-party audit operations, and to ensure the fairness of the storage and query process.
其次参照附图描述根据本发明实施例提出的基于区块链的可公开仲裁分布式云存储系统。Next, the block chain-based public arbitration distributed cloud storage system proposed according to the embodiment of the present invention will be described with reference to the accompanying drawings.
图9为根据本发明实施例的基于区块链的可公开仲裁分布式云存储系统的结构示意图。Fig. 9 is a schematic structural diagram of a blockchain-based public arbitration distributed cloud storage system according to an embodiment of the present invention.
如图9所示,该基于区块链的可公开仲裁分布式云存储系统10包括:第一次匹配模块100、存储合约建立模块200、第二次匹配模块300和微支付通道建立模块400。As shown in FIG. 9 , the blockchain-based public arbitration distributed cloud storage system 10 includes: a first matching module 100 , a storage contract establishment module 200 , a second matching module 300 and a micropayment channel establishment module 400 .
其中,第一次匹配模块100用于制定服务合约并进行第一次用户匹配,以建立用户与存储服务提供者之间的第一次链下连接。存储合约建立模块200用于通过第一次链下连接,建立包含存储押金和存储服务费的存储合约。第二次匹配模块300用于根据发布至全网的存储合约进行数据存储,且根据存储记录进行第二次用户匹配,以建立用户与存储服务提供者之间的第二次链下连接。微支付通道建立模块400用于通过第二次链下连接建立链下微支付通道,以进行查询交易,并将最后一笔交易内容签名提交至全网以进行认证。该系统具有不需要可信第三方进行审计操作就可以智能合约规范全网的服务,保证存储和查询过程的公平性。Among them, the first matching module 100 is used to formulate a service contract and perform the first user matching to establish the first off-chain connection between the user and the storage service provider. The storage contract establishment module 200 is used to establish a storage contract including storage deposit and storage service fee through the first off-chain connection. The second matching module 300 is used to store data according to the storage contract released to the whole network, and perform a second user matching according to the storage records, so as to establish a second off-chain connection between the user and the storage service provider. The micro-payment channel establishment module 400 is used to establish an off-chain micro-payment channel through the second off-chain connection to perform query transactions, and submit the signature of the last transaction content to the entire network for authentication. The system has services that can regulate the entire network through smart contracts without the need for trusted third-party audit operations, ensuring the fairness of the storage and query process.
需要说明的是,前述对基于区块链的可公开仲裁分布式云存储方法实施例的解释说明也适用于该实施例的基于区块链的可公开仲裁分布式云存储系统,此处不再赘述。It should be noted that the foregoing explanations to the embodiment of the block chain-based public arbitration distributed cloud storage method are also applicable to the block chain-based public arbitration distributed cloud storage system of this embodiment, which will not be repeated here repeat.
进一步地,在本发明的一个实施例中,第一次匹配模块100,进一步用于:制定服务合约,并将存储押金转服务合约账户地址以及声明存储服务提供者设定的存储时间;根据用户在区块链上查询的所需服务,建立用户与存储服务提供者之间的第一次链下连接。Further, in one embodiment of the present invention, the first matching module 100 is further used to: formulate a service contract, transfer the storage deposit to the service contract account address and declare the storage time set by the storage service provider; The required services queried on the blockchain establish the first off-chain connection between the user and the storage service provider.
进一步地,在本发明的一个实施例中,存储合约建立模块200,进一步用于:通过分块算法将待存数据M分块得到k个等大小的数据块{M1,M2…,Mk},加密每一块数据得到{C1,C2…,Ck},保留加密后数据块的哈希{Hash(C1),Hash(C2)…,Hash(Ck)}及对应索引;将含索引的所有分块和任意一个随机挑战值c(c∈[1,k])发送给存储服务提供者,且存储服务提供者返回有效的存储证明至用户;如果用户验证通过,则根据存储押金和存储服务费达成存储合约C并声明协商好的存储量和存储时间,并将存储合约发布至全网。Further, in one embodiment of the present invention, the storage contract establishment module 200 is further used to: use a block algorithm to block the data M to be stored to obtain k data blocks {M1, M2..., Mk} of equal size, Encrypt each block of data to get {C1, C2..., Ck}, and retain the hash {Hash(C1), Hash(C2)..., Hash(Ck)} of the encrypted data block and the corresponding index; all the blocks containing the index and any random challenge value c(c∈[1, k]) to the storage service provider, and the storage service provider returns a valid storage certificate to the user; Storage contract C declares the negotiated storage amount and storage time, and releases the storage contract to the entire network.
进一步地,在本发明的一个实施例中,下微支付通道建立流程,进一步包括:假设用户锁定N·γ到存储合约账户作为查询费;在第一次查询时,根据用户锁定给存储服务提供者的γ查询费,记录查询费为γ1,发送数据至用户;在存储服务提供者获取到向存储合约转的总存储押金的前提下,存储服务提供者获得查询费γ1;在每次查询中,通过用户签订累加转账费用γ给存储服务提供者,剩余转账给用户的交易,在收到合法签名的交易后,发送数据给用户;待查询操作完成后,对交易进行签名,将包含双重签名的交易发送到全网;通过验证矿工交易签名,若通过,则接受交易,资金转移过程完成。Furthermore, in one embodiment of the present invention, the process of establishing a micro-payment channel further includes: assuming that the user locks N·γ to the storage contract account as a query fee; at the time of the first query, according to the user's lock, the storage service provides The user’s γ query fee, the record query fee is γ 1 , and the data is sent to the user; on the premise that the storage service provider obtains the total storage deposit transferred to the storage contract, the storage service provider obtains the query fee γ 1 ; In the query, the accumulated transfer fee γ is signed by the user to the storage service provider, and the remaining transaction is transferred to the user. After receiving the legally signed transaction, the data is sent to the user; after the query operation is completed, the transaction is signed, which will include The double-signed transaction is sent to the entire network; after verifying the miner's transaction signature, if it passes, the transaction is accepted and the fund transfer process is completed.
进一步地,在本发明的一个实施例中,链下数据传输采用http协议或IPFS协议。Further, in one embodiment of the present invention, the off-chain data transmission adopts http protocol or IPFS protocol.
本发明实施例的基于区块链的可公开仲裁分布式云存储系统,通过向全网矿工提交一个包含存储押金的存储合约,以有效利用全网节点的本地存储空间,并建立规范的链下微支付通道,以进行交易和查询,具有不需要可信第三方进行审计操作就可以智能合约规范全网的服务,保证存储和查询过程的公平性的优点。The open arbitration distributed cloud storage system based on the block chain of the embodiment of the present invention submits a storage contract including a storage deposit to the miners of the entire network to effectively utilize the local storage space of the nodes of the entire network and establish a standardized off-chain The micropayment channel for transactions and queries has the advantage of being able to standardize the services of the entire network through smart contracts without the need for trusted third-party audit operations, and to ensure the fairness of the storage and query process.
此外,术语“第一”、“第二”仅用于描述目的,而不能理解为指示或暗示相对重要性或者隐含指明所指示的技术特征的数量。由此,限定有“第一”、“第二”的特征可以明示或者隐含地包括至少一个该特征。在本发明的描述中,“多个”的含义是至少两个,例如两个,三个等,除非另有明确具体的限定。In addition, the terms "first" and "second" are used for descriptive purposes only, and cannot be interpreted as indicating or implying relative importance or implicitly specifying the quantity of indicated technical features. Thus, the features defined as "first" and "second" may explicitly or implicitly include at least one of these features. In the description of the present invention, "plurality" means at least two, such as two, three, etc., unless otherwise specifically defined.
在本说明书的描述中,参考术语“一个实施例”、“一些实施例”、“示例”、“具体示例”、或“一些示例”等的描述意指结合该实施例或示例描述的具体特征、结构、材料或者特点包含于本发明的至少一个实施例或示例中。在本说明书中,对上述术语的示意性表述不必须针对的是相同的实施例或示例。而且,描述的具体特征、结构、材料或者特点可以在任一个或多个实施例或示例中以合适的方式结合。此外,在不相互矛盾的情况下,本领域的技术人员可以将本说明书中描述的不同实施例或示例以及不同实施例或示例的特征进行结合和组合。In the description of this specification, descriptions with reference to the terms "one embodiment", "some embodiments", "example", "specific examples", or "some examples" mean that specific features described in connection with the embodiment or example , structure, material or characteristic is included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms are not necessarily directed to the same embodiment or example. Furthermore, the described specific features, structures, materials or characteristics may be combined in any suitable manner in any one or more embodiments or examples. In addition, those skilled in the art can combine and combine different embodiments or examples and features of different embodiments or examples described in this specification without conflicting with each other.
尽管上面已经示出和描述了本发明的实施例,可以理解的是,上述实施例是示例性的,不能理解为对本发明的限制,本领域的普通技术人员在本发明的范围内可以对上述实施例进行变化、修改、替换和变型。Although the embodiments of the present invention have been shown and described above, it can be understood that the above embodiments are exemplary and should not be construed as limiting the present invention, and those skilled in the art can make the above-mentioned The embodiments are subject to changes, modifications, substitutions and variations.
Claims (10)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201810579654.2A CN108924092B (en) | 2018-06-07 | 2018-06-07 | Distributed cloud storage method and system for public arbitration based on blockchain |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201810579654.2A CN108924092B (en) | 2018-06-07 | 2018-06-07 | Distributed cloud storage method and system for public arbitration based on blockchain |
Publications (2)
Publication Number | Publication Date |
---|---|
CN108924092A true CN108924092A (en) | 2018-11-30 |
CN108924092B CN108924092B (en) | 2020-11-20 |
Family
ID=64418946
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201810579654.2A Active CN108924092B (en) | 2018-06-07 | 2018-06-07 | Distributed cloud storage method and system for public arbitration based on blockchain |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN108924092B (en) |
Cited By (23)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN109598616A (en) * | 2018-12-09 | 2019-04-09 | 大连飞创信息技术有限公司 | Method for block chain data privacy protection by introducing arbitration mechanism |
CN109729074A (en) * | 2018-12-11 | 2019-05-07 | 深圳市汇星数字技术有限公司 | A kind of encryption of audio data and reciprocity storage method and system |
CN109872142A (en) * | 2019-02-21 | 2019-06-11 | 缀初网络技术(上海)有限公司 | A kind of digital asset method of commerce and its storage medium based on trusted third party |
CN109886812A (en) * | 2019-02-15 | 2019-06-14 | 航天恒星科技有限公司 | Blockchain-based data transaction system and method |
CN109918925A (en) * | 2019-02-19 | 2019-06-21 | 上海泉坤信息科技有限公司 | Date storage method, back end and storage medium |
CN110278076A (en) * | 2019-05-29 | 2019-09-24 | 电子科技大学 | A blockchain-based transparent data integrity audit and transparent encrypted data deduplication protocol |
CN110288445A (en) * | 2019-06-28 | 2019-09-27 | 杭州复杂美科技有限公司 | Decentralization storage method, equipment and storage medium |
CN110288346A (en) * | 2019-06-28 | 2019-09-27 | 杭州复杂美科技有限公司 | Block chain distributed storage method for down loading, equipment and storage medium |
CN110428254A (en) * | 2019-07-04 | 2019-11-08 | 杭州复杂美科技有限公司 | Decentralization stores method for down loading and referee method, equipment and storage medium |
WO2019214756A3 (en) * | 2019-08-12 | 2020-06-04 | Alibaba Group Holding Limited | Blockchain-based dispute resolution |
CN111461683A (en) * | 2020-03-24 | 2020-07-28 | 国网河北省电力有限公司雄安新区供电公司 | Blockchain accounting method and system for cross-cloud interconnection |
CN111612453A (en) * | 2019-02-22 | 2020-09-01 | 北京趣块远扬科技有限公司 | Decentralized transaction method and device based on block chain and electronic equipment |
CN111695903A (en) * | 2020-06-24 | 2020-09-22 | 杨刘琴 | Information flow analysis method based on block chain and mobile internet and cloud computing platform |
CN112039927A (en) * | 2020-11-04 | 2020-12-04 | 南京云信安网络科技有限公司 | Management method of network security vulnerability response platform based on block chain technology |
CN112054897A (en) * | 2020-08-13 | 2020-12-08 | 武汉大学 | Blockchain-based privacy-protecting outsourced IoT data and its backup integrity verification method |
CN112152797A (en) * | 2020-08-26 | 2020-12-29 | 西安电子科技大学 | Block chain remote data auditing and monitoring method and system, computer equipment and terminal |
CN112861162A (en) * | 2021-03-15 | 2021-05-28 | 深圳市互联在线云计算股份有限公司 | Block chain storage safety guarantee system based on distributed storage |
CN112907252A (en) * | 2021-02-02 | 2021-06-04 | 中国科学院计算技术研究所 | Block chain transaction method and system based on multi-person down-chain channel |
CN113220640A (en) * | 2021-05-07 | 2021-08-06 | 支付宝(杭州)信息技术有限公司 | Arbitration method and device based on block chain |
CN113302636A (en) * | 2019-01-03 | 2021-08-24 | 华为技术有限公司 | Data processing method, device and medium based on block chain |
CN114594911A (en) * | 2022-03-13 | 2022-06-07 | 西安电子科技大学 | Block chain data storage system and method based on under-chain erasure code distributed storage |
WO2022121624A1 (en) * | 2020-12-08 | 2022-06-16 | 深圳前海微众银行股份有限公司 | Blockchain-based three-party account transfer method and apparatus |
US11516147B2 (en) | 2019-10-02 | 2022-11-29 | Red Hat, Inc. | Blockchain-based dynamic storage provisioner |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20150379510A1 (en) * | 2012-07-10 | 2015-12-31 | Stanley Benjamin Smith | Method and system to use a block chain infrastructure and Smart Contracts to monetize data transactions involving changes to data included into a data supply chain. |
CN106504091A (en) * | 2016-10-27 | 2017-03-15 | 上海亿账通区块链科技有限公司 | The method and device that concludes the business on block chain |
CN106559211A (en) * | 2016-11-22 | 2017-04-05 | 中国电子科技集团公司第三十研究所 | Secret protection intelligence contract method in a kind of block chain |
CN106992990A (en) * | 2017-05-19 | 2017-07-28 | 北京牛链科技有限公司 | Data sharing method and system and block catenary system and computing device |
CN107464118A (en) * | 2017-08-16 | 2017-12-12 | 济南浪潮高新科技投资发展有限公司 | A kind of data trade method based on block chain intelligence contract |
-
2018
- 2018-06-07 CN CN201810579654.2A patent/CN108924092B/en active Active
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20150379510A1 (en) * | 2012-07-10 | 2015-12-31 | Stanley Benjamin Smith | Method and system to use a block chain infrastructure and Smart Contracts to monetize data transactions involving changes to data included into a data supply chain. |
CN106504091A (en) * | 2016-10-27 | 2017-03-15 | 上海亿账通区块链科技有限公司 | The method and device that concludes the business on block chain |
CN106559211A (en) * | 2016-11-22 | 2017-04-05 | 中国电子科技集团公司第三十研究所 | Secret protection intelligence contract method in a kind of block chain |
CN106992990A (en) * | 2017-05-19 | 2017-07-28 | 北京牛链科技有限公司 | Data sharing method and system and block catenary system and computing device |
CN107464118A (en) * | 2017-08-16 | 2017-12-12 | 济南浪潮高新科技投资发展有限公司 | A kind of data trade method based on block chain intelligence contract |
Non-Patent Citations (3)
Title |
---|
DAVID VORICK ET AL;: "Sia: Simple Decentralized Storage", 《SIA.TECH》 * |
JOSEPH POON ET AL;: "The Bitcoin Lightning Network: Scalable Off-Chain Instant Payments", 《LIGHTNING.NETWORK》 * |
SHAWN WILKINSON ET AL;: "Storj:A Peer-to-Peer Cloud Storage Network", 《STORJ.IO》 * |
Cited By (39)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN109598616B (en) * | 2018-12-09 | 2023-08-22 | 大连飞创信息技术有限公司 | Method for protecting privacy of blockchain data by introducing arbitration mechanism |
CN109598616A (en) * | 2018-12-09 | 2019-04-09 | 大连飞创信息技术有限公司 | Method for block chain data privacy protection by introducing arbitration mechanism |
CN109729074B (en) * | 2018-12-11 | 2021-10-01 | 深圳市汇星数字技术有限公司 | Audio data encryption and peer-to-peer storage method and system |
CN109729074A (en) * | 2018-12-11 | 2019-05-07 | 深圳市汇星数字技术有限公司 | A kind of encryption of audio data and reciprocity storage method and system |
US12141796B2 (en) | 2019-01-03 | 2024-11-12 | Huawei Technologies Co., Ltd. | Blockchain-based data processing method, device, and medium |
CN113302636A (en) * | 2019-01-03 | 2021-08-24 | 华为技术有限公司 | Data processing method, device and medium based on block chain |
CN109886812A (en) * | 2019-02-15 | 2019-06-14 | 航天恒星科技有限公司 | Blockchain-based data transaction system and method |
CN109886812B (en) * | 2019-02-15 | 2021-04-20 | 航天恒星科技有限公司 | Data transaction system and method based on block chain |
CN109918925A (en) * | 2019-02-19 | 2019-06-21 | 上海泉坤信息科技有限公司 | Date storage method, back end and storage medium |
CN109872142A (en) * | 2019-02-21 | 2019-06-11 | 缀初网络技术(上海)有限公司 | A kind of digital asset method of commerce and its storage medium based on trusted third party |
CN111612453A (en) * | 2019-02-22 | 2020-09-01 | 北京趣块远扬科技有限公司 | Decentralized transaction method and device based on block chain and electronic equipment |
CN110278076A (en) * | 2019-05-29 | 2019-09-24 | 电子科技大学 | A blockchain-based transparent data integrity audit and transparent encrypted data deduplication protocol |
CN110278076B (en) * | 2019-05-29 | 2022-06-03 | 电子科技大学 | A blockchain-based transparent data integrity audit and transparent encrypted data deduplication method |
CN110288445B (en) * | 2019-06-28 | 2024-03-05 | 杭州复杂美科技有限公司 | Decentralised storage method, device and storage medium |
CN110288346A (en) * | 2019-06-28 | 2019-09-27 | 杭州复杂美科技有限公司 | Block chain distributed storage method for down loading, equipment and storage medium |
CN110288445A (en) * | 2019-06-28 | 2019-09-27 | 杭州复杂美科技有限公司 | Decentralization storage method, equipment and storage medium |
CN110428254A (en) * | 2019-07-04 | 2019-11-08 | 杭州复杂美科技有限公司 | Decentralization stores method for down loading and referee method, equipment and storage medium |
CN110428254B (en) * | 2019-07-04 | 2022-03-04 | 杭州复杂美科技有限公司 | Decentralized storage downloading method and arbitration method, equipment and storage medium |
WO2019214756A3 (en) * | 2019-08-12 | 2020-06-04 | Alibaba Group Holding Limited | Blockchain-based dispute resolution |
US11120517B2 (en) | 2019-08-12 | 2021-09-14 | Advanced New Technologies Co., Ltd. | Blockchain-based dispute resolution |
US11900493B2 (en) | 2019-08-12 | 2024-02-13 | Advanced New Technologies Co., Ltd. | Blockchain-based dispute resolution |
US11516147B2 (en) | 2019-10-02 | 2022-11-29 | Red Hat, Inc. | Blockchain-based dynamic storage provisioner |
US12155580B2 (en) | 2019-10-02 | 2024-11-26 | Red Hat, Inc | Blockchain-based dynamic storage provisioner |
CN111461683A (en) * | 2020-03-24 | 2020-07-28 | 国网河北省电力有限公司雄安新区供电公司 | Blockchain accounting method and system for cross-cloud interconnection |
CN111695903B (en) * | 2020-06-24 | 2021-09-14 | 杨刘琴 | Information flow analysis method based on block chain and mobile internet and cloud computing platform |
CN111695903A (en) * | 2020-06-24 | 2020-09-22 | 杨刘琴 | Information flow analysis method based on block chain and mobile internet and cloud computing platform |
CN112054897B (en) * | 2020-08-13 | 2021-08-03 | 武汉大学 | Blockchain-based privacy-protecting outsourced IoT data and its backup integrity verification method |
CN112054897A (en) * | 2020-08-13 | 2020-12-08 | 武汉大学 | Blockchain-based privacy-protecting outsourced IoT data and its backup integrity verification method |
CN112152797B (en) * | 2020-08-26 | 2021-09-17 | 西安电子科技大学 | Block chain remote data auditing and monitoring method and system, computer equipment and terminal |
CN112152797A (en) * | 2020-08-26 | 2020-12-29 | 西安电子科技大学 | Block chain remote data auditing and monitoring method and system, computer equipment and terminal |
CN112039927A (en) * | 2020-11-04 | 2020-12-04 | 南京云信安网络科技有限公司 | Management method of network security vulnerability response platform based on block chain technology |
WO2022121624A1 (en) * | 2020-12-08 | 2022-06-16 | 深圳前海微众银行股份有限公司 | Blockchain-based three-party account transfer method and apparatus |
CN112907252B (en) * | 2021-02-02 | 2023-10-31 | 中国科学院计算技术研究所 | Block chain transaction method and system based on multi-person chain lower channel |
CN112907252A (en) * | 2021-02-02 | 2021-06-04 | 中国科学院计算技术研究所 | Block chain transaction method and system based on multi-person down-chain channel |
CN112861162A (en) * | 2021-03-15 | 2021-05-28 | 深圳市互联在线云计算股份有限公司 | Block chain storage safety guarantee system based on distributed storage |
CN112861162B (en) * | 2021-03-15 | 2024-05-03 | 深圳市互联在线云计算股份有限公司 | Block chain storage safety guarantee system based on distributed storage |
CN113220640A (en) * | 2021-05-07 | 2021-08-06 | 支付宝(杭州)信息技术有限公司 | Arbitration method and device based on block chain |
CN114594911A (en) * | 2022-03-13 | 2022-06-07 | 西安电子科技大学 | Block chain data storage system and method based on under-chain erasure code distributed storage |
CN114594911B (en) * | 2022-03-13 | 2024-03-29 | 西安电子科技大学 | Blockchain data storage system and method based on off-chain erasure code distributed storage |
Also Published As
Publication number | Publication date |
---|---|
CN108924092B (en) | 2020-11-20 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN108924092A (en) | Based on block chain can open arbitration distribution cloud storage method and system | |
US12020238B2 (en) | Ledger token transfer outside of a distributed ledger network through cryptographic binding to a transferrable possession token | |
JP7587635B2 (en) | BLOCKCHAIN-ENABLED METHOD FOR CONTROL AND DISTRIBUTION OF DIGITAL CONTENT | |
TWI706275B (en) | System and method for information protection | |
US20220034004A1 (en) | Digital Contracts in Blockchain Environments | |
US20240223357A1 (en) | Separation of accounting node subnetwork and service node subnetwork | |
US11941588B2 (en) | Systems and methods for blockchain virtualization and scalability | |
US20200127813A1 (en) | Method and system for creating a user identity | |
CN107730225B (en) | A big data transaction method, system, device and computer storage medium | |
CA3037833C (en) | System and method for information protection | |
TW202024944A (en) | Data sharing method, apparatus, and system, and electronic device | |
CN110601816B (en) | Lightweight node control method and device in block chain system | |
CN111402055B (en) | Decentralized data transaction method based on block chain | |
CN105976232A (en) | Asset transaction method and device | |
US11729000B2 (en) | Methods and systems for introducing self-contained intent functionality into decentralized computer networks | |
CN112328689A (en) | Universal asset business ecosystem based on block chain | |
CN110245948A (en) | Data trade method and system based on block chain and asymmetric encryption | |
CN114900290A (en) | Data transaction model and privacy protection method based on block chain | |
US20240137280A1 (en) | Methods and systems for introducing self-contained intent functionality into decentralized computer networks | |
CN112347190A (en) | Block chain-based shared office joining park management system | |
US20240202703A1 (en) | System and method for blockchain transaction management | |
CN113706313A (en) | Financing method, system and computer readable storage medium based on block chain | |
CN113132459A (en) | Distributed storage method, system, storage medium, information data processing terminal | |
CN112465504A (en) | Block chain based order settlement method, system and storage medium | |
CN117726446B (en) | Method, system and equipment for cross-chain transaction of supervision digital asset |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |