WO2018205731A1

WO2018205731A1 - Method and device for protecting block chain data and computer readable storage medium

Info

Publication number: WO2018205731A1
Application number: PCT/CN2018/078518
Authority: WO
Inventors: 陈曦
Original assignee: 上海点融信息科技有限责任公司
Priority date: 2017-05-08
Filing date: 2018-03-09
Publication date: 2018-11-15
Also published as: CN107273759B; CN107273759A

Abstract

A method and a device for protecting block chain data and a computer readable storage medium. The method for protecting block chain data comprises: creating an intelligent contract at a first node of a block chain, the intelligent contract being set with a permission management field, and the permission management field including an accessible address list (202); using a secret key to encrypt the intelligent contract at the first node, and adding the encrypted intelligent contract in block data at the first node (204); distributing the secret key at the first node to a second node of the block chain according to the accessible address list (206); and sending the block data at the first node to the second node (208).

Description

Method, device, and computer readable storage medium for protecting blockchain data

Technical field

Embodiments of the present disclosure generally relate to blockchain techniques and, more particularly, to methods, apparatus, and computer readable storage media for protecting blockchain data.

Background technique

Blockchain has received wide attention as a new type of decentralized recording technology. Since the blockchain itself does not support data protection, data protection is one of the key technologies for blockchain applications such as commercial use.

The existing solutions include: 1) multi-chain + plaintext data, that is, each block chain node needs to maintain multiple blockchains; 2) homomorphic algorithm or zero-knowledge proof. Among the two solutions, the first solution has backup risk and consensus risk due to the limited number of nodes in a single blockchain; and the second solution has the problems of high algorithm complexity and low execution efficiency.

Summary of the invention

Embodiments of the present disclosure provide methods, apparatus, and computer readable storage media for protecting blockchain data to at least partially address the above and other potential problems of the prior art.

In a first aspect of the present disclosure, a method for protecting blockchain data is provided. The method includes: creating a smart contract at a first node of a blockchain, the smart contract being set with a rights management field, the rights management field including a list of accessible addresses; encrypting the smart contract with a key at the first node, And including the encrypted smart contract in the block data at the first node; distributing the key to the second node of the block chain according to the accessible address list at the first node; and placing the block at the first node Data is sent to the second node,

In a second aspect of the present disclosure, an apparatus for protecting blockchain data is provided. The apparatus includes a processor, a memory coupled to the processor and storing instructions that, when executed by the processor, cause the apparatus to perform the act of: creating a smart contract at a first node of the blockchain, the smart contract being set Having a rights management field, the rights management field includes an accessible address list; encrypting the smart contract using the key at the first node, and including the encrypted smart contract in the block data at the first node; The node distributes the key to the second node of the blockchain according to the accessible address list; and transmits the block data to the second node at the first node.

In a third aspect of the present disclosure, a computer readable storage medium is provided. The computer readable storage medium has computer readable program instructions stored thereon for performing the method as described above in the first aspect of the present disclosure.

DRAWINGS

The embodiments of the present disclosure will be described by way of example only with reference to the accompanying drawings in which the same or

Figure 1 shows a schematic diagram of a blockchain technique;

2 shows a flow diagram of a method for protecting blockchain data in accordance with an embodiment of the present disclosure;

FIG. 3 illustrates an example implementation of a method for protecting blockchain data in accordance with an embodiment of the present disclosure;

FIG. 4 shows a schematic diagram of an apparatus for protecting blockchain data in accordance with an embodiment of the present disclosure.

detailed description

Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the drawings, it is understood that the invention may be embodied in various forms and should not be construed as limited to the embodiments set forth herein. A more complete and complete understanding of the present disclosure. The drawings and embodiments of the present disclosure are to be considered as illustrative only and not limiting the scope of the disclosure.

The term "comprising" and variations thereof as used herein are open-ended, ie, "including but not limited to". The term "based on" is "based at least in part on." The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment." Relevant definitions of other terms will be given in the description below.

1 shows a schematic diagram of a blockchain technique, which may be implemented in such a scenario (eg, a blockchain network) in an example embodiment of the present disclosure. It should be understood that the blockchain is a new application mode of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, and encryption algorithm. Among them, the so-called consensus mechanism is a mathematical algorithm for realizing trust and acquiring rights between different nodes in the blockchain system. Since the blockchain is a new type of decentralized recording technology, it has received extensive attention and its application fields are becoming more and more extensive.

Regarding the concept of smart contracts, cryptographer Nick Szabo gives the definition that "a smart contract is a set of promises defined in digital form, including agreements on which contract participants can execute these commitments. ". Essentially, these automated contracts work like if-then statements from other computer programs. Smart contracts only interact with real-world assets in this way. When a pre-programmed condition is triggered, the smart contract enforces the corresponding contract terms.

Traditionally, data protection has become one of the key technologies for blockchain commercialization because the blockchain itself does not support data protection. Taking the typical application scenario of blockchain--supply chain management as an example, the upstream and downstream enterprises of the supply chain form each node on the blockchain. This scenario is not suitable for data transactions using traditional multi-chain forms. Moreover, for any company in the chain, because the transaction is limited to some enterprises in the chain, unnecessary transaction information sharing will lead to the leakage of trade secrets.

In order to address the above and other potential deficiencies and problems, embodiments of the present disclosure provide methods, apparatus, and computer readable storage media for protecting blockchain data. Several example embodiments of the present disclosure will be described below with reference to the drawings.

FIG. 2 illustrates a flow diagram of a method 200 for protecting blockchain data in accordance with an embodiment of the present disclosure. The method 200 can be applied to the blockchain network shown in FIG. 1.

At 202, a smart contract is created at the first node of the blockchain, the smart contract can be set with a rights management field, and the rights management field includes a list of accessible addresses.

In some example implementations, the rights management field may further include access rights of the second node to the smart contract, and the access rights may include read and write access rights for setting read and write permissions.

Taking three blockchain nodes as an example, as shown in FIG. 3, an example implementation of a method for protecting blockchain data is shown. The blockchain network includes, for example, three blockchain nodes, which are blockchain node 1 (referred to as "first node"), blockchain node 2 (referred to as "second node"), and blockchain. Node 3 (called the "third node"). Wherein, a smart contract is created at blockchain node 1, and upon submission, an additional rights management field may be added, which may include a list of accessible addresses (eg, a list of accessible address hashes). In this way, private data can be managed through smart contracts and configured with appropriate access rights.

Additionally, when a smart contract is created at blockchain node 1, the rights management field may include access to the smart contract by blockchain node 2 in addition to the list of accessible addresses. In addition, the rights management field may also include access rights of the blockchain node 3 to the smart contract. The access rights may include, for example, setting read and write access rights for specific read and write or specific data interface access. It should be understood that the definition of "access rights" herein is merely exemplary and is not intended to limit the scope of the disclosure in any way.

For example, as shown in FIG. 3, a smart contract X can be created at the blockchain node 1 of the blockchain, and a rights management field is set, and the content of the rights management field is a hash of the addresses of the block chain nodes 2 and 3. Values (ie "3C344bQYPsL5FXAbv67kGksNLR1urufnE" and "3GFHwAZFDtPuBDS396PirD5jzHRDv9ni1n"), and blockchain nodes 2 and 3 access to smart contract X.

As an example, the content of the specifically implemented rights management field is as follows.

{

"3C344bQYPsL5FXAbv67kGksNLR1urufnE5", // hash of the address of blockchain node 2

"3GFHwAZFDtPuBDS396PirD5jzHRDv9ni1n"//Hash value of the address of blockchain node 3

}

Through the above example, the rights management field for smart contract X can be set. Moreover, according to the accessible address list in the above rights management field, the block chain node 2 and the block chain node 3 on the blockchain can access the smart contract X created at the block chain node 1. In addition, since the block chain node 2 and the block chain node 3 can also be set to access the smart contract in the rights management field, according to such access rights, the block chain node 2 and the block chain node 3 Smart Contract X can have different access rights respectively.

In some example implementations, if the smart contract is not set with a rights management field, the smart contract will be processed as a public smart contract (as disclosed in Figure 3), ie the creation and trading information of the smart contract will be in clear text. Form exists.

At 204, the smart contract is encrypted using the key at the first node and the encrypted smart contract is included in the block data at the first node.

For example, the block data is used for inter-block inter-chain communication, wherein the encrypted smart contract at the first node can be included in the block data, and the block data can then be sent to other nodes on the blockchain ( For example, blockchain node 2 and blockchain node 3) in FIG. For example, all transaction data for a smart contract can be added to the block data in cipher text and then sent to other nodes on the blockchain.

In this way, it can be ensured that private data (for example, smart contract Y at the first node) is stored in the blockchain in cipher text, all nodes can be backed up, and there is no limitation due to the number of nodes (for example, traditional multi-chain + Backup risk due to the limitation of the number of nodes in the plaintext data technology. Moreover, since the specific implementation relies only on the commonly used encryption algorithm, there is no efficiency problem caused by high latency (for example, high latency caused by high complexity of the algorithm in the conventional homomorphic algorithm technique).

In some example implementations, the block data also includes block numbers, transaction data, signatures, and random numbers (Nonce).

For example, block data is part of the data on the chain and is used for data communication between block chain nodes, and smart contract data can be included in the block data. When saving data, the block raw data can be saved separately, and the execution status data of the smart contract can be separated. Since the block data can be shared by the entire network, the consistency of the data on the blockchain can be fundamentally guaranteed.

At 206, a key is distributed to the second node of the blockchain based on the accessible address list at the first node.

In some example implementations, distributing the key to the second node based on the accessible address list at the first node includes key distribution in a point-to-point communication, the key including a symmetric key.

As shown in Figure 3, blockchain node 1 creates a smart contract Y and specifies that only blockchain node 2 is accessible in the list of accessible addresses (eg, S1-- create smart contract Y in Figure 3, set blockchain Node 2 is accessible). Accordingly, the block chain node 1 can distribute the key only to the block chain node 2 in point-to-point communication (for example, S2- in FIG. 3 - transmitting the smart contract Y key to the block chain node 2).

At 208, the block data is transmitted to the second node at the first node.

In some example implementations, the method 200 illustrated in FIG. 2 may further include transmitting the block data to the third node of the blockchain at the first node without distributing the key to the third node.

In some example implementations, the key and block data are received at the second node and the encrypted smart contract is decrypted from the block data using the key to create a decrypted smart contract. Additionally, the transaction can also be performed at the second node based on the decrypted smart contract.

As shown in FIG. 3, after the block chain node 1 includes the encrypted smart contract Y in the block data at the first node (ie, the block chain node 1), the block data can be transmitted in a broadcast manner. To all blockchain nodes including the second node (ie, blockchain node 2) and the third node (ie, blockchain node 3) (eg, S3--encrypted smart contract Y in Figure 3, and in Figure 3) S4--Send the encrypted smart contract Y (which is included in the block data)).

At this time, since the block chain node 2 receives the key of the smart contract Y transmitted from the first node, and the block chain node 3 does not receive such a key, the block chain node 2 can receive the area. The block data is then decrypted using such a key (eg, S5 in Figure 3 - decrypting the smart contract Y) to create a decrypted smart contract Y at the blockchain node 2 (eg, S6 in Figure 3 - building a smart contract) Y logical data fragmentation), and since blockchain node 3 does not receive such a key, it will not be able to create a decrypted smart contract Y at blockchain node 3 (eg S5 in Figure 3 - decryption intelligence) Contract Y failed).

In this way, after the smart contract is created at the first node and the encrypted smart contract is included in the block data at the first node, other nodes on the block chain can receive the block data (ie, implement all nodes) Can be backed up), but only the node that owns the key of the smart contract can decrypt and execute the corresponding transaction, thus realizing the protection of data on the blockchain (for example, when the transaction is limited to some enterprises in the supply chain) To avoid the problem of trade secret disclosure caused by unnecessary transaction information sharing).

Method 200 may also include an additional data consensus process in accordance with an embodiment of the present disclosure. For example, after 208, a data consensus can be made between the first node and the second node by peer-to-peer communication.

The data consensus here refers, for example, to the use of existing consensus algorithms (eg raft/pbft) to confirm data consistency between multiple nodes on a blockchain. In this way, the present disclosure can achieve data consensus while ensuring data privacy.

In some example implementations, the data consensus can be based on a block number, a smart contract number of a smart contract, and a transaction data digest formed from historical transaction data for a smart contract.

Here, the data consensus (such as the consensus of private data (such as smart contract Y)) may have a unique identifier, that is, a block number and a smart contract number (for example, may be a smart contract address or a uniquely designated ID). Also, existing consensus algorithms can be used to achieve local consensus.

In order to obtain the block number and the smart contract number, the historical transaction data and current status of each smart contract can be logically isolated during storage. For example, the bottom layer can use the same physical database or a different physical database. At the time of storage, after executing any transaction, a record with the block number and the smart contract number as the key value can be inserted in the logical database of the smart contract for subsequent data consensus.

Accordingly, in some example implementations, the historical transaction data and current state of the smart contract may be stored in the database in a logically isolated manner, and the current state of the smart contract is queried according to the block number stored in the database and the smart contract number of the smart contract. .

Further, the data consensus can be completed through peer-to-peer communication, and the nodes deploying the same smart contract (for example, the blockchain node 1 and the blockchain node 2 deployed with the same smart contract Y in FIG. 3) can participate in the consensus (for example, S7 in FIG. 3) -- Consensus to complete the block of trading for Smart Contract Y). Moreover, the data consensus can be initiated by the node submitting the smart contract (for example, the blockchain node 1 that creates the smart contract in Figure 3), and sends data waiting for consensus through peer-to-peer communication, for example:

Among them, the above data waiting for consensus includes a block number (blockhash), a smart contract number (contract) and a summary of transaction data formed according to all the historical data of the smart contract (such as the merkleroot value mentioned above). Specifically, merkleroot can be generated based on historical transaction data of the smart contract, generating a summary (here a hash value) for each transaction, inserting the underlying node as the merkle number, and updating the root node value. The data awaiting consensus here is merely exemplary and is not intended to limit the scope of the disclosure in any way.

It can be seen that since private data (such as smart contract Y) is stored in block data in cipher text, all nodes in the blockchain can be backed up, and data consensus can be reached on the block data, so there is no cause node. The number of restrictions (such as the traditional multi-chain + plaintext data technology has a limit on the number of nodes) brings backup risks and consensus risks.

FIG. 4 illustrates an apparatus 400 for protecting blockchain data in accordance with an embodiment of the present disclosure. The device 400 includes a processor 402 and a memory 404. The memory 404 is coupled to the processor 402 and stores instructions that, when executed by the processor, cause the device to perform the act of creating a smart contract at a first node of the blockchain, the smart contract being set with a rights management field, The rights management field includes an accessible address list; the smart contract is encrypted using the key at the first node, and the encrypted smart contract is included in the block data at the first node; accessible at the first node The address list distributes the key to the second node of the blockchain; and transmits the block data to the second node at the first node.

In some example implementations, the device 400 for protecting blockchain data may correspond to any node on the blockchain. As an example, each blockchain node can include a respective processor 402 and memory 404, where processor 402 can include a data management module 406 and a key management module 408.

Data management module 406, for example, can be responsible for managing block data and smart contract data. Among them, the block data is part of the data on the chain and is used for data communication between nodes, and the smart contract data is included in the block data. When the data is saved, the block raw data is saved separately and is separate from the execution status data of the smart contract. The block data is shared by the whole network, which fundamentally guarantees the consistency of the data on the chain. Here, smart contracts that manage private data can be stored in separate logical data slices (for example, smart contracts that manage private data, where the original contract and transaction data are encrypted and stored in a unique blockchain, each smart contract corresponds to An independent data fragment), querying the current status by block number and smart contract number (such as smart contract address or uniquely specified ID).

Key management module 408, for example, may be responsible for maintaining the generation, distribution, use, storage, and backup of keys for smart contracts. The key management module 408 can also introduce key maintenance algorithms such as forward security or key rotation to improve security. In addition, the key management module 408 can also distribute keys according to rights management fields (eg, rights lists) given by the data management module 406, while providing an interface to the data management module 406 for encryption and decryption of data.

The present disclosure may be embodied as a computer readable storage medium having computer readable program instructions stored thereon, the computer readable program instructions being operative to perform a protected area as described in accordance with the example embodiment of FIG. The method of blockchain data.

The present disclosure may be embodied as a system, method, and/or computer program product, depending on the particular needs and application scenarios. The computer program product can include a computer readable storage medium having computer readable program instructions for performing various aspects of the present disclosure.

The methods and functions described in this disclosure can be performed at least in part by one or more hardware logic components. For example, without limitation, illustrative types of hardware logic components that may be used include Field Programmable Gate Array (FPGA), Application Specific Integrated Circuit (ASIC), Application Specific Standard Product (ASSP), System on Chip (SOC), Complex Programmable Logic Device (CPLD) and so on.

The computer readable storage medium can be a tangible device that can hold and store the instructions used by the instruction execution device. The computer readable storage medium can be, for example, but not limited to, an electrical storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the foregoing. More specific examples (non-exhaustive list) of computer readable storage media include: portable computer disks, hard disks, random access memory (RAM), read only memory (ROM), erasable programmable read only memory (EPROM) Or flash memory), static random access memory (SRAM), portable compact disk read only memory (CD-ROM), digital versatile disk (DVD), memory stick, floppy disk, mechanical encoding device, for example, with instructions stored thereon A raised structure in the hole card or groove, and any suitable combination of the above. A computer readable storage medium as used herein is not to be interpreted as a transient signal itself, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide or other transmission medium (eg, light pulses through a fiber optic cable), or through wires The electrical signal transmitted.

The computer readable program instructions described herein can be downloaded from a computer readable storage medium to various computing/processing devices or downloaded to an external computer or external storage device over a network, such as the Internet, a local area network, a wide area network, and/or a wireless network. The network may include copper transmission cables, fiber optic transmissions, wireless transmissions, routers, firewalls, switches, gateway computers, and/or edge servers. A network adapter card or network interface in each computing/processing device receives computer readable program instructions from the network and forwards the computer readable program instructions for storage in a computer readable storage medium in each computing/processing device .

Computer program instructions for performing the operations of the present disclosure may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine related instructions, microcode, firmware instructions, state setting data, or in one or more programming languages. Source code or object code written in any combination, including object oriented programming languages - such as Smalltalk, C++, etc., as well as conventional procedural programming languages - such as the "C" language or similar programming languages. The computer readable program instructions can execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer, partly on the remote computer, or entirely on the remote computer or server. carried out. In the case of a remote computer, the remote computer can be connected to the user's computer via any kind of network, including a local area network (LAN) or wide area network (WAN), or can be connected to an external computer (eg, using an Internet service provider to access the Internet) connection). In some embodiments, the customized electronic circuit, such as a programmable logic circuit, a field programmable gate array (FPGA), or a programmable logic array (PLA), can be customized by utilizing state information of computer readable program instructions. Computer readable program instructions are executed to implement various aspects of the present disclosure.

Aspects of the present disclosure are described herein with reference to flowchart illustrations and/or block diagrams of methods, apparatus, and computer program products according to embodiments of the present disclosure. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowcharts and/or block diagrams can be implemented by computer readable program instructions.

The computer readable program instructions can be provided to a general purpose computer, a special purpose computer, or a processor of other programmable data processing apparatus to produce a machine such that when executed by a processor of a computer or other programmable data processing apparatus Means for implementing the functions/acts specified in one or more of the blocks of the flowcharts and/or block diagrams. The computer readable program instructions can also be stored in a computer readable storage medium that causes the computer, programmable data processing device, and/or other device to operate in a particular manner, such that the computer readable medium storing the instructions includes An article of manufacture that includes instructions for implementing various aspects of the functions/acts recited in one or more of the flowcharts.

The computer readable program instructions can also be loaded onto a computer, other programmable data processing device, or other device to perform a series of operational steps on a computer, other programmable data processing device or other device to produce a computer-implemented process. Thus, instructions executed on a computer, other programmable data processing apparatus, or other device implement the functions/acts recited in one or more of the flowcharts and/or block diagrams.

The flowchart and block diagrams in the Figures illustrate the architecture, functionality and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagram can represent a module, a program segment, or a portion of an instruction that includes one or more components for implementing the specified logical functions. Executable instructions. In some alternative implementations, the functions noted in the blocks may also occur in a different order than those illustrated in the drawings. For example, two consecutive blocks may be executed substantially in parallel, and they may sometimes be executed in the reverse order, depending upon the functionality involved. It is also noted that each block of the block diagrams and/or flowcharts, and combinations of blocks in the block diagrams and/or flowcharts, can be implemented in a dedicated hardware-based system that performs the specified function or function. Or it can be implemented by a combination of dedicated hardware and computer instructions.

In addition, although the operations are depicted in a particular order, this should be understood as requiring that such operations be performed in the particular order shown or in the order of the order, or that all illustrated operations should be performed to achieve the desired results. Multitasking and parallel processing may be advantageous in certain circumstances. Likewise, although several specific implementation details are included in the above discussion, these should not be construed as limiting the scope of the disclosure. Certain features that are described in the context of separate implementations can also be implemented in combination in a single implementation. Conversely, various features that are described in the context of a single implementation can be implemented in a plurality of implementations, either individually or in any suitable sub-combination.

Some example implementations of the present disclosure are listed below.

The present disclosure can be implemented as a method for protecting blockchain data, comprising: creating a smart contract at a first node of the blockchain, the smart contract being set with a rights management field, the rights The management field includes an accessible address list; the smart contract is encrypted using the key at the first node, and the encrypted smart contract is included in the block data at the first node; Distributing the key to the second node of the blockchain according to the accessible address list at the first node; and transmitting the block data to the second node at the first node .

In some embodiments, the rights management field further includes access rights of the second node to the smart contract, the access rights including read and write access rights for setting read and write rights.

In some embodiments, the distributing the key to the second node according to the accessible address list at the first node comprises: performing key distribution in a point-to-point communication, the key comprising a symmetric key key.

In some embodiments, the key and the block data are received at the second node and the encrypted smart contract is decrypted from the block data using the key to create a The smart contract that was decrypted.

In some embodiments, the transaction is performed at the second node in accordance with the decrypted smart contract.

In some embodiments, the block data further includes a block number, transaction data, a signature, and a random number.

In some embodiments, historical transaction data and current state of the smart contract are stored in a database in a logically isolated manner, the current state of the smart contract being based on the block number stored in the database and the smart contract The smart contract number is queried.

In some embodiments, data negotiation is performed between the first node and the second node by peer-to-peer communication.

In some embodiments, the data consensus is performed based on the block number, the smart contract number of the smart contract, and a transaction data digest formed by historical transaction data of the smart contract.

In some embodiments, the method further comprises: transmitting the block data to a third node of the blockchain at the first node without distributing the key to the third node .

The present disclosure can be implemented as an apparatus for protecting blockchain data, comprising: a processor; a memory coupled to the processor and storing instructions that, when executed by the processor, cause the The device performs the following actions: creating a smart contract at a first node of the blockchain, the smart contract being set with a rights management field, the rights management field including a list of accessible addresses; at the first node Encrypting the smart contract using a key and including the encrypted smart contract in the block data at the first node; at the first node according to the accessible address list The second node of the blockchain distributes the key; and transmits the block data to the second node at the first node.

In some embodiments, the instructions, when executed by the processor, cause the device to further perform the act of transmitting the block data to a third node of the blockchain at the first node Without distributing the key to the third node.

The present disclosure can be embodied as a computer readable storage medium having computer readable program instructions stored thereon for performing a method for protecting blockchain data according to the above described .

Many modifications and other embodiments of the present disclosure will be apparent to those skilled in the <RTIgt; Therefore, it is to be understood that the embodiments of the present invention are not limited to the specific embodiments disclosed, and modifications and other embodiments are intended to be included within the scope of the present disclosure. In addition, while the above description and related drawings have described the example embodiments in the context of certain example combinations of components and/or functions, it should be appreciated that the components and/or Different combinations of functions are possible without departing from the scope of the present disclosure. In this regard, for example, other combinations of components and/or functions that are different from those explicitly described above are also contemplated as being within the scope of the present disclosure. Although specific terms are employed herein, they are used in a generic and descriptive sense and are not intended to be limiting.

Claims

A method for protecting blockchain data, comprising:

Creating a smart contract at a first node of the blockchain, the smart contract being set with a rights management field, the rights management field including a list of accessible addresses;

Encrypting the smart contract using a key at the first node, and including the encrypted smart contract in the block data at the first node;

Distributing the key to the second node of the blockchain according to the accessible address list at the first node;

The block data is transmitted to the second node at the first node.
The method of claim 1, wherein the rights management field further comprises access rights of the second node to the smart contract, the access rights comprising read and write access rights for setting read and write rights.
The method of claim 1 or 2, wherein the distributing the key to the second node according to the accessible address list at the first node comprises:

Key distribution is performed in peer-to-peer communication, the key including a symmetric key.
The method according to claim 1 or 2, wherein said key and said block data are received at said second node, and said encrypted data is decrypted from said block data using said key A smart contract is created to create the decrypted smart contract.
The method of claim 4 wherein the transaction is performed at the second node in accordance with the decrypted smart contract.
The method of claim 1 or 2, wherein the block data further comprises a block number, transaction data, a signature, and a random number.
The method of claim 6, wherein the historical transaction data and the current state of the smart contract are stored in a database in a logically isolated manner, the current state of the smart contract being based on the block number stored in the database Query with the smart contract number of the smart contract.
The method of claim 6, wherein the first node and the second node communicate data by peer-to-peer communication.
The method of claim 8, wherein the data consensus is performed based on the block number, the smart contract number of the smart contract, and a transaction data digest formed by historical transaction data of the smart contract.
The method of claim 1 or 2, further comprising:

The block data is transmitted to the third node of the blockchain at the first node without distributing the key to the third node.
A device for protecting blockchain data, comprising:

processor;

A memory coupled to the processor and storing instructions that, when executed by the processor, cause the device to perform the following actions:

Creating a smart contract at a first node of the blockchain, the smart contract being set with a rights management field, the rights management field including a list of accessible addresses;

Encrypting the smart contract using a key at the first node, and including the encrypted smart contract in the block data at the first node;

Distributing the key to the second node of the blockchain according to the accessible address list at the first node;

The block data is transmitted to the second node at the first node.
The device according to claim 11, wherein the rights management field further comprises access rights of the second node to the smart contract, the access rights including read and write access rights for setting read and write rights.
The device according to claim 11 or 12, wherein the distributing the key to the second node according to the accessible address list at the first node comprises:

Key distribution is performed in peer-to-peer communication, the key including a symmetric key.
The apparatus according to claim 11 or 12, wherein said key and said block data are received at said second node, and said encrypted data is decrypted from said block data using said key A smart contract is created to create the decrypted smart contract.
The apparatus of claim 14, wherein the transaction is performed at the second node in accordance with the decrypted smart contract.
The apparatus of claim 11 or 12, wherein the block data further comprises a block number, transaction data, a signature, and a random number.
The apparatus according to claim 16, wherein the historical transaction data and the current state of the smart contract are logically stored in a database, the current state of the smart contract being based on the block number stored in the database Query with the smart contract number of the smart contract.
The apparatus of claim 16, wherein the first node and the second node communicate data by peer-to-peer communication.
The apparatus of claim 18, wherein the data consensus is performed based on the block number, a smart contract number of the smart contract, and a transaction data digest formed by historical transaction data of the smart contract.
The apparatus of claim 11 or 12, the instructions, when executed by the processor, cause the apparatus to perform the following actions:

The block data is transmitted to the third node of the blockchain at the first node without distributing the key to the third node.
A computer readable storage medium having computer readable program instructions stored thereon for performing the method of any of claims 1-10.