JP6814094B2 - Consensus building system, program, and generation method - Google Patents

Description

The present invention is agreement forming system, a program, and a generation method.

Conventionally, a technique related to a blockchain that records a history of transactions between a plurality of terminals connected to a network has been known.

Satoshi Nakamoto. Bitcoin: A peer-to-peer electronic cash system, 2008. Sompolinsky, Y., Zohar, A .: Accelerating bitcoin's transaction processing. Fast money grows on trees, not chains. IACR Cryptology ePrint Archive 2013 (2013) 881. Lewenberg, Y., Sompolinsky, Y., Zohar, A .: Inclusive block chain protocols. In: Financial Cryptography and Data Security ―― 19th International Conference, FC2015, San Juan, Puerto Rico, January 26-30, 2015, Revised Selected Papers (2015) 528-547

In recent years, a platform (Privacy Policy Manager (hereinafter, PPM)) that appropriately utilizes the personal information of the user based on the policy of the user who uses various services is known. By using PPM, the user can use various services without unintentionally knowing his / her personal information to others. In this case, it is preferable that the history of using various services is shown by a mechanism that shows the details of the service used by the user and the personal information of the user is not known to others.
The present invention has been made in view of the above problems, and an object of the present invention is to provide a mechanism for recording PPM history information by a blockchain.

(1) One aspect of the present invention is an agreement formation system including a plurality of first generators and at least one second generator to form a block chain agreement, each of which is described above. The first generator opens based on the hash value transmitter that transmits the hash value of the transaction as the first hash value to the second generator and the root hash value transmitted from the second generator. The first unit includes a selection unit that selects whether or not to close the block in the state, and a selection result transmission unit that transmits information indicating the selection result selected by the selection unit to the second generation device . The generation device 2 transmits the transaction, a receiving unit that receives the first hash value, a calculation unit that calculates the hash value of the transaction as a second hash value, and the first generation device, respectively . wherein a first hash value, and the second hash value which the calculation unit is calculated, based on said block chain, a route calculating unit for calculating the root hash value, the calculated the root hash value, a plurality of and the root value transmission unit that transmits to each of the first generator, and wherein in response to transmitting the root hash value, the selection result reception unit which first generating device receives the selection result to be transmitted, respectively, Based on the selection result received by the selection result receiving unit, the determination unit that determines whether or not to close the block in the open state and the block in which the determination result of the determination unit is in the open state are closed. When indicating to do so, it is a consensus formation system including a block transmitter that transmits a closed block to a terminal connected to the network.

(2) One aspect of the present invention is that in the consensus building system described in (1) above, when the selection unit includes the second hash value calculated by the own device in the root hash value. Select when the open block is closed .

(3) In one aspect of the present invention, in the consensus building system according to (1) or (2) above, the selection unit is a hash value of a block that is closed before a block that is open. However, if it is not included in the root hash value, the open block is selected not to be closed.

(4) In one aspect of the present invention, in the consensus building system according to any one of (1) to (3) above , the plurality of first generation devices are each provided with reliability. The determination unit is in the open state when the sum of the reliabilitys attached to the first generators that have transmitted the selection result indicating that the block in the open state is to be closed is equal to or greater than a predetermined threshold value. It is determined that the block is closed.

(5) In one aspect of the present invention, in the agreement formation system according to any one of (1) to (4) above, the second generation device is received by the receiving unit based on the blockchain. The second calculation unit further includes an extraction unit that extracts unrecorded transactions that are transactions that are not recorded in the blockchain among the transactions, and the calculation unit obtains the hash value of the unrecorded transaction extracted by the extraction unit. Calculated as a hash value.

(6) In one aspect of the present invention, in the consensus building system described in (5) above, the extraction unit is closed before one of the blocks in the open state among the plurality of blocks included in the blockchain. Transactions of transactions after the time when the transaction recorded in the stated block is performed are extracted as the unrecorded transaction.

(7) One aspect of the present invention is a receiving step in which a computer receives a transaction and a first hash value generated by a first generator, and a calculation in which the hash value of the transaction is calculated as a second hash value. A route calculation step of calculating a route hash value based on the step, the first hash value transmitted by the first generator, the second hash value calculated in the calculation step, and the blockchain. The route value transmission step of transmitting the calculated route hash value to the plurality of first generation devices, and the first generation device select each of the calculated route hash values according to the transmission of the route hash value. The selection result of whether or not to close the open state block is based on the selection result receiving step received from each of the first generators and the selection result received in the selection result receiving step. , When the determination step of determining whether or not to close the block in the open state and the determination result in the determination step indicate that the block in the open state is to be closed, the terminal connected to the network is closed. It is a program for executing a block transmission step of transmitting a block in a state .

(8) One aspect of the present invention is a receiving step in which the computer receives the transaction and the first hash value generated by the first generator, and the computer uses the hash value of the transaction as the second hash value. The root hash value based on the calculation step to be calculated, the first hash value transmitted by the first generation device by the computer, the second hash value calculated in the calculation step, and the blockchain. The route calculation step of calculating the above, the route value transmission step in which the computer transmits the calculated route hash value to each of the plurality of first generation devices, and the computer transmitting the route hash value. Correspondingly, the selection result receiving step of receiving the selection result of whether or not to close the open state block selected by the first generator from each of the first generators, and the computer Based on the selection result received in the selection result receiving step, a determination step for determining whether or not to close the block in the open state, and a block in which the computer determines whether the determination result in the determination step is in the open state. Is a generation method having a block transmission step of transmitting a closed block to a terminal connected to a network when indicating that the computer is to be closed .

According to the present invention, it is possible to provide a mechanism for recording PPM history information by a blockchain.

It is a figure which shows an example of the structure of the blockchain in the prior art. It is a figure which shows an example of the network configuration to which the generation apparatus of 1st Embodiment is connected. It is a figure which shows an example of the structure of the generation apparatus of 1st Embodiment. It is a figure which shows an example of the blockchain which records the transaction hash value generated by the generation apparatus of 1st Embodiment. It is a flow chart which shows an example of the operation of the generator of 1st Embodiment. It is a figure which shows an example of the network structure of the consensus building system of 2nd Embodiment. It is a figure which shows an example of the structure of the generation apparatus of 2nd Embodiment. It is a flow chart which shows an example of the operation of the consensus building system of 2nd Embodiment. It is a figure which shows an example of the calculation method of the route hash value of the route calculation part in 2nd Embodiment. It is a figure which shows an example of the blockchain which records the root hash value generated by the generation apparatus of 2nd Embodiment. It is a figure which shows an example of the network structure of the consensus building system of a modification.

[About conventional blockchain]
A conventional blockchain configuration will be described with reference to FIG.
FIG. 1 is a diagram showing an example of a blockchain configuration in the prior art.
As shown in FIG. 1, conventionally, each block constituting the blockchain includes a hash value of the block immediately before the block, a transaction, and a nonce value of the block. The transaction is information indicating the history of transactions performed between the start of the process of closing the block immediately before the block and the start of the close process of the block (hereinafter referred to as history information). Is. Therefore, historical information is recorded on the blockchain. The history information includes, for example, personal information of a destination, personal information of a sender, a remittance amount, and the like. A reference person who can refer to the blockchain can refer to various personal information by referring to the transaction T.

In recent years, a platform (Privacy Policy Manager (hereinafter, PPM)) that appropriately utilizes the personal information of the user based on the policy of the user who uses various services is known. PPM is a mechanism for realizing the distribution of personal information based on the policy of the user who uses the service. By using various services via PPM, the user can suppress the use of personal information for purposes not intended by the user himself / herself. Here, the history of the user using various services via PPM may be shown by a mechanism that guarantees the validity of the content used and prevents the user's personal information from being known to others. preferable. The generation device 10 of the present invention is history information recorded on the blockchain and generates history information of a user who uses PPM. The outline of the generator 10 will be described below.

[First Embodiment]
Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[Overview of generator]
FIG. 2 is a diagram showing an example of a network configuration to which the generation device 10 of the first embodiment is connected. In an example of this embodiment, the generation device 10 is provided in, for example, a device that realizes PPM (hereinafter, PPM device).

In one example of the present embodiment, the user conducts a money transaction via the network NW. In this case, the PPM device and the terminal used by the user (hereinafter, terminal TM) are connected via the network NW. As shown in the figure, in the present embodiment, a plurality of terminal TMs (terminals TM-1 to TM-n) are connected via a network NW. n is a natural number. In the following description, when terminals TM-1 to TM-n are not distinguished, they are collectively referred to as terminal TM.

The user uses the terminal TM to transmit information indicating the contents of the transaction (hereinafter, transaction T) to the PPM device. The transaction T includes, for example, personal information of the destination, personal information of the sender, a remittance amount, and the like. The generation device 10 records the transaction T by the blockchain while preventing the various personal information included in the transaction T (transactions T-1 to Tn shown) received from each terminal TM from being disclosed to others. Guarantee legitimacy.
Hereinafter, a specific configuration of the generation device 10 will be described.

[About the configuration of the generator]
FIG. 3 is a diagram showing an example of the configuration of the generator 10 of the first embodiment.
As shown in FIG. 3, the generation device 10 includes a control unit 100 and a storage unit 500. The blockchain information BLK and the transaction history information TI are stored in the storage unit 500. Here, the generation device 10 has a function as a node of the blockchain. The generation device 10 has, for example, a function of receiving a block transmitted using the network NW and storing it in the storage unit 500 as blockchain information BLK. The blockchain information BLK includes information indicating each block constituting the blockchain and information indicating the connection of each block. Further, the transaction history information TI stores the transaction T received from each terminal TM.

The control unit 100 includes a CPU (Central Processing Unit), and includes a reception unit 110, an extraction unit 120, a calculation unit 130, and a transmission unit 140 as its functional units. The receiving unit 110 receives the transaction T from each terminal TM. The receiving unit 110 stores the received transaction T in the storage unit 500 as transaction history information TI.

The extraction unit 120 extracts the transaction T that is not recorded in the blockchain information BLK from the transaction T included in the transaction history information TI. In the blockchain, for example, blocks are generated at predetermined time intervals (open blocks are closed). The extraction unit 120 extracts the transaction T received after the time when the latest block included in the blockchain information BLK is generated from the transaction T included in the transaction history information TI. In this case, the transaction history information TI stores the transaction T and the time when the transaction T is received in association with each other. The extraction unit 120 supplies the extracted transaction T to the calculation unit 130. In this example, the extraction unit 120 extracts the transaction T-1 received from the terminal TM-1, the transaction T-2 received from the terminal TM-2, and the transaction Tn received from the terminal TM-n. It is supplied to the calculation unit 130.

The calculation unit 130 acquires the transaction T from the extraction unit 120. The calculation unit 130 calculates the hash value of the acquired transaction T (hereinafter, transaction hash value HV). The calculation unit 130 supplies the calculated transaction hash value HV to the transmission unit 140.
The transmission unit 140 transmits the transaction hash value HV acquired from the calculation unit 130 to another node using the network NW.

The node connected to the network NW performs mining based on the transaction hash value HV transmitted by the generation device 10 and the transaction transmitted by another device. Mining is the calculation of a hash value that meets the conditions under which a node closes a block. The node connected to the network NW generates a block including the hash value of the mined block, the transaction hash value HV included in the block, and the nonce value, and transmits the block to other nodes using the network NW.

FIG. 4 is a diagram showing an example of a blockchain that records a transaction hash value HV generated by the generation device 10 of the first embodiment.
FIG. 4 is a diagram showing an example of a blockchain in the case where only the generator 10 is connected to the network NW, for example. In other words, only the transaction hash value HV is recorded as a transaction in the block. Therefore, in each block of the blockchain shown in FIG. 4, a transaction hash value HV is stored in place of the transaction included in the blockchain shown in FIG.

[About the operation of the generator]
FIG. 5 is a flow chart showing an example of the operation of the generator 10 of the first embodiment.
The receiving unit 110 receives the transaction T from each terminal TM (step S110). The receiving unit 110 receives the transaction T at all times or at a predetermined time interval, for example. The extraction unit 120 extracts the transaction T that is not recorded in the blockchain from the transaction T included in the transaction history information TI (step S120). The calculation unit 130 calculates the transaction hash value HV of the transaction T extracted by the extraction unit 120 (step S130). The transmission unit 140 transmits the transaction hash value HV calculated by the calculation unit 130 using the network NW (step S140).

[Summary of the first embodiment]
As described above, the generation device 10 of the present embodiment calculates the transaction hash value HV based on the received transaction T and transmits it using the network NW. The node connected to the network NW generates a block based on the transaction hash value HV.

The generator 10 of the present embodiment can record the transaction hash value HV on the blockchain instead of the transaction T by transmitting the transaction hash value HV to the network NW. Therefore, according to the generation device 10 of the present embodiment, the personal information of the trader who conducts the transaction can be kept private by transmitting the transaction T. Further, the generation device 10 of the present embodiment has the validity of the transaction T, which is the data that is the source of the transaction hash value HV, based on the transaction history information TI, the transaction hash value HV included in the block, and the nonce value. Can be guaranteed. Therefore, according to the generation device 10 of the present embodiment, it is possible to increase the confidentiality of the transaction T of the trader and guarantee the validity of the transaction T. That is, according to the generation device 10 of the present embodiment, the history information of PPM can be recorded by the blockchain.

Further, the extraction unit 120 included in the generation device 10 of the present embodiment is a block (for example, the latest block) that is closed before the block that is in the open state among the plurality of blocks included in the blockchain. The transaction T of the transaction after the time when the transaction recorded in is performed is extracted.
Here, when the calculation unit 130 calculates the transaction hash value HV using all of the transactions T included in the transaction history information TI as the original data, the processing load of the generation device 10 may increase. The extraction unit 120 included in the generation device 10 of the present embodiment extracts a transaction T other than the transaction T (transaction hash value HV) recorded on the blockchain. In other words, the extraction unit 120 included in the generation device 10 of the present embodiment extracts the difference between the transaction history information TI and the transaction T recorded in the blockchain. As a result, the generation device 10 of the present embodiment can reduce the processing load when calculating the transaction hash value HV.

In the above description, the case where the generation device 10 has a function as a node has been described, but the present invention is not limited to this. For example, the PPM device may be configured to have a function as a node, or another device connected to the network NW may be configured to have a function as a node. In this case, the blockchain information BLK may not be stored in the storage unit 500 included in the generation device 10.

In the present embodiment, the receiving unit 110 is an example of the "history information receiving unit". The transaction T is an example of "history information". The transaction T extracted by the extraction unit 120 is an example of “unrecorded history information”. The transaction hash value HV is an example of "hash value of unrecorded history information". Further, the transmission unit 140 is an example of a “hash value transmission unit”.

[Second Embodiment]
Hereinafter, a second embodiment of the present invention will be described with reference to the drawings. In the first embodiment, a case where a node connected to the network NW performs mining and generates a block has been described. In the second embodiment, a case where each node connected to the network NW performs mining and consensus building to generate a block will be described.
The same components as those in the above-described embodiment are designated by the same reference numerals and the description thereof will be omitted.

[Overview of generator]
FIG. 6 is a diagram showing an example of a network configuration of the consensus building system 1 of the second embodiment. As shown in FIG. 6, the consensus building system 1 includes a plurality of generation devices 11. Specifically, four PPM devices (PPM devices-1 to PPM device-4 (shown in the figure)) are connected to the network NW, and each PPM device includes a generation device 11. More specifically, the PPM device-1 is provided with the generator 11-1, the PPM device-2 is provided with the generator 11-2, and the PPM device-3 is equipped with the generator 11-3. The PPM device-4 is provided with a generator 11-4.

Further, the PPM device-1 receives the transaction T (transaction T1-1 to T1-n) from the target terminal TM (terminals TM1-1 to TM1-n shown in the figure) that manages the transaction T. The PPM device-2 receives the transaction T (transaction T2-1 to T2-n) from the target terminal TM (terminals TM2-1 to TM2-n shown in the figure) that manages the transaction T. The PPM device-3 receives the transaction T (transaction T3-1 to T3-n) from the target terminal TM (terminals TM3-1 to TM3-n shown in the figure) that manages the transaction T. The PPM device-4 receives the transaction T (transaction T4-1 to T4-n) from the target terminal TM (terminals TM4-1 to TM4-n shown in the figure) that manages the transaction T.

In an example of this embodiment, the generator 11-1 performs mining. In addition, the generators 11-2 to 11-4 form a consensus on the mining performed by the generators 11-1. Specifically, the generators 11-2 to 11-4 select whether or not they agree with the mining performed by the generators 11-1.
Hereinafter, a specific configuration of the generator 11 will be described.

[About the configuration of the generator]
FIG. 7 is a diagram showing an example of the configuration of the generator 11 of the second embodiment.
As shown in FIG. 7, the generation device 11 includes a control unit 101 and a storage unit 500.
The control unit 101 includes a CPU, and includes a reception unit 110, an extraction unit 120, a calculation unit 130, a transmission unit 140, a route calculation unit 150, a selection unit 160, and a determination unit 170 as functional units. Prepare as.

In one example of this embodiment, the receiving unit 110 of the generation device 11 (in this example, the generation device 11-1) that performs mining is another generation device 11 (in this example, the generation devices 11-2 to 11-4). Receives the transaction hash value HV sent by. The receiving unit 110 supplies the received transaction hash value HV to the route calculation unit 150.

The route calculation unit 150 performs mining based on the transaction hash value HV received by the reception unit 110, the transaction hash value HV calculated by the calculation unit 130, and the blockchain information BLK. Specifically, the route calculation unit 150 sets the transaction hash value HV received by the reception unit 110, the transaction hash value HV calculated by the calculation unit 130, and the hash value of the latest block included in the blockchain information BLK. Based on this, the hash value of the block in the open state (hereinafter, root hash value RHV) is calculated.

The transmission unit 140 of the present embodiment transmits the route hash value RHV calculated by the route calculation unit 150 to another node (in this example, the generators 11-2 to 11-4) using the network NW.
The selection unit 160 selects whether or not to agree to generate a block (close a block in an open state) based on the root hash value RHV received by the reception unit 110.

The selection unit 160 selects, for example, not agreeing to generate a block when the transaction hash value HV calculated by the calculation unit 130 is not included in the root hash value RHV. Further, the selection unit 160 agrees to generate a block when, for example, the hash value of the latest block included in the blockchain information BLK (hereinafter, the previous block hash value BHV) is not included in the root hash value RHV. Select not to. Further, in the selection unit 160, for example, when the transaction hash value HV calculated by the calculation unit 130 is included in the root hash value RHV and the previous block hash value BHV is included in the root hash value RHV, the route concerned. Choose to agree to store the hash value RHV in the block as a transaction.

The selection unit 160 supplies information indicating the selected selection result to the transmission unit 140. The transmission unit 140 of the present embodiment transmits information indicating the selection result selected by the selection unit 160 to the generation device 11-1 that performs mining using the network NW.

The determination unit 170 determines whether or not to generate a block based on the information indicating the selection result received by the reception unit 110. The determination unit 170 generates a block, for example, when the majority of the received selection results agree to generate the block. Further, the determination unit 170 does not generate a block, for example, when the selection result that agrees to generate the block is not a majority of the received selection results. If the determination unit 170 does not generate a block, the transaction hash value HV calculated by the calculation unit 130 is discarded. Further, the transaction T, which is the original data of the discarded transaction hash value HV, is extracted when the extraction unit 120 extracts the transaction T at the next timing.

[About the operation of the generator]
FIG. 8 is a flow chart showing an example of the operation of the consensus building system 1 of the second embodiment.
Specifically, FIG. 8 is a flow chart showing an example of the operation of the generation device 11 for mining and the generation device 11 for consensus building. Since each generator 11 receives the transaction T from the terminal TM and transmits the transaction hash value HV using the network NW, the operation is the same as that of the first embodiment described above (see FIG. 5). , The description is omitted.

The receiving unit 110 of the generation device 11 (in this example, the generation device 11-1) that performs mining is from another generation device 11 (in this example, the generation devices 11-2 to 11-4) connected to the network NW. The transaction hash value HV is received (step S210). In the following description, the transaction hash value HV calculated by the calculation unit 130 of the generation device 11-1 will be referred to as the transaction hash value HV1. Further, the transaction hash value HV calculated by the calculation unit 130 of the generation device 11-2 is described as the transaction hash value HV2. Further, the transaction hash value HV calculated by the calculation unit 130 of the generation device 11-3 is described as the transaction hash value HV3. Further, the transaction hash value HV calculated by the calculation unit 130 of the generation device 11-4 is described as the transaction hash value HV4. Therefore, the receiving unit 110 of the generation device 11-1 receives the transaction hash values HV2 to HV4. The receiving unit 110 of the generator 11-1 receives, for example, the transaction hash value HV at a predetermined time interval. It is preferable that the time interval for receiving the transaction hash value HV and the time interval for the blockchain of the blockchain to generate a block match.

The route calculation unit 150 of the generation device 11-1 uses the transaction hash value HV1 calculated by the calculation unit 130 of the generation device 11-1, the transaction hash values HV2 to HV4 received by the reception unit 110, and the blockchain information BLK. Based on this, the root hash value RHV is calculated (step S220).

FIG. 9 is a diagram showing an example of a method of calculating the route hash value RHV of the route calculation unit 150 in the second embodiment. The route calculation unit 150 aggregates the transaction hash value HV included in the block into the route hash value RHV by using, for example, a Merkle tree. Here, the route calculation unit 150 of the generation device 11-1 has a route hash value based on the received transaction hash values HV2 to HV4, the transaction hash value HV1 calculated by the calculation unit 130, and the previous block hash value BHV. Calculate the RHV. Specifically, the route calculation unit 150 calculates a hash value (transaction hash value HV12 shown in the figure) based on the transaction hash value HV1 and the transaction hash value HV2. Further, a hash value (transaction hash value HV34 shown in the figure) is calculated based on the transaction hash value HV3 and the transaction hash value HV4. Further, the route calculation unit 150 calculates the transaction hash value HV1234 based on the transaction hash value HV12 and the transaction hash value HV34. Further, the route calculation unit 150 calculates the route hash value RHV based on the previous block hash value BHV and the transaction hash value HV1234.

The route calculation unit 150 includes the transaction hash value HV (transaction hash values HV1 to HV4 in this example) calculated by each generation device 11 connected to the network NW as the original data of the route hash value RHV. For example, the hash values may be calculated in any order. The route calculation unit 150 may calculate the transaction hash value HV1234 based on the transaction hash values HV1 to HV4, for example.

Returning to FIG. 8, the transmission unit 140 of the generation device 11-1 transmits the route hash value RHV calculated by the route calculation unit 150 to the generation devices 11-2 to 11-4 using the network NW (step S230). ..
Next, the receiving units 110 of the generation devices 11-2 to 11-4 for consensus building receive the root hash value RHV transmitted to the network NW (step S240). The selection unit 160 of the generation devices 11-2 to 11-4 selects whether or not to agree to generate a block (close the open block) based on the root hash value RHV.

For example, when the transaction hash value HV calculated by the calculation unit 130 is not included in the root hash value RHV (step S250; NO), the selection unit 160 selects that it does not agree to generate a block (step S270). .. Further, the selection unit 160 selects, for example, when the previous block hash value BHV is not included in the root hash value RHV (step S260; NO), and does not agree to generate the block (step S270). Further, in the selection unit 160, the transaction hash value HV calculated by the calculation unit 130 is included in the root hash value RHV (step S250; YES), and the previous block hash value BHV is included in the root hash value RHV. If (step S260; YES), you choose to agree to generate a block (step S280). The transmission unit 140 of the generation devices 11-2 to 11-4 for consensus building transmits information indicating the selection result selected by the selection unit 160 to the generation device 11-1 using the network NW (step S290).

The selection unit 160 verifies whether the transaction hash value HV and the previous block hash value BHV are included in the root hash value RHV by using, for example, a Merkle tree. Specifically, the selection unit 160 notifies the node of the hash value to be verified (for example, transaction hash value HV or previous block hash value BHV). The node supplies information indicating the position of the notified hash value to be verified in the Merkle tree (hereinafter, Merkle path) and information stored in each leaf passing from the Merkle path to the root node of the Merkle tree. A hash value is stored in each leaf of the Merkle tree. Therefore, the node supplies a hash value of each leaf from the Merkle path to the root node. The selection unit 160 calculates the hash value of the root node of the Merkle tree based on the hash value to be verified, each hash value supplied from the node, and the Merkle path.
When the calculated hash value of the root node and the root hash value RHV received by the receiving unit 110 match, the selection unit 160 determines that the hash value to be verified is included in the root hash value RHV. Further, when the calculated hash value of the root node and the root hash value RHV received by the receiving unit 110 do not match, the selection unit 160 determines that the hash value to be verified is not included in the root hash value RHV.

The receiving unit 110 of the generation device 11-1 receives the information indicating the selection result transmitted by the generation devices 11-2 to 11-4 for consensus building (step S300). The determination unit 170 determines whether or not the selection results received by the reception unit 110 are the majority of the selection results that agree to generate the block (step S310). If the majority of the selection results agree to generate the block (step S310; YES), the determination unit 170 determines that the block is generated (closes the open block) (step S320). ). Further, the determination unit 170 determines that the block is not generated (the open block is not closed) when the selection result that agrees to generate the block is not a majority (step S310; NO) among the selection results. (Step S330).

When the determination result of the determination unit 170 indicates that the block is generated, the transmission unit 140 of the generation device 11-1 generates a block including the root hash value RHV, the previous block hash value BHV, and the nonce value. The block is transmitted to other nodes (in this example, generators 11-2 to 11-4) using the network NW (step S340).

FIG. 10 is a diagram showing an example of a block chain that records the root hash value RHV generated by the generation device 11 of the second embodiment.
As shown in FIG. 10, each block of the blockchain stores a root hash value RHV in place of the transaction included in the blockchain shown in FIG.

In the above-described embodiment, the case where each of the generation devices 11 includes the route calculation unit 150 and the selection unit 160 has been described, but the present invention is not limited to this. For example, when the generation device 11 for mining is defined in advance among the plurality of generation devices 11 included in the consensus building system 1, the generation device 11 does not have to include the selection unit 160. Further, for example, when the generation device 11 for consensus building is defined in advance among the plurality of generation devices 11 included in the consensus building system 1, the generation device 11 does not have to include the route calculation unit 150. ..

Further, in the above description, among the generation devices 11 included in the consensus building system 1, the generation device 11-1 performs mining, and the other generation devices 11 (in this example, the generation devices 11-2 to 11-4) form a consensus. However, the case is not limited to this. For example, among the generation devices 11 included in the consensus building system 1, the generation device 11 for mining and the generation device 11 for consensus building may be randomly assigned for each block generation. Further, when the number of generation devices 11 included in the consensus building system 1 is large, even if some of the generation devices 11 form a consensus in order to reduce the processing load related to the consensus building and the traffic of the network NW. Good. In other words, the consensus building system 1 may include a generation device 11 that does not perform mining and consensus building. In this case, the transmission unit 140 of the generation device 11 that performs mining transmits the root hash value RHV only to the generation device 11 that performs consensus building. As a result, the consensus building system 1 of the present embodiment can suppress an increase in network NW traffic.

Further, in the present embodiment, the receiving unit 110 is an example of the “selection result receiving unit”. Further, the transmission unit 140 is an example of a “route value transmission unit”, a “selection result transmission unit”, and a “block transmission unit”.
Further, in the above description, the case where the consensus building system 1 includes four PPM devices (generation devices 11) has been described, but the present invention is not limited to this. The consensus building system 1 may include, for example, at least two or more generation devices 11.

[Summary of the second embodiment]
As described above, the consensus building system 1 of the present embodiment includes a plurality of generation devices 11. Among the generation devices 11 included in the consensus formation system 1, the receiving unit 110 of the generation device 11 (in this example, the generation device 11-1) that performs mining is the other generation device 11 (in this example, the generation device 11-2). The transaction hash value HV (in this example, the transaction hash values HV2 to HV4) is received from each of ~ 11-4). The route calculation unit 150 of the generation device 11-1 is based on the transaction hash value HV (transaction hash value HV1 in this example) calculated by the calculation unit 130 and the received transaction hash values HV2 to HV4. Calculate the RHV.

The selection unit 160 of the generation devices 11-2 to 11-4 for consensus building selects whether or not to generate a block based on the root hash value RHV transmitted by the generation device 11-1. The determination unit 170 of the generation device 11-1 determines whether or not the generation devices 11-2 to 11-4 agree to generate the block based on the selection result selected. The transmission unit 140 of the generation device 11-1 generates a block when the selection result that agrees to generate the block is the majority of the selection results, and uses the network NW to generate another node (in this example, the generation device). It is transmitted to 11-2 to 11-4).

According to the consensus building system 1 of the present embodiment, consensus building can be performed on the mined hash value (root hash value RHV). Further, according to the consensus building system 1 of the present embodiment, it is possible to prevent unauthorized processing of the information recorded on the blockchain by performing consensus building.

Further, the generation devices 11-2 to 11-4 that form the consensus of the consensus building system 1 of the present embodiment generate a block when the root hash value RHV includes the transaction hash value HV calculated by the own device. Select to agree with. Here, among the generation devices 11 for consensus building, one generation device 11 does not grasp the value of the transaction hash value HV calculated by the other generation device 11. Therefore, when the root hash value RHV includes the transaction hash value HV calculated by the own device, the generation device 11 that forms the agreement at least illegally falsifies the transaction hash value HV calculated by the own device. You can confirm that it is not.

Further, the generation devices 11-2 to 11-4 for consensus building of the consensus building system 1 of the present embodiment agree to generate a block when the root hash value RHV includes the previous block hash value BHV. Then select. Here, the generation device 11 for consensus building can refer to the blockchain (blockchain information BLK). Therefore, when the root hash value RHV includes the previous block hash value BHV, the generation device 11 that performs consensus building can confirm that the block has not been tampered with illegally.

[Modification example]
Hereinafter, a modified example according to the second embodiment will be described with reference to the drawings.
In the second embodiment, the configuration in which the determination unit 170 of the generation device 11 generates a block when the selection result that agrees to generate the block is the majority of the selection results has been described.
In the modified example, a case where the determination unit 170 determines whether or not to generate a block will be described based on the reliability attached to the generation device 11.
The same components as those in the above-described embodiment are designated by the same reference numerals, and the description thereof will be omitted.

FIG. 11 is a diagram showing an example of the network configuration of the consensus building system 2 of the modified example.
As shown in FIG. 11, each of the generation devices 11 included in the consensus building system 2 is given a reliability. The reliability is, for example, a large value given to the generator 11 that agrees with the information that is not fraudulent, and a small value is given to the generator 11 that agrees with the information that is fraudulent. .. The fraudulent information is, for example, the root hash value RHV that was not agreed upon by consensus building. Further, the information that is not improper is, for example, the root hash value RHV agreed by consensus building.
In the modified example, the generator 11-1 is assigned a reliability "5", the generator 11-2 is assigned a reliability "3", and the generator 11-3 is assigned a reliability "2". Is attached, and the reliability "4" is attached to the generator 11-4.

The reliability is determined from the reliability of the generator 11 that agrees to the information that is not fraudulent by adding a predetermined value to the reliability of the generator 11 that agrees to the information that is not fraudulent. The configuration may be such that the value is deducted.

In the modified example, the transmission unit 140 of the generation device 11 that performs consensus building transmits information indicating the reliability together with the information indicating the selection result selected by the selection unit 160.
Further, in the modified example, when the determination unit 170 of the generation device 11 that performs mining has a sum of the reliabilitys of the generation device 11 that has transmitted the selection result that agrees to generate the block among the selection results, is equal to or more than a predetermined threshold value. , Judge that the block is generated. Further, the determination unit 170 of the generation device 11 that performs mining blocks when the sum of the reliabilitys of the generation devices 11 that have transmitted the selection results that agree to generate the blocks is smaller than a predetermined threshold value among the selection results. Is not generated.

Here, when the predetermined threshold value is "6" and the generation device 11-3 and the generation device 11-4 transmit the selection result that agrees to generate the block, the sum of the reliabilitys is ". 6 ”. Therefore, the determination unit 170 of the generation device 11-1 determines that the block is generated. Further, when the generation device 11-2 and the generation device 11-3 transmit the selection result that agrees to generate the block, the sum of the reliabilitys is "5". Therefore, the determination unit 170 of the generation device 11-1 determines that the block is not generated.
Since the following configurations are the same as those in the above-described embodiment, the description thereof will be omitted.

[Summary of modified examples]
As described above, the generation device 11 included in the consensus building system 2 of the modified example is given reliability. In the consensus building system 2 of the modified example, the sum of the reliabilitys attached to the generator 11 that has transmitted the selection result indicating that the block is generated (the block in the open state is closed) is equal to or higher than a predetermined threshold value. If so, generate a block.
Therefore, according to the consensus building system 2 of the modified example, when a certain number of highly reliable generation devices 11 agree, a block is generated and information that has not been tampered with illegally is recorded in the blockchain. it can.

In the above-described embodiments and modifications, the case where each generation device 10 and each generation device 11 conducts the same type of transaction (in this example, a money transaction) has been described, but the present invention is not limited to this. .. For example, each generation device 10 and each generation device 11 may be configured to keep the contents of the transaction T private for different types of transactions and guarantee the validity of the transactions. For example, the generator 11-1 and the generator 11-2 process the transaction T regarding the provision history of the digital rights-managed data, and the generator 11-3 and the generator 11-4 process the transaction T. It may be configured to process the transaction T related to the provision history of personal information and privacy information.
As a result, it is possible to keep the contents of the transaction T related to a plurality of types of transactions private to the blockchain and guarantee the validity of the transaction.

The generator 10 and each part included in the generator 11 in each of the above embodiments may be realized by dedicated hardware, or may be realized by a memory and a microprocessor. Good.

Each part of the generation device 10 and the generation device 11 is composed of a memory and a CPU (central processing unit), and a program for realizing the functions of the generation device 10 and each part of the generation device 11 is loaded into the memory. The function may be realized by executing the function.

Further, a program for realizing the functions of the generation device 10 and each part included in the generation device 11 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read by the computer system and executed. The process may be performed accordingly. The term "computer system" as used herein includes hardware such as an OS and peripheral devices.

In addition, the "computer system" includes a homepage providing environment (or display environment) if a WWW system is used.
Further, the "computer-readable recording medium" refers to a portable medium such as a flexible disk, a magneto-optical disk, a ROM, or a CD-ROM, or a storage device such as a hard disk built in a computer system. Further, a "computer-readable recording medium" is a communication line for transmitting a program via a network such as the Internet or a communication line such as a telephone line, and dynamically holds the program for a short period of time. In that case, it also includes the one that holds the program for a certain period of time, such as the volatile memory inside the computer system that becomes the server or client. Further, the above-mentioned program may be a program for realizing a part of the above-mentioned functions, and may be a program for realizing the above-mentioned functions in combination with a program already recorded in the computer system.

Although the embodiments of the present invention have been described in detail with reference to the drawings, the specific configuration is not limited to this embodiment and may be appropriately modified without departing from the spirit of the present invention. it can. The configurations described in each of the above-described embodiments may be combined.

1, 2 ... Consensus building system, 10, 11, 11-1, 11-2, 11-3, 11-4 ... Generator, 100, 101 ... Control unit, 110 ... Receiver unit, 120 ... Extraction unit, 130 ... Calculation unit, 140 ... Transmission unit, 150 ... Route calculation unit, 160 ... Selection unit, 170 ... Judgment unit, 500 ... Storage unit, BHV ... Previous block hash value, BLK ... Blockchain information, TI ... Transaction history information, HV, HV1, HV2, HV3, HV4, HV12, HV34, HV1234 ... Transaction hash value, NW ... Network, RHV ... Root hash value, T, T-1, T-n, T1-1, T1-n, T-2, T2-1, T2-n, T3-1, T3-n, T4-1, T4-n ... Transaction

Claims (8)

A consensus building system that includes a plurality of first generators and at least one second generator to form consensus on blocks of a blockchain.
Each of the first generators
A hash value transmitter that transmits the hash value of the transaction as the first hash value to the second generator , and
A selection unit that selects whether or not to close the open block based on the root hash value transmitted from the second generator, and
A selection result transmission unit that transmits information indicating the selection result selected by the selection unit to the second generation device, and a selection result transmission unit.
With
The second generator is
A receiver that receives the transaction and the first hash value,
A calculation unit that calculates the hash value of the transaction as the second hash value,
Said first hash value of the first generation apparatus transmits each of said second hash value which the calculation unit is calculated, based on said block chain, a route calculating unit for calculating the root hash value,
A route value transmission unit that transmits the calculated route hash value to the plurality of first generation devices, respectively .
A selection result receiving unit that receives the selection result transmitted by the first generation device in response to the transmission of the route hash value, and
Based on the selection result received by the selection result receiving unit, a determination unit that determines whether or not to close the block in the open state, and a determination unit.
When the determination result of the determination unit indicates that the block in the open state is to be closed, the block transmission unit that transmits the closed block to the terminal connected to the network and the block transmission unit.
Consensus building system with. The selection unit
When the root hash value includes the second hash value calculated by the own device, the block in the open state is selected to be closed.
The consensus building system according to claim 1 . The selection unit
If the hash value of the block that was closed immediately before the block that is open is not included in the root hash value, the block that is open is selected not to be closed.
The consensus building system according to claim 1 or 2 . Each of the plurality of first generators has a reliability.
The determination unit
If the sum of the reliabilities respectively subjected to the first generation apparatus which has transmitted the selection result indicating that the an open state block to the closed state is equal to or greater than a predetermined threshold value, a is an open state block Judged to be closed,
Consensus system according to any one of claims 1 to 3. The second generator is
On the basis of the block chain of said transaction received by the receiving unit, extracting unit that extracts an unrecorded transactions are transactions which are not recorded in the block chain
With more
The calculation unit
The hash value of the unrecorded transaction extracted by the extraction unit is calculated as the second hash value.
The consensus building system according to any one of claims 1 to 4. The extraction unit
Among the plurality of blocks included in the blockchain, the transaction of the transaction recorded in the block closed before the block in the open state is extracted as the unrecorded transaction after the time when the transaction is performed. To do,
The consensus building system according to claim 5 . On the computer
A receive step that receives the transaction and the first hash value generated by the first generator.
A calculation step of calculating the hash value of the transaction as a second hash value, and
A route calculation step for calculating a route hash value based on the first hash value transmitted by the first generator, the second hash value calculated in the calculation step, and the blockchain.
A route value transmission step of transmitting the calculated route hash value to each of the plurality of first generation devices, and
In response to the transmission of the root hash value, the selection result of whether or not to close the open state block selected by the first generation device is received from each of the first generation devices. Selection result reception step and
Based on the selection result received in the selection result receiving step, a determination step of determining whether or not to close the block in the open state, and a determination step.
When the determination result in the determination step indicates that the block in the open state is to be closed, the block transmission step of transmitting the closed block to the terminal connected to the network and the block transmission step
A program to execute. A receiving step in which the computer receives the transaction and the first hash value generated by the first generator.
A calculation step in which the computer calculates the hash value of the transaction as the second hash value,
A route calculation step in which a computer calculates a route hash value based on the first hash value transmitted by the first generator, the second hash value calculated in the calculation step, and the blockchain. When,
A route value transmission step in which the computer transmits the calculated route hash value to the plurality of first generation devices, respectively.
In response to the transmission of the root hash value by the computer, the selection result of whether or not to close the open state block selected by the first generator is selected by each of the first generators. The selection result reception step to receive from
A determination step in which the computer determines whether or not to close the block in the open state based on the selection result received in the selection result receiving step.
When the computer indicates that the block in the open state is to be closed, the block transmission step of transmitting the closed block to the terminal connected to the network is used.
Production method having.

Images