TW202032479A - Method for processing transaction via external node on blockchain and apparatus for performing the method - Google Patents

Abstract

The present invention relates to a method for processing a transaction using an external node on a blockchain and an apparatus for performing the method. The method for processing a transaction using an external node on a blockchain comprises the steps of: setting, by a setting node, an internal node and the external node; setting, by the setting node, a first data transaction authority for the internal node; and setting, by the setting node, a second data transaction authority for the external node, wherein the first data transaction authority may be an operation authority on a blockchain network, set for the internal node, and the second data transaction authority may be an operation authority on the blockchain network, set for the external node.

Description

Method for processing transaction through external node of blockchain and device for executing the method

The invention relates to a method for processing transactions through external nodes of a blockchain and a device for executing the method. In more detail, it relates to a method and device that can perform limited operations on a blockchain network by setting prescribed permissions on external nodes.

Blockchain can be a digital ledger that encrypts transaction information generated in a public network or a private network to be shared among network members.

A copy of the transaction ledger is distributed to each network member, so that whenever a new transaction occurs, the corresponding transaction can be authenticated with the member's consent.

Blockchain-based transaction information cannot be changed arbitrarily, thus increasing the reliability of transactions and making it easier to track information. Especially in the field of financial services, efforts are being made to apply blockchain technology to improve business efficiency and establish a new service foundation.

Transparent transactions through a distributed ledger system can save security, supervision, and supervision costs. Blockchain can be used not only in the financial field, but also in logistics, circulation and even government public administrative services.

In a public blockchain network such as the existing Bitcoin, participating nodes can have the same permission to operate on the blockchain network, but in a private blockchain network (private blockchain network) ) Or permissioned blockchain network (permissioned blockchain network), you can operate in the blockchain by setting different permissions per node.

Therefore, it is necessary to study a method for setting differential (or limited) permissions to operate on the blockchain network.

The purpose of the present invention is to solve all the above-mentioned problems.

In addition, the purpose of the present invention is to allow limited operations on the blockchain network by setting prescribed permissions on external nodes.

In addition, the purpose of the present invention is to use channels, channel coding, data classification, etc. to restrict access rights to nodes in a layered manner on a blockchain network.

For the detailed description of the present invention to be described later, reference is made to the drawings showing specific embodiments in which the present invention can be implemented as examples. This embodiment will be described in detail below, so that those of ordinary skill in the art to which the present invention belongs can implement the present invention. Although the various embodiments of the present invention are different from each other, they are not mutually exclusive. For example, the specific shapes, structures, and characteristics described in this specification can be changed from one embodiment to other embodiments without departing from the spirit and scope of the present invention. In addition, the position or arrangement of each embodiment or individual structural elements may also be changed without departing from the spirit and scope of the present invention. Therefore, the following detailed description is not intended to limit the present invention, and the scope of the present invention should be understood to include the scope of the claims in the protection scope of the invention and all equivalent scopes. In the figures, similar reference numerals denote the same or similar structural elements in many aspects.

Hereinafter, with reference to the accompanying drawings, a number of preferred embodiments of the present invention will be described in detail, so that those skilled in the art to which the present invention belongs can easily implement the present invention.

Hereinafter, the embodiment of the present invention discloses a method of setting permissions on the blockchain network by node to allow a specific node to have limited access on the blockchain network.

The following digital asset-backed securities disclosed in the embodiments of the present invention may be digital securities that are issued in a backed manner and can be traded on a network such as a blockchain. In the following, digital asset-backed securities are represented by the term DABS. DABS can be broadly interpreted as including a variety of methods that can be traded at a prescribed value on networks such as blockchain.

FIG. 1 is a conceptual diagram showing a method for processing transactions through external nodes of the blockchain according to an embodiment of the present invention.

Figure 1 discloses a method for differentially setting data transaction permissions by setting node permissions. Data transaction permission can be used in the meaning including permission to access/process (read, write, etc.) specific data on the blockchain, request permission to a specific process on the blockchain network, etc.

The present invention discloses a blockchain network structure for providing data transaction permission on the blockchain network to external nodes limitedly by setting data transaction permission on the blockchain network of the external node. In this way, external nodes can also be granted some permissions for operations on the blockchain network.

Referring to Figure 1, a blockchain network may include nodes, and nodes may be server units constituting the blockchain network. The nodes in the blockchain network can be connected through channels. Multiple nodes can be connected through the same channel or different channels, only nodes belonging to the same channel can communicate with each other, and one node can have multiple channels.

For example, (node 1 110, node 2 120, node 3 130) can communicate through the first channel 160, and (node 3 130, node 4 140, node 5 150) can communicate through the second channel 170. The node 1 110, the node 2 120, and the node 3 130 can communicate through the first channel 160, and the node 3 130, the node 4 140, and the node 5 150 can communicate through the second channel 170. The node 3 130 may have data transaction permission on the first channel 160 and the second channel 170. The node 1 110 and the node 2 120 may have data transaction permission on the first channel 160. The node 4 140 and the node 5 150 may have data transaction permission on the second channel 170. Each channel can generate a separate block and blockchain. According to needs, a separate blockchain can be generated by running a separate channel.

A chain code can be set at the node, and the transaction that can be processed by the node is determined based on the chain code set at the node. For example, in the node 1 110 and the node 2 120 connected through the first channel 160, the node 1 110 is provided with a chain code A and a chain code B, and the node 2 120 may be provided with a chain code A.

In this case, node 1 110 can process transactions related to chain code A and chain code B, and node 2 120 can only process transactions related to chain code A. The chain code can be updated through different versions, and the data attached to a specific chain code can only be shared among the nodes with the corresponding chain code.

In addition, according to the embodiment of the present invention, the data transaction permission can be restricted by node by dividing the data. Data can be divided into public data (public data) and private data (private data). A node that sets a specific chain code on a specific channel can have the permission to trade public materials. Among the nodes with a specific chain code set on a specific channel, only those nodes that have been given individual access rights to the special data can have the data transaction permission for the special data.

That is, according to the embodiment of the present invention, the data transaction permission of the node can be set based on the channel, the channel code, and the data classification. Specifically, the data transaction permission rights of nodes can be restricted in the order of channel, channel code, and data classification.

In order to have permission for data transactions in the channel, it must be a node belonging to the channel. In addition, in order to have the permission to trade data related to the chain code in the data in the channel, it must be a node with a specific chain code. In addition, in order to have the permission for data transactions that are classified as dedicated data among the data related to the specific chain code of the specific channel, it must be a node that can access the dedicated data.

In the node of the channel unit, the node of the chain code unit in the channel, and the chain code unit, the data transaction permission can be set in a specific node unit.

When the data shared in a specific channel is transacted, events related to data changes caused by the transaction can occur on all nodes in the channel that have the data transaction permission for the corresponding data.

In addition, when the data shared in the specific chain code in a specific channel is traded, the data caused by the transaction can be generated on the node with the specific chain code in the specific channel that has the data transaction permission for the corresponding data. Change related events.

Similarly, when special data shared in a specific chain code in a specific channel is traded, the nodes with a specific chain code in the specific channel that have the data transaction permission for the corresponding special data can be An event related to the data change occurs on the node of the permission of the data.

Hereinafter, the embodiments of the present invention disclose a method of processing transactions by setting up such external nodes that restrict data connection (or sharing) permissions in a layered manner.

In the embodiments of the present invention, for ease of description, the description is based on transactions related to transactions of assets, but transactions related to other information that are not asset transactions are also included in the scope of rights of the present invention.

FIG. 2 is a conceptual diagram showing a method of processing transactions that occur due to external nodes according to an embodiment of the present invention.

Figure 2 discloses a method of processing transactions that occur due to external nodes based on setting transaction permissions.

Referring to FIG. 2, nodes on the blockchain network can be divided into internal nodes 200 and external nodes 210, 220. The external nodes 210, 220 and the internal node 200 may have different data transaction permissions. The internal node 200 may be a node with the first data transaction permission 250 on the blockchain network, and the external nodes 210 and 220 may be the nodes with the second data transaction permission 260 on the blockchain network.

The first data transaction permission right 250 may be a relatively wider (or superior) permission right than the second data transaction permission right 260. Some of the data that can be accessed and/or processed through the first data transaction permission right 250 may not pass the second data transaction permission right. 2. Data transaction permission 260 to access and/or process.

It can be assumed that the internal node 200, the first external node 210, and the second external node 220 are located on the blockchain network. The internal node 200 may have a first data transaction permission right 250, and the first external node 210 and the second external node 220 may have a second data transaction permission right 260. The first data transaction permission right 250 may be a higher level of permission than the second data transaction permission right 260.

For example, the second data transaction permission right 260 may include the data transaction permission right for generating transaction request data and sharing the transaction request data with other nodes having the same or higher level data transaction permission. The first data transaction permission 250 not only includes the data transaction permission for generating transaction request data and sharing transaction request data with other nodes with the same or higher level of data transaction permission, but also can include processing transaction request data, judging validity, and The data transaction permission of asset information can be changed.

The internal node 200, the first external node 210, or the second external node 220 can generate a transaction for generating and sharing transaction request data according to the first data transaction permission 250. For example, when the first external node 210 with the first data transaction permission 250 generates transaction request data, the second external node 220 and the internal node 200 with the same first data transaction permission 250 can also share the same Transaction request data generated by node 210.

The internal node 200 can process the transaction request data based on the first data transaction permission right 250, determine the validity, and change the asset information. The internal node 200 uses the transaction engine to determine the validity of the transaction request data, and in the case of a valid transaction request, it can execute the process of changing personal assets.

As a specific example, the first external node 210 generates transaction request data for purchasing specific digital asset support securities traded on the exchange based on the second data transaction permission 260, and can be shared with the second external node 220 and the internal node 200 The above information. The first external node 210 may be a node of a separate service provider such as an external messenger service node, an external financial service node, or the like.

That is, the node that provides the separate service is given the first data transaction permission 250 as the permission to request the transaction of digital asset-supported securities, so that even if it does not directly go through the exchange, it can be used in the messenger service or a separate financial service. Request for trading of digital asset-backed securities, and digital asset-backed securities trading services can also be provided in other existing services.

The transaction request data generated by the first external node 210 can be shared between the second external node 220 and the internal node 200. The internal node 200 may be an exchange node, and the exchange node performs transactions on digital asset-backed securities based on shared transaction request data, and may reflect the result of the digital asset-backed securities transaction in the asset list.

That is, the external nodes 210 and 220 are given permission to generate transaction request data, and the user can also request transactions of digital asset-supported securities in the external service, and process the requested digital asset-supported securities transactions. Users can also use the messenger service to trade digital asset-backed securities without directly connecting to exchange nodes.

For ease of explanation, Figure 2 discloses transactions related to the transaction of digital asset-backed securities, but in addition to transactions of digital asset-backed securities, other transactions related to multiple purposes are also set up in specific external nodes 210, 220 with limited Data transaction permission rights can also be used at external nodes 210 and 220 based on blockchain services.

In order to set limited data transaction permissions on such external nodes 210 and 220, various methods can be used. Hereinafter, in the embodiment of the present invention, as a method for setting limited data transaction permissions on external nodes 210 and 220, 1) data classification method, 2) chain code setting method, and 3) channel classification method are specifically disclosed.

Fig. 3 is a conceptual diagram showing a method for setting a limited data transaction permission on an external node according to an embodiment of the present invention.

Figure 3 shows a method of setting limited data transaction permission on external nodes based on data classification.

3, when the same channel and the same chain code are set on the internal node 300 and the external node 320, data such as the first data (for example, public data) and the second data (for example, dedicated data) can be passed Classification to limit the data transaction permission of the corresponding data. The data can be classified by assigning a separate identifier or encrypting the data separately.

The internal node 300 can be set to have the data transaction permission for the first data and the second data, and the external node 320 can be set to have the data transaction permission for the first data. In this case, the internal node 300 can process the first data and the second data by generating a transaction related to the first data and the second data, and the external node 320 can generate a transaction related to the first data to process the first data.

It can be assumed that the first data is transaction request data and the second data is asset management data. In this case, the external node 320 may generate transactions related to the transaction request data to be shared with the internal node 300, and the internal node 300 processes the transaction request data, and generates transactions related to the asset management data used to manage the assets for processing.

Based on this data classification, even if the same channel and the same chain code are used, different data transaction permissions are set, so that the external node 320 can also use some of the blockchain-based services provided by the internal node 300 service.

Fig. 4 is a conceptual diagram of a method for setting a limited data transaction permission on an external node according to an embodiment of the present invention.

Figure 4 discloses a method of setting limited data transaction permissions on external nodes by setting chain codes.

4, the internal node 400 may be provided with a first chain code, and the external node 420 may be provided with a second chain code.

The data transaction permission for transaction request transactions and asset management transactions can be granted based on the first chain code, and the data transaction permission for transaction request transactions can be granted based on the second chain code.

Therefore, the external node 420 with the second chain code can generate a transaction request transaction, and the internal node 400 with the first chain code can verify the validity of the transaction request transaction, and generate an asset management transaction based on the transaction request transaction to change assets.

Based on the classification of the nodes that set this chain code, multiple nodes connected through the same channel can operate with different data transaction permissions. The external node 420 can also use the blockchain-based services provided by the internal node 400 Some services.

Fig. 5 is a conceptual diagram showing a method for setting a limited data transaction permission on an external node according to an embodiment of the present invention.

Figure 5 discloses a method for setting limited data transaction permissions on external nodes based on channel classification.

Referring to FIG. 5, the internal node 500 and the external node 520 can set different data transaction permissions by dividing the first channel and the second channel.

The internal node 500 may be set to communicate through the first channel and the second channel, and the external node 520 may be set to communicate only through the second channel.

The external node 520 can use the second channel to share transaction request data, and the internal node 500 can confirm the transaction request data through the second channel. The internal node 500 can generate and process transaction asset management data on the first channel based on the transaction request data confirmed through the second channel.

In this way, the transaction request data can also be generated by the external node 520 and transmitted to the internal node 500 to process the transaction request data.

Fig. 6 discloses a method for hierarchically setting external nodes according to an embodiment of the present invention.

Fig. 6 discloses a method of setting first-level external nodes, second-level external nodes, and third-level external nodes based on internal nodes.

Referring to FIG. 6, internal nodes, first-level external nodes, and second-level external nodes may be connected through a first channel, and third-level external nodes may be connected through a second channel. Thus, the third-tier external nodes can be separated from the internal nodes, the first-tier external nodes, and the second-tier external nodes, and the third-tier external nodes can perform limited operations on the blockchain network.

Then, the channel code A can be set on the internal nodes, the first layer external nodes, the internal nodes of the second layer external nodes, and the first layer external nodes, and the channel code B can be set on the second layer external nodes. The internal nodes with channel code A and the first-level external nodes can share data related to channel code A, but the second-tier external nodes with channel code B can share data related to channel code B. Thus, the second-tier external nodes can be separated from the internal nodes and the first-tier external nodes, and the second-tier external nodes can perform limited operations on the blockchain network.

Then, the dedicated data can be set so that only the internal nodes in the internal nodes and the first-tier external nodes can be accessed. In this case, the dedicated data can only be accessed by internal nodes, and the external nodes on the first level may not be accessible. As a result, internal nodes can be separated from the first-level external nodes, and the first-level external nodes can perform limited operations on the blockchain network.

The permission setting per node in the embodiment of the present invention can be performed by the setting node. The setting node may include: a communication part for communicating with an external node; and a processor operatively connected with the communication part. The processor can execute a method of setting permissions per node.

The method for processing transactions through the external nodes of the blockchain in the embodiment of the present invention may include: the steps of setting the nodes to set internal nodes and external nodes; the steps of setting the nodes to set the first data transaction permission on the internal nodes; and the steps of setting the nodes to the external nodes In the step of setting the second data transaction permission, the first data transaction permission is set on the internal node, and can be the operation permission on the blockchain network, and the second data transaction permission is set on the external node, and can be Operation permission on the blockchain network. As described above, the first data transaction permission and the aforementioned second data transaction permission can be set based on channel, channel code, or data classification.

When the first data transaction permission and the second data transaction permission are set based on the channel, the internal nodes are connected based on the first channel, and the external nodes are connected based on the second channel. The first channel and the second channel can be generated separately Separate blockchain.

When the first data transaction permission and the second data transaction permission are set based on the chain code, the internal node sets the first chain code, and the external node sets the second chain code. The internal node processes the data related to the first chain code, and the external node Process data related to the second chain code. The first chain code can include the function of the second chain code.

Fig. 7 is a conceptual diagram showing an asset transaction method through an external node according to an embodiment of the present invention.

Fig. 7 discloses a method for assuming that an external node is a messenger service operator and performing transactions on digital asset-backed securities through the external node.

Referring to FIG. 7, a separate external node is set up for messenger service operators, and messenger service users can execute transactions through messenger 700. For example, it provides a trading platform that can trade digital asset-backed securities on the messenger 700. Through the trading platform, it is also possible to execute trading orders for digital asset-backed securities on the messenger 700.

That is, the setting node sets the data transaction permission rights that can generate transaction orders on external nodes used for messenger service operators, and thus can generate transaction orders without connecting to the exchange node 720. As mentioned above, external nodes can set data transaction permissions based on channels, channel codes, and data classification.

The transaction order generated on the messenger 700 can be delivered to the exchange node 720 and processed at the exchange node 720 to complete the transaction. When the transaction is completed, the messenger 700 may notify the completion of the transaction. In this way, it is also possible to trade existing digital asset-supported securities that are only traded through connected exchanges through exchange nodes while using other services.

According to the embodiment of the present invention, limited functions can be given through channels, and channels can be restricted through the connection of independent channels and the connection of virtual channels. If multiple nodes bound through the same channel can be set as separate separate channels without interference from other nodes, they can be used as physically separated channels to set limited functions. For example, if node A, node B, and node C are used as nodes in the channel and can be connected without separate nodes in the middle, they can be set as independent channels as physically separated channels.

However, when it is necessary to use the same channel to set up, if the nodes in the channel are only connected through the nodes outside the channel in the middle, problems may occur in the security of the data transmitted through the channel. For example, if node A, node B, and node C as nodes in the channel can only be connected via node X, which is an intermediate node outside the channel, the physical separation channel cannot be set. In this case, according to the embodiment of the present invention, even in the case where nodes outside the channel are included in the middle, some channel section data separation encryption methods for setting as independent channels can be used.

When the data needs to be transmitted through the nodes outside the middle channel, the interval for data transmission through the nodes outside the middle channel can be set as the data separation and encryption interval, and the data can be separated and encrypted in the data separation and encryption interval. Specifically, the data transferred from the node in the channel to the node outside the channel can be encrypted and transferred to the node in the next channel in the bypass type. In this case, after the initial encryption, the encryption can be performed based on the encryption key value contained in the previously transmitted data, so it can be set to enable only the nodes in the channel that continue to change and decode the previously transmitted data. decoding. Multiple data separation encryption intervals can be set, and the encryption key values applicable to multiple data separation encryption intervals can be different from each other. In this way, even when the nodes outside the channel are in the middle, the nodes can be connected through virtual independent channels.

The above-described embodiments of the present invention can be implemented in the form of program instructions that can be executed by various computer components and recorded in a computer-readable recording medium. The computer-readable recording medium may include program instructions, data files, data structures, etc., alone or in combination. The program instructions recorded in the computer-readable recording medium may be specially designed and configured for the present invention, or may be program instructions known and used by those of ordinary skill in the computer software field. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical recording media such as CD-ROMs and DVDs, and magneto-optical media such as floptical disks. -optical medium) and hardware devices specially configured for storing and executing program instructions such as ROM, RAM, and flash memory. Examples of program instructions include not only machine codes generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware device can be changed by one or more software modules to perform the processing according to the present invention, and vice versa.

Although the present invention has been described in the above through specific matters such as specific structural requirements, limited embodiments, and drawings, this is only provided to help a more comprehensive understanding of the present invention, and the present invention It is not limited to the above embodiment. A person of ordinary skill in the technical field of the present invention can make various modifications and changes based on this description.

Therefore, the idea of the present invention should not be limited to the above-described embodiments. In addition to the scope of protection of the invention described below, all ranges equivalent to or equivalently changed from the scope of the invention shall also belong to the scope of the invention. within.

110: node 1 120: Node 2 130: Node 3 140: Node 4 150: Node 5 160: first channel 170: second channel 200: internal node 210: external node 220: external node 250: First data transaction permission 260: Second data transaction permission 300: internal node 320: external node 400: internal node 420: external node 500: internal node 520: external node 600: internal node 610: first-tier external nodes 620: second-tier internal nodes 630: third-tier external nodes 700: messenger 720: Exchange node

FIG. 1 is a conceptual diagram showing a method for processing transactions through external nodes of a blockchain according to an embodiment of the present invention. FIG. 2 is a conceptual diagram showing a method of processing transactions that occur due to external nodes according to an embodiment of the present invention. Fig. 3 is a conceptual diagram showing a method for setting a limited data transaction permission on an external node according to an embodiment of the present invention. Fig. 4 is a conceptual diagram of a method for setting a limited data transaction permission on an external node according to an embodiment of the present invention. Fig. 5 is a conceptual diagram showing a method for setting a limited data transaction permission on an external node according to an embodiment of the present invention. Fig. 6 discloses a method for hierarchically setting external nodes according to an embodiment of the present invention. Fig. 7 is a conceptual diagram showing an asset transaction method through an external node according to an embodiment of the present invention.

110: node 1

120: Node 2

130: Node 3

140: Node 4

150: Node 5

160: first channel

170: second channel

Claims (8)

A method for processing transactions through external nodes of the blockchain, which is characterized in that it includes: Steps to set up internal nodes and external nodes; The step of the setting node setting the first data transaction permission on the internal node; and The step for the setting node to set the permission of the second data transaction on the external node, The above-mentioned first data transaction permission is set at the above-mentioned internal node, and is the operation permission right on the blockchain network, The second data transaction permission is set at the external node, and is an operation permission on the blockchain network. The method for processing transactions through external nodes of the blockchain as described in claim 1, wherein the first data transaction permission and the second data transaction permission are set based on the channel, channel code, or data classification. The method for processing transactions through a blockchain external node as described in claim 2, wherein when the first data transaction permission and the second data transaction permission are set based on the channel, the internal node is based on the first One channel is used to connect, the external nodes are connected based on the second channel, and the first channel and the second channel are separated separately to generate a separate blockchain. The method for processing transactions through a blockchain external node as described in claim 3, characterized in that, when the first data transaction permission and the second data transaction permission are set based on the chain code, the internal node sets the A chain code, the external node sets a second chain code, the internal node processes data related to the first chain code, the external node processes data related to the second chain code, the first chain code includes the second chain code The function of the chain code. A setting node for processing transactions through external nodes on the blockchain, which is characterized in that it includes: The communication part is used to communicate with external nodes; and The processor is operatively connected to the aforementioned communication unit, The above processor sets internal nodes and external nodes, Set the first data transaction permission on the above internal nodes, Set up the second data transaction permission on the above external node, The above-mentioned first data transaction permission is set at the above-mentioned internal node, and is the operation permission right on the blockchain network, The second data transaction permission is set at the external node, and is an operation permission on the blockchain network. The setting node for processing transactions through external nodes on the blockchain as described in claim 5 is characterized in that the first data transaction permission and the second data transaction permission are based on channel, channel code, or data classification, respectively To set it up. The setting node for processing transactions on the blockchain through an external node as described in claim 6, characterized in that when the first data transaction permission and the second data transaction permission are set based on the channel, the internal The nodes are connected based on the first channel, the external nodes are connected based on the second channel, and the first channel and the second channel are separately separated to generate a separate blockchain. The setting node for processing transactions on the blockchain through external nodes as described in claim 7, characterized in that, when the first data transaction permission and the second data transaction permission are set based on the chain code, the internal The node sets a first chain code, the external node sets a second chain code, the internal node processes data related to the first chain code, and the external node processes data related to the second chain code. The first chain code includes The function of the above second chain code.

Images