WO2020019341A1

WO2020019341A1 - Method and device for processing blockchain account, and storage medium

Info

Publication number: WO2020019341A1
Application number: PCT/CN2018/097647
Authority: WO
Inventors: 袁振南; 谈扬
Original assignee: 区链通网络有限公司
Priority date: 2018-07-27
Filing date: 2018-07-27
Publication date: 2020-01-30
Also published as: CN109716375A; CN109716375B

Abstract

Provided are a method and device for processing a blockchain account, and a storage medium. The method for processing a blockchain account comprises: receiving a request to create a blockchain account; generating a random polynomial, and generating a quantum private key according to the random polynomial and the request; generating a quantum public key from the quantum private key by means of Falcon, a cryptographic algorithm; and performing hash mapping and encoding on the quantum public key to obtain an address of a quantum wallet corresponding to the quantum public key. In the invention, a quantum public key is generated by means of Falcon, a cryptographic algorithm, thereby increasing a security level of a blockchain account, and enhancing resistance of existing blockchain account systems to attacks by quantum computers. Compared with cipher keys generated employing existing post-quantum cryptographic algorithms, a quantum private key and a quantum public key generated using the present invention occupy less storage space, enable faster signing and authentication, and reduce an operation load for a blockchain server.

Description

Processing method, device and storage medium of blockchain account

Technical field

The present invention relates to the field of computer technology, and in particular, the present invention relates to a method, a device, and a storage medium for processing a blockchain account.

Background technique

With the increase of computing power of computers, the password length of public key passwords has been increasing to ensure security. After the key length is increased, the existing public key password needs to perform exponential operation in a larger limited domain, so that the existing public key password has more prominent problems in the efficiency of generating and unlocking keys. Elliptic curve cryptosystems are a kind of encryption algorithm with higher complexity but shorter key length. The current blockchain account system mainly uses the parameters of the secp256k1 curve based on the elliptic curve discrete logarithm, such as Bitcoin and Ethereum. Secp256k1 is a parameter of the elliptic curve digital signature algorithm curve, and it is defined in the high-efficiency cryptography standard (Certicom Research).

However, according to Shor's algorithm (Shor's algorithm), large-scale quantum computers can break public key account systems based on current digital theory asymmetric encryption and digital signature algorithms, including discrete logarithmic and elliptic curve discrete Account system for logarithmic, RSA and other encryption algorithms. The RSA encryption algorithm was proposed by Ron Rivest, Adi Shamir, and Leonard Adleman in 1977, so their three surnames were used. The initial combination of RSA is the name of the algorithm. Although there is no large-scale mature quantum computer at present, large-scale Internet companies in various countries are actively developing quantum computers. The account system in the blockchain involves the security of the user's virtual property. In order to be able to cope with the future quantum crisis and protect the security of the user's virtual property, the blockchain needs to design an account system that can resist quantum computer attacks.

Quantum resistant public key cryptography, also known as post-quantum cryptography, is mainly divided into the following four categories: 1) Lattice-based; 2) Hash-based; 3) Code-based; 4) Multivariate Public Key Cryptography. When applied to blockchain systems, these post-quantum cryptography have the following problems:

1. The generated key occupies too much storage space; the public and private keys of many schemes in post-quantum cryptography exceed 10KByte, and some of the keys based on encoding are even more than 1Mbyte, which is much larger than secp256k1 (the public key is 32 bytes) ).

2. Excessive performance consumption. After the generated key is optimized for the storage scheme, there is often a problem of low performance, resulting in a reduction in the speed of signing and verification.

3. Security issues; many schemes cannot fully reduce to basic difficulties, lack of worst-case provable security, and some schemes can be broken by hardware-based attacks.

Summary of the Invention

In view of the shortcomings of the existing methods, the present invention proposes a method, a device, and a storage medium for processing a blockchain account, which are used to improve the security level of the blockchain account.

The method for processing a blockchain account provided by the present invention includes the following steps:

Get a request to generate a blockchain account;

Generating a random polynomial, and generating a quantum private key according to the random polynomial and the request;

Generating the quantum public key by using the quantum private key through a Falcon encryption algorithm;

Hash map and encode the quantum public key to obtain a quantum wallet address corresponding to the quantum public key.

Preferably, after the request for obtaining and generating a blockchain account, the method further includes:

Generating a random number, and generating an elliptic curve private key according to the random number and the request;

Generating the elliptic curve public key by using the secp256k1 encryption algorithm of the elliptic curve private key;

Hash map and encode the elliptic curve public key to obtain an elliptic curve wallet address corresponding to the elliptic curve public key.

Confirm whether the system uses Falcon encryption algorithm or secp256k1 encryption algorithm;

If the system uses a Falcon encryption algorithm, continue with the steps of generating a random polynomial and generating a quantum private key according to the random polynomial and the request;

If the system uses the secp256k1 encryption algorithm, the steps of generating a random number and generating an elliptic curve private key according to the random number and the request are continued.

Preferably, the method for processing a blockchain account further includes:

Get transfer instructions;

According to the transfer instruction, the account balance in the elliptic curve wallet address is transferred to the quantum wallet address, or the account balance in the quantum wallet address is transferred to the elliptic curve wallet address.

Preferably, the method for processing a blockchain account further includes:

Get transfer instructions;

Get each wallet address of the local account;

According to the transfer instruction, the account balance of each wallet address is transferred to the quantum wallet address.

Preferably, the transferring the account balance of each wallet address to the quantum wallet address according to the transfer instruction includes:

Traverse all wallet addresses corresponding to the local account, and query the account balance in the corresponding wallet address;

Transferring the account balance in the wallet address with the account balance greater than zero to the quantum wallet address.

According to the transfer instruction, determine whether the transaction data corresponding to the transaction of account balance transfer of each wallet address exceeds a preset size, and if it exceeds the preset size, the transaction is split into multiple transactions and transferred to the quantum Wallet address.

Preferably, generating the quantum public key by using the Falcon encryption algorithm for the quantum private key includes:

Receiving quantum public key generation instructions;

According to the quantum public key generating instruction, the quantum private key is generated by a Falcon encryption algorithm.

Generating a second random number or a second random polynomial randomly according to the request;

Generating a second private key according to the second random number or the second random polynomial;

Generating a second public key by using the second private key with a second encryption algorithm different from the Falcon encryption algorithm;

Hash map and encode the second public key to obtain a second wallet address corresponding to the second public key.

The invention also proposes a device for managing a blockchain quantum account, including:

An acquisition module for acquiring a request to generate a blockchain account;

A key generation module, configured to generate a random polynomial, and generate a quantum private key according to the random polynomial and the request;

A public key generation module, configured to generate a quantum public key by using the Falcon encryption algorithm for the quantum private key;

A wallet address generation module is configured to hash map and encode the quantum public key to obtain a quantum wallet address corresponding to the quantum public key.

The present invention also proposes a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, the method for processing a blockchain account according to any one of the foregoing is implemented.

The invention has the following beneficial effects:

1. The present invention generates the quantum public key through the Falcon encryption algorithm, which improves the security performance of the blockchain account and can resist the quantum computer's cracking of the existing blockchain account system; compared with existing post-quantum cryptography students The generated secret key, the quantum private key and the quantum public key generated by the present invention have smaller storage space, faster signature and verification speed, and reduce the computational burden on the blockchain server.

2. The present invention can generate an elliptic curve private key and an elliptic curve public key based on the secp256k1 encryption algorithm to improve the encryption and decryption speed of the blockchain and reduce the blockchain on the premise of ensuring the security of the blockchain account. Requirements for server computing performance; the present invention can also use the secp256k1 encryption algorithm and the Falcon encryption algorithm at the same time to improve the security level of a blockchain account that uses the secp256k1 encryption algorithm.

3. The invention can preset two or more encryption algorithms in the blockchain system in advance to determine the currently available preferred encryption algorithm according to the specific situation, which is beneficial to the backward compatibility of the blockchain account and has a forward-looking Sex.

Additional aspects and advantages of the present invention will be given in part in the following description, which will become apparent from the following description or be learned through the practice of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS

The above and / or additional aspects and advantages of the present invention will become apparent and easily understood from the following description of the embodiments with reference to the accompanying drawings, in which:

FIG. 1 is a schematic structural diagram of an embodiment of a blockchain account system according to the present invention;

2 is a schematic flowchart of a first embodiment of a method for processing a blockchain account according to the present invention;

3 is a schematic flowchart of an embodiment of an operation method of a blockchain application client invented;

4 is a schematic flowchart of another embodiment of a method for processing a blockchain account according to the present invention;

FIG. 5 is a schematic flowchart of another embodiment of a method for processing a blockchain account according to the present invention.

detailed description

Hereinafter, embodiments of the present invention will be described in detail. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals represent the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the drawings are exemplary and are only used to explain the present invention, but not to limit the present invention.

Those skilled in the art can understand that, unless specifically stated, the singular forms "a", "an", "the" and "the" may include plural forms, and the "first" and "second" used herein "It is only used to distinguish the same technical feature, and does not limit the order and number of such technical features. It should be further understood that the term "including" used in the description of the present invention refers to the presence of the described features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, Integers, steps, operations, elements, components, and / or groups thereof.

It will be understood by those skilled in the art that, unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. It should also be understood that terms such as those defined in the general dictionary should be understood to have meanings consistent with the meanings in the context of the prior art, and unless specifically defined like this, they would not be idealized or overly Formal meaning to explain.

The method for managing a quantum account of a blockchain according to the present invention can be applied to the embodiment of the hardware environment as shown in FIG. 1. For convenience of explanation, only parts related to the embodiment of the present invention are shown. The account system in the present invention includes a blockchain network 101 and a plurality of terminals 102. The blockchain network 101 is used to manage account resources of external accounts or contract accounts in the blockchain, and to store interactive information of blockchain accounts and Contract information. The blockchain network 101 includes multiple full nodes 1011, each full node 1011 may correspond to one or a group of servers; the multiple full nodes 1011 may store the same blockchain data in chronological order. Terminal 102 refers to the terminal where the user connected to the blockchain network 101 is used to interact with the blockchain network 101. For example, the terminal where the SPV light wallet is located can generate a blockchain account for users and store blockchain account information , And can transfer account resources to other blockchain accounts; the account resources include virtual account balances. A user account or a local account includes an account associated with a user logged in through the terminal 102; the account may store blockchain resources that the user can trade, such as an account balance of a currency resource in online banking, an account balance of Bitcoin, and the like. The user may generate the corresponding private key, public key, and wallet address through the terminal 102, and notify the blockchain network 101 of the public key and wallet address. When a user enters a transfer instruction, the blockchain network 101 can verify the legality of the transfer transaction, broadcast the transfer transaction, and write the transaction record into the blockchain block.

When any full node 1011 in the blockchain network 101 deposits data or generates a contract, other nodes 1011 in the blockchain network 101 can also obtain the stored data or the generated contract according to the consensus algorithm, and save the data at the current node. The same data is also stored in the block and the contract is stored in the contract list, so that the data stored on all nodes 1011 in the blockchain network 101 is consistent.

Those skilled in the art can understand that the terminal 102 used here includes both a wireless signal receiver device, which only has a wireless signal receiver device with no transmitting capability, and a device that receives and transmits hardware, which has A device that receives and transmits hardware on a two-way communication link. Such a device may include: a cellular or other communication device having a single-line display or a multi-line display or a cellular or other communication device without a multi-line display; a PCS (Personal Communications Service). The "terminal" used herein may also be a communication terminal, an Internet terminal, or a music / video player terminal, such as a PDA, a Mobile Internet Device (MID) and / or a mobile phone, or a smart TV, Set-top boxes and other equipment.

As shown in the first embodiment shown in FIG. 2, the present invention proposes a method for generating a blockchain quantum account, which is used to improve the security level of an existing blockchain account system. The blockchain quantum account generation method includes the following steps:

Step S10: Obtain a request to generate a blockchain account.

Step S20: Generate a random polynomial, and generate a quantum private key according to the random polynomial and the request;

Step S30: Generate the quantum public key by using the Falcon encryption algorithm on the quantum private key.

Step S40: Perform hash mapping and encoding on the quantum public key to obtain a quantum wallet address corresponding to the quantum public key.

Each step is as follows:

Step S10: Obtain a request to generate a blockchain account.

The request may be initiated according to a user instruction, or may be initiated by a machine device. For example, after a user registers on the blockchain system, the blockchain system can generate a data block to identify the user's identity, and the user can initiate a request to generate a blockchain account. The blockchain account includes an external account or a contract account. The external account is also called EOA or EOAs, which represents the identity of an external user or agent; the permissions of the external account are mainly controlled by the private key, that is, the external account has the information to view the wallet address on the blockchain using the public key, However, the transaction must be signed using the private key corresponding to the wallet address. The contract account represents the account generated after the contract deployment is completed. The contract account stores the code used to complete the predetermined contract service; the external account can also call the contract account to complete the blockchain data operation. Account balances are generally stored in external accounts, and both contract balances and contracts can be stored in contract accounts. The type of the generated blockchain account can be determined according to the request, and the generated accounts can be transacted by transferring funds or triggering contract codes.

Step S20: Generate a random polynomial, and generate a quantum private key according to the random polynomial and the request.

After obtaining the request, if the request includes a request to generate a key using the Falcon encryption algorithm, the blockchain system will randomly generate two random polynomials to be used as the short polynomial f of the NTRU encryption algorithm in the lattice-based digital signature scheme. And the short polynomial g; after the short polynomial f and the short polynomial g meet the preset conditions of the NTRU encryption algorithm, then continue to obtain the short polynomial F and the short polynomial G according to the NTRU encryption algorithm, and make the short polynomials f, g, F And G satisfy the equality conditions of the NTRU encryption algorithm; then the short polynomials f, g, F, and G are formatted, Schmidt orthogonalization, and other mathematical processing to obtain the algorithm for generating the private key.

The NTRU encryption algorithm is a public key system proposed by three mathematics professors at Brown University in 1996. For details, please refer to the IEEE Std 1363.1 standard published in 2008. The full name of the NTRU encryption system is Number, Theory, and Research Unit encryption system, which includes two parts of algorithms: one is using NTRUEncrypt in the IEEE Std 1363.1 standard, and the other is using NTRUSign for digital signature. The method for obtaining the private key sk can be found in the standard Mathematical algorithm in the, or other related instructions on the NTRU encryption algorithm. The NTRU encryption system can be used to prevent the generated blockchain public key and other information from being cracked by the Shor algorithm, and can significantly improve the computing performance of the blockchain.

For the convenience of users, when generating the quantum private key, a mnemonic word can also be generated to assist the user in remembering or saving the private key when creating a wallet address. For example, when generating the private key, the BIP39 algorithm can be used to generate 12, 15, 18, 21, or 24 word strings, and then use the word string as the mnemonic word; and then use the BIP32 and BIP44 algorithms to generate the word string. Said quantum private key, the generated quantum private key may be a 64-bit random number, for example a hexadecimal 64-bit character string. The mnemonic may be another manifestation of a private key, and has the same authority as the private key, and is used for transactions in the blockchain.

Step S30: Generate the quantum public key by using the Falcon encryption algorithm for the quantum private key.

The Falcon encryption algorithm is a post-quantum cryptographic algorithm submitted to the National Institute of Standards and Technology (NIST) on November 30, 2017. Its characteristic is that the generated quantum public key is facing the Quantum computers can continue to ensure the security of blockchain accounts. The Falcon encryption algorithm is an NTRU encryption system based on the Lattice digital signature scheme to establish an algorithm framework. After obtaining short polynomials f, g, F, and G, a binary or ternary Falcon structure tree can be established to obtain the quantum private For the quantum public key corresponding to the key, please refer to the post-quantum cryptographic algorithm submitted to NIST and other related descriptions of the Falcon encryption algorithm for the specific calculation method.

Each of the quantum public keys generated by the Falcon encryption algorithm corresponds to one of the quantum private keys, and may also correspond to one mnemonic word, and neither the quantum private key nor the mnemonic word can be modified.

The quantum private key is used as a digital signature certificate for a blockchain transaction, and the quantum public key is used to verify whether the quantum private key has the authority of a blockchain transaction; the quantum public key can also shorten the corresponding quantum The length of the wallet address, for example, when the size of the quantum public key obtained is 1 KB, the corresponding quantum wallet address may be 20 bytes.

The quantum public key can generate an account address by using a one-way hash algorithm such as SHA256 and a hash function RIPEEMD160; the account address can be preset with an identification bit so that the account address can be compared with other blockchain account addresses Differentiate, for example, FALCON can be used as the beginning of the account address. The account address may be further coded to generate the quantum wallet address to visualize the quantum wallet address; the coding method may be determined according to a specific blockchain system, for example, a coding method such as base58Code is used to make the The quantum wallet address becomes ASCII.

The generated quantum wallet address can be used to receive data of transactions from other wallet addresses, and can also be used as a voucher to initiate a transaction. Each of the quantum wallet addresses corresponds to a pair of public and private keys to ensure a user's operation authority over the quantum wallet address; the quantum wallet address may also correspond to a mnemonic word so that the user can pass the helper The word enters the quantum wallet address and obtains the same operation authority as the quantum private key.

This embodiment uses the Falcon encryption algorithm to generate the quantum public key, which can resist the quantum computer's cracking of the existing blockchain account system. Compared to the existing post-quantum cryptographic student-generated key, the generated public key of this embodiment The quantum public key is described, the storage space is smaller, the verification speed is faster, and the computational burden on the blockchain server is reduced.

In practical applications, under the same security level as the Secp256k1 encryption algorithm, the size of the storage space occupied by the quantum public key based on the Falcon encryption algorithm is 897B, the size of the storage space occupied by the quantum private key is 2 * 897B, and the storage occupied by the signature is The size of the space is 617.38B, which is less than the size of the public or private key formed by existing post-quantum cryptographic students. At the same time, the account system based on Falcon encryption algorithm also has obvious advantages in efficiency;

The 128-bit security level on a desktop computer with an i7-6567U CPU (clocked at 3.3 GHz) is used as a parameter. The embodiment of the present invention can generate 6081.9 signatures per second and 37175.3 signature verifications.

With reference to the flowchart of the operation example of the blockchain application client shown in FIG. 3, when the blockchain application module of the blockchain application client sends the request for generating a blockchain account to the security module, the security module According to the request, generate the quantum private key, and use a Falcon encryption algorithm to generate a quantum public key and a corresponding quantum wallet address, and return the generated quantum private key, quantum public key, and quantum wallet address to the area Blockchain application module; the blockchain application module can also send the quantum public key and quantum wallet address to each node of the blockchain for access by other blockchain accounts.

When the blockchain application client requires the quantum public key for verification access, or the quantum private key for operations such as transactions, the blockchain application module sends a corresponding request to the security module. The security module verifies the request according to the quantum private key or the quantum public key, and returns a verification result to the blockchain application module, so that the blockchain application client completes a corresponding operation .

The blockchain application client may be installed on a terminal that can access a blockchain network, the blockchain network may include a blockchain server, and the blockchain application module and the security module may be connected to each other. Data exchange via communication module.

Further, when creating the quantum wallet address, a user password can also be set, and the user password can be used as a payment password when the quantum wallet address is traded, and can also be used to import the quantum private key into the quantum. Login password for wallet address. One quantum wallet address may correspond to a plurality of the user passwords, so that a user may log in to the same corresponding quantum wallet address by using the same quantum private key and different user passwords at multiple different terminals. , Can enhance the privacy of users' information on different terminals.

In another embodiment of the present invention, after generating the quantum wallet address, it may further include a step of backing up the quantum private key, which may be used to generate the mnemonic word so that a user can pass the mnemonic word Obtain the quantum private key or have the authority equivalent to the quantum private key. For example, after generating the quantum wallet address, a user may enter an instruction to generate a mnemonic word corresponding to the quantum wallet address, and enter a corresponding mnemonic password to obtain the mnemonic word. The user private key is generally a series of uppercase and lowercase characters without language meaning, which is difficult to remember. The step of backing up the quantum private key in this embodiment can generate a set of mnemonic words that are easy to remember, such as multiple A word string, so that when the user does not have a private key, the user can obtain the operation authority of the quantum wallet address through an easy-to-remember mnemonic word.

Each quantum wallet address corresponds to a mnemonic, and the mnemonic cannot be modified. The mnemonic password can be used to view the corresponding mnemonic words, or import the generated mnemonic words into the quantum wallet address. When generating the mnemonic word, if the mnemonic password input by the user is different, the obtained mnemonic word is different. A further example is as follows: a user enters an instruction to back up the quantum private key and enters a mnemonic password, and then the quantum private key and the mnemonic password can generate a Keystore for backup through the Scrypt algorithm, and the Keystore It is a fixed format string, and this string can be used as the mnemonic word.

The present invention also provides a second embodiment. After the request for generating a blockchain account, the method further includes:

Hash map and encode the elliptic curve public key to obtain an elliptic curve wallet address corresponding to the quantum public key.

After obtaining the request, if the request includes a request to generate a key using the secp256k1 encryption algorithm, the blockchain system will randomly generate a random number; the random number can be generated by the random number generator at the bottom of the operating system to generate 256 bits Entropy, or a random number that receives a predetermined number of external inputs. The account private key can be any number between 1 and n-1, where n is a constant, and the specific value of n can be defined according to the order of the encryption algorithm used by the blockchain. For example, select a string of random bytes from a cryptographically secure random source and generate a 256-bit number through the SHA256 algorithm. If the number is less than n-1, the number can be used as an elliptic curve private key; if not Less than n-1, then generate another random byte, and use SHA256 algorithm to generate a new 256-bit number, and determine whether the new 256-bit number is less than n-1 ... , And so on, until only a qualified number is generated as the elliptic curve private key.

In this embodiment, a pair of elliptic curve keys can be generated by using the secp256k1 encryption algorithm as the elliptic curve private key and elliptic curve public key corresponding to the elliptic curve wallet address, which can ensure the security of the blockchain account, Improve the encryption and decryption speed of the blockchain, and reduce the requirements for the computing performance of the blockchain server. In other cases, for example, after the emergence of a quantum computer, a quantum private key and a quantum public key can be generated through the Falcon encryption algorithm to ensure the data security of the blockchain account and make the blockchain account have a security level that is resistant to the quantum computer. .

In the embodiments of the present invention, a pair of keys including a private key and a public key can also be generated using encryption algorithms such as discrete logarithm, elliptic curve discrete logarithm, and RSA, and the Falcon encryption algorithm generates The blockchain account serves as a backup quantum account, which increases the scope of application of the present invention. The encryption logarithm such as discrete logarithm, elliptic curve discrete logarithm, and RSA can generate a key by using an existing method, and details are not described herein again.

In order to further increase the scope of application of the present invention, the present invention also proposes a third embodiment: after the request for obtaining and generating a blockchain account, the method further includes:

In some cases, for example, when the second encryption algorithm is an existing non-quantum computer-resistant algorithm, the request may include the steps of generating a second random number and generating a second private key according to the second random number. . The quantum account generated by the present invention can be used as a backup quantum account of a non-quantum account, so as to upgrade the non-quantum account corresponding to the second encryption algorithm to the quantum account of the present invention according to specific conditions, thereby guaranteeing the existing non-quantum account Security.

Further, the second encryption algorithm may be an algorithm with a security level equal to or higher than the Falcon encryption algorithm, and the request may include generating a second random polynomial and generating a second private Key steps. The second account corresponding to the second encryption algorithm can be used as a backup account of the quantum account corresponding to the quantum public key, thereby providing different encryption schemes for the quantum account to meet different requirements, or to further increase resistance Quantum computer security performance.

Based on the second embodiment, the present invention also proposes another embodiment: after the request for obtaining and generating a blockchain account, the method further includes:

If the system uses a Falcon encryption algorithm, the steps of generating a random polynomial and generating a quantum private key and a quantum private key according to the random polynomial and the request are continued;

In this embodiment, two encryption algorithms can be preset in the system framework to determine which preferred encryption algorithm is currently used to generate the private and public keys according to the specific situation, which is beneficial to the backward compatibility of the blockchain account and has a forward-looking .

Similarly, based on the third embodiment, the present invention further proposes another embodiment: After the request for obtaining and generating a blockchain account, the method further includes:

Determine whether the system uses the Falcon encryption algorithm or the second encryption algorithm;

If the system uses a Falcon encryption algorithm, the steps of generating a random polynomial and generating a quantum private key according to the random polynomial and the request are continued;

If the system uses a second encryption algorithm, the step of randomly generating a second random number or a second random polynomial according to the request is continued.

Similarly, the second encryption algorithm may be the aforementioned non-quantum computer-resistant algorithm, or an algorithm with a security level equal to or higher than the Falcon encryption algorithm. In the embodiments of the present invention, two or more encryption algorithms can be preset in the system framework to determine the currently preferred encryption algorithm according to specific conditions; when the security level of the second encryption algorithm is higher than the In the Falcon encryption algorithm, in this embodiment, the second encryption algorithm may also be selected to further improve the security level of the quantum account based on the Falcon encryption algorithm. In this embodiment, the system confirms which encryption algorithm is adopted, which is beneficial to the backward compatibility of the blockchain account and is forward-looking.

Based on the second embodiment, the present invention provides another embodiment of a method for processing a blockchain account. This embodiment further includes the following steps:

Get transfer instructions;

In some cases, such as when a quantum computer appears, this embodiment may transfer the account balance in the elliptic curve wallet address to the quantum wallet address to ensure the security of the account in the elliptic curve wallet address; at the same time, In some cases, the account balance in the quantum wallet address can also be transferred to the elliptic curve wallet address. For example, when the secp256k1 encryption algorithm can meet account security, the account balance in the quantum wallet address can also be transferred. Transfer to the elliptic curve wallet address to increase the speed of blockchain transactions. Of course, the elliptic curve wallet address may also be a wallet address obtained by other existing encryption algorithms, and details are not repeated here.

When the obtained transfer instruction is to transfer the account balance in the quantum wallet address to the second wallet address, if the security level of the second account is equal to or higher than the quantum account corresponding to the Falcon encryption algorithm, Then the present invention can provide another quantum account solution for the quantum account to meet different requirements, or further improve the security level of the quantum account.

When the user has multiple wallet addresses, in order to ensure the security of each wallet address, the present invention also proposes another embodiment: The method for processing a blockchain account further includes the following steps:

Get transfer instructions;

Get each wallet address of the local account;

The transfer instruction may be initiated by a user or a blockchain system. Each wallet address to obtain a local account can be based on the data storage directory of the local blockchain, for example: query all local accounts generated based on the secp256k1 encryption algorithm, and transfer the account balances of the wallet addresses corresponding to all the local accounts that are queried to the said Quantum wallet address. The local account described in this embodiment may include an account generated based on the secp256k1 encryption algorithm, and may also include a blockchain account generated by other existing encryption algorithms. In this embodiment, the local account can be selected by the user or the system upgrade The account balance of each wallet address is transferred to the quantum wallet address, which improves the security of the quantum computer that can resist the existing blockchain account.

When the local account is an account generated by using a quantum computer-resistant encryption algorithm different from the Falcon encryption algorithm, the quantum wallet address described in this embodiment may also provide another spare quantum wallet address for the local account. So that the user can take the transfer operation according to the specific situation.

In another embodiment of the invention, after obtaining the request for generating a blockchain account, the method may further include the following steps:

Generating a second random polynomial randomly according to the request;

Generating a second private key according to the second random polynomial;

Generating a second public key by using the second private key with a second encryption algorithm different from the Falcon encryption algorithm, where the security level of the second encryption algorithm is higher than the Falcon encryption algorithm;

Performing hash mapping and encoding on the second public key to obtain a second wallet address corresponding to the second public key;

Get transfer instructions;

Get each wallet address of the local account;

According to the transfer instruction, the account balance of each wallet address is transferred to the second wallet address.

In this embodiment, the balance in the quantum wallet address can be transferred to a second wallet address with a higher security level, which further improves the security of the quantum wallet address.

Further, according to the transfer instruction, transferring the account balance of each wallet address to the quantum wallet address may further include the following steps:

In this embodiment, the account balance is queried to reduce invalid account balance transactions and reduce the burden on the blockchain server. When the user has multiple wallet addresses, this embodiment can speed up the user's account balance transfer efficiency.

When the transaction data corresponding to a certain account balance transfer transaction is very large, for example, when the source of the account balance in a certain wallet address is more complicated, the transaction data may exceed a preset size. Therefore, the present invention also proposes another embodiment: The transferring the account balance of each wallet address to the quantum wallet address according to the transfer instruction includes:

In this embodiment, a transaction in which the transaction data exceeds a preset size can be split into multiple transactions to speed up the transfer efficiency of the account balance, and at the same time, the transaction data of the multiple transactions is sent to other nodes in the blockchain. To ensure transaction security.

In another embodiment of the present invention, combining the quantum private key with a Falcon encryption algorithm as shown in FIG. 4 to generate a quantum public key, including:

Step S31: receiving a quantum public key generation instruction;

Step S33: Generate the quantum public key by using the Falcon encryption algorithm according to the quantum public key generation instruction.

Further, before step S33, the method may further include:

In the step S32: the confirmation system uses a Falcon encryption algorithm, so as to generate a quantum public key through the Falcon encryption algorithm according to the quantum public key generation instruction.

In this embodiment, the quantum public key can be generated according to a user's selection instruction or an instruction of a blockchain system to generate the quantum public key when the quantum public key is needed; for example, after the appearance of a quantum computer, the user can Generated selection instructions, or generated by a blockchain server upgrade instruction; or set a preset trigger condition in the blockchain system, and when the trigger condition is met, the quantum public key generation instruction is issued to The Falcon encryption algorithm is used to generate the quantum public key. This embodiment increases the degree of freedom in the management of the blockchain account, and can reduce the resource consumption of the blockchain server and user terminals.

The present invention also provides a specific embodiment of a method for processing a blockchain account. In the embodiment of the method, the user's account uses a coexistence scheme of the existing secp256k1 encryption algorithm and the quantum-resistant Falcon encryption algorithm; the user may In the current specific case, choose to generate a wallet address corresponding to the secp256k1 encryption algorithm, or choose to generate a quantum wallet address corresponding to the Falcon encryption algorithm. The specific flowchart is shown in Figure 5.

When the blockchain account using the secp256k1 encryption algorithm is secure, the blockchain system can use the secp256k1 encryption algorithm by default; the quantum wallet address generation based on the Falcon encryption algorithm can be implemented by the user through the command line or specified by the corresponding wallet instruction generate.

It includes the following steps:

Step S10: Obtain a request to generate a blockchain account;

Step S21: confirm the encryption algorithm of the private key and the encryption algorithm of the public key according to the request;

Step S22: Generate a private key according to the encryption algorithm of the private key;

Step S35: Generate a public key according to the encryption algorithm of the public key;

Step S41: calculating a SHA-256 hash value of the public key;

Step S42: calculating a RIPEMD-160 hash value according to the SHA-256 hash value;

Step S43: hash the RIPEMD-160 hash value again, and add an address version number before the string of the operation result to obtain a public key hash value with the address version number; the address version number includes characters A or FALCON;

Step S44: Perform two SHA256 calculations on the public key hash value to obtain the first four bytes of the calculation result, and add the four bytes to the back of the public key hash value to obtain a check digit. Hash of the public key;

Step S45: BASE58Code encode the hash value of the public key with the check digit;

Step S46: Use the encoding result as the wallet address of the blockchain.

The request may be a command line entered by a user, for example, when a user enters the following command line on a client:

./ame-cli getnewaddress

In steps S21 to S35 described in this embodiment, a secp256k1 encryption algorithm may be called to generate an elliptic curve private key and an elliptic curve public key, and convert the elliptic curve public key into an elliptic curve wallet address and return.

When the user enters the command on the client:

./ame-cli getnewfalconaddress

In steps S21 to S46 of this embodiment, a falcon encryption algorithm may be called to generate the quantum private key and the quantum public key, and the quantum public key is converted into the quantum wallet address and returned.

In steps S41-S46, wallet addresses obtained by using the secp256k1 encryption algorithm and the Falcon encryption algorithm may be distinguished by using different prefixes. For example, in step S43, if the obtained operation result is JA6FuwhMzkriA8mk2zkuKFFb1MvvoCifX, the wallet address obtained based on the secp256k1 encryption algorithm is added with the prefix A to obtain:

AJA6FuwhMzkriA8mk2zkuKFFb1MvvoCifX

Prefix the quantum wallet address based on the Falcon encryption algorithm with "falcon:" to get:

falcon: JA6FuwhMzkriA8mk2zkuKFFb1MvvoCifX

The address version number may be equivalent to the prefix, and may include, but is not limited to, characters in the prefix. In the blockchain quantum account, you can also set client commands to enable users to transfer the account balance on the wallet address based on the secp256k1 encryption algorithm to the quantum wallet address based on the Falcon encryption algorithm through the client command line or a third-party wallet. In this way, users' blockchain accounts can quickly and safely transition from the non-quantum computer era to the quantum computer era. An example of the client command line may be as follows:

./ame-cli sendalltofalconaddr falcon: JA6FuwhMzkriA8mk2zkuKFFb1MvvoCifX

The specific process is as follows:

First, traverse all the blockchain accounts generated based on the secp256k1 encryption algorithm in the blockchain data storage directory wallet.dat, and query the account balance in the blockchain account; the account balance can be based on the user's Transaction output query, that is, query based on UTXO (Unspent Transaction Output), or query based on account.

Second, the account balance is packaged into a transaction, and the balances of all accounts with account balances greater than zero are sent to a quantum wallet address based on the falcon encryption algorithm, and the private key of each account based on the secp256k1 encryption algorithm is used to sign the transaction. Data is sent to other nodes in the blockchain network.

During the transaction process, if the transaction data of a transaction is too large, it will be split and packaged into multiple transactions and sent to other nodes in the blockchain network.

This embodiment has the following beneficial effects:

1. Falcon-based encryption algorithm is used to provide quantum-resistant security. In addition, compared with other post-quantum solutions, Falcon encryption algorithm occupies a small amount of storage space, which can ensure quantum-resistant security while minimizing the area. The impact of the amount of transaction concurrency on the blockchain network; the efficiency advantage of blockchain accounts based on the Falcon encryption algorithm also improves the transaction processing efficiency of the blockchain network.

2. When the secp256k1 encryption algorithm meets the security of the blockchain account, the blockchain account can use the secp256k1 encryption algorithm by default. Compared with the direct use of the falcon encryption algorithm, it can reduce the storage space and help maintain the existing blockchain network. The amount of concurrent transactions reduces the storage space occupied by blockchain data, and does not adversely affect the security of user accounts.

3. In this embodiment, the wallet address obtained by using the secp256k1 encryption algorithm and the falcon encryption algorithm can use different address formats to prevent users from making mistakes and making incorrect transfers.

4. In this embodiment, the account balance transfer command can be set as a key to achieve a one-click transfer of the balance on the user account based on the secp256k1 encryption algorithm to a quantum account address based on the Falcon encryption algorithm, which facilitates the user account system. Safe transition to the post-quantum era.

The invention also proposes a device for managing a blockchain quantum account. The device includes:

An acquisition module for acquiring a request to generate a blockchain account;

An embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which is executed by a processor to implement a method for processing a blockchain account according to any one of the above. The storage medium includes, but is not limited to, any type of disk (including a floppy disk, a hard disk, an optical disk, a CD-ROM, and a magneto-optical disk), a ROM (Read-Only Memory), a RAM (Random Access Memory), and then Memory), EPROM (Erasable Programmable Read-Only Memory, Erasable Programmable Read-Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), flash memory, magnetic card or optical card That is, the storage medium includes any medium that stores or transfers information in a readable form by a device (for example, a computer). It can be read-only memory, magnetic disk or optical disk, etc.

It should be understood that the functional units in the embodiments of the present invention may be integrated into one processing module, or each of the units may exist separately physically, or two or more units may be integrated into one module. The above integrated modules may be implemented in the form of hardware or software functional modules.

The above description is only part of the embodiments of the present invention. It should be noted that, for those of ordinary skill in the art, without departing from the principles of the present invention, several improvements and retouches can be made. These improvements and retouches also It should be regarded as the protection scope of the present invention.

Claims

A method for processing a blockchain account, comprising:

Get a request to generate a blockchain account;

Generating a random polynomial, and generating a quantum private key according to the random polynomial and the request;

Generating the quantum public key by using the quantum private key through a Falcon encryption algorithm;

Hash map and encode the quantum public key to obtain a quantum wallet address corresponding to the quantum public key.
The method according to claim 1, wherein after the obtaining the request for generating a blockchain account, the method further comprises:

Generating a random number, and generating an elliptic curve private key according to the random number and the request;

Generating the elliptic curve public key by using the secp256k1 encryption algorithm of the elliptic curve private key;

Hash map and encode the elliptic curve public key to obtain an elliptic curve wallet address corresponding to the elliptic curve public key.
The method according to claim 2, wherein after the obtaining the request for generating a blockchain account, the method further comprises:

Confirm whether the system uses Falcon encryption algorithm or secp256k1 encryption algorithm;

If the system uses a Falcon encryption algorithm, the steps of generating a random polynomial and generating a quantum private key according to the random polynomial and the request are continued;

If the system uses the secp256k1 encryption algorithm, the steps of generating a random number and generating an elliptic curve private key according to the random number and the request are continued.
The method according to claim 2, further comprising:

Get transfer instructions;

According to the transfer instruction, the account balance in the elliptic curve wallet address is transferred to the quantum wallet address, or the account balance in the quantum wallet address is transferred to the elliptic curve wallet address.
The method according to claim 1, further comprising:

Get transfer instructions;

Get each wallet address of the local account;

According to the transfer instruction, the account balance of each wallet address is transferred to the quantum wallet address.
The method according to claim 5, wherein the transferring the account balance of each wallet address to the quantum wallet address according to the transfer instruction comprises:

Traverse all wallet addresses corresponding to the local account, and query the account balance in the corresponding wallet address;

Transferring the account balance in the wallet address with the account balance greater than zero to the quantum wallet address.
The method according to claim 5, wherein the transferring the account balance of each wallet address to the quantum wallet address according to the transfer instruction comprises:

According to the transfer instruction, determine whether the transaction data corresponding to the transaction of account balance transfer of each wallet address exceeds a preset size, and if it exceeds the preset size, the transaction is split into multiple transactions and transferred to the quantum Wallet address.
The method according to claim 1, wherein the generating the quantum public key by the Falcon encryption algorithm of the quantum private key comprises:

Receiving quantum public key generation instructions;

According to the quantum public key generating instruction, the quantum private key is generated by a Falcon encryption algorithm.
The method according to claim 1, wherein after the obtaining the request for generating a blockchain account, the method further comprises:

Generating a second random number or a second random polynomial randomly according to the request;

Generating a second private key according to the second random number or the second random polynomial;

Generating a second public key by using the second private key with a second encryption algorithm different from the Falcon encryption algorithm;

Hash map and encode the second public key to obtain a second wallet address corresponding to the second public key.
A device for managing a blockchain quantum account is characterized in that it includes:

An acquisition module for acquiring a request to generate a blockchain account;

A key generation module, configured to generate a random polynomial, and generate a quantum private key according to the random polynomial and the request;

A public key generation module, configured to generate a quantum public key by using the Falcon encryption algorithm for the quantum private key;

A wallet address generation module is configured to hash map and encode the quantum public key to obtain a quantum wallet address corresponding to the quantum public key.
A computer-readable storage medium having stored thereon a computer program, characterized in that when the program is executed by a processor, the method for processing a blockchain account according to any one of claims 1 to 9 is implemented.