CN110276684A - In conjunction with the receipt storage method and node of type of transaction and event functions type - Google Patents

In conjunction with the receipt storage method and node of type of transaction and event functions type Download PDF

Info

Publication number
CN110276684A
CN110276684A CN201910420689.6A CN201910420689A CN110276684A CN 110276684 A CN110276684 A CN 110276684A CN 201910420689 A CN201910420689 A CN 201910420689A CN 110276684 A CN110276684 A CN 110276684A
Authority
CN
China
Prior art keywords
transaction
block chain
type
contract
chain node
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201910420689.6A
Other languages
Chinese (zh)
Other versions
CN110276684B (en
Inventor
刘琦
闫莺
魏长征
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Ant Chain Technology Co ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Priority to CN201910420689.6A priority Critical patent/CN110276684B/en
Publication of CN110276684A publication Critical patent/CN110276684A/en
Priority to PCT/CN2020/089385 priority patent/WO2020233424A1/en
Priority to PCT/CN2020/089384 priority patent/WO2020233423A1/en
Priority to PCT/CN2020/091396 priority patent/WO2020233624A1/en
Application granted granted Critical
Publication of CN110276684B publication Critical patent/CN110276684B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q40/00Finance; Insurance; Tax strategies; Processing of corporate or income taxes
    • G06Q40/04Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0435Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0442Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Finance (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • General Engineering & Computer Science (AREA)
  • Computing Systems (AREA)
  • Computer Hardware Design (AREA)
  • Economics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • General Business, Economics & Management (AREA)
  • Physics & Mathematics (AREA)
  • Technology Law (AREA)
  • Strategic Management (AREA)
  • Marketing (AREA)
  • Development Economics (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

This specification one or more embodiment provides the receipt storage method and node of a kind of combination type of transaction and event functions type, this method may include: the transaction for the intelligent contract of calling that the first block chain node is received by encryption, and there are corresponding exposed fields for the type of transaction of the transaction;First block chain node decrypts the transaction in credible performing environment to obtain the intelligent contract, and the intelligence contract includes special event function;First block chain node executes the intelligent contract in the credible performing environment, obtains receipt data, and the receipt data includes the log corresponding to the special event function;First block chain node stores the receipt data, stores the exposure field in the log corresponding to the special event function with ciphertext form with remaining content of plaintext version storage, the receipt data.

Description

In conjunction with the receipt storage method and node of type of transaction and event functions type
Technical field
This specification one or more embodiment be related to block chain technical field more particularly to a kind of combination type of transaction and The receipt storage method and node of event functions type.
Background technique
Block chain technology constructs on transmission network (such as point to point network).Network node in transmission network utilizes Linked data structure is verified and storing data, and knows together algorithm using distributed node to generate and more new data.
Technically maximum two challenges are exactly privacy and performance to the block platform chain of enterprise-level at present, and often the two are chosen War is difficult to solve simultaneously.Most solutions are all to exchange privacy for by losing performance, or less consider that privacy goes the property pursued Energy.The encryption technology of common solution privacy concern, as homomorphic cryptography (Homomorphic encryption) and Zero Knowledge are demonstrate,proved Complexities such as bright (Zero-knowledge proof) are high, poor universality, but also may bring serious performance loss.
Credible performing environment (Trusted Execution Environment, TEE) is another solution privacy concern Mode.TEE can play the role of the black box in hardware, and the code and data operating system layer executed in TEE can not all be peeped, Interface predetermined can just operate on it only in code.In terms of efficiency, due to the black box property of TEE, in TEE Carry out operation is clear data, rather than the complicated cryptography arithmetic in homomorphic cryptography, calculating process efficiency are not lost, because This combines safety and the privacy that block chain can be largely promoted under the premise of performance loss is lesser with TEE. Industry very pays close attention to the scheme of TEE at present, and the chip and software league of nearly all mainstream have the TEE solution party of oneself Case, TPM's (Trusted Platform Module, reliable platform module) and hardware aspect including software aspects Intel SGX (Software Guard Extensions, software protection extension), ARM Trustzone (trusted domain) and AMD PSP (Platform Security Processor, platform safety processor).
Summary of the invention
In view of this, this specification one or more embodiment provides a kind of combination type of transaction and event functions type Receipt storage method and node.
To achieve the above object, it is as follows to provide technical solution for this specification one or more embodiment:
According to this specification one or more embodiment in a first aspect, proposing a kind of combination type of transaction and event letter The receipt storage method of several classes of types, comprising:
First block chain node receives the transaction of the intelligent contract of calling by encryption, and the type of transaction of the transaction exists Corresponding exposed field;
First block chain node decrypts the transaction in credible performing environment to obtain the intelligent contract, the intelligence Contract includes special event function;
First block chain node executes the intelligent contract in the credible performing environment, obtains receipt data, described Receipt data includes the log corresponding to the special event function;
First block chain node stores the receipt data, makes the exposure in the log corresponding to the special event function Field is stored with plaintext version, remaining content of the receipt data is stored with ciphertext form.
According to the second aspect of this specification one or more embodiment, a kind of combination type of transaction and event letter are proposed The receipt memory node of several classes of types, comprising:
First block chain node receives the transaction of the intelligent contract of calling by encryption, and the type of transaction of the transaction exists Corresponding exposed field;
First block chain node decrypts the transaction in credible performing environment to obtain the intelligent contract, the intelligence Contract includes special event function;
First block chain node executes the intelligent contract in the credible performing environment, obtains receipt data, described Receipt data includes the log corresponding to the special event function;
First block chain node stores the receipt data, makes the exposure in the log corresponding to the special event function Field is stored with plaintext version, remaining content of the receipt data is stored with ciphertext form.
According to the third aspect of this specification one or more embodiment, a kind of electronic equipment is proposed, comprising:
Processor;
Memory for storage processor executable instruction;
Wherein, the processor is by running the executable instruction to realize method as described in relation to the first aspect.
According to the fourth aspect of this specification one or more embodiment, a kind of computer readable storage medium is proposed, The step of being stored thereon with computer instruction, method as described in relation to the first aspect realized when which is executed by processor.
Detailed description of the invention
Fig. 1 is a kind of schematic diagram for creation intelligence contract that an exemplary embodiment provides.
Fig. 2 is a kind of schematic diagram for calling intelligence contract that an exemplary embodiment provides.
Fig. 3 is the receipt storage method of a kind of combination type of transaction and event functions type that an exemplary embodiment provides Flow chart.
Fig. 4 is a kind of schematic diagram that secret protection is realized on block chain node that an exemplary embodiment provides.
Fig. 5 is a kind of function that block chain network is realized by system contract and chain code that an exemplary embodiment provides The schematic diagram of logic.
Fig. 6 is the receipt memory node of a kind of combination type of transaction and event functions type that an exemplary embodiment provides Block diagram.
Specific embodiment
Example embodiments are described in detail here, and the example is illustrated in the accompanying drawings.Following description is related to When attached drawing, unless otherwise indicated, the same numbers in different drawings indicate the same or similar elements.Following exemplary embodiment Described in embodiment do not represent all embodiments consistent with this specification one or more embodiment.Phase Instead, they are only some aspects phases with the one or more embodiments of as detailed in the attached claim, this specification The example of consistent device and method.
It should be understood that the sequence that might not show and describe according to this specification in other embodiments executes The step of correlation method.In some other embodiments, step included by method can than described in this specification more It is more or less.In addition, single step described in this specification, may be broken down into other embodiments multiple steps into Row description;And multiple steps described in this specification, it may also be merged into single step progress in other embodiments Description.
Block chain is normally divided into three types: publicly-owned chain (Public Blockchain), privately owned chain (Private ) and alliance's chain (Consortium Blockchain) Blockchain.In addition, there are also a plurality of types of combinations, such as privately owned chain The different combinations such as+alliance chain, alliance's chain+publicly-owned chain.It is publicly-owned chain that wherein decentralization degree is highest.Publicly-owned chain with than Special coin, ether mill are representative, and the participant that publicly-owned chain is added can read data record on chain, participate in business and compete newly Book keeping operation power of block etc..Moreover, each participant's (i.e. node) freely can be added and exit network, and carry out relevant operation.It is private There is chain then on the contrary, the write-in permission of the network is by some tissue or mechanism controls, reading data permission is by organization prescribed.Simply For, privately owned chain can be weak center's system, and participating in node has stringent limitation and less.Such block chain is more It is suitable for using inside particular organization.Alliance's chain is then block chain between publicly-owned chain and privately owned chain, it can be achieved that " part Decentralization ".Each node usually has corresponding physical mechanism or tissue in alliance's chain;Participant is added by authorization Enter network and composition interests correlation alliance, it is common to safeguard the operation of block chain.
Whether publicly-owned chain, privately owned chain or alliance's chain may all provide the function of intelligent contract.Intelligence on block chain Contract is the contract that can be executed by transaction triggering on block catenary system.Intelligent contract can pass through the formal definition of code.
By taking ether mill as an example, user is supported to create in the network of ether mill and call the logic of some complexity, this is ether Mill is different from the ultimate challenge of bit coin block chain technology.Ether mill is ether mill void as the core of a programmable block chain Quasi- machine (EVM), each ether mill node can run EVM.EVM is the complete virtual machine of figure spirit, it means that can be with The logic of various complexity is realized by it.It is exactly to run on EVM that user, which issues in ether mill and call intelligent contract,.It is real On border, what virtual machine was directly run is virtual machine code (Virtual Machine bytecodes, lower abbreviation " bytecode ").It is deployed on block chain Intelligent contract can be the form of bytecode.
Such as shown in Fig. 1, after a transaction comprising the intelligent contract information of creation is sent ether mill network by Bob, section The EVM of point 1 can execute this and trade and generate corresponding contract example." 0x6f8ae93 ... " in 1 in figure represents this The address of contract, what the data field of transaction saved can be bytecode, and the to field of transaction is sky.Pass through common recognition machine between node After system is reached an agreement, this contract is successfully created, and can be called in the follow-up process.After contract creation, on block chain There is a contract account corresponding with the intelligence contract, and possess a specific address, contract code will be stored in the conjunction About in account.The behavior of intelligent contract is controlled by contract code.In other words, intelligent contract to generate on block chain comprising closing The about virtual account of code and account storage (Storage).
As shown in Fig. 2, one is used to call the transaction of intelligent contract to be sent to ether mill by Bob still by taking ether mill as an example After network, the EVM of a certain node can execute this and trade and generate corresponding contract example.The from word traded in 2 in figure Section is the address of the account of transaction initiator (i.e. Bob), and " 0x6f8ae93 ... " in field represents called intelligence and close Address about, value field are the value of ether coin, the side of the intelligent contract of the calling that the data field of transaction saves in ether mill Method and parameter.Intelligent contract in a prescribed manner in block chain network each node disjoint execution, all execution record and Data are all stored on block chain, so just saving the transaction that can not be distorted, will not lose on block chain after the completion of transaction Voucher.
Node in block chain network can generate corresponding receipt (receipt) number after executing the transaction that Bob is initiated According to for recording the relevant receipt information of the transaction.By taking ether mill as an example, node executes the resulting receipt data of trading can be with Including following content:
Result field indicates the implementing result of transaction;
Gas used field indicates the gas value of transaction consumption;
Logs field indicates that the log that transaction generates, log may further include From field, To field, Topic word Section and Log data field etc., wherein From field indicates that the account address of the initiator called, To field indicate called pair As the account address of (such as intelligent contract), Topic field indicate that the theme of log, Log data field indicate daily record data;
Output field indicates the output of transaction.
Wherein, log is the Xiang Gongneng provided in ether mill.In the operational process of the code of intelligent contract, Ke Yiji Record log caused by each event contained by code.Log allows the details of record event, such as above-mentioned From field, To Field may indicate that both sides' account that transaction is related to, Topic field may include state variable cited in event etc. in code Value etc. after execution.Therefore, log can be also used in addition to can be used as the relevant evidence after executing on block chain of trading Drive relevant operation.It is, for example, possible to use the call back functions of JavaScript to monitor event, can produce phase when the event triggers The log answered, thus by retrieval log content, DAPP can be driven when retrieving default log content (Decentralized Application, Distributed Application) client executing relevant treatment operations etc..
In the related art, the full content of the receipt data generated in TEE is taken as the data for needing secret protection And it is stored encrypted on block chain.The block chain is stored in data made of certain logic tissue in the database of node Set.The database, as described later, physical support can store medium, such as persistent storage medium.Work as receipt data When contained log is encrypted storage, the search operaqtion for log possibly can not normally be implemented, to influence above-mentioned DAPP Execution of the client to relevant treatment operations.
Below in conjunction with the receipt storage method for illustrating the combination type of transaction of the application one and event functions type shown in Fig. 3 The realization process of embodiment:
Step 302, the first block chain node receives the transaction of the intelligent contract of calling by encryption, the transaction of the transaction There are corresponding exposed fields for type.
In one embodiment, user can generate transaction directly on the first block chain node;Alternatively, user can be in visitor Transaction is generated on the end of family, and the transaction is sent to by the first block chain node by client;Alternatively, client can will be above-mentioned Transaction is sent to the second block chain node, and the transaction is sent to the first block chain node by the second block chain node.
In one embodiment, when transaction is for calling intelligent contract, transaction content may include that called intelligence is closed Account address about, needs incoming method and parameter etc..
In one embodiment, transaction may include type field (such as the type field), and the value of the type field is for marking Bright corresponding type of transaction.Therefore, by the value of the contained type field of reading transaction, type of transaction can be determined, such as Card type, assets transfer is deposited (such as to transfer accounts) type, contract creation type, contract call type, this specification not to this into Row limitation.
In one embodiment, different types of transaction can be respectively present corresponding exposed field.Exposure field is receipt The one or more fields specified in data can combine under the premise of receipt data needs ciphertext to store to protect privacy Special event function contained by intelligent contract, selectively by the exposure field in the corresponding log of special event function in plain text Form is stored, so that the subsequent receipt contents for plaintext version storage implement the operation such as retrieval.
In one embodiment, the mapping relations between each type of transaction and exposure field can be pre-defined, and should Mapping relations are recorded in block chain, so that the available predefined mapping relations of the first block chain node, and further According to the type of transaction of above-mentioned transaction and the mapping relations, the exposure field in receipt data is determined.For example, it is corresponding to deposit card type Exposure field may include all fields except above-mentioned From field, the corresponding exposed field of assets transfer type can wrap Include above-mentioned To field, contract creation type and the corresponding exposed field of contract call type may include above-mentioned From field it Outer all fields, and the case where for other type of transaction, it no longer repeats one by one herein.
Wherein, above-mentioned mapping relations specifically can recorde in system contract.The mapping relations can also be recorded in In the chain code of block chain network.By the way that mapping relations are recorded in system contract, convenient for it is subsequent for the mapping relations into Row, which updates, to be upgraded, and the mapping relations being recorded in chain code are then not easy to realize relatively and update upgrading, subsequent to be directed to the two Difference is described, and wouldn't repeat herein.
Step 304, the first block chain node decrypts the transaction in credible performing environment to obtain the intelligent contract, The intelligence contract includes special event function.
In one embodiment, intelligent contract may include one or more events, and each event is for realizing predefined Relevant treatment logic.Each event contained by intelligent contract is called execute after, can generate corresponding Logs field, for example, when Intelligent contract include event 1 and event 2 when, corresponding Logs field can be generated in event 1, event 2 can be generated it is corresponding Logs field, so that the corresponding receipt data of intelligence contract includes simultaneously multiple Logs fields.
In one embodiment, event contained by intelligent contract can be divided into special event function and common event function, In: log caused by common event function is stored using ciphertext form, to realize secret protection;Special event function institute The log of generation then needs under the premise of meeting secret protection demand, and at least part log field is (such as described above Exposure field) stored with plaintext version, so as to for the partial log field Content Implementation retrieve, with driving The implementation of relevant operation.
In one embodiment, special event function can be predefined clobal function in block chain network.Such as In the chain code or system contract of block chain network, it can recorde the event functions for belonging to " special event function ", for example It can recorde in special event function list;Correspondingly, pass through the event functions that will include in intelligent contract and above-mentioned spy Different event functions list compares, and can determine whether the event functions that intelligent contract includes are above-mentioned special event letter Number.
In one embodiment, special event function can be customized arbitrary function in intelligent contract, and by intelligence The type identifier for being directed to event functions can be added in contract, which can be labeled as special event function.With For Solidity language, the example code for the event functions that intelligent contract includes is as follows:
Event buy_candy1 expose(who,candy_num);
Event buy_candy2(who,candy_num);
In above-mentioned example code, 2 events of intelligent Contracts Definitions: event buy_candy1 and event buy_ candy2.By adding type identifier " expose " in event buy_candy1, event buy_candy1 can be marked It is denoted as above-mentioned special event function;Correspondingly, due to not containing type identifier " expose " in event buy_candy2, Thus event buy_candy2 is common event function rather than above-mentioned special event function.
There are many high-level language that ether mill is supported, such as Solidity, Serpent, LLL language, may include above-mentioned Type identifier.The intelligent contract of high level language can be compiled as corresponding bytecode, the firstth area by compiler Block chain node finally executes the intelligent contract of bytecode form in EVM virtual machine.So, above-mentioned type identifier is advanced It can be the first kind in identical or high-level language intelligent contract code in language and the intelligent contract code of bytecode form Type identifier, bytecode form intelligent contract code in be Second Type identifier, first kind identifier and Second Type It can be corresponded to each other between identifier.
In one embodiment, by encrypting to transaction content, the above-mentioned transaction by encryption can be made to be in privacy guarantor The state of shield, avoids transaction content from exposing.It for example, may the account address comprising transaction initiator, friendship in transaction content The information such as the account address of easy target, may insure these transaction contents by encryption can not be read directly.
In one embodiment, above-mentioned transaction can be encrypted by way of symmetric encipherment algorithm, can also be used non- The mode of symmetry algorithm is encrypted.The Encryption Algorithm that symmetric cryptography uses, e.g. DES algorithm, 3DES algorithm, TDEA are calculated Method, Blowfish algorithm, RC5 algorithm, IDEA algorithm etc..Rivest, shamir, adelman, e.g. RSA, Elgamal, knapsack algorithm, Rabin, D-H, ECC (elliptic curve encryption algorithm) etc..
In one embodiment, above-mentioned transaction can be carried out by way of symmetric encipherment algorithm combination rivest, shamir, adelman Encryption.By taking above-mentioned transaction is committed to the first block chain node by client as an example, client can be added using symmetric encipherment algorithm Close transaction content encrypts transaction content using the key of symmetric encipherment algorithm, and is added with rivest, shamir, adelman cryptographic symmetrical The key used in close algorithm, for example using the key used in the public key encryption symmetric encipherment algorithm of rivest, shamir, adelman. In this way, can be first decrypted using the private key of rivest, shamir, adelman after the first block chain node receives the transaction of encryption, The key of symmetric encipherment algorithm is obtained, and then decrypts to obtain transaction content with the key of symmetric encipherment algorithm.
When transaction is for calling intelligent contract, the calling of multinest structure can be.For example, transaction calls directly intelligence Can and about 1, and the intelligence and about 1 code have invoked intelligence and about 2, and the code in intelligence and about 2 be directed toward it is intelligent with about 3 Contract address so that transaction actually have invoked indirectly intelligence and about 3 codes, and intelligence and about 3 in include a certain event Function.The event functions are contained in this way, being equivalent in intelligence and about 1.Specific implementation process is similar with the above process, herein not It repeats again.
Step 306, the first block chain node executes the intelligent contract in the credible performing environment, obtains receipt number According to the receipt data includes the log corresponding to the special event function.
As previously mentioned, the first block chain node is when executing the code of intelligent contract, for each event contained by code Function will generate corresponding Logs field respectively, i.e., generate the log for corresponding to each event functions respectively.By determining spy Different event functions may further determine that out the corresponding log of special event function, so that special event function is corresponding extremely Few a part of log field (exposing field as described above) is stored using plaintext version.
In one embodiment, such as in ether mill, the first block chain node receives the calling intelligence that client is sent After the transaction of contract, can check transaction whether effectively, format it is whether correct, whether the signature for verifying transaction legal etc..
In general, the node in ether mill is typically also the node of contention book keeping operation power, and therefore, the first block chain node is made Node for contention book keeping operation power can be performed locally the transaction.If one in the node of contention book keeping operation power is striven in epicycle It wins during taking book keeping operation power by force, then becomes accounting nodes.If the first block chain node is in the process of epicycle contention book keeping operation power In win, just become accounting nodes;Certainly, if if the first block chain node does not have during epicycle contention is kept accounts and weighed It wins, is not then accounting nodes, and other nodes are likely to become accounting nodes.
Intelligent contract is similar to the class in Object-Oriented Programming, and the contract that the result of execution generates the corresponding intelligence contract is real Example is similar to and generates the corresponding object of class.It executes in transaction for creating the process of the code of intelligent contract, will create contract account Family, and contract is disposed in account space.In ether mill, the address of intelligent contract account is address (such as Fig. 1-2 by sender In " 0xf5e ... ") and transaction random number (nonce) as input, pass through what Encryption Algorithm generated, such as the conjunction in Fig. 1-2 About address " 0x6f8ae93 ... " is generated by the encrypted algorithm of nonce in the address of sender " 0xf5e ... " and transaction.
In general, proved using proof of work (Proof of Work, POW) and equity (Proof of Stake, POS), equity is appointed to prove the area of support intelligence contract of the common recognition such as (Delegated Proof of Stake, DPOS) algorithm In block chain network, the node of contention book keeping operation power can execute the friendship after receiving the transaction comprising the intelligent contract of creation Easily.Contention book keeping operation power node in may one of them epicycle contention keep accounts weigh during win, become accounting nodes.Note This can be included transaction of intelligent contract by account node and other transaction be packaged together and generate new block, and by the new of generation Block be sent to other nodes and know together.
For using machines such as practical Byzantine failure tolerance (Practical Byzantine Fault Tolerance, PBFT) In the block chain network of the support intelligence contract of system, there is the node of book keeping operation power to have agreed upon before epicycle book keeping operation.Therefore, After one block chain node receives above-mentioned transaction, if itself not being the accounting nodes of epicycle, which can be sent to Accounting nodes.For the accounting nodes (can be the first block chain node) of epicycle, which is being packaged and is generating new block During perhaps before or by the transaction with it is other transaction be packaged together and generate new block during or before, The transaction can be executed.The transaction is packaged (or further including that other transaction are packaged together) and generates new area by the accounting nodes After block, the new block of generation or block head are sent to other nodes and known together.
As described above, in block chain network using the support intelligence contract of POW mechanism, or using POS, DPOS, In the block chain network of the support intelligence contract of PBFT mechanism, which can be packaged and generate new by the accounting nodes of epicycle Block, and the new block back zone build of generation is sent to other nodes and is known together.If other nodes receive institute It states after block that there is no problem through verifying, which can be appended to original block chain end, to complete to keep accounts Journey is reached common understanding;If transaction completes deployment of the intelligent contract in block chain network, if handing over for creating intelligent contract It is easy for calling intelligent contract, then completes the calling and execution of intelligent contract.Other node verification accounting nodes are sent new Block or block head during, the transaction in the block can also be executed.
The implementation procedure can generally be executed by virtual machine.By taking ether mill as an example, support user in ether mill network Middle creation and/or the logic for calling some complexity, this is the ultimate challenge that ether mill is different from bit coin block chain technology.Ether Mill is ether mill virtual machine (EVM, Ethereum Virtual Machine) as the core of a programmable block chain, each Ether mill node can run EVM.EVM is the complete virtual machine of a figure spirit, it means that can be realized by it various Complicated logic.It is exactly to run on EVM that user, which issues in ether mill and call intelligent contract,.
In the present embodiment, the first block chain node can be in credible performing environment (Trusted Execution Environment, TEE) in execute decryption intelligent contract code.Such as shown in Fig. 4, the first block chain node can be divided For conventional performing environment (being located at left side in figure) and TEE, (as described above, transaction may exist it for the transaction that client is submitted His source;This is illustrated for sentencing the transaction of client submission) initially enter " transaction/inquiry in conventional performing environment Interface " is identified, can be left on to be handled in conventional performing environment there is no the transaction of privacy process demand and (here may be used Recognize whether that privacy handles need with identifier according to contained by the user type of transaction initiator, type of transaction, transaction etc. Ask), and the transaction transport that privacy process demand will be present is handled into TEE.TEE and conventional performing environment are mutually isolated. Transaction is in encrypted state before entering TEE, and the transaction content of plaintext is then decrypted as in credible performing environment, thus Under the premise of ensuring data safety, the transaction content of the plaintext is enabled to realize efficient process in TEE, and raw in TEE At the receipt data of plaintext.
TEE is the security extension based on CPU hardware, and the credible performing environment completely isolated with outside.TEE be earliest by The concept that Global Platform is proposed, for solving the security isolation of resource in mobile device, being parallel to operating system is to answer Credible and secure performing environment is provided with program.The Trust Zone technology of ARM realizes the TEE technology of real commercialization earliest. Along with the high speed development of internet, safe demand is higher and higher, is not limited only to mobile device, cloud device, data center More demands all are proposed to TEE.The concept of TEE has also obtained the development and expansion of high speed.Now described TEE compare with The concept initially proposed has been the TEE of more broad sense.For example, server chips manufacturer Intel, AMD etc. are successively proposed The TEE of hardware auxiliary and the concept and characteristic for enriching TEE, have been widely recognized in industry.The TEE lifted now is logical Often more refer to the TEE technology of this kind of hardware auxiliary.Different from mobile terminal, cloud access needs to remotely access, and terminal user is to hard Part platform is invisible, therefore seeks to the genuine and believable of confirmation TEE using the first step of TEE.Therefore present TEE technology is all drawn Enter remote proving mechanism, endorsed by hardware vendor (mainly CPU manufacturer) and ensures user to TEE by digital signature technology State can verify that.It is simultaneously only the demand for security that the resource isolation of safety is also unable to satisfy, further data-privacy protection Also it is suggested.Including Intel SGX, the commercial TEE including AMD SEV also both provides memory encryption technology, by reliable hardware It is limited to inside CPU, the data of bus and memory are that ciphertext prevents malicious user from being spied upon.For example, the software of Intel Protection extends code execution, remote proving, security configuration, the secure storage of data such as (SGX) TEE technology insulation and is used for Execute the trusted path of code.The application program run in TEE is kept safe, as a consequence it is hardly possible to be accessed by third party.
By taking Intel SGX technology as an example, SGX provides enclosure (enclave, also referred to as enclave), i.e., one adds in memory Close credible execution region, protects data not to be stolen by CPU.By taking the first block chain node is using the CPU for supporting SGX as an example, Using newly-increased processor instruction, a part of region EPC (Enclave Page Cache, enclosure page can be distributed in memory Face caching or enclave page cache), by the crypto engine MEE (Memory Encryption Engine) in CPU to wherein Data encrypted.The content encrypted in EPC, which only enters after CPU, can just be decrypted into plain text.Therefore, in SGX, user It can distrust operating system, VMM (Virtual Machine Monitor, monitor of virtual machine), even BIOS (Basic Input Output System, basic input output system), it is only necessary to trust CPU just and can ensure that private data will not leak. It in practical application, is transferred in enclosure after private data being encrypted with ciphertext form, and will be corresponding by remote proving Code key is also passed to enclosure.Then, operation is carried out using data under the encipherment protection of CPU, as a result can be returned with ciphertext form.This Under kind mode, powerful calculating power not only can use, but also do not have to concern of data and leak.
As described above, by executing the transaction content after decrypting in TEE, it can be ensured that implementation procedure is in trusted context Interior completion, to ensure that privacy information will not leak.It is used to create intelligent conjunction there are the transaction of privacy process demand when above-mentioned It include the code of intelligent contract when about, in the transaction, the first block chain node can be decrypted to obtain in TEE to the transaction The code of its contained intelligent contract, and the code is executed in TEE in turn.When the above-mentioned transaction there are privacy process demand is used for When calling intelligent contract, the first block chain node can execute the code (if called intelligent contract processing encryption in TEE State then needs that first the intelligence contract is decrypted in TEE, to obtain corresponding code).Specifically, the first block chain Node can use the processor instruction increased newly in CPU, distributes a part of region EPC in memory, is drawn by the encryption in CPU MEE is held up to carry out in the encryption deposit EPC above-mentioned plaintext code.The content encrypted in EPC enter after CPU be decrypted into it is bright Text.In CPU, operation is carried out to the code of plaintext, completes implementation procedure.For example, executing intelligent contract in SGX technology Plaintext code can load EVM into enclosure.During remote proving, Key Management server can calculate local EVM The hash value of code, and compared with the hash value of the EVM code loaded in the first block chain node, comparison result is correctly as logical A necessary condition of remote proving is crossed, to complete the measurement of the code loaded to the first block chain node SGX enclosure.By Measurement, correct EVM can execute the code of above-mentioned intelligent contract in SGX.
Step 308, the first block chain node stores the receipt data, makes the log corresponding to the special event function In exposure field with plaintext version storage, the receipt data remaining content stored with ciphertext form.
It in one embodiment,, can be according to not by being identified to type of transaction under the premise of protecting privacy of user The transaction of same type is for the differentiated demand of secret protection, and determining can be with the exposure field of stored in clear, and further root Event functions contained by the intelligent contract called according to transaction, embody different types of event functions for hidden in storing process The differentiated demand of private protection, flexibility with higher.For example, the exposure field that special event function is related to is with plaintext version Storage, and all receipt fields involved in non-exposed field that special event function is related to, common event function etc., with close Literary form storage.
By program code (the hereinafter referred to as chain generation for running block chain on calculating equipment (physical machine or virtual machine) Code), it can be the block chain node in block chain network, such as the first above-mentioned block chain node by the calculating device configuration Deng.In other words, the first block chain node is by running above-mentioned chain code, to realize corresponding function logic.Therefore, Ke Yi When creating block chain network, chain is written into receipt data storage logic relevant to type of transaction and event functions described above In code, so that receipt data storage logic may be implemented in each block chain node.
Receipt data storage logic relevant to type of transaction and event functions may include: to patrol the identification of type of transaction Volume, to the confirmation logic of exposure field, to the recognition logic of special event function, to processing logic of exposed field etc..
First block chain node is used to indicate to the recognition logic of type of transaction: the transaction that identification transaction initiator is initiated Type.Such as: according to the value of the contained type field of transaction, determine the corresponding type of transaction of the transaction.Can specifically it join The associated description for above identifying type of transaction is examined, details are not described herein again.
First block chain node is used to indicate to the confirmation logic of exposure field: corresponding exposure is determined according to type of transaction Field.Such as: according to the type of transaction recorded in chain code or system contract or block and the mapping relations between field are exposed, In conjunction with the current type of transaction for initiating transaction, corresponding exposure field is determined.It can specifically refer to and above know type of transaction The associated description of corresponding exposed field, details are not described herein again.
First block chain node is used to indicate to the recognition logic of special event function: special contained by identification intelligent contract Event functions.Such as: can recorde in predefined special event function list or system contract in system contract can be with Record has the processing logic identified based on type identifier to special event function.It specifically can be special with reference to above identification The associated description of different event functions, details are not described herein again.
First block chain node is used to indicate to the processing logic of exposure field: exposing field to corresponding in receipt data Receipt contents stored.Such as: the log for corresponding to special event function in receipt data, it can will be in the log Receipt contents corresponding to exposure field are stored using plaintext version, and will be in the corresponding receipt of non-exposed field in the log Hold and stored using ciphertext form, and by other receipt contents in receipt data (in such as corresponding receipt of common event function Hold) it is stored using ciphertext form.Specifically can be with reference to the associated description for above storing receipt data, details are not described herein again.
However, the upgrading update of chain code is relatively difficult, so that realizing the storage to receipt data using chain code There is a problem of that flexibility is low, scalability is insufficient.In order to realize the Function Extension to chain code, as shown in figure 5, can use The mode that chain code is combined with system contract: chain code for realizing block chain network basic function, and in operational process Function Extension can be realized by way of system contract.Similar with above-mentioned intelligent contract, system contract includes example Such as the code of bytecode form, the first block chain node can be by the code of operating system contract (for example, according to unique corresponding Address " 0x53a98 ... " read the code in the system contract), realize and the function of chain code supplemented.Correspondingly, first Block chain node can read the code of system contract, define and type of transaction and event functions in the code of the system contract Relevant receipt data stores logic;Then, the first block chain node can execute the code of system contract, to be based on and friendship Easy type and the relevant receipt data of event functions store logic, by the exposure field in the log for corresponding to special event function It is stored with remaining content of plaintext version storage, receipt data with ciphertext form.
It is different from the above-mentioned intelligent contract that block chain is distributed to by user, system contract can not freely be issued by user.The The system contract that one block chain node is read may include the preset system contract being configured in the wound generation block of block chain network;With And the administrator (i.e. above-mentioned management user) in block chain network can have the renewal authority for system contract, thus It is updated for such as above-mentioned preset system contract, then the system contract that above-mentioned first block chain node is read can also wrap Include system contract after updating accordingly.Certainly, system contract can be implemented once preset system contract by administrator after update It is obtained after update;Alternatively, system contract obtains after can implementing successive ignition update to preset system contract by administrator after updating Arrive, for example, by preset system contract update to obtain system and about 1, to system and about 1 update the system that obtains and about 2, system is closed About 2 updates obtain system and about 3, and the system and about 1, system and about 2, system and about 3 can be considered as system contract after update, But the first block chain node would generally be subject to the system contract of latest edition, for example the first block chain node can be with system contract Subject to code in 3, and the code in nonsystematic and about 1 or system and about 2.
Other than the preset system contract for including in wound generation block, administrator can also close delivery system in subsequent block About, and for the system contract issued it is updated.In short, should be closed by modes such as rights managements to system Publication about and update and implement a degree of limitation, with ensure block chain network function logic can normal operation, and It avoids causing unnecessary loss to any user.
Therefore, the first block chain node can read the code of system contract, defined in the code of the system contract with Type of transaction and the relevant receipt data of event functions store logic;Then, the first block chain node can execute system conjunction Code about, according to the corresponding exposed field of the type of transaction of transaction, by the exposure in the log for corresponding to special event function Field is stored with plaintext version, remaining content in receipt data is stored with ciphertext form.
First block chain node passes through non-exposed field and no special event functions in key pair special event function Corresponding receipt contents are encrypted.The encryption can use symmetric cryptography, can also use asymmetric encryption.If the One block chain node symmetric cryptography mode encrypts receipt contents with the symmetric key of symmetric encipherment algorithm, then client (or other hold the object of key) can solve encrypted receipt contents with the symmetric key of the symmetric encipherment algorithm It is close.
In one embodiment, the symmetric key of the first block chain node symmetric encipherment algorithm encrypts receipt contents When, which can be provided previously to the first block chain node by client.So, due to only having client (actually should For the corresponding user of logon account in client) and the first block chain node grasp the symmetric key so that the only client End can decrypt corresponding encrypted receipt contents, avoid unrelated user even criminal to encrypted receipt contents into Row decryption.
For example, client, when initiating to trade to the first block chain node, client can use the first of symmetric encipherment algorithm Beginning key pair transaction content is encrypted, to obtain the transaction;Correspondingly, the first block chain node can be initial by obtaining this Key, for directly or indirectly being encrypted to receipt contents.For example, which can be by client and the first block Chain node is negotiated to obtain in advance, perhaps by Key Management server is sent to client and the first block chain node or by visitor Family end is sent to the first block chain node.When initial key is sent to the first block chain node by client, client can be with After encrypting by the public key of rivest, shamir, adelman to the initial key, encrypted initial key is sent to the firstth area Block chain node, and the first block chain node solves the encrypted initial key by the private key of rivest, shamir, adelman It is close, initial key is obtained, i.e., digital envelope encryption described above, details are not described herein again.
In one embodiment, the first block chain node can encrypt receipt contents using above-mentioned initial key. Difference transaction use initial keys can be identical so that the All Activity that same user is submitted be all made of the initial key into Row encryption, or the initial key that different transaction use can be different, for example client can be generated for each transaction is random One initial key, to promote safety.
In one embodiment, the first block chain node can generate derivative key according to initial key and impact factor, and Receipt contents are encrypted by the derivative key.It is encrypted compared to initial key is directlyed adopt, derivative key can be with Increase degree of randomness, to promote the difficulty being broken, facilitates the safeguard protection for optimizing data.Impact factor can be with transaction phase It closes;For example, impact factor may include trade cryptographic Hash specific bit, such as the first block chain node can by initial key with First 16 (or first 32,16 latter, rear 32 or other positions) of transaction cryptographic Hash are spliced, and to spliced word Symbol string carries out Hash operation, to generate derivative key.
In one embodiment, the first block chain node can also use asymmetric encryption mode, i.e., calculated with asymmetric encryption The public key of method encrypts receipt contents, then correspondingly, client can be decrypted above-mentioned with the private key of the rivest, shamir, adelman Encrypted receipt contents.The key of rivest, shamir, adelman, such as can be and a pair of of public key and private key are generated by client, and Public key is sent to the first block chain node in advance, so that the first block chain node can be by the receipt contents public key encryption.
First block chain node is by running the code for realizing a certain function, to realize the function.Therefore, for needing The function to realize in TEE also needs to execute correlative code.And the code for being executed in TEE, it needs to meet TEE Related specifications and requirement;Accordingly for the rule for realizing the code of a certain function, needed in the related technology in conjunction with TEE Model and requirement re-start written in code, and there is only relatively bigger exploitation amounts, and are easy to produce during rewriting Raw loophole (bug) influences the reliability and stability of function realization.
Therefore, the first block chain node can be by executing store function code, the receipts that will be generated in TEE except TEE According to data (including needing the receipt contents of the plaintext version of stored in clear, and the receipt of the ciphertext form that needs ciphertext to store Content) external memory space to except TEE is stored, allow the store function code to be in the related technology for realizing depositing It stores up the code of function, need to re-start written in code in conjunction with the specification and requirement of TEE, can realize peace for receipt data Complete reliable storage, on the basis of not influencing safe and reliable degree, can not only reduce the exploitation amount of correlative code, and TCB (Trusted Computing Base, trusted computing base) can be reduced by reducing the correlative code of TEE, so that TEE During technology and block chain technology are combined, it is additional caused by security risk be in controlled range.
In one embodiment, the first block chain node can execute write buffer function code in TEE, by above-mentioned receipts It is stored in the write buffer in TEE according to data, for example the write buffer can correspond to " caching " as shown in Figure 1.Further, One block chain node exports the data in write buffer from credible performing environment, to store to external memory space.Wherein, it writes slow Depositing function code can be stored in TEE with plaintext version, and the caching function generation of the plaintext version can be directly executed in TEE Code;Or, write buffer function code can be stored in except TEE with ciphertext form, for example it is stored in above-mentioned external memory space (such as " packing+storage " shown in Fig. 4, wherein " packing " indicates the first block chain node except credible performing environment to friendship Easily be packaged blocking), the write buffer function code of the ciphertext form can be read in TEE, be decrypted in TEE as in plain text Code, and execute the plaintext code.
Write buffer refers to when writing data into external memory space, in order to avoid causing " the punching to external memory space Hit " and " buffering " mechanism of offer.For example, can realize above-mentioned write buffer using buffer;Certainly, write buffer can also adopt It is realized with cache, this specification is limited not to this.In fact, due to the security context that TEE is isolation, and it is external Memory space is located at except TEE, so that can carry out batch by using write buffer mechanism to the data in caching and outside is written Memory space promotes data storage efficiency to reduce the interaction times between TEE and external memory space.Meanwhile TEE exists During constantly executing each item transaction, it may be necessary to transfer generated data, be write if the data that need to be called are located exactly at In caching, the data can be directly read from write buffer, on the one hand can reduce the friendship between external memory space in this way Mutually, it on the other hand eliminates to the decrypting process from external memory space data streams read, thus at the data being lifted in TEE Manage efficiency.
It is of course also possible to write buffer be built on except TEE, for example the first block chain node can execute except TEE Write buffer function code, thus by the write buffer outside above-mentioned receipt data deposit TEE, and further by the number in write buffer According to storing to external memory space.
The receipt memory node of a kind of combination type of transaction of this specification and event functions type is introduced below in conjunction with Fig. 6 Embodiment, comprising:
Receiving unit 61, receives the transaction of the intelligent contract of calling by encryption, and the type of transaction of the transaction exists pair The exposure field answered;
Decryption unit 62 decrypts the transaction in credible performing environment to obtain the intelligent contract, and the intelligence is closed It about include special event function;
Execution unit 63 executes the intelligent contract in the credible performing environment, obtains receipt data, the receipt Data include the log corresponding to the special event function;
Storage unit 64 stores the receipt data, makes the exposure word in the log corresponding to the special event function Section is stored with remaining content of plaintext version storage, the receipt data with ciphertext form.
Optionally, the transaction includes type field, and the value of the type field is for indicating corresponding type of transaction.
Optionally, the mapping relations being stored in block chain between predefined type of transaction and exposure field, it is described to reflect The relationship of penetrating is used for determining the corresponding exposed field of the type of transaction of the transaction.
Optionally, the mapping relations are recorded in system contract.
Optionally, the event functions containing type identifier in the intelligent contract, the type identifier are used for institute Event functions are stated labeled as special event function.
Optionally, when the event functions that the intelligent contract includes are located in the special function list recorded on block chain When, the event functions that the intelligence contract includes are judged as special event function.
Optionally, storage unit 64 is specifically used for:
The code of reading system contract defines in the code of the system contract related to type of transaction and event functions Receipt data store logic;
The code for executing the system contract, will correspond to the exposure field in the log of the special event function with Plaintext version stores, remaining content of the receipt data is stored with ciphertext form.
Optionally, the system contract includes: that the preset system contract being recorded in wound generation block or the preset system close System contract after about corresponding update.
Optionally, the type of transaction of the transaction includes: to deposit card type, assets transfer type, contract creation type, contract Call type.
Optionally, storage unit 64 is specifically used for:
First block chain node executes store function code except the credible performing environment, by the receipt data It stores to the external memory space except the credible performing environment.
Optionally, the key that the first block chain node encrypts the receipt data includes: symmetric encipherment algorithm The key of key or rivest, shamir, adelman.
Optionally, the key of the symmetric encipherment algorithm includes the initial key that the client provides;Or, described symmetrical The key of Encryption Algorithm includes the derivative key that the initial key and impact factor generate.
Optionally, the transaction is encrypted by the initial key, and the initial key is by rivest, shamir, adelman Public key encrypted;The decryption unit 62 is specifically used for:
It is decrypted to obtain the initial key with the private key of the rivest, shamir, adelman, and with the initial key to described Transaction is decrypted, to obtain the transaction content.
Optionally, the initial key is generated by client;Or, the initial key is sent to by Key Management server The client.
Optionally, the impact factor is related to the transaction.
Optionally, the impact factor includes: the specific bit of the cryptographic Hash of the transaction.
In the 1990s, the improvement of a technology can be distinguished clearly be on hardware improvement (for example, Improvement to circuit structures such as diode, transistor, switches) or software on improvement (improvement for method flow).So And with the development of technology, the improvement of current many method flows can be considered as directly improving for hardware circuit. Designer nearly all obtains corresponding hardware circuit by the way that improved method flow to be programmed into hardware circuit.Cause This, it cannot be said that the improvement of a method flow cannot be realized with hardware entities module.For example, programmable logic device (Programmable Logic Device, PLD) (such as field programmable gate array (Field Programmable Gate Array, FPGA)) it is exactly such a integrated circuit, logic function determines device programming by user.By designer Voluntarily programming comes a digital display circuit " integrated " on a piece of PLD, designs and makes without asking chip maker Dedicated IC chip.Moreover, nowadays, substitution manually makes IC chip, this programming is also used instead mostly " is patrolled Volume compiler (logic compiler) " software realizes that software compiler used is similar when it writes with program development, And the source code before compiling also write by handy specific programming language, this is referred to as hardware description language (Hardware Description Language, HDL), and HDL is also not only a kind of, but there are many kind, such as ABEL (Advanced Boolean Expression Language)、AHDL(Altera Hardware Description Language)、Confluence、CUPL(Cornell University Programming Language)、HDCal、JHDL (Java Hardware Description Language)、Lava、Lola、MyHDL、PALASM、RHDL(Ruby Hardware Description Language) etc., VHDL (Very-High-Speed is most generally used at present Integrated Circuit Hardware Description Language) and Verilog.Those skilled in the art also answer This understands, it is only necessary to method flow slightly programming in logic and is programmed into integrated circuit with above-mentioned several hardware description languages, The hardware circuit for realizing the logical method process can be readily available.
Controller can be implemented in any suitable manner, for example, controller can take such as microprocessor or processing The computer for the computer readable program code (such as software or firmware) that device and storage can be executed by (micro-) processor can Read medium, logic gate, switch, specific integrated circuit (Application Specific Integrated Circuit, ASIC), the form of programmable logic controller (PLC) and insertion microcontroller, the example of controller includes but is not limited to following microcontroller Device: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20 and Silicone Labs C8051F320 are deposited Memory controller is also implemented as a part of the control logic of memory.It is also known in the art that in addition to Pure computer readable program code mode is realized other than controller, can be made completely by the way that method and step is carried out programming in logic Controller is obtained to come in fact in the form of logic gate, switch, specific integrated circuit, programmable logic controller (PLC) and insertion microcontroller etc. Existing identical function.Therefore this controller is considered a kind of hardware component, and to including for realizing various in it The device of function can also be considered as the structure in hardware component.Or even, it can will be regarded for realizing the device of various functions For either the software module of implementation method can be the structure in hardware component again.
System, device, module or the unit that above-described embodiment illustrates can specifically realize by computer chip or entity, Or it is realized by the product with certain function.It is a kind of typically to realize that equipment is computer.Specifically, computer for example may be used Think personal computer, laptop computer, cellular phone, camera phone, smart phone, personal digital assistant, media play It is any in device, navigation equipment, electronic mail equipment, game console, tablet computer, wearable device or these equipment The combination of equipment.
For convenience of description, it is divided into various units when description apparatus above with function to describe respectively.Certainly, implementing this The function of each unit can be realized in the same or multiple software and or hardware when specification.
It should be understood by those skilled in the art that, the embodiment of the present invention can provide as method, system or computer program Product.Therefore, complete hardware embodiment, complete software embodiment or reality combining software and hardware aspects can be used in the present invention Apply the form of example.Moreover, it wherein includes the computer of computer usable program code that the present invention, which can be used in one or more, The computer program implemented in usable storage medium (including but not limited to magnetic disk storage, CD-ROM, optical memory etc.) produces The form of product.
The present invention be referring to according to the method for the embodiment of the present invention, the process of equipment (system) and computer program product Figure and/or block diagram describe.It should be understood that every one stream in flowchart and/or the block diagram can be realized by computer program instructions The combination of process and/or box in journey and/or box and flowchart and/or the block diagram.It can provide these computer programs Instruct the processor of general purpose computer, special purpose computer, Embedded Processor or other programmable data processing devices to produce A raw machine, so that being generated by the instruction that computer or the processor of other programmable data processing devices execute for real The device for the function of being specified in present one or more flows of the flowchart and/or one or more blocks of the block diagram.
This specification can describe in the general context of computer-executable instructions executed by a computer, such as journey Sequence module.Generally, program module include routines performing specific tasks or implementing specific abstract data types, programs, objects, Component, data structure etc..This specification can also be practiced in a distributed computing environment, in these distributed computing environment In, by executing task by the connected remote processing devices of communication network.In a distributed computing environment, program module It can be located in the local and remote computer storage media including storage equipment.
These computer program instructions, which may also be stored in, is able to guide computer or other programmable data processing devices with spy Determine in the computer-readable memory that mode works, so that it includes referring to that instruction stored in the computer readable memory, which generates, Enable the manufacture of device, the command device realize in one box of one or more flows of the flowchart and/or block diagram or The function of being specified in multiple boxes.
These computer program instructions also can be loaded onto a computer or other programmable data processing device, so that counting Series of operation steps are executed on calculation machine or other programmable devices to generate computer implemented processing, thus in computer or The instruction executed on other programmable devices is provided for realizing in one or more flows of the flowchart and/or block diagram one The step of function of being specified in a box or multiple boxes.In a typical configuration, computer includes at one or more Manage device (CPU), input/output interface, network interface and memory.
Memory may include the non-volatile memory in computer-readable medium, random access memory (RAM) and/or The forms such as Nonvolatile memory, such as read-only memory (ROM) or flash memory (flash RAM).Memory is computer-readable medium Example.
Computer-readable medium includes permanent and non-permanent, removable and non-removable media can be by any method Or technology come realize information store.Information can be computer readable instructions, data structure, the module of program or other data. The example of the storage medium of computer includes, but are not limited to phase change memory (PRAM), static random access memory (SRAM), moves State random access memory (DRAM), other kinds of random access memory (RAM), read-only memory (ROM), electric erasable Programmable read only memory (EEPROM), flash memory or other memory techniques, read-only disc read only memory (CD-ROM) (CD-ROM), Digital versatile disc (DVD) or other optical storage, magnetic cassettes, disk storage, quantum memory, based on graphene Storage medium or other magnetic storage devices or any other non-transmission medium, can be used for storing can be accessed by a computing device Information.As defined in this article, computer-readable medium does not include temporary computer readable media (transitory media), Such as the data-signal and carrier wave of modulation.
It should also be noted that, the terms "include", "comprise" or its any other variant are intended to nonexcludability It include so that the process, method, commodity or the equipment that include a series of elements not only include those elements, but also to wrap Include other elements that are not explicitly listed, or further include for this process, method, commodity or equipment intrinsic want Element.In the absence of more restrictions, the element limited by sentence "including a ...", it is not excluded that including described want There is also other identical elements in the process, method of element, commodity or equipment.
It is above-mentioned that this specification specific embodiment is described.Other embodiments are in the scope of the appended claims It is interior.In some cases, the movement recorded in detail in the claims or step can be come according to the sequence being different from embodiment It executes and desired result still may be implemented.In addition, process depicted in the drawing not necessarily require show it is specific suitable Sequence or consecutive order are just able to achieve desired result.In some embodiments, multitasking and parallel processing be also can With or may be advantageous.
The term that this specification one or more embodiment uses be only merely for for the purpose of describing particular embodiments, and It is not intended to be limiting this specification one or more embodiment.In this specification one or more embodiment and the appended claims Used in the "an" of singular, " described " and "the" be also intended to including most forms, unless context understands earth's surface Show other meanings.It is also understood that term "and/or" used herein refers to and includes one or more associated list Any or all of project may combine.
It will be appreciated that though this specification one or more embodiment may using term first, second, third, etc. come Various information are described, but these information should not necessarily be limited by these terms.These terms are only used to same type of information area each other It separates.For example, the first information can also be referred to as in the case where not departing from this specification one or more scope of embodiments Two information, similarly, the second information can also be referred to as the first information.Depending on context, word as used in this is " such as Fruit " can be construed to " ... when " or " when ... " or " in response to determination ".
The foregoing is merely the preferred embodiments of this specification one or more embodiment, not to limit this theory Bright book one or more embodiment, all within the spirit and principle of this specification one or more embodiment, that is done is any Modification, equivalent replacement, improvement etc. should be included within the scope of the protection of this specification one or more embodiment.

Claims (19)

1. the receipt storage method of a kind of combination type of transaction and event functions type, comprising:
First block chain node receives the transaction of the intelligent contract of calling by encryption, and the type of transaction of the transaction, which exists, to be corresponded to Exposure field;
First block chain node decrypts the transaction in credible performing environment to obtain the intelligent contract, the intelligence contract Include special event function;
First block chain node executes the intelligent contract in the credible performing environment, obtains receipt data, the receipt Data include the log corresponding to the special event function;
First block chain node stores the receipt data, makes the exposure field in the log corresponding to the special event function It is stored with remaining content of plaintext version storage, the receipt data with ciphertext form.
2. the value of the type field is for indicating according to the method described in claim 1, the transaction includes type field Corresponding type of transaction.
3. according to the method described in claim 1, being stored in block chain between predefined type of transaction and exposure field Mapping relations, the mapping relations are used for determining the corresponding exposed field of the type of transaction of the transaction.
4. according to the method described in claim 3, the mapping relations are recorded in system contract.
5. according to the method described in claim 1, the event functions containing type identifier in the intelligence contract, the type Identifier is used to the event functions being labeled as special event function.
6. according to the method described in claim 1, being recorded when the event functions that the intelligent contract includes are located on block chain When in special function list, the event functions that the intelligence contract includes are judged as special event function.
7. according to the method described in claim 1, the first block chain node stores the receipt data, comprising:
First block chain node reads the code of system contract, defines and type of transaction and thing in the code of the system contract The receipt data of part functional dependence stores logic;
First block chain node executes the code of the system contract, will correspond in the log of the special event function Exposure field is stored with remaining content of plaintext version storage, the receipt data with ciphertext form.
8. the method according to claim 4 or 7, the system contract includes: that the preset system being recorded in wound generation block closes System contract about or after the corresponding update of the preset system contract.
9. according to the method described in claim 1, the type of transaction of the transaction includes: to deposit card type, assets transfer type, close About create type, contract call type.
10. according to the method described in claim 1, the first block chain node stores the receipt data, comprising:
First block chain node executes store function code except the credible performing environment, and the receipt data is stored External memory space except to the credible performing environment.
11. according to the method described in claim 1, the key packet that the first block chain node encrypts the receipt data It includes: the key of symmetric encipherment algorithm or the key of rivest, shamir, adelman.
12. according to the method for claim 11, the key of the symmetric encipherment algorithm includes the first of the client offer Beginning key;Or, the key of the symmetric encipherment algorithm includes the derivative key that the initial key and impact factor generate.
13. according to the method for claim 12, the transaction is encrypted by the initial key, and the initial key It is encrypted by the public key of rivest, shamir, adelman;First block chain node decrypts the transaction in credible performing environment, packet It includes:
First block chain node decrypts to obtain the initial key with the private key of the rivest, shamir, adelman, and with described initial Transaction described in key pair is decrypted, to obtain the transaction content.
14. according to the method for claim 12, the initial key is generated by client;Or, the initial key is by close Key management server is sent to the client.
15. according to the method for claim 12, the impact factor is related to the transaction.
16. according to the method for claim 15, the impact factor includes: the specific bit of the cryptographic Hash of the transaction.
17. the receipt memory node of a kind of combination type of transaction and event functions type, comprising:
Receiving unit receives the transaction of the intelligent contract of calling by encryption, and there are corresponding sudden and violent for the type of transaction of the transaction Reveal field;
Decryption unit decrypts the transaction in credible performing environment to obtain the intelligent contract, and the intelligence contract includes Special event function;
Execution unit executes the intelligent contract in the credible performing environment, obtains receipt data, the receipt data packet Containing the log for corresponding to the special event function;
Storage unit stores the receipt data, makes the exposure field in the log corresponding to the special event function with bright Literary form stores, remaining content of the receipt data is stored with ciphertext form.
18. a kind of electronic equipment, comprising:
Processor;
Memory for storage processor executable instruction;
Wherein, the processor is by running the executable instruction to realize the side as described in any one of claim 1-16 Method.
19. a kind of computer readable storage medium, is stored thereon with computer instruction, realized such as when which is executed by processor The step of any one of claim 1-16 the method.
CN201910420689.6A 2019-05-20 2019-05-20 Receipt storage method and node combining transaction type and event function type Active CN110276684B (en)

Priority Applications (4)

Application Number Priority Date Filing Date Title
CN201910420689.6A CN110276684B (en) 2019-05-20 2019-05-20 Receipt storage method and node combining transaction type and event function type
PCT/CN2020/089385 WO2020233424A1 (en) 2019-05-20 2020-05-09 Event function type-based receipt storage method and node
PCT/CN2020/089384 WO2020233423A1 (en) 2019-05-20 2020-05-09 Receipt storage method and node based on transaction type
PCT/CN2020/091396 WO2020233624A1 (en) 2019-05-20 2020-05-20 Receipt storage method and node employing transaction type in combination with event function type

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910420689.6A CN110276684B (en) 2019-05-20 2019-05-20 Receipt storage method and node combining transaction type and event function type

Publications (2)

Publication Number Publication Date
CN110276684A true CN110276684A (en) 2019-09-24
CN110276684B CN110276684B (en) 2021-04-23

Family

ID=67959950

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910420689.6A Active CN110276684B (en) 2019-05-20 2019-05-20 Receipt storage method and node combining transaction type and event function type

Country Status (2)

Country Link
CN (1) CN110276684B (en)
WO (1) WO2020233624A1 (en)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111221569A (en) * 2020-01-07 2020-06-02 中国联合网络通信集团有限公司 Document updating method and server
CN111427663A (en) * 2020-03-24 2020-07-17 杭州溪塔科技有限公司 Virtual machine system based on intelligent contract and operation method thereof
WO2020233424A1 (en) * 2019-05-20 2020-11-26 创新先进技术有限公司 Event function type-based receipt storage method and node
WO2020233624A1 (en) * 2019-05-20 2020-11-26 创新先进技术有限公司 Receipt storage method and node employing transaction type in combination with event function type
WO2020233634A1 (en) * 2019-05-20 2020-11-26 创新先进技术有限公司 Method and node for receipt storage combining transaction and event type condition restrictions

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116957579A (en) * 2021-04-27 2023-10-27 支付宝(杭州)信息技术有限公司 Data storage method and device based on blockchain
CN118245544A (en) * 2022-12-22 2024-06-25 腾讯科技(深圳)有限公司 Data processing method and device, electronic equipment and storage medium

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102859545A (en) * 2009-10-13 2013-01-02 艾萨薇公司 Apparatuses, methods, and computer program products enabling association of related product data and execution of transaction
CN106780033A (en) * 2016-12-16 2017-05-31 杭州云象网络技术有限公司 A kind of digital ticket transaction system construction method based on alliance's chain
CN106911712A (en) * 2017-03-31 2017-06-30 杭州翼兔网络科技有限公司 A kind of encryption method and system for being applied to distributed system
CN107294709A (en) * 2017-06-27 2017-10-24 阿里巴巴集团控股有限公司 A kind of block chain data processing method, apparatus and system
CN108737403A (en) * 2018-05-10 2018-11-02 阿里巴巴集团控股有限公司 A kind of block chain data processing method, device, processing equipment and system
CN109493020A (en) * 2018-11-08 2019-03-19 众安信息技术服务有限公司 Method for secure transactions and device based on block chain
CN109508982A (en) * 2018-11-21 2019-03-22 北京蓝石环球区块链科技有限公司 REPB common recognition based on the more subchains of block chain main chain adduction row
WO2019072264A2 (en) * 2018-11-07 2019-04-18 Alibaba Group Holding Limited Blockchain data protection using homomorphic encryption
CN109726588A (en) * 2018-12-21 2019-05-07 上海邑游网络科技有限公司 Method for secret protection and system based on Information hiding

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
AU2016211551B2 (en) * 2015-01-27 2020-03-12 Visa International Service Association Methods for secure credential provisioning
NZ746878A (en) * 2016-04-01 2022-11-25 Jpmorgan Chase Bank Na Systems and methods for providing data privacy in a private distributed ledger
KR101781583B1 (en) * 2016-08-31 2017-09-27 서강대학교산학협력단 File management and search system based on block chain and file management and search method
CN106534092B (en) * 2016-11-02 2019-07-02 西安电子科技大学 The privacy data encryption method of key is depended on based on message
US10608910B2 (en) * 2017-06-26 2020-03-31 Myomega Systems Gmbh Using blockchain to track information for devices on a network
CN107342858B (en) * 2017-07-05 2019-09-10 武汉凤链科技有限公司 A kind of intelligent contract guard method and system based on trusted context
US10511575B2 (en) * 2017-09-18 2019-12-17 Huawei Technologies Co., Ltd. Securing delegated credentials in third-party networks
CN108647964B (en) * 2018-05-02 2023-07-28 郑杰骞 Block chain data processing method and device and computer readable storage medium
CN110276684B (en) * 2019-05-20 2021-04-23 创新先进技术有限公司 Receipt storage method and node combining transaction type and event function type
CN110263090B (en) * 2019-05-20 2021-04-27 创新先进技术有限公司 Receipt storage method and node with multiple types of dimensions
CN110247895B (en) * 2019-05-20 2021-04-06 创新先进技术有限公司 Receipt storage method, node, device and storage medium
CN110245504B (en) * 2019-05-20 2021-04-27 创新先进技术有限公司 Receipt storage method and node combined with condition limitation of multi-type dimensionality

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102859545A (en) * 2009-10-13 2013-01-02 艾萨薇公司 Apparatuses, methods, and computer program products enabling association of related product data and execution of transaction
CN106780033A (en) * 2016-12-16 2017-05-31 杭州云象网络技术有限公司 A kind of digital ticket transaction system construction method based on alliance's chain
CN106911712A (en) * 2017-03-31 2017-06-30 杭州翼兔网络科技有限公司 A kind of encryption method and system for being applied to distributed system
CN107294709A (en) * 2017-06-27 2017-10-24 阿里巴巴集团控股有限公司 A kind of block chain data processing method, apparatus and system
CN108737403A (en) * 2018-05-10 2018-11-02 阿里巴巴集团控股有限公司 A kind of block chain data processing method, device, processing equipment and system
WO2019072264A2 (en) * 2018-11-07 2019-04-18 Alibaba Group Holding Limited Blockchain data protection using homomorphic encryption
CN109493020A (en) * 2018-11-08 2019-03-19 众安信息技术服务有限公司 Method for secure transactions and device based on block chain
CN109508982A (en) * 2018-11-21 2019-03-22 北京蓝石环球区块链科技有限公司 REPB common recognition based on the more subchains of block chain main chain adduction row
CN109726588A (en) * 2018-12-21 2019-05-07 上海邑游网络科技有限公司 Method for secret protection and system based on Information hiding

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2020233424A1 (en) * 2019-05-20 2020-11-26 创新先进技术有限公司 Event function type-based receipt storage method and node
WO2020233624A1 (en) * 2019-05-20 2020-11-26 创新先进技术有限公司 Receipt storage method and node employing transaction type in combination with event function type
WO2020233634A1 (en) * 2019-05-20 2020-11-26 创新先进技术有限公司 Method and node for receipt storage combining transaction and event type condition restrictions
CN111221569A (en) * 2020-01-07 2020-06-02 中国联合网络通信集团有限公司 Document updating method and server
CN111427663A (en) * 2020-03-24 2020-07-17 杭州溪塔科技有限公司 Virtual machine system based on intelligent contract and operation method thereof

Also Published As

Publication number Publication date
CN110276684B (en) 2021-04-23
WO2020233624A1 (en) 2020-11-26

Similar Documents

Publication Publication Date Title
CN110264195A (en) It is marked and transaction, the receipt storage method of user type and node in conjunction with code
CN110223172A (en) The receipt storage method and node of conditional combination code mark and type dimension
CN110245490A (en) The receipt storage method and node of conditional combination code mark and type dimension
CN109831298A (en) The method of security update key and node, storage medium in block chain
CN110263544A (en) In conjunction with the receipt storage method and node of type of transaction and Rule of judgment
CN110266644A (en) In conjunction with the receipt storage method and node of code mark and type of transaction
CN110278193A (en) It is marked and transaction, the receipt storage method of event type and node in conjunction with code
CN110263086A (en) In conjunction with the receipt storage method and node of user type and event functions type
CN110263087A (en) Receipt storage method and node based on various dimensions information and with condition limitation
CN110032883A (en) Method, system and the node of secret protection are realized in block chain
CN110264198A (en) In conjunction with the conditional receipt storage method and node of code mark and type of transaction
CN110245946A (en) In conjunction with the receipt storage method and node of code mark and polymorphic type dimension
CN110276684A (en) In conjunction with the receipt storage method and node of type of transaction and event functions type
CN110245947A (en) The receipt storage method and node limited in conjunction with the condition of transaction and user type
CN110263091A (en) In conjunction with code mark and user, the receipt storage method of event type and node
CN110033368A (en) The method of secret protection is realized in block chain
CN110245504A (en) The receipt storage method and node limited in conjunction with the condition of polymorphic type dimension
CN110245945A (en) In conjunction with the receipt storage method and node of code mark and user type
CN110264196A (en) In conjunction with the conditional receipt storage method and node of code mark and user type
CN110033267A (en) Method, node, system and the storage medium of secret protection are realized in block chain
CN110245942A (en) In conjunction with the receipt storage method and node of user type and Rule of judgment
CN110264197A (en) The receipt storage method and node of binding events type function and Rule of judgment
CN110020855A (en) Method, the node, storage medium of secret protection are realized in block chain
CN110245944A (en) Receipt storage method and node based on user type
CN110032884A (en) The method and node, storage medium of secret protection are realized in block chain

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
TA01 Transfer of patent application right
TA01 Transfer of patent application right

Effective date of registration: 20200930

Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Applicant after: Innovative advanced technology Co.,Ltd.

Address before: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Applicant before: Advanced innovation technology Co.,Ltd.

Effective date of registration: 20200930

Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Applicant after: Advanced innovation technology Co.,Ltd.

Address before: A four-storey 847 mailbox in Grand Cayman Capital Building, British Cayman Islands

Applicant before: Alibaba Group Holding Ltd.

GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20240913

Address after: Guohao Times City # 20-01, 128 Meizhi Road, Singapore

Patentee after: Ant Chain Technology Co.,Ltd.

Country or region after: Singapore

Address before: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Patentee before: Innovative advanced technology Co.,Ltd.

Country or region before: Cayman Islands