WO2018032379A1

WO2018032379A1 - Untrusted remote transaction file secure storage system for block chain

Info

Publication number: WO2018032379A1
Application number: PCT/CN2016/095583
Authority: WO
Inventors: 张丛
Original assignee: 深圳市樊溪电子有限公司
Priority date: 2016-08-13
Filing date: 2016-08-16
Publication date: 2018-02-22
Also published as: CN106131048B; CN106131048A

Abstract

An untrusted remote transaction file secure storage system for a block chain, comprising: (1) a client, for loading an encryption module and completing encryption and transmission of all transaction files; (2) a software daemon, for capturing all transaction file access system calls and sequentially converting the calls into trusted transaction file access requests; (3) a user key revoking module, for quickly revoking a key of a user; (4) a plaintext storage module, for carrying out integrity check; (5) a timestamp module, for adding a timestamp to a new transaction file; (6) a multi-transaction file backup module, for limiting damage from a DOS attack which cannot be resisted because an underlying transaction file system is not changed; and (7) a public key sending module used for adding a user. By means of the file secure storage system, although the overheads are greater than those of a normal file secure storage system and the speed is lower, the security coefficient is greatly improved.

Description

Untrusted remote transaction file secure storage system for blockchain

Technical field

The invention relates to the transaction data security problem of a blockchain, in particular to a blockchain untrusted remote transaction file security storage system.

Background technique

The emergence of Bitcoin in 2009 brought a subversive result - blockchain technology, blockchain is a secure account book database, composed of data blocks, users can constantly update and upgrade here. The platform looks for data. For financial institutions, the blockchain can speed up transaction processing, reduce costs, reduce middlemen, improve market insight, and increase business transparency.

Computing and storage are the two basic tasks of computer systems. With the explosive growth of information, storage components will experience direct storage based on single-server, to cluster-based grid storage based on LAN, and finally to WAN-based data grids. Blockchain technology is the most extreme development at present. The intrinsic characteristics of this data storage medium include intelligent storage. The quality of storage service can guarantee service differentiation and performance guarantee for user applications. Storage is object-oriented mass storage, and Network storage must be confidential and complete. The existing Internet does not have a good or convenient way to ensure the confidentiality, integrity, availability, and data of the data stored in the blockchain and the data stored on the storage device. Non-repudiation and the reliability of the entire network storage system, especially the generation of trusted computing technology in blockchain in recent years, puts higher demands on network storage security.

Summary of the invention

It is an object of the present invention to provide an untrusted remote transaction file secure storage system for a blockchain that provides encrypted read and write access on these untrusted network file systems, including: (1) a client, the client The encryption module is loaded on the end, and all the transaction files are encrypted by the encryption module before being sent to the server for storage, and the transaction file can be completed at the client; (2) the software daemon is used to intercept all transactions. The file accesses the system call and converts to a trusted transaction file access request in turn; (3) revokes the user key module, quickly revokes the user's key, removes the key block from the original transaction data file to revoke the user, and then generates The new block encryption key FEK and re-encrypt the file, and update the remaining block encryption key of each user with the new block encryption key FEK; (4) The plaintext save module uses the plaintext save module to save the restored file system The necessary plaintext is repeated to perform an integrity check to encrypt all transaction data access and control information; (5) Timestamp module, in one use The specified interval, time stamping the new transaction file; (6) Multi-transaction file backup module, backing up the transaction file to multiple servers. Because there is no change to the underlying transaction file system, it is not resistant to DOS attacks; (7) The public key sending module sends the user's public key to the file owner to add the user, a new read or write user, and the public key is used to encrypt the encryption key and attach it to the original transaction data of the transaction file. The new user's key is attached to the original transaction data, and the user can access the transaction file.

Preferably, when the encryption module encrypts the transaction file, an encryption master key MEK and a signature master key MSK are saved for each transaction file user, and each transaction file has a unique symmetric encryption key FEK and a signature key. FSK.

Preferably, the symmetric encryption key FEK is provided to all users, and the signature key FSK is only provided to users who have "write" rights.

Preferably, all transaction files are divided into two parts: the original transaction data file source-file and the transaction data file d-file.

Preferably, the original transaction data file source-file includes: a block encryption master key MEK of the transaction file owner, a user's block encryption key FEK, and if there is a write right, a signature key FSK is also included, and a The file owner's signature master key MSK signed the original transaction data hash value block, text If the owner or user has a key stored in the original data of a file, then he can decrypt the file.

Preferably, the file security storage system also uses the new version of the prompt guarantee principle to ensure that all of the user's transaction files are the latest version to prevent replay attacks.

Preferably, the file secure storage system can use any file delivery mechanism that conforms to the delivery protocol.

Preferably, the revocation user key module uses the active policy to revoke the key, and once the user is terminated, the corresponding transaction file cannot be accessed through the new transaction file guarantee.

The untrusted remote transaction file secure storage system for the blockchain, although more expensive than the ordinary file security storage system, is slower, but the security factor is greatly improved.

The above as well as other objects, advantages and features of the present invention will become apparent to those skilled in the <

DRAWINGS

Some specific embodiments of the present invention are described in detail below by way of example, and not limitation. The same reference numbers in the drawings identify the same or similar parts. Those skilled in the art should understand that the drawings are not necessarily drawn to scale. The objects and features of the present invention will become more apparent in consideration of the following description in conjunction with the accompanying drawings.

1 is a schematic structural diagram of an untrusted remote transaction file secure storage system for a blockchain according to an embodiment of the present invention.

detailed description

Before proceeding with the description of the specific embodiments, in order to more clearly express the content discussed, first define some very important concepts.

Trading: The essence of a transaction is a relational data structure that contains information about the value transfer of the trading participants. These transaction information is called the accounting ledger. The transaction needs to go through three creation, verification, and writing blockchains. The transaction must be digitally signed to ensure the legality of the transaction.

Block: All transaction information is stored in the block, and a transaction information is a record, which is stored as a separate record in the blockchain. The block consists of a block header and a data part. The block header field contains various characteristics of the block itself, such as the previous block information, the merkle value, and the timestamp. The block header hash value and block height are the two most important indicators for identifying the block. The block primary identifier is its cryptographic hash value, a digital fingerprint obtained by performing a second hash calculation on the block header by the SHA algorithm. The resulting 32-byte hash value is called the block hash value, or the block header hash value, and only the block header is used for calculation. The block hash value can uniquely and unambiguously identify a block, and any node can independently obtain the block hash value by simply hashing the block header.

Blockchain: A data structure in which blocks are chained in an orderly fashion. A blockchain is like a vertical stack, with the first block being the first block at the bottom of the stack, and each block is then placed on top of the other blocks. When a block is written to a blockchain, it will never change and is backed up to another blockchain server.

Example:

There are many untrusted network file systems, such as the network file system NFS, the network file contributed to the system CIFS, etc. See Figure 1, the untrusted remote transaction file security storage system for the blockchain in these untrusted network files. Encrypted read and write access is provided on the system. The system uses a software daemon to intercept all transaction file access system calls and convert them into trusted transaction file access requests. With this concept, it is now possible to establish a secure transaction file sharing environment without any changes to the hardware of the blockchain, without significantly changing the performance of the existing network storage system, and being unable to upgrade existing systems and existing systems. Security and very effective organization, if using blockchain technology, this non-trust far away transaction file secure storage system is a temporary solution.

The system includes a client. The client loads the encryption module. All transaction files are encrypted by the encryption module before being sent to the server for storage. Therefore, neither the server nor the server administrator can access the plaintext. The transaction data processing burden of the end is relatively light, so that it is not necessary to separately set a secure channel when transmitting the transaction file.

When the encryption module encrypts the transaction file, it saves an encrypted primary key for each transaction file user. Key MEK and a signature master key MSK, each transaction file has a unique symmetric encryption key FEK and a signature key FSK, wherein the symmetric encryption key FEK is provided to all users, and the signature key FSK is only provided to A user who has "write" power.

All transaction files are thus divided into two parts, the original transaction data file source-file and the transaction data file d-file. The original transaction data file source-file includes: the block encryption master key MEK of the transaction file owner, the user's block encryption key FEK, and if there is write power, it also contains a signature key FSK, and another file has The original transaction data hash value block signed by the signature master key MSK. If the file owner or user has a key stored in the original data of a file, then he can decrypt the file.

It also includes revoking the user key module so that the revocation user's key can be executed very quickly and efficiently, that is, removing the key block of the user to be revoked from the original transaction data file, and then generating a new block encryption key FEK and The file is re-encrypted and the remaining block encryption key for each user is updated with the new block encryption key FEK. The user key module is revoked and the active policy is used to revoke the key. Once a user is denied access, the corresponding transaction file cannot be accessed through the new transaction file guarantee.

It also includes a plaintext save module that uses the plaintext save module to save the plaintext necessary to restore the file system to perform an integrity check, encrypting all transaction data access and control information, which facilitates the use of legacy file system standard backups. The process, that is, if the system must recover from a disaster, all necessary access information needs to be provided, and the system also uses the new version of the prompt guarantee principle to ensure that all of the user's transaction files are up-to-date to prevent replay attacks.

Includes a timestamp module that time stamps new transaction files at a user-specified interval.

Including a multi-transaction file backup module, because there is no change to the underlying transaction file system, an attacker can not resist DOS attacks if it deletes all files after the server is compromised. The multi-transaction file backup module backs up the transaction files to multiple servers. This can limit the danger of such an attack.

Including a public key sending module, in order to add a user, the new read or write user must send the file owner the owner's public key, thereby using the public key to encrypt the encryption key and attach the original transaction data to the transaction file. In the new user's key, once the new user's key is attached to the original transaction data, the user can In order to access these files, the key delivery mechanism has no specific provisions in this file storage system, as long as it is a mechanism that conforms to the delivery protocol.

The untrusted remote transaction file secure storage system for the blockchain does not have to check whether the file is a new transaction file, and the first access needs to be properly saved after the original transaction data is transmitted to the user. Ordinary file security storage systems have a large overhead, so the speed is 70% slower, but the security factor is greatly improved.

The present invention has been described with reference to the specific illustrative embodiments, and is not limited by the scope of the appended claims. It will be appreciated by those skilled in the art that the embodiments of the invention can be modified and modified without departing from the scope and spirit of the invention.

Claims

An untrusted remote transaction file secure storage system for a blockchain, providing encrypted read and write access on these untrusted network file systems, comprising:

(1) a client, where the client loads an encryption module, and all the transaction files are encrypted by the encryption module before being sent to the server for storage, and the delivery transaction file can be completed at the client;

(2) a software daemon process for intercepting all transaction file access system calls and converting them into trusted transaction file access requests in turn;

(3) Revoke the user key module, quickly revoke the user's key, remove the key block from the original transaction data file to revoke the user, then generate a new block encryption key FEK and re-encrypt the file, encrypt with the new block The key FEK updates the remaining block encryption key of each user;

(4) The plaintext saving module uses the plaintext saving module to save the plaintext necessary for restoring the file system, to perform an integrity check, and encrypt all transaction data access and control information;

(5) A timestamp module that time stamps new transaction files at a user-specified interval;

(6) Multi-transaction file backup module, which backs up transaction files to multiple servers. Because there is no change to the underlying transaction file system, it cannot resist the harm of DOS attacks;

(7) A public key sending module that sends the user's public key to the file owner to add the user, a new read or write user, the public key used to encrypt the encryption key, and the original transaction data attached to the transaction file. The user can access the transaction file once the new user's key is attached to the original transaction data.
The untrusted remote transaction file secure storage system for a blockchain according to claim 1, wherein the encryption module saves an encrypted primary key for each transaction file user when encrypting the transaction file. The key MEK and a signature master key MSK, each transaction file has a unique symmetric encryption key FEK and a signature key FSK.
A non-trusted remote transaction file secure storage system for a blockchain according to claim 2, wherein said symmetric encryption key FEK is provided to all users, and said signature The key FSK is only available to users who have "write" power.
A non-trusted remote transaction file secure storage system for a blockchain according to claim 1, wherein all transaction files are divided into two parts: an original transaction data file source-file and a transaction data file d. -file.
The untrusted remote transaction file secure storage system for a blockchain according to claim 4, wherein the original transaction data file source-file comprises: a block encryption master key MEK of the transaction file owner The user's block encryption key FEK, if there is a write right, will also include a signature key FSK, and also include a file owner's signature master key MSK signed the original transaction data hash value block, the file has The user or user has a key stored in the original data of a file, then he can decrypt the file.
The untrusted remote transaction file security storage system for a blockchain according to claim 1, wherein the file security storage system further uses a new version prompt guarantee principle to ensure that all transaction files of the user are The latest version to prevent replay attacks.
The untrusted remote transaction file secure storage system for a blockchain according to claim 1, wherein the file secure storage system can use any file delivery mechanism conforming to a delivery protocol.
The untrusted remote transaction file security storage system for a blockchain according to claim 1, wherein the revocation user key module uses a positive policy to revoke a key, and once a user is terminated, It is not possible to access the corresponding transaction file through the new transaction file guarantee.