TWI728571B - Resource management method and system for blockchain service - Google Patents

Abstract

The disclosure provides a resource management method and system for a blockchain service. The method includes: in response to receiving a first build request requesting to build a first blockchain container, obtaining a first available machine resource of a first host in a work group, and determining whether the first available machine resource of the first host is sufficient to meet a first resource requirements required for building the first blockchain container; in response to determining that the first available machine resource of the first host is sufficient to meet the first resource requirement, configuring and setting the first blockchain container on the first host according to the first build request.

Description

Resource management method and system for blockchain service

The present invention relates to a network resource management mechanism, and particularly relates to a resource management method and system for blockchain services.

In the past, the construction of blockchain required manual execution of blockchain package instructions, setting of blockchain network port mapping table, blockchain data volume mapping table, blockchain environment variables and other actions. The resource setting process of blockchain creation Extremely complicated. Therefore, for those skilled in the art, how to design a relatively convenient blockchain construction mechanism is actually an important issue.

In view of this, the present invention provides a resource management method and system for blockchain services, which can be used to solve the above technical problems.

The present invention provides a resource management method for blockchain services, which is suitable for a master control management system, and manages a work group including a plurality of masters. The method includes: constructing a first block in response to receiving requests A first build request of the chain container, obtain a first available machine resource of a first host in the work group, and determine whether the first available machine resource of the first host is sufficient to build the first blockchain container A required first resource requirement; in response to determining that the first available machine resource of the first host is sufficient to meet the first resource requirement, build and set the first blockchain container on the first host according to the first build request.

The invention provides a resource management system for blockchain services, which includes a work group and a master control management system. The work group includes multiple masters. The master management system manages the work group, and is configured to: respond to receiving a first build request requesting to build a first blockchain container, and obtain a first availability of a first host in the work group Machine resources, and determine whether the first available machine resources of the first host are sufficient to meet a first resource requirement required to build the first blockchain container; responding to the determination that the first available machine resources of the first host are sufficient to meet the first Resource requirements, build and set the first blockchain container on the first host according to the first build request.

In order to make the above-mentioned features and advantages of the present invention more comprehensible, the following specific embodiments are described in detail in conjunction with the accompanying drawings.

Please refer to FIG. 1, which is a schematic diagram of a resource management system for blockchain services according to an embodiment of the present invention. As shown in FIG. 1, the resource management system 100 of the present invention includes a master management system 110, a work group 120 and a hardware cryptographic module group 130. In FIG. 1, the work group 120 may include a plurality of hosts 120a and 120b, where each host 120a and 120b may be a computer, a server, or a memory space.

In an embodiment of the present invention, the master management system 110 can be used to manage the hosts 120 a and 120 b in the work group 120 and one or more hardware cryptographic modules 130 a in the hardware cryptographic module group 130.

In one embodiment, each host 120a and 120b can store blockchain images corresponding to different blockchain types, and these blockchain images are, for example, microservice images, and can be used to create corresponding blocks Chain container. Take the host 120a as an example. For example, it can store a conventional Hyperledger blockchain image file, an Ethereum blockchain image file, and a specific Hyperledger image file, and the master control management system 110 can respond to the relevant blockchain Based on the above-mentioned blockchain image file, a corresponding blockchain container is created on the host 120a based on the build request.

For example, if the master control management system 110 is required to create a blockchain container 121 corresponding to the conventional hyperledger blockchain, the master management system 110 can be based on the conventional hyperledger blockchain image file stored on the host 120a The remaining memory space on the host 120a is used to build a blockchain container 121, and the blockchain container 121 can be used to run a hyperbook blockchain. In addition, if the master management system 110 is required to create a blockchain container 122 corresponding to the Ethereum blockchain, the master management system 110 can use the host 120a based on the Ethereum blockchain image file stored on the host 120a The remaining memory space above establishes a blockchain container 122, and this blockchain container 122 can be used to run an Ethereum blockchain, but the present invention is not limited to this.

In one embodiment, if the master control management system 110 is required to create a blockchain container 123 corresponding to a specific Hyperledger blockchain on the host 120b, the master management system 110 can be based on the specific storage on the host 120b. The Hyperledger blockchain image file uses the remaining memory space on the host 120b to create a blockchain container 123, and this blockchain container 123 can be used to run another Hyperledger blockchain. In this embodiment, the above-mentioned specific Hyperledger blockchain image file is, for example, a special Hyperledger blockchain image file. Specifically, after the master control management system 110 establishes the blockchain container 123 based on the specific Hyperledger blockchain image file, the master control management system 110 can directly transfer the node private key of the other Hyperledger blockchain. It is stored in a certain hardware cryptographic module 130a in the hardware cryptographic module group 130, and the related details will be detailed later. In different embodiments, each hardware cryptographic module 130a is, for example, a hardware device dedicated to storing keys.

In the embodiment of the present invention, the master management system 110 may be configured to execute the resource management method of the blockchain service proposed by the present invention, which will be described in detail below.

Please refer to FIG. 2, which is a flowchart of a method for resource management of a blockchain service according to an embodiment of the present invention. The method of this embodiment can be executed by the main control management system 110 of FIG. 1. The details of each step in FIG. 2 will be described below in conjunction with the components shown in FIG. 1.

First, in step S210, in response to receiving the first build request requesting to build the first blockchain container, the master management system 110 may obtain the first available machine resource of the first host in the work group 120, and It is determined whether the first available machine resources of the first host are sufficient to meet the first resource requirement required to build the first blockchain container.

In one embodiment, the master management system 110 can be used to provide an operating interface, and the user can input the first blockchain type (such as conventional super Ledger blockchain, Ethereum blockchain, specific super-ledger blockchain, etc.), and the number of nodes that can run in the first blockchain container. After that, the master management system 110 may generate the above-mentioned first build request based on the content input by the user in the above-mentioned operation interface, but it is not limited to this.

In one embodiment, if the user wants to build the first blockchain container belonging to a specific Hyperledger blockchain, the above-mentioned operation interface may also allow the user to choose whether to belong to the first blockchain container. An account private key is directly stored in the hardware cryptographic module 130a (the first node private key belonging to the first blockchain container is directly stored in the hardware cryptographic module 130a by default), but the present invention is not limited to this.

In an embodiment, the above-mentioned first host is, for example, any host in the work group 120. That is, after the master control management system 110 receives the first setup request, it can accordingly regard any master in the work group 120 as the first host, and obtain the first available machine resource of the first host. In the embodiment of the present invention, the aforementioned first available machine resource is, for example, the remaining memory space of the first host, but it is not limited to this.

In an embodiment, the above-mentioned first resource requirement is, for example, the size of the microservice image file of the first blockchain type to which the first blockchain container belongs. In this case, the master management system 110 can determine whether the remaining memory space of the first host is greater than the size of the microservice image file of the first blockchain type. If so, the main control management system 110 may determine that the first available machine resource of the first host is sufficient to meet the first resource requirement, and vice versa.

Next, in step S220, in response to determining that the first available machine resource of the first host is sufficient to meet the first resource requirement, the master control management system 110 may build and set the first zone on the first host according to the first build request Block chain container.

In an embodiment, the master control management system 110 may obtain a first resource corresponding to the first resource requirement from the first available machine resource of the first host. For example, the master control management system 110 may use a space sufficient to run the first blockchain image file of the first blockchain type from the remaining memory space of the first host as the first resource. After that, the master management system 110 may use the first resource to create the first blockchain container based on the first blockchain image file corresponding to the first blockchain type. For the relevant details here, please refer to the related instructions of creating a container based on an image file (for example, the mechanism of creating a docker container based on a docker image file), which will not be repeated here.

After that, the master management system 110 may set the first blockchain container based on the first blockchain profile corresponding to the first blockchain container. In one embodiment, the master management system 110 can set the environment variables, data volume, and initialization command of the first blockchain container based on the above-mentioned first blockchain configuration file (that is, the command used to initialize the first blockchain container). ) Etc., but not limited to this.

Then, the master management system 110 can write the unused first blockchain network port on the first host into the first blockchain configuration file to assign the first blockchain network port to the first block Chain container. In addition, the master management system 110 can generate a first blockchain container name corresponding to the first blockchain container, where the first blockchain container name is unique in the work group. In other words, the name of the first blockchain container of the first blockchain container is not repeated with any other blockchain container that already exists in the work group 120.

In one embodiment, the first blockchain container may be different according to the corresponding blockchain image file. For example, if the first blockchain container is established based on a conventional Hyperledger blockchain image file, the first blockchain container may include Hyperledger Node, Hyperledger Sorting Service, and Hyperledger Consensus Algorithm Law and Hyperledger Dashboard. For another example, if the first blockchain container is created based on the Ethereum blockchain image file, the first blockchain container may include the Ethereum node, the Ethereum network status, and the Ethereum dashboard. For another example, if the first blockchain container is created based on a specific Hyperledger blockchain image file, the first blockchain container can include Hyperledger nodes, Hyperledger sorting services, and Hyperledger. The consensus algorithm and the Hyperledger dashboard may also include a node docking hardware cryptographic module, a sorting service docking hardware cryptographic module, etc., which can be used to communicate with the hardware cryptographic module 130a.

In an embodiment, the master management system 110 may also record the state of the first image file of the first blockchain container. Furthermore, in response to the state of the first image file indicating that the first blockchain container has a startup error, the master control management system 110 can also clear the first resource and provide a startup error message. For example, the master management system 110 can notify the user of the startup error message through the aforementioned operating interface, so that the user can perform operations such as restarting, starting and stopping the first blockchain container through the operating interface, but it is not limited to this. .

However, in other embodiments, if the remaining memory space of the first host is not greater than the size of the microservice image file of the first blockchain type, the master management system 110 may determine that the first available machine resource of the first host is insufficient To meet the first resource demand. In this case, the master control management system 110 can obtain the second available machine resources of the second master in the work group 120, and determine whether the second available machine resources of the second master are sufficient to build the first block The first resource requirement required by the chain container. That is, if the first host is not suitable for building the first blockchain container, the master management system 110 may further determine whether there are other masters suitable for building the first blockchain container in the work group 120.

In one embodiment, after obtaining the second available machine resource of the second master (for example, the remaining memory space of the second master), the master management system 110 may determine whether the remaining memory space of the second master is Larger than the size of the microservice image file of the first blockchain type. If the remaining memory space of the second master is greater than the size of the microservice image file of the first blockchain type, the master management system 110 may determine that the second available machine resources of the second master are sufficient to meet the first resource requirement. Therefore, the master management system 110 can build and set the first blockchain container on the second master according to the first establishment request. In this embodiment, the details of the master control management system 110 building and setting the first blockchain container on the second master can refer to the description in the previous embodiment, which will not be repeated here.

On the other hand, if the remaining memory space of the second master is still not larger than the size of the microservice image file of the first blockchain type, the master management system 110 can continue to find other suitable implementations in the work group 110. The master of a blockchain container. In some embodiments, if none of the masters in the work group 120 has available machine resources that can meet the first resource requirement, the master management system 110 can, for example, report back to the user through the aforementioned operation interface to inform the user Currently, it is not possible to build the first blockchain container as required, but the present invention is not limited to this.

In other embodiments, after the master management system 110 successfully builds the first blockchain container on the first host, if the master management system 110 subsequently receives a request to build a second blockchain container For a second establishment request, the master control management system 110 can continue to determine whether the second blockchain container can continue to be built on the first host. In this embodiment, the first blockchain container and the second blockchain container may correspond to the same or different blockchain types. For example, if the first blockchain container corresponds to a conventional Hyperledger blockchain, the second blockchain container can correspond to a conventional Hyperledger blockchain, Ethereum blockchain, or a specific Hyperledger area. Any block chain, but not limited to this.

Specifically, the master control management system 110 obtains the remaining machine resources of the first host in the work group 120, and determines whether the remaining machine resources (for example, the remaining memory space) of the first host are sufficient to build the second block The second resource requirement required by the chain container.

After that, if the remaining memory space of the first host is greater than the size of the microservice image file of the second blockchain type, the master management system 110 may determine that the remaining machine resources of the first host are sufficient to meet the second resource requirement. In this case, the master management system 110 can build and set the second blockchain container on the first host according to the second build request. The master control management system 110 building and setting the second blockchain container on the first host can refer to the previous description of building and setting the first blockchain container on the first host, which will not be repeated here.

On the other hand, if the remaining memory space of the first host is not greater than the size of the microservice image file of the second blockchain type, the master management system 110 may determine that the remaining machine resources of the first host are insufficient to meet the second resource requirement . In this case, the master control management system 110 can find other masters suitable for building the second blockchain container in the work group 120 according to the previous teaching, but the present invention is not limited to this.

In some embodiments, when there are any running blockchain containers on the workgroup 120, the master management system 110 can compare the size of the relevant microservice image, the number of containers, the size of the container memory, and the size of each block. Information such as the IP of the chain container and the blockchain network interface is recorded.

In addition, as described in the previous embodiment, the user can choose to build the first blockchain container belonging to a specific Hyperledger blockchain in the operating interface provided by the master management system 110. In this case, assuming that the master control management system 110 successfully builds and sets the first blockchain container on the first host according to the teaching in the previous embodiment, the master control management system 110 can then directly transfer the first area The private key of the first node of the block chain container is stored in any of the hardware cryptographic modules 130a.

Specifically, the master management system 110 may first use any one of the hardware cryptographic module groups 130 as the considered hardware cryptographic module 130a. Then, the master management system 110 can determine whether the space of the hardware cryptographic module 130a is sufficient to store the private key of the first node belonging to the first blockchain container. If the space of the hardware cryptographic module 130a is sufficient to store the first node private key, the master management system 110 can store the first node private key of the first blockchain container in the hardware cryptographic module 130a. In addition, if the user chooses to also store the first account private key belonging to the first blockchain container in the hardware cryptographic module 130a in the operating interface, the master control management system 110 will perform this operation together.

On the other hand, if the space of the considered hardware cryptographic module 130a is insufficient to store the private key of the first node, the master control management system 110 can then take the other one of the hardware cryptographic module group 130 as the considered And repeat the above operations until a hardware cryptographic module 130a suitable for storing the private key of the first node is found, but the present invention is not limited to this.

In one embodiment, the present invention can place the private key of the Ethereum account, the private key of the Hyperledger account, and the private key of the Hyperledger node in the hardware cryptographic module 130, where the private key of the Ethereum account may be based on the secp256k1 elliptic curve The private key of the Hyperledger account and the private key of the Hyperledger node can be generated based on the P256 elliptic curve. In this embodiment, if the user chooses to create the first blockchain container corresponding to the specific Hyperledger blockchain in the operating interface, the master management system 110 can first confirm the hardware cryptographic module 130a and the master management Whether the URL connection status between the system 110 and the work group 120 is normal, and whether the space of the hardware password module 130a is sufficient. If yes, the master control management system 110 can generate the private key of the blockchain node through the elliptic curve in the hardware cryptographic module 130a, and record the hardware cryptographic module 130a and the network port that the blockchain is connected to in the master management In the database of the system 110. Then, after the first blockchain container is created, the master management system 110 can write the above-mentioned information into the first blockchain configuration file, so as to directly store the above-mentioned private key in the hardware cryptographic module 130a.

In summary, the present invention effectively deploys the blockchain network and nodes in a master control of the work group through the master control management system, so as to manage multiple types of blockchain services, so that the blocks in the work group Chain services are more efficient and stable operation. More specifically, when creating multiple types of blockchain containers, the present invention can calculate the relevant information required to create multiple types of blockchain containers, and determine whether the remaining machine resources on the master control are sufficient to create the blockchain container. . If so, you can configure relevant resources on the master to establish multiple types of blockchains. In this way, the present invention can integrate the information required when building the blockchain container, and accordingly allocate relevant resources on the master control, thereby reducing the difficulty of blockchain deployment and improving the efficiency of blockchain deployment.

In addition, in the process of creating and storing blockchain accounts and node private keys through software, the software may be cracked, which may cause system security concerns. Therefore, the present invention further provides a block chain container corresponding to a specific super ledger block chain, which can automatically store the private key in the hardware cryptographic module when the block chain account private key and the block chain node are established , So as to ensure that the blockchain private key is not stolen, thereby improving the security of the system.

Although the present invention has been disclosed in the above embodiments, it is not intended to limit the present invention. Anyone with ordinary knowledge in the relevant technical field can make some changes and modifications without departing from the spirit and scope of the present invention. The protection scope of the present invention shall be subject to those defined by the attached patent application scope.

100: Resource Management System 110: Master Control Management System 120: Workgroup 120a, 120b: host 121~123: Blockchain container 130: Hardware password module group 130a: Hardware cryptographic module S210, S220: steps

FIG. 1 is a schematic diagram of a resource management system for blockchain services according to an embodiment of the present invention. Fig. 2 is a flowchart of a method for resource management of a blockchain service according to an embodiment of the present invention.

S210, S220: steps

Claims (14)

A resource management method for blockchain services is suitable for a master control management system, which manages a work group including a plurality of masters, and the method includes: In response to receiving a first build request requesting to build a first blockchain container, obtain a first available machine resource of a first host in the work group, and determine the first host of the first host Whether the available machine resources are sufficient to meet a first resource requirement required to build the first blockchain container; In response to determining that the first available machine resource of the first host is sufficient to meet the first resource demand, build and set the first blockchain container on the first host according to the first build request. The method according to claim 1, wherein in response to determining that the first available machine resource of the first host is insufficient to meet the first resource demand, the method further includes: Obtain a second available machine resource of a second master in the work group, and determine whether the second available machine resource of the second master is sufficient to meet the requirements for building the first blockchain container First resource requirement; In response to determining that the second available machine resource of the second master is sufficient to meet the first resource demand, build and set the first blockchain container on the second master according to the first build request. According to the method described in claim 1, wherein after the step of building and setting the first blockchain container on the first host according to the first build request, the method further includes: In response to receiving a second build request requesting to build a second blockchain container, obtain a remaining machine resource of the first host in the work group, and determine whether the remaining machine resource of the first host Sufficient to meet a second resource requirement required to build the second blockchain container; In response to determining that the remaining machine resources of the first host are sufficient to meet the second resource demand, build and set the second blockchain container on the first host according to the second build request. The method described in item 3 of the scope of patent application, wherein the first blockchain container and the second blockchain container correspond to different blockchain types. For the method described in claim 1, wherein the first resource requirement includes the size of a microservice image file of a first blockchain type to which the first blockchain container belongs, and the first available machine resource includes the A remaining memory space of the first host, and the method further includes: In response to determining that the remaining memory space of the first host is greater than the size of the microservice image file of the first blockchain type, it is determined that the first available machine resource of the first host is sufficient to meet the first resource requirement. The method described in item 1 of the scope of patent application, wherein the first blockchain container belongs to a first blockchain type, and is built on the first host according to the first build request and set the first The steps of a blockchain container include: Obtain a first resource corresponding to the first resource requirement from the first available machine resource; Using the first resource to create the first blockchain container based on a first blockchain image file corresponding to the first blockchain type; Setting the first blockchain container based on a first blockchain configuration file corresponding to the first blockchain container; Writing an unused first blockchain network port on the first host into the first blockchain configuration file to assign the first blockchain network port to the first blockchain container; A first blockchain container name corresponding to the first blockchain container is generated, wherein the first blockchain container name is unique in the work group. The method according to item 6 of the scope of patent application, wherein the step of setting the first blockchain container based on the first blockchain profile corresponding to the first blockchain container includes: The environment variables, data volume, and initialization command of the first blockchain container are set based on the first blockchain configuration file. As the method described in item 6 of the scope of patent application, it also includes: Record the state of a first image file of the first blockchain container; In response to the state of the first image file, it is shown that an activation error has occurred in the first blockchain container, and the first resource is cleared and an activation error message is provided. The method according to claim 1, wherein the first build request indicates a first blockchain type corresponding to the first blockchain container, and the first blockchain type includes a conventional super account One of this blockchain, an Ethereum blockchain, and a specific Hyperledger blockchain. The method according to item 8 of the scope of patent application, wherein the blockchain type corresponding to the first blockchain container is the specific hyperbook blockchain in response to the first establishment request indicating that the method is more include: Determine whether the space of a hardware cryptographic module in a hardware cryptographic module group is sufficient to store a first node private key belonging to the first blockchain container, wherein the hardware cryptographic module is connected to the master Management system and the work group; In response to determining that the space of the hardware cryptographic module is sufficient to store the first node private key, the first node private key is stored in the hardware cryptographic module. As the method described in item 1 of the scope of patent application, it also includes: Provide an operating interface for a user to specify a first blockchain type to which the first blockchain container belongs, the number of nodes in the first blockchain container, and whether to use the first blockchain A first account private key of is stored in the hardware cryptographic module. For the method described in item 1 of the scope of patent application, each of the masters stores a plurality of blockchain image files corresponding to different blockchain types. As the method described in item 1 of the scope of patent application, it also includes: An operating interface is provided for a user to specify a first blockchain type to which the first blockchain container belongs, and the number of nodes in the first blockchain container. A resource management system for blockchain services, including: A working group, which includes multiple masters; A master management system, which manages the work group and is configured to: In response to receiving a first build request requesting to build a first blockchain container, obtain a first available machine resource of a first host in the work group, and determine the first host of the first host Whether the available machine resources are sufficient to meet a first resource requirement required to build the first blockchain container; In response to determining that the first available machine resource of the first host is sufficient to meet the first resource demand, build and set the first blockchain container on the first host according to the first build request.

Images