CN111314151A - Node management method and device, electronic equipment and computer readable storage medium - Google Patents
Node management method and device, electronic equipment and computer readable storage medium Download PDFInfo
- Publication number
- CN111314151A CN111314151A CN202010127572.1A CN202010127572A CN111314151A CN 111314151 A CN111314151 A CN 111314151A CN 202010127572 A CN202010127572 A CN 202010127572A CN 111314151 A CN111314151 A CN 111314151A
- Authority
- CN
- China
- Prior art keywords
- node
- nodes
- performance evaluation
- performance
- evaluation parameters
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/04—Network management architectures or arrangements
- H04L41/042—Network management architectures or arrangements comprising distributed management centres cooperatively managing the network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0803—Configuration setting
- H04L41/0823—Configuration setting characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability
- H04L41/0836—Configuration setting characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability to enhance reliability, e.g. reduce downtime
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0866—Checking the configuration
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/28—Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
Abstract
The embodiment of the application discloses a node management method, a node management device, electronic equipment and a computer readable storage medium, wherein the method comprises the following steps: when a performance evaluation condition is triggered, a first node acquires performance evaluation parameters of the plurality of nodes, wherein the performance evaluation parameters are acquired by a Trusted Execution Environment (TEE) on each node, the performance evaluation parameters comprise hardware performance parameters and network performance parameters, and the first node is one of the plurality of nodes; the first node determines a second node which does not meet a preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes; and the first node and the nodes carry out consensus verification on the second node, and the second node is removed from the consensus committee after the consensus verification is passed. By adopting the method and the device, the reliability and the accuracy of node management can be effectively improved, so that the performance of the nodes in the consensus committee is guaranteed.
Description
Technical Field
The present application relates to the field of computer technologies, and in particular, to a node management method and apparatus, an electronic device, and a computer-readable storage medium.
Background
With the continuous development of the block chain technology, the application of the block chain is increasingly widespread. The blockchain network is formed by a plurality of nodes, and meanwhile, the performance of the nodes in the blockchain network directly responds to the efficiency and the effect of data processing of the blockchain network. Therefore, it is very critical to manage the nodes in the blockchain network. However, at present, the management mode of the nodes in the blockchain network is complex, a large amount of repeated work exists in the management process, and network resources are greatly wasted; or manage hysteresis over time and do not reflect current performance well. Therefore, the way of managing the nodes still needs to be improved.
Disclosure of Invention
The embodiment of the application provides a node management method and device, electronic equipment and a computer-readable storage medium, which can evaluate the performance of nodes in a consensus committee, eliminate nodes with poor performance in time, and effectively improve the reliability and accuracy of node management, thereby ensuring the performance of the nodes in the consensus committee.
In a first aspect, an embodiment of the present application provides a node management method, which is applied to a blockchain network, where the blockchain network includes a plurality of nodes, and the plurality of nodes form a consensus committee, and the method includes:
when a performance evaluation condition is triggered, a first node acquires performance evaluation parameters of the plurality of nodes, wherein the performance evaluation parameters are acquired by a Trusted Execution Environment (TEE) on each node, the performance evaluation parameters comprise hardware performance parameters and network performance parameters, and the first node is one of the plurality of nodes;
the first node determines a second node which does not meet a preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes;
and the first node and the nodes carry out consensus verification on the second node, and the second node is removed from the consensus committee after the consensus verification is passed.
In a second aspect, an embodiment of the present application provides a node management apparatus, which is applied to a node, where the node is any one of a plurality of nodes included in a blockchain network, and the plurality of nodes are consensus nodes forming a consensus committee, and the node management apparatus includes:
an obtaining unit, configured to obtain performance evaluation parameters of the multiple nodes when a performance evaluation condition is triggered, where the performance evaluation parameters are collected by a trusted execution environment TEE on each node, the performance evaluation parameters include a hardware performance parameter and a network performance parameter, and the first node is one of the multiple nodes;
the determining unit is used for determining a second node which does not meet a preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes;
and the processing unit is used for carrying out consensus verification on the second node by the plurality of nodes and removing the second node from the consensus committee after the consensus verification is passed.
In a third aspect, an embodiment of the present application provides an electronic device, including a processor, a memory, a communication interface, and one or more programs, where the one or more programs are stored in the memory and configured to be executed by the processor, and the program includes instructions for executing the steps in the first aspect of the embodiment of the present application.
In a fourth aspect, an embodiment of the present application provides a chip, where the chip includes a processor and a data interface, where the processor reads instructions stored on a memory through the data interface, and performs a method according to the first aspect to the third aspect and any optional implementation manner described above.
In a fifth aspect, the present application provides a computer-readable storage medium, where the computer-readable storage medium stores a computer program for electronic data exchange, where the computer program makes a computer perform some or all of the steps described in the first aspect of the present application.
In a sixth aspect, embodiments of the present application provide a computer program product, where the computer program product includes a non-transitory computer-readable storage medium storing a computer program, where the computer program is operable to cause a computer to perform some or all of the steps as described in the first aspect of embodiments of the present application. The computer program product may be a software installation package.
According to the embodiment of the application, the performance evaluation parameters of other nodes are obtained through the nodes (such as the first node) in the consensus committee, and the performance evaluation parameters are acquired by the trusted execution environment TEE on each node, so that the data are more accurate; after the performance evaluation parameters are obtained, the first node determines a second node which does not meet the preset performance conditions, and after the multiple nodes pass the consensus verification, the second node is removed from the consensus committee.
Drawings
In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.
Fig. 1A is a schematic structural diagram of a node management system according to an embodiment of the present application;
fig. 1B is a schematic structural diagram of a block chain according to an embodiment of the present invention;
FIG. 1C is a diagram illustrating a process of generating a new block according to an embodiment of the present invention;
fig. 2 is a flowchart illustrating a method for node management according to an embodiment of the present application;
fig. 3 is a schematic flowchart of another node management method according to an embodiment of the present application;
fig. 4 is a functional unit schematic diagram of a node management apparatus according to an embodiment of the present application;
fig. 5 is a schematic structural diagram of an electronic device according to an embodiment of the present application.
Detailed Description
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
The terms "first," "second," and the like in the description and claims of the present application and in the above-described drawings are used for distinguishing between different objects and not for describing a particular order. Furthermore, the terms "include" and "have," as well as any variations thereof, are intended to cover non-exclusive inclusions. For example, a process, method, system, article, or apparatus that comprises a list of steps or elements is not limited to only those steps or elements listed, but may alternatively include other steps or elements not listed, or inherent to such process, method, article, or apparatus.
Reference herein to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the application. The appearances of the phrase in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. It is explicitly and implicitly understood by one skilled in the art that the embodiments described herein can be combined with other embodiments.
Aiming at the problems that the management mode of the nodes in the consensus committee is complex at present, a large amount of repeated work exists in the management process, and the reliability is poor; or manage hysteresis over time and do not reflect current performance well. Therefore, the embodiment of the invention provides a node management method based on a block chain network, which can obtain performance evaluation parameters of other nodes through any one of a plurality of nodes (consensus nodes) included in a consensus committee (the consensus nodes form the consensus committee), determine other nodes which do not meet preset performance conditions, and effectively improve the scientificity and accuracy of node management by acquiring the performance evaluation parameters through TEE, thereby ensuring the performance of the nodes in the consensus committee.
Referring to fig. 1A, it is a schematic structural diagram of a node management system according to an embodiment of the present invention, where the node management system includes a block chain network 10 and a terminal device 20, where:
the blockchain network 10 refers to a network for performing data sharing between nodes, and a plurality of nodes, such as 101, 102, 103, 104, etc., may be included in the blockchain network. Each of the plurality of nodes may receive input information during normal operation and maintain shared data (i.e., blockchains) within the blockchain network based on the received input information. In order To ensure information intercommunication in the blockchain network, each node may have information connection, and any two nodes may implement Peer-To-Peer (P2P) communication, and specifically may perform P2P communication through a wired communication link or a wireless communication link. For example, when any node in the blockchain network receives input information, other nodes acquire the input information according to a consensus algorithm, and store the input information as data in shared data, so that the data stored on all nodes in the blockchain network are consistent.
It should be noted that the number of nodes shown in fig. 1A is only illustrative, and any number of nodes may be deployed according to actual needs, and the terminal device 20 may communicate with the same node in the blockchain network or communicate with different nodes in the blockchain network respectively.
Each node in the blockchain network has a corresponding node identifier, and each node in the blockchain network can store node identifiers of other nodes in the blockchain network, so that the generated block can be broadcast to other nodes in the blockchain network according to the node identifiers of other nodes. Each node may maintain a node identifier list as shown in the following table, and store the node name and the node identifier in the node identifier list correspondingly. The node identifier may be an Internet Protocol (IP) address or any other information that can be used to identify the node, and the table is described by taking the IP address as an example.
| Node name | Node identification |
| Node 1 | 117.114.151.174 |
| Node 2 | 117.116.189.145 |
| … | … |
| Node N | 119.123.789.258 |
Each node in the blockchain network stores one identical blockchain. The block chain is composed of a plurality of blocks, referring to fig. 1B, the block chain is composed of a plurality of blocks, the starting block includes a block header and a block main body, the block header stores an input information characteristic value, a version number, a timestamp and a difficulty value, and the block main body stores input information; the next block of the starting block takes the starting block as a parent block, the next block also comprises a block head and a block main body, the block head stores the input information characteristic value of the current block, the block head characteristic value of the parent block, the version number, the timestamp and the difficulty value, and the like, so that the block data stored in each block in the block chain is associated with the block data stored in the parent block, and the safety of the input information in the block is ensured.
When each block in the block chain is generated, referring to fig. 1C, when the node where the block chain is located receives input information, the input information is verified, after the verification is completed, the input information is stored in the memory pool, and the hash tree for recording the input information is updated; and then, updating the updating time stamp to the time when the input information is received, trying different random numbers, and calculating the characteristic value for multiple times, so that the calculated characteristic value can meet the following formula:
SHA256(SHA256(version+prev_hash+merkle_root+ntime+nbits+x))<TARGET
wherein, SHA256 is a characteristic value algorithm used for calculating a characteristic value; version is version information of the relevant block protocol in the block chain; prev _ hash is a block head characteristic value of a parent block of the current block; merkle _ root is a characteristic value of the input information; ntime is the update time of the update timestamp; nbits is the current difficulty, is a fixed value within a period of time, and is determined again after exceeding a fixed time period; x is a random number; TARGET is a feature threshold, which can be determined from nbits.
Therefore, when the random number meeting the formula is obtained through calculation, the information can be correspondingly stored, and the block head and the block main body are generated to obtain the current block. And then, the node where the block chain is located respectively sends the newly generated blocks to other nodes in the block chain network where the newly generated blocks are located according to the node identifications of the other nodes in the block chain network, the newly generated blocks are verified by the other nodes, and the newly generated blocks are added to the block chain stored in the newly generated blocks after the verification is completed.
The intelligent contract can be operated on the nodes of the block chain network, the intelligent contract is realized by codes executed when a certain condition is met, developers can define contract logic through a programming language, issue the contract logic to the block chain (intelligent contract registration), and call keys or other events to trigger execution according to the logic of contract terms to complete the contract logic and simultaneously provide the functions of upgrading and cancelling the intelligent contract.
In some possible embodiments, when the performance evaluation condition is triggered, a first node, for example, the node 101, acquires the performance evaluation parameters of the plurality of nodes by using a trusted execution environment TEE collection on each node (the node 102, the node 103, and the node 104 … …), so that data collected by the TEE is more authentic and trusted; the first node 101 determines a second node (for example, 102 or another node) which does not satisfy a preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes; and finally, the first node 101 eliminates the second node from the consensus committee after the consensus verification is passed by the nodes, namely after the second node which does not meet the preset performance condition is determined, the consensus verification is firstly performed by the nodes, and the final node management measure is executed after the consensus verification is passed, so that the management process is more scientific and reasonable, the scientificity and the accuracy of node management can be effectively improved, and the performance of the nodes in the consensus committee is ensured.
The technical solution of the embodiment of the present application may be implemented based on the node management system of the architecture illustrated in fig. 1A as an example or a variant architecture thereof.
Referring to fig. 2, fig. 2 is a flowchart illustrating a method for node management according to an embodiment of the present application, the method being applied to a blockchain network, the blockchain network including a plurality of nodes, the plurality of nodes forming a consensus committee, and the method including, but not limited to, the following steps:
201. when a performance evaluation condition is triggered, a first node acquires performance evaluation parameters of the plurality of nodes, wherein the performance evaluation parameters are acquired by a Trusted Execution Environment (TEE) on each node, the performance evaluation parameters comprise hardware performance parameters and network performance parameters, and the first node is one of the plurality of nodes;
specifically, the first node may be any one of the nodes 101 and 104 in fig. 1A, and the consensus committee may include other nodes besides the node illustrated in fig. 1A. When the performance evaluation condition is triggered, that is, when the performance of the node in the consensus commission (i.e., the consensus node) is to be evaluated, the triggering condition may be various, and is not limited herein. The first node obtains performance evaluation parameters of the plurality of nodes, and the plurality of nodes may be all nodes in the consensus committee, including the first node, or may not include the first node. And the performance evaluation parameters of the plurality of nodes are collected by a Trusted Execution Environment (TEE) on each node. Further, the performance evaluation parameters include hardware performance parameters and network performance parameters, and the hardware performance parameters include CPU utilization, memory utilization, disk utilization, GPU utilization, CPU temperature, and hard disk temperature of the central processing unit. Network performance parameters, such as the packet loss rate of the network, whether to respond, response aging and the like.
The triggering of the performance evaluation condition includes when the performance evaluation time reaches, or when the block height of the block chain increases by a preset value, or when the data to be uplink is received.
202. The first node determines a second node which does not meet a preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes;
specifically, it can be understood that the preset performance condition is predefined, for example, the hardware performance parameter must meet a specific condition to meet the performance condition requirement; or the network performance parameter meets the performance condition requirement only when meeting a specific condition; or the hardware performance parameters and the network performance parameters are required to meet specific conditions so as to meet the performance condition requirements. Otherwise, the preset performance condition is not met. The second node may be one node or a plurality of nodes that do not satisfy the preset performance condition. And are also nodes in the consensus board.
203. And the first node and the nodes carry out consensus verification on the second node, and the second node is removed from the consensus committee after the consensus verification is passed.
Specifically, after the first node determines the second node, the first node broadcasts or sends the second node to other nodes, the other nodes perform consensus verification on the second node, and after the consensus verification passes, the second node is removed from the consensus committee. And the consensus verification is passed, namely all or most of the nodes in the plurality of nodes agree that the performance evaluation parameter of the second node does not meet the preset performance condition. And on the contrary, if the performance evaluation parameter of the second node meets the preset performance condition, the second node is reserved. The way of the culling can be understood as deleting the identity of the second node from the list of common node identities, and informing other nodes to delete the identity of the second node from the list of common node identities. The consensus node identification list is pre-stored in the plurality of nodes or in a blockchain, and records the unique identification of each node in the consensus committee. The unique identifier may be an IP address or TEE identification information for each of the plurality of nodes.
It can be seen that, in the embodiment of the present application, the performance evaluation parameters of other multiple nodes are obtained through a first node, which is one of the multiple nodes included in the consensus committee, and the performance evaluation parameters are acquired by the trusted execution environment TEE on each node, so that the data is more accurate; after the performance evaluation parameters are obtained, the first node determines a second node which does not meet the preset performance condition, and after the consensus verification of the plurality of nodes is passed, the second node is removed from the consensus committee. Since the second node is determined based on the performance evaluation parameter, the reliability of the result is increased. And the consensus is executed after passing, so that the management is more scientific and reasonable. Furthermore, the node management is initiated and performed by the first node, so that the management has high timeliness.
In one possible example, the obtaining, by the first node, the performance evaluation parameters of the plurality of nodes includes: the first node inquires performance evaluation parameters of the nodes from a block chain, and the performance evaluation parameters are written into the block chain after the performance evaluation parameters are acquired by respective TEEs by the nodes.
Specifically, when the performance evaluation condition is triggered, the performance evaluation parameters are written into the block chain after the respective TEE acquires the performance evaluation parameters, and when the first node wants to acquire the performance evaluation parameters of the plurality of nodes, the first node may directly query the performance evaluation parameters of the plurality of nodes from the block chain.
Therefore, when the performance evaluation condition is triggered, the data are written into the block chain for storage after being collected by the trusted execution environment TEE on each node, so that the data can be safely stored; and when the first node wants to acquire the performance evaluation parameters of the plurality of nodes, the first node directly queries the performance evaluation parameters of the plurality of nodes from the block chain, so that the data acquisition is more convenient, quicker and more time-efficient.
In one possible example, the obtaining, by the first node, the performance evaluation parameters of the plurality of nodes includes: the first node performs network connection test on the TEEs of other nodes in the plurality of nodes through the TEE to obtain network performance parameters of the other nodes; the first node broadcasts a hardware performance parameter acquisition instruction to the other nodes, wherein the hardware performance parameter acquisition instruction is used for instructing the other nodes to acquire hardware performance parameters of the other nodes by utilizing respective TEEs; and the first node receives the hardware performance parameters sent by the other nodes.
Specifically, the method is different from the method in which the first node acquires the performance evaluation parameters of the plurality of nodes. When the performance evaluation condition is triggered, the first node performs network connection test on the TEEs of other nodes through the TEEs of the first node, and therefore network performance parameters of the other nodes are obtained. Similarly, the network performance parameter of the first node may also be derived by other nodes in the consensus committee based on the method. Then the first node receives the network performance parameters of the first node sent by other nodes; alternatively, other nodes in the consensus committee may uplink first and the first node can query on the blockchain when obtaining the network performance parameters of the first node. The network connection testing method can be testing by using a Ping command, testing by using an Ipconfig/Winpcfg command, testing by using a network statistical protocol command Netstat/Nbtstat, and the like. And synthesizing and finally obtaining the network performance parameters of other nodes according to the response of other nodes, the packet loss rate, the response aging or other collected data. On the other hand, the first node broadcasts the hardware performance parameter acquisition instruction to the other nodes, so that the other nodes acquire the hardware performance parameters of the first node by using respective TEEs after receiving the hardware performance parameter acquisition instruction, and the other nodes send the respective acquired hardware performance parameters to the first node through the instruction or the first node.
Therefore, when the performance evaluation condition is triggered, the first node performs network connection test on the TEEs of other nodes through the TEEs of the first node, and accordingly network performance parameters of the other nodes are obtained. And the hardware performance parameter acquisition instruction is broadcasted to other nodes, so that the hardware performance parameters acquired by the other nodes by utilizing respective TEEs are acquired. The method has the advantages that the performance evaluation parameters of a plurality of nodes are obtained safely, and meanwhile, the timeliness is high. The performance evaluation parameters of a plurality of nodes are enabled to be real and effective.
In one possible example, the determining, by the first node, a second node that does not satisfy a preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes includes:
the first node transmits the performance evaluation parameters of the plurality of nodes into an intelligent contract to obtain a second node of which the performance evaluation parameters determined by the intelligent contract from the plurality of nodes do not meet a preset performance condition, wherein the intelligent contract comprises the preset performance condition.
Specifically, the first node determines, from the plurality of nodes, a second node that does not satisfy a preset performance condition according to the performance evaluation parameters of the plurality of nodes, and transmits the performance evaluation parameters of the plurality of nodes to the intelligent contract, so that the intelligent contract determines, from the plurality of nodes, the second node that does not satisfy the preset performance condition according to the performance evaluation parameters of the plurality of nodes, the performance evaluation parameters. Obviously, the intelligent contract presets the preset performance condition, so that after the performance evaluation parameters of the plurality of nodes are input into the intelligent contract, the intelligent contract can determine the second node based on the preset contract.
Therefore, the second node of which the performance evaluation parameter does not meet the preset performance condition is determined by using the intelligent contract, the operation is convenient and quick, and the reliability of the generated result is high.
In one possible example, the first node consensus-verifying with the plurality of nodes the second node comprises: the first node sends a consensus verification request to other nodes in the plurality of nodes, the consensus verification request includes an identifier of the second node, and the consensus verification request is used for instructing each of the other nodes to obtain a performance evaluation parameter of the second node according to the identifier of the second node, and determining whether the performance evaluation parameter of the second node meets the preset performance condition, so as to perform consensus verification on the second node.
Specifically, after the first node determines the second node, a consensus verification request is sent to other nodes, where the consensus verification request includes the identifier of the second node, so that the other nodes can obtain the performance evaluation parameter of the second node according to the identifier of the second node, and determine whether the performance evaluation parameter of the second node meets the preset performance condition. The determined condition can refer to the mode of the first node for determining the second node, namely, the performance evaluation parameters of the second node are input into the intelligent contract, and the result is output by the intelligent contract. And after each node or most of other nodes acquire the output result, the consensus verification of the second node is completed.
Therefore, after the first node determines the second node, the second node is subjected to consensus verification by other nodes, misjudgment caused by the first node can be effectively reduced, the accuracy of node management is improved, and the scientificity of node management is improved.
In one possible example, the performance evaluation parameter further includes TEE signature information, after the first node obtains the performance evaluation parameters of the plurality of nodes, before the first node determines, according to the performance evaluation parameters of the plurality of nodes, a second node that does not satisfy a preset performance condition from the plurality of nodes, the method further includes: aiming at the performance evaluation parameter of any node, the first node acquires a public key of a TEE on the any node; the first node verifies TEE signature information included in the performance evaluation parameters of any node by using the public key; and if the TEE signature information included in the performance evaluation parameters of each node passes the verification, executing the step of determining a second node which does not meet the preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes.
Specifically, it may be understood that, after the first node obtains the performance evaluation parameters of the plurality of nodes, the first node verifies the authenticity of the performance evaluation parameters of the plurality of nodes. And the performance evaluation parameter of each node in the plurality of nodes comprises the TEE signature information of each node, and the first node verifies the performance evaluation parameter of each node by using the TEE signature information of each node. The specific way is to acquire the public key of the TEE on each node and verify TEE signature information by using the public key of the TEE. Because the TEE public key of each node is uniquely matched with the TEE private key, the TEE signature information can be understood as a signature carried out by using the TEE private key, if the TEE signature information is true, namely the performance evaluation parameter corresponding to the TEE signature information is true, the TEE public key is used for verification, and if the TEE signature information is not true, the TEE public key can pass through the performance evaluation parameter, and the TEE public key cannot pass through the performance evaluation parameter.
As can be seen, after the first node acquires the performance evaluation parameters of the plurality of nodes, the first node verifies the corresponding performance evaluation parameters by using the TEE signature information of each node. And after the verification is passed, the first node determines a second node which does not meet the preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes. The accuracy of the obtained performance evaluation parameters of the plurality of nodes is improved, so that the accuracy of the result determined by the second node is improved, and the reliability of the result is improved.
In one possible example, when the performance evaluation condition is triggered, the method includes: when the performance evaluation time is up, or when the block height of the block chain is increased by a preset value, or when the data to be uplink is received.
Specifically, it can be understood that to evaluate the performance of the node in the consensus committee, an evaluation period may be set in advance, that is, when the performance evaluation time is reached, a certain node is selected to perform the node performance evaluation. One node may be in a predetermined order or may be generated based on votes. Alternatively, since the height of the block chain increases with time, it may be specified that the performance evaluation condition is triggered when the height of the block increases by a predetermined amount. Alternatively, when a node or nodes in the council receives data to be uplink, i.e. when a task of performing data uplink is to be performed, the performance evaluation condition is also triggered.
Therefore, according to the time periodicity, or the periodicity of the increase of the block height, or when the first node needs to execute the task of the data uplink, the performance evaluation condition is triggered, the performance evaluation of the nodes in the consensus committee is expanded, and the nodes of which the performance evaluation parameters do not meet the preset performance condition are removed from the consensus committee, so that the performance of the nodes in the consensus committee is guaranteed to effectively complete the task of the block.
Referring to fig. 3, fig. 3 is a schematic flowchart of another node management method according to an embodiment of the present application, applied to a blockchain network, where the blockchain network includes a plurality of nodes that form a consensus committee, including:
301. when a performance evaluation condition is triggered, a first node acquires performance evaluation parameters of the plurality of nodes, wherein the performance evaluation parameters are acquired by a Trusted Execution Environment (TEE) on each node, the performance evaluation parameters comprise hardware performance parameters and network performance parameters, and the first node is one of the plurality of nodes;
step 301 refers to step 201, which is not described herein again.
302. The first node verifies performance evaluation parameters of the plurality of nodes;
specifically, it may be understood that, after the first node obtains the performance evaluation parameters of the plurality of nodes, the first node verifies the authenticity of the performance evaluation parameters of the plurality of nodes. If the performance evaluation parameter of each of the plurality of nodes includes the TEE signature information of each node, the first node verifies the performance evaluation parameter of each node by using the TEE signature information of each node. The specific way is to acquire the public key of the TEE on each node and verify TEE signature information by using the public key of the TEE. Because the TEE public key of each node is uniquely matched with the TEE private key, the TEE signature information can be understood as a signature carried out by using the TEE private key, if the TEE signature information is true, namely the performance evaluation parameter corresponding to the TEE signature information is true, the TEE public key is used for verification, and if the TEE signature information is not true, the TEE public key can pass through the performance evaluation parameter, and the TEE public key cannot pass through the performance evaluation parameter.
303. After the first node verifies the performance evaluation parameters of the plurality of nodes, the first node determines a second node which does not meet a preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes;
304. and the first node and the nodes carry out consensus verification on the second node, and the second node is removed from the consensus committee after the consensus verification is passed.
As can be seen, when the performance evaluation condition is triggered, the first node acquires the performance evaluation parameters of the plurality of nodes by using the trusted execution environment TEE on each node, so that the acquired data is more real and trusted; verifying the obtained performance evaluation parameters of the plurality of nodes, determining a second node which does not meet the preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes under the condition that the verification is true, and determining a more scientific and accurate result on the basis of verified data; and finally, after the plurality of nodes pass the consensus verification on the second node, removing the second node from the consensus committee, after a result is obtained, performing the consensus verification on the plurality of nodes, and executing a final node management measure after the consensus verification passes, so that the management process is more scientific and reasonable, and misjudgment and misdeletion operation in the management process are reduced. Finally, the scientificity, the rationality and the high efficiency of the whole process of node management are realized.
Embodiments of the present invention further provide a computer storage medium, in which program instructions are stored, and when the program instructions are executed, the computer storage medium is configured to implement the corresponding method described in the above embodiments.
Referring to fig. 4, it is a functional unit diagram of a node management apparatus 400 according to an embodiment of the present invention, and the node management apparatus according to an embodiment of the present invention may be disposed in a node of a blockchain network.
In one implementation of the apparatus of the embodiment of the present invention, the apparatus 400 includes the following structure.
An obtaining unit 401, configured to obtain performance evaluation parameters of the multiple nodes when a performance evaluation condition is triggered, where the performance evaluation parameters are collected by a trusted execution environment TEE on each node, the performance evaluation parameters include a hardware performance parameter and a network performance parameter, and the first node is one of the multiple nodes;
a determining unit 402, configured to determine, according to the performance evaluation parameters of the plurality of nodes, a second node that does not satisfy a preset performance condition from the plurality of nodes;
a processing unit 403, configured to perform consensus verification on the second node with the plurality of nodes, and remove the second node from the consensus committee after the consensus verification passes.
In a possible example, in terms of the first node acquiring the performance evaluation parameters of the plurality of nodes, the acquiring unit 401 is specifically configured to query the performance evaluation parameters of the plurality of nodes from a block chain, where the performance evaluation parameters are written in the block chain by each node after the respective TEE collects the performance evaluation parameters.
In a possible example, in the aspect that the first node acquires the performance evaluation parameters of the multiple nodes, the acquiring unit 401 is specifically configured to perform a network connection test on a TEE of another node in the multiple nodes through the TEE to obtain the network performance parameters of the other node; the first node broadcasts a hardware performance parameter acquisition instruction to the other nodes, wherein the hardware performance parameter acquisition instruction is used for instructing the other nodes to acquire hardware performance parameters of the other nodes by utilizing respective TEEs; and the first node receives the hardware performance parameters sent by the other nodes.
In a possible example, in terms that the first node determines, according to the performance evaluation parameters of the plurality of nodes, a second node that does not satisfy the preset performance condition from the plurality of nodes, the determining unit 402 is specifically configured to introduce the performance evaluation parameters of the plurality of nodes into an intelligent contract to obtain the second node whose performance evaluation parameters determined by the intelligent contract from the plurality of nodes do not satisfy the preset performance condition, where the intelligent contract includes the preset performance condition.
In a possible example, in terms of performing consensus verification on the second node by the first node and the plurality of nodes, the processing unit 403 is specifically configured to send a consensus verification request to other nodes in the plurality of nodes, where the consensus verification request includes an identifier of the second node, and the consensus verification request is used to instruct each of the other nodes to obtain the performance evaluation parameter of the second node according to the identifier of the second node, and determine whether the performance evaluation parameter of the second node meets the preset performance condition, so as to perform consensus verification on the second node.
In a possible example, the performance evaluation parameter further includes TEE signature information, the obtaining unit 401 is configured to, after obtaining the performance evaluation parameters of the plurality of nodes, before the determining unit 402 is configured to determine, according to the performance evaluation parameters of the plurality of nodes, a second node that does not satisfy a preset performance condition from the plurality of nodes, the obtaining unit 401 is further configured to obtain, for the performance evaluation parameter of any node, a public key of a TEE on the any node; the processing unit 403 is configured to verify, by using the public key, TEE signature information included in the performance evaluation parameter of any node; and if the TEE signature information included in the performance evaluation parameters of each node passes the verification, executing the step of determining a second node which does not meet the preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes.
In one possible example, when the performance evaluation condition is triggered, the method includes: when the performance evaluation time is up, or when the block height of the block chain is increased by a preset value, or when the data to be uplink is received.
In the embodiment of the present invention, reference may be made to the description of relevant contents in the embodiments corresponding to the foregoing drawings for specific implementations of the above modules.
Referring to fig. 5, it is a schematic structural diagram of an electronic device according to an embodiment of the present invention, where the electronic device includes a power supply module and the like, and includes a processor 501, a storage device 502, and a communication interface 503. The processor 501, the storage device 502 and the communication interface 503 can exchange data, and the processor 501 realizes corresponding bill processing functions.
The storage device 502 may include a volatile memory (volatile memory), such as a random-access memory (RAM); the storage device 502 may also include a non-volatile memory (non-volatile memory), such as a flash memory (flash memory), a solid-state drive (SSD), etc.; the memory means 502 may also comprise a combination of memories of the kind described above.
The processor 501 may be a Central Processing Unit (CPU) 501. In one embodiment, the processor 501 may also be a Graphics Processing Unit (GPU) 501. The processor 501 may also be a combination of a CPU and a GPU. In the electronic device, a plurality of CPUs and GPUs can be included as needed to perform corresponding ticket processing. In one embodiment, the storage device 502 is used to store program instructions. The processor 501 may invoke the program instructions to implement the various methods as described above in embodiments of the invention.
In a first possible implementation, the processor 501 of the electronic device is specifically configured to, when a performance evaluation condition is triggered, obtain performance evaluation parameters of the multiple nodes, where the performance evaluation parameters are collected by trusted execution environments TEE on the respective nodes, the performance evaluation parameters include a hardware performance parameter and a network performance parameter, and the first node is one of the multiple nodes; the processor 501 is further configured to determine, according to the performance evaluation parameters of the plurality of nodes, a second node that does not meet a preset performance condition from the plurality of nodes; the processor 501 is further configured to perform consensus verification on the second node with the plurality of nodes, and remove the second node from the consensus committee after the consensus verification is passed.
In a possible example, in terms of the first node obtaining the performance evaluation parameters of the nodes, the processor 501 is specifically configured to query the performance evaluation parameters of the nodes from a block chain, where the performance evaluation parameters are written in the block chain by each node after the respective TEE collects the performance evaluation parameters.
In a possible example, in the aspect that the first node acquires the performance evaluation parameters of the plurality of nodes, the processor 501 is specifically configured to perform a network connection test on a TEE of another node in the plurality of nodes through the TEE to obtain the network performance parameters of the other node; the first node broadcasts a hardware performance parameter acquisition instruction to the other nodes, wherein the hardware performance parameter acquisition instruction is used for instructing the other nodes to acquire hardware performance parameters of the other nodes by utilizing respective TEEs; and the first node receives the hardware performance parameters sent by the other nodes.
In one possible example, in terms that the first node determines, according to the performance evaluation parameters of the plurality of nodes, a second node that does not satisfy the preset performance condition from the plurality of nodes, the processor 501 is specifically configured to introduce the performance evaluation parameters of the plurality of nodes into an intelligent contract to obtain the second node whose performance evaluation parameters determined by the intelligent contract from the plurality of nodes do not satisfy the preset performance condition, where the intelligent contract includes the preset performance condition.
In a possible example, in the aspect of performing consensus verification on the second node by the first node and the plurality of nodes, the processor 501 is specifically configured to send a consensus verification request to other nodes in the plurality of nodes, where the consensus verification request includes an identifier of the second node, and the consensus verification request is used to instruct each of the other nodes to obtain the performance evaluation parameter of the second node according to the identifier of the second node, and determine whether the performance evaluation parameter of the second node meets the preset performance condition, so as to perform consensus verification on the second node.
In a possible example, the performance evaluation parameter further includes TEE signature information, the processor 501 is configured to, after obtaining the performance evaluation parameters of the plurality of nodes, before determining, according to the performance evaluation parameters of the plurality of nodes, a second node that does not satisfy a preset performance condition from the plurality of nodes, and the processor 501 is further configured to, for the performance evaluation parameter of any node, obtain a public key of a TEE on the any node; verifying TEE signature information included in the performance evaluation parameters of any node by using the public key; and if the TEE signature information included in the performance evaluation parameters of each node passes the verification, executing the step of determining a second node which does not meet the preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes.
In one possible example, when the performance evaluation condition is triggered, the method includes: when the performance evaluation time is up, or when the block height of the block chain is increased by a preset value, or when the data to be uplink is received.
It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by a computer program, which can be stored in a computer-readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. The storage medium may be a magnetic disk, an optical disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), or the like.
While the invention has been described with reference to a number of embodiments, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.
Claims (10)
1. A node management method applied to a blockchain network, the blockchain network comprising a plurality of nodes, the plurality of nodes forming a consensus committee, the method comprising:
when a performance evaluation condition is triggered, a first node acquires performance evaluation parameters of the plurality of nodes, wherein the performance evaluation parameters are acquired by a Trusted Execution Environment (TEE) on each node, the performance evaluation parameters comprise hardware performance parameters and network performance parameters, and the first node is one of the plurality of nodes;
the first node determines a second node which does not meet a preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes;
and the first node and the nodes carry out consensus verification on the second node, and the second node is removed from the consensus committee after the consensus verification is passed.
2. The method of claim 1, wherein the first node obtaining the performance evaluation parameters of the plurality of nodes comprises:
the first node inquires performance evaluation parameters of the nodes from a block chain, and the performance evaluation parameters are written into the block chain after the performance evaluation parameters are acquired by respective TEEs by the nodes.
3. The method of claim 1, wherein the first node obtaining the performance evaluation parameters of the plurality of nodes comprises:
the first node performs network connection test on the TEEs of other nodes in the plurality of nodes through the TEE to obtain network performance parameters of the other nodes;
the first node broadcasts a hardware performance parameter acquisition instruction to the other nodes, wherein the hardware performance parameter acquisition instruction is used for instructing the other nodes to acquire hardware performance parameters of the other nodes by utilizing respective TEEs;
and the first node receives the hardware performance parameters sent by the other nodes.
4. The method according to any one of claims 1 to 3, wherein the determining, by the first node, a second node which does not satisfy a preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes comprises:
the first node transmits the performance evaluation parameters of the plurality of nodes into an intelligent contract to obtain a second node of which the performance evaluation parameters determined by the intelligent contract from the plurality of nodes do not meet a preset performance condition, wherein the intelligent contract comprises the preset performance condition.
5. The method of claim 1, wherein the first node and the plurality of nodes perform consensus verification for the second node, comprising:
the first node sends a consensus verification request to other nodes in the plurality of nodes, the consensus verification request includes an identifier of the second node, and the consensus verification request is used for instructing each of the other nodes to obtain a performance evaluation parameter of the second node according to the identifier of the second node, and determining whether the performance evaluation parameter of the second node meets the preset performance condition, so as to perform consensus verification on the second node.
6. The method of claim 1, wherein the performance evaluation parameters further include TEE signature information, wherein after the first node obtains the performance evaluation parameters of the plurality of nodes, the first node determines a second node from the plurality of nodes that does not satisfy a preset performance condition according to the performance evaluation parameters of the plurality of nodes, and wherein the method further comprises:
aiming at the performance evaluation parameter of any node, the first node acquires a public key of a TEE on the any node;
the first node verifies TEE signature information included in the performance evaluation parameters of any node by using the public key;
and if the TEE signature information included in the performance evaluation parameters of each node passes the verification, executing the step of determining a second node which does not meet the preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes.
7. The method according to claim 1, wherein when the performance evaluation condition is triggered, the method comprises:
when the performance evaluation time is up, or when the block height of the block chain is increased by a preset value, or when the data to be uplink is received.
8. A node management apparatus applied to a node that is any one of a plurality of nodes included in a blockchain network, the plurality of nodes being consensus nodes constituting a consensus committee, the node management apparatus comprising:
an obtaining unit, configured to obtain performance evaluation parameters of the multiple nodes when a performance evaluation condition is triggered, where the performance evaluation parameters are collected by a trusted execution environment TEE on each node, the performance evaluation parameters include a hardware performance parameter and a network performance parameter, and the first node is one of the multiple nodes;
the determining unit is used for determining a second node which does not meet a preset performance condition from the plurality of nodes according to the performance evaluation parameters of the plurality of nodes;
and the processing unit is used for carrying out consensus verification on the second node by the plurality of nodes and removing the second node from the consensus committee after the consensus verification is passed.
9. An electronic device comprising a processor, a memory, a communication interface, and one or more programs, the one or more programs being stored in the memory and configured to be executed by the processor to perform the method of any of claims 1-7.
10. A computer-readable storage medium, characterized in that a computer program for electronic data exchange is stored, wherein the computer program causes a computer to perform the method according to any one of claims 1-7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010127572.1A CN111314151B (en) | 2020-02-27 | 2020-02-27 | Node management method, node management device, electronic equipment and computer readable storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010127572.1A CN111314151B (en) | 2020-02-27 | 2020-02-27 | Node management method, node management device, electronic equipment and computer readable storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111314151A true CN111314151A (en) | 2020-06-19 |
| CN111314151B CN111314151B (en) | 2023-08-08 |
Family
ID=71147852
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010127572.1A Active CN111314151B (en) | 2020-02-27 | 2020-02-27 | Node management method, node management device, electronic equipment and computer readable storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111314151B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112232956A (en) * | 2020-10-16 | 2021-01-15 | 中国银联股份有限公司 | Data processing method and device for intelligent parking based on block chain |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20190068615A1 (en) * | 2017-08-31 | 2019-02-28 | Topia Technology, Inc. | Secure decentralized file sharing systems and methods |
| CN109639413A (en) * | 2018-12-10 | 2019-04-16 | 四川大学 | A kind of block catenary system based on mobile ad hoc network |
| CN109951291A (en) * | 2019-02-18 | 2019-06-28 | 四川迪佳通电子有限公司 | Content sharing method and device, multimedia equipment based on credible performing environment |
| CN110309325A (en) * | 2018-07-24 | 2019-10-08 | 腾讯科技（深圳）有限公司 | Data processing method, device and storage medium based on block chain |
| WO2020011283A2 (en) * | 2019-09-05 | 2020-01-16 | Alibaba Group Holding Limited | System and method for deleting node in blockchain network |
-
2020
- 2020-02-27 CN CN202010127572.1A patent/CN111314151B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20190068615A1 (en) * | 2017-08-31 | 2019-02-28 | Topia Technology, Inc. | Secure decentralized file sharing systems and methods |
| CN110309325A (en) * | 2018-07-24 | 2019-10-08 | 腾讯科技（深圳）有限公司 | Data processing method, device and storage medium based on block chain |
| CN109639413A (en) * | 2018-12-10 | 2019-04-16 | 四川大学 | A kind of block catenary system based on mobile ad hoc network |
| CN109951291A (en) * | 2019-02-18 | 2019-06-28 | 四川迪佳通电子有限公司 | Content sharing method and device, multimedia equipment based on credible performing environment |
| WO2020011283A2 (en) * | 2019-09-05 | 2020-01-16 | Alibaba Group Holding Limited | System and method for deleting node in blockchain network |
| CN110730204A (en) * | 2019-09-05 | 2020-01-24 | 阿里巴巴集团控股有限公司 | Method for deleting nodes in block chain network and block chain system |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112232956A (en) * | 2020-10-16 | 2021-01-15 | 中国银联股份有限公司 | Data processing method and device for intelligent parking based on block chain |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111314151B (en) | 2023-08-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110661658B (en) | Node management method and device of block chain network and computer storage medium | |
| CN111262759B (en) | Internet of things platform testing method, device, equipment and storage medium | |
| US9792374B2 (en) | Method and system for facilitating terminal identifiers | |
| CN110928880B (en) | Data processing method, device, terminal and medium based on block chain | |
| CN110830234B (en) | User traffic distribution method and device | |
| CN108509615B (en) | Consensus establishing method and device based on drawing mechanism and readable storage medium | |
| CN110597918A (en) | Account management method and device and computer readable storage medium | |
| CN110995513A (en) | Data sending and receiving method in Internet of things system, Internet of things equipment and platform | |
| CN111314174A (en) | Network dial testing method and device based on block chain and SDN edge computing network system | |
| CN110930254A (en) | Data processing method, device, terminal and medium based on block chain | |
| CN111885050A (en) | Data storage method and device based on block chain network, related equipment and medium | |
| CN110866265A (en) | Data storage method, device and storage medium based on block chain | |
| CN111488626A (en) | Data processing method, device, equipment and medium based on block chain | |
| CN111461885A (en) | Consensus network management method, device, computer and readable storage medium | |
| CN114614989A (en) | Feasibility verification method and device of network service based on digital twin technology | |
| CN111459676A (en) | Node resource management method, device and storage medium | |
| CN106203179B (en) | A kind of completeness check system and method for pair of file | |
| CN111314151A (en) | Node management method and device, electronic equipment and computer readable storage medium | |
| CN112968793B (en) | Equipment upgrading method, device, equipment and storage medium based on Internet of things | |
| CN113468276A (en) | Trusted data acquisition method and device of on-chain prediction machine and electronic equipment | |
| CN113806816A (en) | Electronic file management method and device based on block chain and electronic equipment | |
| US20180176781A1 (en) | Method and device for managing wireless access point | |
| CN110888892B (en) | Block synchronization method, device and storage medium | |
| CN105812343A (en) | Wearable service authentication method, cloud platform, wearable device and terminal | |
| CN111813418A (en) | Distributed link tracking method, device, computer equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| REG | Reference to a national code |
Ref country code: HK Ref legal event code: DE Ref document number: 40024702 Country of ref document: HK |
|
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |