CN115622762A - Cloud edge data distribution method based on block chain and cross-chain interaction method - Google Patents

Abstract

Aiming at the lack of security of the existing cloud-side terminal data distribution method and cross-chain interaction, the present invention proposes a blockchain-based cloud-side terminal data distribution method and cross-chain interaction method. The method includes: uploading nodes and downloading The node encrypts the data to be distributed to build a data certificate structure; the upload node uploads it to the blockchain network, the consensus node verifies its consensus, and stores the verified data certificate structure into the smart contract; the download node downloads the information of the storage space , and compare the information with the data certificate structure stored in the smart contract. After the comparison is successful, the download consensus is triggered to complete the safe interaction of the data; the blockchain network architecture is constructed, and the cross-chain architecture method and its trusted coordination method are designed. Using this method can ensure the security and credibility of data information in the global cross-chain interaction, improve the rate of data information interaction, and is applicable to various current IoT scenarios, with broad application prospects and obvious benefits.

Description

Blockchain-based cloud-side data distribution method and cross-chain interaction method

technical field

This application relates to the technical field of digital information transmission, and in particular to a blockchain-based cloud-side data distribution method and a cross-chain interaction method.

Background technique

With the continuous development of mobile computing, edge computing, and Internet of Things technology and applications, the cloud-edge-end architecture formed by cloud center-edge computing nodes-sensors is becoming the mainstream industrial Internet of Things computing architecture. Due to the good adaptability and flexibility of the cloud-edge-device architecture, a large number of IoT scenarios use this method for service collaboration. However, in the cloud-edge-device architecture, there are heterogeneous control parties among the cloud, edge, and device, which poses a higher challenge to the security and reliability of information interaction in the cloud-edge-device architecture.

The application of blockchain technology can solve the above-mentioned security problems. When traditional technology uses blockchain technology to solve the security problem of information interaction among the cloud, edge and terminal, it often only performs information processing on one layer of the cloud, edge and terminal architecture. When interacting, blockchain technology is used to solve the problem of security and credibility of information interaction, and cross-chain design is not considered; at the same time, traditional consensus methods need to Verify the data of the block body, such as whether it is double spent, whether the balance is sufficient, etc.

This makes the interaction between the cloud, edge and terminal lack a trusted mechanism. Information can only be trusted and recorded in an independent closed blockchain, which does not support global security service collaboration. The network communication protocol between the three, The credibility of the interaction process such as data transmission and distribution is not high, there is no explicit confirmation mechanism, and there is a lack of global security service collaboration capabilities.

Contents of the invention

Based on the heterogeneity of the cloud, edge, and end controllers in the cloud-edge-end architecture, the uncertainty of information transmission during the interaction process, and the lack of global security service collaboration capabilities, a blockchain-based cloud-edge Terminal data distribution method and cross-chain interaction method.

Starting from the reliable distribution of cloud-side data and cross-chain trusted interaction, the present invention develops a blockchain-based cloud-side data reliable distribution method and cross-chain trusted interaction method, which is applied to the cloud-side blockchain network architecture Among them, the cloud-edge-end blockchain network architecture includes: end-layer structure, edge-layer structure, and cloud-layer structure; the end-layer structure includes controllers, sensor devices, sensor devices are used to collect task data, and controllers are used to execute instructions; Including edge computing nodes, which form a lightweight blockchain; the cloud layer structure includes cloud center computing nodes, and cloud center computing nodes form the main blockchain;

The upload node takes the hash value of the data to be distributed to obtain the plaintext hash value, and encrypts the data to be distributed according to the public key of the download node to obtain the first encrypted value, and encrypts the first encrypted value with the private key of the upload node, obtain a second encrypted value, take a hash of the second encrypted value, and obtain an encrypted hash value;

The upload node stores the first encrypted value and the second encrypted value in the storage space, and feeds back the storage path in the storage space;

The upload node builds a data credential structure based on the upload node information of the upload node, the download node information of the download node, the plaintext hash value, the encrypted hash value, and the storage path;

Upload the data certificate structure to the cloud-side blockchain network architecture, verify the data certificate structure through the consensus nodes in the cloud-side blockchain network architecture and join the cloud-side blockchain network architecture, and upload the node The information and download node information are used as the key value, and the plaintext hash value is stored in the smart contract as the value value; the consensus node is an edge computing node or a cloud center computing node;

The download node downloads the first encryption to be confirmed according to the storage path of the data certificate structure, decrypts the first encrypted value to be confirmed according to the private key of the download node, obtains the hash value of the plaintext to be confirmed, invokes the smart contract, and compares the hash of the plaintext to be confirmed value and plaintext hash value, when they are the same, it is determined that the data to be distributed by the upload node is distributed to the download node.

Among them, the data certificate structure is verified through the consensus nodes in the cloud-edge blockchain network architecture and added to the cloud-edge blockchain network architecture, including:

Receive the data credential structure uploaded by the uploading node through the consensus node in the cloud-edge blockchain network architecture, download the data credential structure according to the storage path, and analyze the data credential structure to obtain the uploading node information, plaintext hash value and encrypted hash value; according to After uploading the node information and encrypted hash value to verify the data certificate structure, mount the block corresponding to the data certificate structure in the block queue of the cloud edge blockchain network architecture; send the data certificate structure to other consensus The node performs secondary verification. If the verification fails, the block is discarded. If the verification is passed, the block corresponding to the data certificate structure is mounted in the block queue of the cloud-side blockchain network architecture. All consensus nodes in the cloud edge blockchain network will continue to monitor the data certificate structure, and the data certificate structure is verified and confirmed to form an upload consensus confirmation. Through the upload consensus confirmation, the consensus node invokes the storage function of the smart contract, analyzes the data credential structure to obtain the upload node information, download node information and plaintext hash value; according to the upload node information, download node information and plaintext hash value, the upload node information , The downloaded node information is used as the key value, and the plaintext hash value is stored as the value value, and the storage location is the smart contract in the cloud edge blockchain network.

In one of the embodiments, it also includes: the upload node uploads the data to be distributed to the storage space, uploads the storage certificate to the blockchain network, and writes the access authority rules into the smart contract; the access authority is set in the smart contract according to the RBAC mechanism , the access control is refined to the entry of the data; when the download node downloads the data information, it first calls the smart contract to check the authority, and the smart contract returns the entries that the node can access and the corresponding storage address; the download node downloads the corresponding data entry, and downloads the result winding. Among them, the RBAC mechanism is Role-Based Access Control, a role-based access control mechanism.

In one of the embodiments, it also includes: using the main blockchain as the main chain, and the lightweight blockchain as the side chain; the cloud center computing node calls the side chain to read its own block header, and generates block header information based on the side chain On-chain information, on-chain information includes the data certificate structure; the side chain confirms the data certificate structure by consensus, after the consensus confirmation, the side chain calls the main chain SPV verification contract to verify the on-chain information; when the verification is passed, the side chain will upload The chain information is uploaded to the chain according to the main chain SPV verification contract; the edge computing node calls the main chain to read its own block header, and generates the chain information based on the block header information of the main chain. The chain information includes the data certificate structure; The structure is confirmed by consensus. After the consensus is confirmed, the main chain calls the side chain SPV verification contract; when the verification is passed, the main chain uploads the chain information according to the provisions in the side chain SPV verification contract.

Among them, after the data certificate structure is confirmed by the consensus, the cloud center computing node verifies the result after the data certificate structure is confirmed by the consensus through the block header of the side chain, the Merkle tree root corresponding to the side chain, and the storage path. When the verification result is passed, then On-chain according to the provisions of the main chain SPV verification contract; after the data certificate structure is confirmed by the consensus, the edge computing node verifies the result of the data certificate structure being confirmed by the consensus through the block header of the main chain, the Merkle tree root corresponding to the main chain, and the storage path , when the verification result is passed, it will be uploaded to the chain according to the provisions in the side chain SPV verification contract.

In one of the embodiments, it also includes: the terminal sensor collects the data to be distributed, constructs a data credential structure for the data to be distributed through a reliable distribution mechanism, stores it in the edge computing node, and links the stored credential to the lightweight blockchain; The edge computing node chains the data certificate structure to the lightweight blockchain or the main blockchain. The consensus node verifies the data certificate structure and triggers the comparison function of the smart contract. After the comparison is passed, the information feature code of the data certificate structure is extracted, and the The code is downloaded to the edge computing node; the edge computing node sends a cross-chain request to the main block chain to verify the correctness of the code, and extracts information features; the edge computing node links the extracted information features to the lightweight block chain, through After the lightweight blockchain consensus verification, the SPV verification contract is called to cross-chain the information characteristics to the main blockchain; after the main blockchain consensus confirms the information characteristics, the instruction to generate the peer layer structure is issued; the instruction is in the main area After the blockchain consensus verification, call the lightweight blockchain SPV verification contract, cross-chain the instruction to the lightweight blockchain, and distribute the instruction to the controller specified in the end-layer structure after the consensus confirmation of the lightweight blockchain Carry out the corresponding instruction operation.

In one of the embodiments, it also includes: using a lightweight blockchain as the A chain, and another lightweight blockchain as the B chain; the edge computing node in the A chain initiates the first cross-chain up-chain action, and the second A cross-chain up-chain action passes the A-chain consensus verification and then enters the chain A chain, that is, the first cross-chain event; after the event collection node receives the first cross-chain event, it verifies the authenticity of the data certificate structure for the first cross-chain up-chain action After the verification is passed, build the Merkle tree root of the first cross-chain chain action, and use the private key signature of the event collection node to form the third encrypted value, and upload the third encrypted value to the main chain of the cloud center, and the main chain of the cloud center The chain nodes verify the legitimacy and reach a consensus; after the event collection node monitors the consensus, it initiates the second cross-chain up-chain action in the service chain. That is, the second cross-chain event; after the event collection node listens to the second cross-chain event, it verifies the data credential structure of the second cross-chain up-chain action, and after the verification is passed, builds the Merkle tree root of the second cross-chain up-chain action , and use the private key signature of the event collection node to form the fourth encrypted value, and upload the fourth encrypted value to the main chain of the cloud center, and the nodes of the main chain of the cloud center will verify the validity and reach a consensus; after the event collection node monitors the consensus, the A cross-chain action is initiated on the A chain to complete the cross-domain request closed loop.

Among them, the event collection node collects the consensus events of the main blockchain and the lightweight blockchain, and triggers one chain to another chain consensus event.

In one of the embodiments, it also includes: a lightweight block chain is the first domain, another lightweight block chain is the second domain, the first node is in the first domain, and the second domain is in the second domain Two nodes; the first node requests the authentication of the second node in the second domain; the first node initiates an authentication uplink request in the first domain, and the edge computing node confirms the identity of the first node by consensus. The chain request is cross-chained to the main blockchain. After the main blockchain agrees on the chain request, it submits the cross-chain to the second domain; the second domain confirms the identity of the second node by consensus, and also confirms the chain request through consensus , the uplink request is sent to the main blockchain, and after the main blockchain agrees on the uplink request, it submits it across the chain to the first domain; after the consensus, the first node can interact with the second node for services.

Compared with the prior art, the present invention provides a block chain-based cloud-edge terminal data distribution method and a cross-chain interaction method. A series of encryptions are performed on the data to be distributed through the uploading node and the downloading node, and finally an encrypted hash value is obtained. And store the encrypted value of the encryption process in the storage space, feed back the corresponding storage path, and then construct the data credential structure through the encrypted hash value, storage path and node itself information, and then go through repeated strict verification mechanisms and apply blockchain technology to The data certificate structure is stored in the smart contract to form an upload consensus confirmation. Finally, the download node downloads and decrypts the plaintext hash value to be confirmed according to the corresponding storage path, and calls the smart contract for comparison to complete the data distribution interaction. In the case of heterogeneous control parties, the transmission and interaction of data establishes a credible, reliable, traceable, and verifiable mechanism guarantee, which realizes the credible and efficient interaction of data information in the blockchain network architecture, and improves It improves the efficiency of cross-chain interaction and provides a credible basis for cross-chain applications.

Description of drawings

Fig. 1 is a block chain-based cloud edge end data distribution process diagram in an embodiment;

Figure 2 is a design diagram of a cross-chain architecture for cloud-side terminals in an embodiment;

Fig. 3 is a schematic flow chart of the data enhancement consensus algorithm in one embodiment;

FIG. 4 is a schematic flow diagram of a vertical cloud-edge cross-chain method in an embodiment;

Fig. 5 is a schematic flow diagram of a vertical cloud-edge cross-chain trusted collaboration method in an embodiment;

Fig. 6 is a schematic flow diagram of a cross-domain edge-cloud-edge cross-chain method in an embodiment.

detailed description

In order to make the purpose, technical solution and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present application, and are not intended to limit the present application.

This application provides a blockchain-based cloud-side data distribution method and a cross-chain interaction method, including:

The cloud-edge-end blockchain network architecture includes: end-layer structure, edge-layer structure, and cloud-layer structure; the end-layer structure includes controllers, sensor devices, sensor devices are used to collect task data, and controllers are used to execute instructions; The computing nodes consist of edge computing nodes to form a lightweight blockchain; the cloud layer structure includes cloud center computing nodes, and the cloud center computing nodes form the main blockchain.

In one embodiment, as shown in Figure 1, a blockchain-based cloud-side terminal data distribution method and a cross-chain interaction method are provided, which are applied to the cloud-side terminal cross-chain architecture as shown in Figure 2, including:

Step 302: The uploading node takes the hash value of the data to be distributed to obtain a plaintext hash value, and encrypts the data to be distributed according to the public key of the downloading node to obtain a first encrypted value, and uses the private key of the uploading node to encrypt all Encrypt the first encrypted value to obtain a second encrypted value, and obtain a hash of the second encrypted value to obtain an encrypted hash value.

The upload node and download node exist in the blockchain network architecture. The upload node is mainly responsible for encrypting the distribution data and uploading it to the storage space, and then uploading the storage address and encrypted hash value to the blockchain network; the download node is responsible for using The own public key encrypts the plaintext hash value to obtain the first encrypted value.

Step 304: The upload node stores the first encrypted value and the second encrypted value in a storage space, and feeds back a storage path in the storage space.

In this step, the storage space exists in the blockchain network architecture, and the storage space is mainly responsible for storing the first encrypted value uploaded by the uploading node, the second encrypted value and the hash value of the plaintext after subsequent verification, and feeds back to the storage space of the uploading node The storage path to facilitate the traceability of subsequent information data and the download of download nodes.

Step 306: The uploading node constructs a data credential structure according to the uploading node information of the uploading node, the downloading node information of the downloading node, the plaintext hash value, the encrypted hash value and the storage path.

The upload node information, download node information and storage path are used as secondary information, and the encrypted hash value is used as the core information. Among them, the secondary information is used for tracing and locating the information to be confirmed during the interaction process, so as to ensure the integrity of the information to be confirmed , the core information provides a highly reliable encryption strategy to ensure the authenticity of the information to be confirmed. The data credential structure is constructed through the above steps.

Step 308: Upload the data credential structure to the cloud-edge blockchain network architecture, verify the data credential structure through the consensus nodes in the cloud-edge blockchain network architecture and add it to the cloud-edge blockchain network architecture, and The upload node information and download node information are used as the key value, and the plaintext hash value is stored in the smart contract as the value value; the consensus node is an edge computing node or a cloud center computing node;

In this embodiment, the consensus node needs to verify the data credential structure. Specifically, the information stored in the data credential structure can be verified by comparison. After the verification is passed, the plaintext hash value is saved to the storage space; the upload node calls The storage function of the smart contract stores the corresponding information in the smart contract according to the rules of the smart contract, so that subsequent download nodes can correctly download the corresponding information in the smart contract for verification.

Step 310: The downloading node downloads the first encrypted value to be confirmed according to the storage path of the data certificate structure, decrypts the first encrypted value to be confirmed according to the private key of the downloading node, obtains the hash value of the plaintext to be confirmed, invokes the smart contract, and compares the pending Confirm the plaintext hash value and the plaintext hash value, and if they are the same, it is determined that the data to be distributed by the upload node is distributed to the download node.

The download node calls the comparison function of the smart contract, and compares the unconfirmed plaintext hash value obtained by decrypting the corresponding information in the smart contract with the plaintext hash value downloaded from the storage space according to the corresponding storage path.

A series of encryptions are performed on the data to be distributed through the uploading node and the downloading node, and finally the encrypted hash value is obtained, and the encrypted value of the encrypted process is stored in the storage space, and the corresponding storage path is fed back, and then through the encrypted hash value, storage path and The information of the node itself constructs the data certificate structure, and then through repeated strict verification mechanism and the application of blockchain technology, the data certificate structure is stored in the smart contract to form an upload consensus confirmation, and finally the download node downloads and decrypts the plaintext to be confirmed according to the corresponding storage path Hash value, and call the smart contract for comparison, complete the data distribution interaction, and establish a credible, reliable, traceable, and verifiable data transmission interaction for the cloud, edge, and terminal in the case of heterogeneous control parties. The mechanism guarantee realizes the credible and efficient interaction of data information in the blockchain network architecture, improves the efficiency of cross-chain interaction, and provides a credible foundation for cross-chain applications.

Further, the verification method is as follows: the consensus node receives the information of the uploaded node’s on-chain data certificate structure, downloads the previously stored encrypted value from the storage space, and at the same time analyzes the data certificate structure to obtain the uploaded node information and plaintext information in the data certificate structure. hash value, encrypted hash value; then compare and verify the stored encrypted value with the parsed encrypted value, if the verification is passed, the data credential structure will be packaged into a block, and the plaintext hash value will be saved to the storage space, so that Subsequent correspondence with the plaintext hash value in the smart contract, otherwise, discard the chain request; the consensus node will verify other data information in the data certificate structure, and mount it on the current block of the blockchain network after the verification is passed Afterwards, ensure that the data information can be traced back to the source; after other consensus nodes receive the block just mounted in the blockchain network, they find that there is uploaded data, and download the encrypted value data stored in the storage space according to the storage path. If the verification is passed, the data credential structure will be packaged into a block, and the plaintext hash value will be saved to the storage space for subsequent correspondence with the plaintext hash value in the smart contract; otherwise, the uplink request will be discarded; when the After all the information in the block is verified, mount this block behind the current block.

The further storage process is specifically as follows: through the upload consensus confirmation, the consensus node calls the storage function of the smart contract, analyzes the data certificate structure to obtain the upload node information, download node information and plaintext hash value; according to the upload node information, download node information and plaintext hash value Greek value, the upload node information and download node information are used as the key value, and the plaintext hash value is stored as the value value, and the storage location is the smart contract in the cloud edge blockchain network.

Through the above methods, the authenticity and integrity of data information in the process of distribution and interaction are guaranteed. However, in the cloud-edge-device architecture, due to the heterogeneous environment among the three, it is necessary to strengthen the privacy of the data information when interacting with the three. an important element of mutual trust.

In one of the embodiments, it also includes: the upload node uploads the data to be distributed to the storage space, uploads the storage certificate to the blockchain network, and writes the access authority rules into the smart contract; the access authority is set in the smart contract according to the RBAC mechanism , the access control is refined to the entry of the data; when the download node downloads the data information, it first calls the smart contract to check the authority, and the smart contract returns the entries that the node can access and the corresponding storage address; the download node downloads the corresponding data entry, and downloads the result winding. Among them, the RBAC mechanism is Role-Based Access Control, a role-based access control mechanism. The rules of access rights are written into the smart contract through the upload node. The access rule is specifically that the download node needs a unique and corresponding download token corresponding to the smart contract. It has privacy protection when interacting with chains. By introducing the RBAC mechanism, in the RBAC model, permissions are associated with roles, and different roles have different permissions. Users can obtain permissions for different roles by being assigned to different roles. After users are associated with roles, they can also perform autonomous authorization and Authorization franchise must control authorization information through roles to achieve access control, which makes privacy protection controllable and adjustable, very flexible.

Through the above method, the integrity, authenticity and privacy of data information during distribution and interaction are guaranteed, and a reliable and safe foundation is laid for the application of data certificate structure in the blockchain network framework.

As shown in Figure 2, it is a design diagram of a cloud-edge cross-chain architecture. The cloud-edge cross-chain architecture includes: a main blockchain composed of cloud center nodes, a lightweight blockchain composed of edge computing nodes, and event Collect nodes. Among them, the main blockchain can be used as the main chain, and the lightweight blockchain can be used as a side chain to build a vertical cloud-edge cross-chain architecture; the main blockchain can also be used as a relay chain, and the lightweight blockchain can be used as a subchain. Chain and sub-chain are divided into demand chain and service chain, forming a cross-domain edge-cloud-edge cross-chain architecture; event collection nodes are dedicated to collecting consensus events of the main blockchain and lightweight blockchains, and Trigger one of the chains to the consensus event on the other chain to complete the complex cross-chain trusted interaction of information.

Among them, in the vertical cloud-edge cross-chain architecture, the side chain focuses on expanding the performance of the main chain, with the main chain as the brain and the side chain as the limbs, to complete a series of different operation scenarios; cross-domain edge-cloud-edge cross-chain In the architecture, the relay chain focuses on the services of each sub-chain. The relay chain is used as the verification agency. One end of the sub-chain is the demander, and the other end is the server. Through the verification of the relay chain, the demander and the server can be reached. common information.

In the following, for the two proposed architectures, reliable distribution and cross-chain trusted interaction will be explained respectively.

In one embodiment, as shown in Figure 4, the reliable distribution and cross-chain trusted interaction steps based on the vertical cloud-edge cross-chain architecture are as follows:

Step 402, the cloud center computing node invokes the side chain to read its own block header, and generates uplink information based on the sidechain block header information, and the uplink information includes the data certificate structure.

It is worth noting that the specific process of uploading the data certificate structure is as follows: the cloud center computing node reads the block header from the side chain through RPC (Remote Procedure Call, remote method call), and generates the chain information based on the information of the block header in the side chain. Then upload the on-chain information to the main chain, and the information in the block header includes the data certificate structure built in the blockchain network of the side chain. Through the above steps, the data certificate structure is linked from the side chain to the blockchain network of the main chain.

Step 404, the side chain confirms the data certificate structure consensus, and calls the main chain SPV verification contract to verify the up chain information.

Among them, the consensus confirmation is specifically that all consensus nodes in the cloud edge blockchain network continuously monitor the data certificate structure until the data certificate structure is verified and confirmed, forming an upload consensus confirmation. Through the above steps, the consensus confirmation mechanism can ensure that the data information is authentic and reliable, and the SPV verification contract (Simple Payment Verification, simple payment verification) can ensure that the information data is efficient during interaction.

Step 406, if the verification is passed, the side chain uploads the uplink information to the main chain according to the provisions in the main chain SPV contract.

In this step, after the on-chain information passes the simple payment verification, the side chain will upload the on-chain information to the main chain after simple verification according to the rules in the SPV contract, so as to maintain the efficiency of the on-chain information when crossing chains.

Step 408, the edge computing node calls the main chain to read its own block header, and generates uplink information based on the block header, and the uplink information includes the data certificate structure;

Similarly, the edge computing node reads the block header from the main chain through RPC, generates uplink information based on the information of the block header in the main chain, and then uploads the uplink information to the side chain. The information in the block header includes the area of the main chain. The data credential structure built in the block chain network. Through this step, the data certificate structure is uploaded from the main chain to the blockchain network of the side chain.

Step 410, the main chain confirms the consensus of the data certificate structure, and calls the side chain SPV verification contract to verify the information on the chain;

Similarly, step 112 verifies the information on the chain by using the SPV contract verification of the side chain and the consensus confirmation of the main chain.

Step 412, if the verification is passed, the main chain uploads the uplink information to the sidechain according to the provisions in the sidechain SPV contract.

Through the verification of the SPV verification contract of the side chain, the main chain will upload the uplink information to the sidechain according to the contract regulations in the SPV contract, complete the uplink from the main chain to the sidechain, and complete the two-way anchoring of the main chain and the sidechain.

The above-mentioned method of applying the data credential structure to the vertical cloud-edge cross-chain architecture aims at the need for trusted interaction between cloud-edge, and uses side-chain cross-chain technology to design cross-chain mechanisms in two directions: cloud-to-edge and edge-to-cloud , and through the consensus confirmation of the data certificate structure by the consensus nodes in the blockchain network and the SPV verification mechanism, the two-way anchoring between the chain and the chain is realized, thereby ensuring the security of information interaction between the cloud and the edge, and also improving its efficiency.

In one embodiment, the SPV verification process includes: after the data certificate structure is confirmed by the consensus, the cloud center computing node verifies the data certificate structure through the block header of the block chain, the Merkle tree root corresponding to the block chain, and the storage path. After confirmation, when the verification result is passed, it will be uploaded to the chain according to the provisions of the main chain SPV verification contract, thus ensuring the traceability of data information in the process of efficient interaction.

In one embodiment, as shown in Figure 5, a blockchain-based cloud-side data distribution method and a cross-chain interaction method are provided, which are applied to the trusted collaboration method in the vertical cross-chain mechanism in Figure 2, including :

Step 502, the terminal sensor collects the data to be distributed, encrypts the data to be distributed through a reliable distribution mechanism to form information features, stores the information features to the edge computing node, and uploads the storage certificate to the lightweight blockchain;

The data to be distributed is the task data collected by the sensor equipment of the end-layer structure. The reliable distribution mechanism is to encrypt and hash the data to be distributed through the upload node and download node in the blockchain network architecture, and the information characteristics are obtained through The resulting cryptographic hash of the reliable distribution mechanism.

Step 504, the edge computing node uploads the information feature to the blockchain network, the consensus node in the blockchain network verifies the information feature, triggers the comparison function of the smart contract, after the comparison is passed, the download node extracts the code of the information feature, and The code is downloaded to the edge computing node;

Among them, the blockchain network is a lightweight blockchain network, and the extracted code is the data certificate structure. In the lightweight blockchain network architecture, the encrypted hash value is used as the core information to construct the data certificate structure, and the certificate is uploaded to the lightweight blockchain network. The edge computing nodes in the blockchain network serve as consensus nodes for the data certificate structure Carry out consensus confirmation.

Step 506, the edge computing node sends a cross-chain request to the main blockchain to verify the correctness of the code, and extracts the information features of the code after the verification is passed;

The cross-chain method in this step is vertical cloud-edge cross-chain, and the verification method is also the verification method in the vertical cloud-edge cross-chain method, that is, consensus verification and SPV verification. In the main blockchain network, the data structure certificate on the chain is verified and analyzed, and the encrypted hash value is obtained again, that is, the information feature. It ensures the safety and reliability of information when interacting across chains.

Step 508, the edge computing node links the extracted information features to the lightweight blockchain, calls the SPV verification contract after the lightweight blockchain consensus verification, and cross-chains the information features to the main blockchain;

The information feature is the correct information feature that has been verified, and the cross-chain from the side chain to the main chain is completed through the correct information feature in step 208.

Step 510, after the main block chain consensus confirms the characteristics of the information, generate an instruction for the structure of the peer layer;

The instruction issuance is mainly aimed at the controller of the end-layer structure. Through this step, the consensus confirmation of the information characteristics on the main chain is completed, and the issued instructions are generated.

Step 512, the instruction invokes the lightweight blockchain SPV verification contract after the consensus verification of the main blockchain, and cross-chains the instruction to the lightweight blockchain;

Among them, the instruction is the correct instruction through verification. As the information, the instruction is also verified by the consensus of the blockchain network and the SPV verification, so as to keep the core information consistent during the transformation process.

Step 514, after the instruction is confirmed by the lightweight blockchain consensus, it is distributed to the controller specified in the end-layer structure to perform corresponding instruction operations.

In the same way, instructions are confirmed as information through the consensus of the lightweight blockchain network to keep the core information consistent during the transformation process and ensure that the information is accurately delivered to the corresponding controller.

The trusted service collaboration method of the above-mentioned vertical cloud-edge cross-chain architecture, based on the authenticity and integrity of the consensus algorithm, utilizes the vertical cloud-edge cross-chain architecture and blockchain technology to connect end sensors to edge computing nodes. The trusted interactive service between the cloud center nodes is designed, which provides a safe and reliable guarantee for the vertical cloud edge application and lays the foundation for the design and development of the upper layer application.

In one embodiment, as shown in Figure 6, the reliable distribution and cross-chain trusted interaction steps based on the cross-domain cloud-edge-cloud cross-chain architecture are as follows:

Step 602, using a lightweight blockchain as the A chain, another lightweight blockchain as the B chain, and the main blockchain as the relay chain;

Among them, the A chain is the demand chain, the B chain is the service chain, the lightweight blockchain is the sub-chain of the main blockchain, the main blockchain is the relay chain, and the relay chain focuses on connecting the sub-chains. Service, the demand information uploaded by the demand chain is legally verified to form a consensus, and the feedback information of the service chain is also legally verified to form a consensus, and the mutual cooperation between the service chain and the demand chain is completed when the two information matches. Build a bridge of trust for information exchange between sub-chains.

Step 604, the edge computing node in the A chain initiates the first cross-chain up-chain action, and the first cross-chain up-chain action passes the consensus verification of the A chain and enters the chain A chain, and this event is regarded as the first cross-chain event;

The first cross-chain linking action in this step is to link the data certificate structure in the A-chain architecture to the A-chain blockchain network, and use the consensus nodes in the A-chain blockchain network for consensus verification. The data information encrypted in the certificate structure is the demand information. Among them, the first cross-chain event is to enter the data certificate structure into the blockchain network, and form a consensus confirmation after consensus verification.

Step 606: After the event collection node receives the first cross-chain event, it verifies the authenticity of the first cross-chain uplink action. After the verification is passed, it constructs the Merkle tree root of the first cross-chain uplink action, and uses the event collection node private key signature to form the third encrypted value, and upload the third encrypted value to the main chain of the cloud center, and the nodes of the main chain of the cloud center will verify the validity and reach the first consensus;

The third encrypted value contains the demand information uploaded by the demand chain, and the demand information is legally verified by the nodes of the relay chain to form a consensus confirmation, that is, the first consensus, and the completion of the demand information is submitted from the demand chain to the relay chain. The uplink action has undergone authenticity verification and encryption processing to ensure the integrity and authenticity of data information.

Step 608: After the event collection node receives the first consensus, it initiates the second cross-chain uplink action on the B chain. The second cross-chain uplink action is verified by the consensus node. As the second cross-chain event;

The area on the chain in this step is the network of the service chain. The event collection node will upload the consensus event of the first consensus to the service chain, and verify its authenticity through the consensus nodes in the service chain network. Smart contracts linked to this service chain.

Step 610: After the event collection node receives the second cross-chain event, it verifies the authenticity of the first cross-chain on-chain action. After the verification is passed, builds the Merkle tree root of the first cross-chain on-chain action, and signs it with the private key of the event collection node Form the fourth encrypted value, upload the fourth encrypted value to the main chain of the cloud center, and the nodes of the main chain of the cloud center will verify the legality and reach the second consensus;

Similarly, the fourth encrypted value contains the feedback information of the service chain, and the feedback information forms a consensus confirmation after passing the legality verification of the relay chain, that is, the second consensus. In this step, the uplink action has undergone authenticity verification and encryption processing to ensure the integrity and authenticity of the data information.

Step 612: After receiving the second consensus, the event collection node initiates a new round of cross-chain actions on chain A to complete the cross-domain request closed loop.

This step compares and matches the demand information of the demand chain with the feedback information of the service chain, and completes the cooperation between the service chain and the demand chain when the two information matches. It realizes the cross-domain cross-chain of data information from demand chain to service chain.

The above-mentioned cross-domain edge-cloud-edge cross-chain method, aiming at the requirement of trusted interaction between edge-cloud-edge, uses the cloud center block chain as the relay chain cross-chain technology to design the edge (demand chain) to cloud The cross-chain mechanism from (the main chain) to the other side (service chain) continuously collects and triggers the on-chain through the event collection node, making the request and response between the demand chain-main chain-service chain very efficient, avoiding The problem that consensus nodes play multiple roles improves the efficiency of cross-domain trusted interaction. At the same time, through the consensus verification of data credential structure and encrypted information, it ensures the security and credibility of data information during cross-domain interaction.

In one embodiment, a cross-domain edge-cloud-edge trusted service collaboration method is provided, the steps include: a lightweight blockchain is the first domain, and another lightweight blockchain is the second domain , there is a first node in the first domain, and a second node in the second domain; the first node requests the authentication of the second node in the second domain; the first node initiates an authentication uplink request in the first domain, and the edge computing node Consensus confirmation is performed on the identity of the first node. After the consensus confirmation, the chain-up request is cross-chained to the main blockchain. After the main blockchain agrees on the chain-up request, the cross-chain is submitted to the second domain; the second domain The identities of the two nodes are confirmed by consensus, and the on-chain request is also confirmed by consensus, and the on-chain on-chain request is sent to the main blockchain. After the main blockchain agrees on the on-chain request, it is submitted to the first domain across the chain; The first node can perform service interaction with the second node.

The above-mentioned cross-domain cloud-edge-end trusted service collaboration method, based on the authenticity and integrity of the consensus algorithm, uses the cross-domain edge-cloud-edge cross-chain architecture and the consensus mechanism of the blockchain to establish an edge computing domain and Another trusted authentication mechanism in the edge computing domain ensures that data information is safe and reliable when interacting across domains, and provides a trusted foundation for cross-domain applications.

Furthermore, the event collection node is dedicated to collecting the consensus events of the main blockchain and the lightweight blockchain, and triggering a chain consensus event on the other chain to complete the complex cross-chain trusted interaction of information and avoid Consensus nodes in the blockchain network need to collect consensus events and confirm the authenticity of consensus events, which improves the efficiency of data processing.

It should be understood that although the various steps in the flow charts in FIG. 3 , FIG. 4 , FIG. 5 , and FIG. 6 are shown sequentially as indicated by the arrows, these steps are not necessarily executed sequentially in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and these steps can be executed in other orders. Moreover, at least some of the steps in Fig. 1 may include multiple sub-steps or multiple stages, these sub-steps or stages are not necessarily executed at the same time, but may be executed at different times, the execution of these sub-steps or stages The order is not necessarily performed sequentially, but may be performed alternately or alternately with at least a part of other steps or sub-steps or stages of other steps.

The technical features of the above embodiments can be combined arbitrarily. To make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, they should be It is considered to be within the range described in this specification.

The above examples only express several implementation modes of the present application, and the description thereof is relatively specific and detailed, but should not be construed as limiting the scope of the patent for the invention. It should be noted that those skilled in the art can make several modifications and improvements without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the scope of protection of the patent application should be based on the appended claims.

Claims (10)

1. A cloud edge end data distribution method and a cross-chain interaction method based on a block chain are characterized in that the method is applied to a Yun Bianduan block chain network architecture, and the Yun Bianduan block chain network architecture comprises the following steps: an end layer structure, an edge layer structure and a cloud layer structure; the end layer structure comprises a controller and sensor equipment, wherein the sensor equipment is used for collecting task data, and the controller is used for executing instructions; the edge layer structure comprises edge computing nodes, and a lightweight block chain is formed by the edge computing nodes; the cloud layer structure comprises cloud center computing nodes, and the cloud center computing nodes form a main block chain;

the method comprises the following steps:

the uploading node obtains a plaintext Hash value from the data to be distributed, encrypts the data to be distributed according to a public key of the downloading node to obtain a first encryption value, encrypts the first encryption value by using a private key of the uploading node to obtain a second encryption value, and obtains an encrypted Hash value by taking the Hash of the second encryption value;

the uploading node stores the first encryption value and the second encryption value in a storage space and feeds back a storage path in the storage space;

the uploading node constructs a data certificate structure according to uploading node information of the uploading node, downloading node information of the downloading node, a plaintext hash value, an encrypted hash value and the storage path;

uploading the data certificate structure to the cloud edge block chain network architecture, verifying the data certificate structure through a consensus node in the Yun Bianduan block chain network architecture, adding the data certificate structure into the Yun Bianduan block chain network architecture, taking the uploading node information and the downloading node information as key values, and storing the plaintext hash value as a value in an intelligent contract; the consensus node is the edge computing node or the cloud center computing node;

and the downloading node downloads the data to be distributed according to the storage path of the data certificate structure to obtain a first encryption value to be confirmed, decrypts the first encryption value to be confirmed according to a private key of the downloading node to obtain a plaintext hash value to be confirmed, calls the intelligent contract, compares the plaintext hash value to be confirmed with the plaintext hash value, and determines that the data to be distributed of the uploading node is distributed to the downloading node when the plaintext hash value to be confirmed is the same as the plaintext hash value.

2. The method of claim 1, wherein validating and joining the data credential structure to the Yun Bianduan block-chain network architecture by a consensus node in the Yun Bianduan block-chain network architecture comprises:

receiving the data certificate structure uploaded by the uploading node through a consensus node in the Yun Bianduan block chain network architecture, downloading the data certificate structure according to the storage path, and analyzing the data certificate structure to obtain uploading node information, a plaintext hash value and an encrypted hash value;

after the data certificate structure is verified according to the uploading node information and the encrypted hash value, mounting a block corresponding to the data certificate structure in a block queue of the Yun Bianduan block chain network architecture; sending the data certificate structure to other common identification nodes for secondary verification, if the verification is not passed, discarding the block, and if the verification is passed, mounting the block corresponding to the data certificate structure in a block queue of the Yun Bianduan block chain network architecture;

and all the consensus nodes in the cloud edge block chain network continuously monitor the data certificate structure, and the data certificate structure is verified and confirmed to form uploading consensus confirmation.

3. The method according to claim 1, wherein the consensus node takes the uploading node information and the downloading node information as key values, and the plaintext hash value is stored as a value in an intelligent contract, comprising:

through the uploading consensus confirmation, the consensus node calls a storage function of the intelligent contract and analyzes the data certificate structure to obtain uploading node information, downloading node information and a plaintext hash value;

and according to the uploading node information, the downloading node information and the plaintext hash value, taking the uploading node information and the downloading node information as key values, taking the plaintext hash value as a value for storage, and taking the stored position as an intelligent contract in the cloud edge terminal block chain network.

4. The method according to claim 1, wherein the block chain-based cloud edge data distribution method and the cross-chain interaction method further include:

the main block chain is used as a main chain, and the lightweight block chain is used as a side chain to form a vertical cloud-edge spanning chain structure;

the cloud center computing node calls the side chain to read the block head of the cloud center computing node, and uplink information is generated based on the block head information of the side chain, wherein the uplink information comprises a data certificate structure;

the side chain carries out consensus confirmation on the data certificate structure, and after the consensus confirmation, the side chain calls a main chain SPV (shortest path variable) verification contract to verify the uplink information;

when the verification is passed, the side chain specifies uplink according to the uplink information in the main chain SPV verification contract;

the edge computing node calls the main chain to read the block head of the edge computing node, and generates uplink information based on the block head information of the main chain, wherein the uplink information comprises a data certificate structure;

the main chain carries out the consensus confirmation on the data certificate structure, and after the consensus confirmation, the main chain calls a side chain SPV verification contract;

when the verification is passed, the main chain specifies the uplink information according to the side chain SPV verification contract.

5. The method of claim 4, wherein the main chain SPV validation contract and the side chain SPV validation contract validate the uplink information, comprising:

after the data certificate structure is confirmed by the consensus, the cloud center computing node verifies the result of the data certificate structure after the consensus confirmation through the block head of the side chain, the Merkle tree root corresponding to the side chain and the storage path, and when the verification result is passed, the uplink is verified according to the rule in the main chain SPV verification contract;

after the data certificate structure is subjected to the consensus confirmation, the edge computing node verifies the result of the data certificate structure subjected to the consensus confirmation through the block head of the main chain, the Merkle tree root corresponding to the main chain and the storage path, and when the verification result is passed, the upper chain is verified according to the regulations in the side chain SPV verification contract.

6. The method according to claim 1, wherein the block chain-based cloud edge data distribution method and the cross-chain interaction method further include:

the end sensor collects data to be distributed, encrypts the data to be distributed through a reliable distribution mechanism to form information characteristics, stores the information characteristics to an edge computing node, and links a stored certificate to a lightweight block chain;

the edge computing node links the information features to a blockchain network, a consensus node in the blockchain network verifies the information features, a comparison function of the intelligent contract is triggered, a downloading node extracts codes of the information features after comparison is passed, and the codes are downloaded to the edge computing node;

the edge computing node sends a cross-chain request to the main block chain to verify the correctness of the code, and the information characteristic of the code is extracted after the verification is passed;

the edge computing node links the extracted information features to the lightweight block chain, calls an SPV (shortest path distance) verification contract after the lightweight block chain consensus verification, and links the information features to a main block chain in a cross-linking mode;

after the main block chain consensus confirms the information characteristics, generating and issuing an instruction to the end layer structure;

the instruction calls the light weight block chain SPV verification contract after the main block chain consensus is verified, and the instruction is linked to the light weight block chain in a cross mode;

and after the command is confirmed to the lightweight block chain consensus, the command is distributed to a designated controller in the end layer structure to carry out corresponding command operation.

7. The method according to claim 1, wherein the block chain-based cloud edge data distribution method and the cross-chain interaction method further include:

taking a lightweight block chain as an A chain, taking another lightweight block chain as a B chain, taking a main block chain as a relay chain, and constructing a cross-domain cloud-edge-cloud cross-chain architecture;

initiating a first cross-chain uplink action by an edge computing node in the A chain, wherein the first cross-chain uplink action enters the A chain after passing the A chain consensus verification, namely a first cross-chain event;

after receiving the first cross-chain event, the event collection node verifies the authenticity of the first cross-chain uplink action, after the first cross-chain uplink action passes the verification, a Merkle tree root of the first cross-chain uplink action is constructed, a third encryption value is formed by using a private key signature of the event collection node, the third encryption value is linked to the cloud center main chain, and the cloud center main chain node verifies the validity and achieves a first common identification;

after receiving the first common identifier, the event collection node initiates a second cross-link uplink action on the service chain, wherein the second cross-link uplink action is verified by the common identifier node and enters the B chain after the verification, namely a second cross-link event;

after the event collection node monitors the second cross-link event, authenticity verification is conducted on the second cross-link chain loading action, after the second cross-link chain loading action passes the verification, a Merkle tree root of the second cross-link chain loading action is constructed, a fourth encrypted value is formed by using a private key signature of the event collection node, the fourth encrypted value is chain loaded to the cloud center main chain, and the cloud center main chain node conducts validity verification and achieves second common identification;

and after monitoring the second consensus, the event collection node initiates a chain crossing action on the chain A to complete the closed loop of the cross-domain request.

8. The method of claim 7, wherein the trusted service coordination method specifically applied to the data credential structure in the information cross-domain interaction is as follows:

the first lightweight blockchain is a first domain, the other lightweight blockchain is a second domain, a first node is arranged in the first domain, and a second node is arranged in the second domain; the first node requesting authentication of a second node in a second domain;

the first node initiates an authenticated uplink request in the first domain, the edge computing node performs the consensus confirmation on the identity of the first node, after the consensus confirmation, the uplink request is linked to the main blockchain in a cross mode, and after the main blockchain performs the consensus confirmation on the uplink request, the main blockchain submits the link to the second domain in a cross mode; the second domain performs the common identification confirmation on the identity of the second node, and also performs the common identification confirmation on the uplink request, the uplink request is uplink to the main block chain, and after the main block chain identifies the uplink request, the main block chain submits the uplink request in a cross-chain manner to the first domain;

after the consensus, the first node can perform service interaction with the second node.

9. The method of claim 7 wherein the event collection node collects consensus events for both master and lightweight blockchains and triggers the consensus event to be linked one to the other.

10. The method of claim 1, wherein the upload node, download node, and storage do not belong to a blockchain network; the consensus node and the intelligent contract belong to a block chain network, and the block chain network architecture comprises a block chain network, an uploading node, a downloading node and a storage and event collection node.

Images