WO2020088110A1 - 一种基于区块链的节点管理方法和装置 - Google Patents

一种基于区块链的节点管理方法和装置 Download PDF

Info

Publication number
WO2020088110A1
WO2020088110A1 PCT/CN2019/104965 CN2019104965W WO2020088110A1 WO 2020088110 A1 WO2020088110 A1 WO 2020088110A1 CN 2019104965 W CN2019104965 W CN 2019104965W WO 2020088110 A1 WO2020088110 A1 WO 2020088110A1
Authority
WO
WIPO (PCT)
Prior art keywords
node
blockchain
certificate
new node
target transaction
Prior art date
Application number
PCT/CN2019/104965
Other languages
English (en)
French (fr)
Inventor
潘冬
Original Assignee
阿里巴巴集团控股有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 阿里巴巴集团控股有限公司 filed Critical 阿里巴巴集团控股有限公司
Priority to EP19880324.9A priority Critical patent/EP3813321A4/en
Priority to SG11202100503UA priority patent/SG11202100503UA/en
Publication of WO2020088110A1 publication Critical patent/WO2020088110A1/zh
Priority to US17/162,850 priority patent/US11461773B2/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
    • H04L9/3239—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3821—Electronic credentials
    • G06Q20/38215—Use of certificates or encrypted proofs of transaction rights
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3825—Use of electronic signatures
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/389—Keeping log of transactions for guaranteeing non-repudiation of a transaction
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/405—Establishing or using transaction specific rules
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/12—Applying verification of the received information
    • H04L63/126—Applying verification of the received information the source of the received data
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H04L67/1097—Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
    • H04L9/3213—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority using tickets or tokens, e.g. Kerberos
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash

Definitions

  • This specification relates to the field of network technology, and in particular to a node management method and device based on blockchain.
  • Blockchain technology also known as distributed ledger technology, is an emerging technology in which several computing devices jointly participate in "bookkeeping" and jointly maintain a complete distributed database.
  • Blockchain technology has the characteristics of decentralization, openness and transparency, each computing device can participate in database records, and data synchronization can be quickly performed between computing devices, making blockchain technology widely used in many fields. To apply.
  • This specification provides a node management method based on a blockchain.
  • the distributed database of the blockchain stores a node identity table, where the node identity table is used to record the certificates and The unique identification of the blockchain node corresponding to the certificate; the method includes:
  • Existing nodes on the blockchain receive the target transaction, the target transaction includes the new node's certificate and the unique identification of the new node;
  • Verify the target transaction so that the target transaction is included in the distributed database of the blockchain after the consensus verification of the blockchain corresponds to the node identity table containing the unique identification and certificate of the new node in.
  • the verification of the target transaction includes:
  • the target transaction further includes a digital signature with an endorsement node in the blockchain based at least on the certificate of the new node;
  • the verification of the target transaction includes:
  • the method further includes:
  • the method further includes:
  • the network address is stored in a local database of existing nodes in the blockchain.
  • the method further includes:
  • the method further includes:
  • this specification also provides a node management device based on a blockchain, the distributed database of the blockchain stores a node identity table, wherein the node identity table is used to record the blockchain
  • the certificate of the node and the unique identification of the blockchain node corresponding to the certificate; the device includes:
  • the existing node of the blockchain receives the target transaction, and the target transaction includes the certificate of the new node and the unique identification of the new node;
  • the verification unit verifies the target transaction, so that after the target transaction undergoes consensus verification of the blockchain, a node identity table containing the unique identifier and certificate of the new node is included in Distributed database.
  • the verification unit :
  • the target transaction further includes a digital signature with an endorsement node in the blockchain based at least on the certificate of the new node;
  • the verification unit is a verification unit
  • the device further includes:
  • the smart contract execution unit calls the smart contract corresponding to the management of the node identity table, executes the update logic of the node identity table declared by the smart contract, verifies the target transaction, and sets the uniqueness of the new node after the verification is passed
  • the sex identification and the certificate are included in the node identity table.
  • the device further includes an acquisition unit and a storage unit,
  • the receiving unit receives the network address of the new node, the unique identifier of the new node, and the digital signature made by the new node;
  • the obtaining unit obtains the node identity table from the distributed database of the blockchain, and obtains the certificate of the new node based on the unique identification code;
  • the verification unit verifies the digital signature based on the certificate of the new node
  • the storage unit after the verification is passed, stores the network address to a local database of existing nodes in the blockchain.
  • the device further includes:
  • the sending unit sends to the new node the network addresses of other existing nodes in the blockchain stored in the local database of the blockchain node.
  • the device further includes:
  • the sending unit sends the data in the distributed database of the blockchain backed up by the existing nodes of the blockchain to the new node.
  • This specification also provides a computer device, including: a memory and a processor; a computer program executable by the processor is stored on the memory; when the processor runs the computer program, the above-mentioned blockchain-based node is executed The steps described in the management method.
  • This specification also provides a computer-readable storage medium on which a computer program is stored.
  • the computer program is executed by a processor, the steps described in the above-mentioned blockchain-based node management method are performed.
  • the node management method and device based on the blockchain provided in this specification by establishing a storage node identity table in the distributed database of the blockchain, including the certificates of nodes that can be added to the blockchain, thereby preventing any nodes from going through the chain
  • the nodes within the consensus or consent to join the blockchain provides the security of the blockchain.
  • FIG. 1 is a flowchart of a node management method of a blockchain provided by an exemplary embodiment of this specification
  • FIG. 2 is a schematic diagram of a node management device of a blockchain provided by an exemplary embodiment of the present specification
  • FIG. 3 is a hardware structure diagram of an embodiment of a node management device that runs the blockchain provided in this specification.
  • the steps of the corresponding method are not necessarily performed in the order shown and described in this specification.
  • the method may include more or fewer steps than described in this specification.
  • the single step described in this specification may be decomposed into multiple steps for description in other embodiments; and the multiple steps described in this specification may also be combined into a single step in other embodiments. description.
  • an exemplary embodiment of the present specification provides a blockchain-based node management method in which a trusted node with a credible node's identity certificate stored therein is stored in a distributed database of the blockchain Table, the node identity table is used to record the certificate of the blockchain node and the unique identification of the blockchain node corresponding to the certificate.
  • the blockchain described in this embodiment may specifically refer to a P2P network system with distributed data storage structure reached by each node device through a consensus mechanism, and the data distribution in the blockchain is connected one by one in time.
  • the latter block contains the data summary of the previous block, and according to the specific consensus mechanism (such as POW, POS, DPOS or PBFT, etc.), all or part of the data of the node device is reached Full backup.
  • the specific consensus mechanism such as POW, POS, DPOS or PBFT, etc.
  • the blockchain using Pow consensus requires at least a full Only an attack of 51% of the network's computing power is likely to tamper with the existing data. Therefore, the blockchain system has the characteristics of ensuring data security and preventing attack and tampering comparable to other centralized database systems.
  • the blockchain nodes described in this specification can include not only full-node devices that back up the full data of the distributed database of the blockchain, but also light-node devices that back up part of the data of the distributed database of the blockchain, And other terminal devices or clients are not limited in this specification.
  • the transaction described in this specification refers to a piece of data that a user creates through a node device of the blockchain and needs to be finally released to the distributed database of the blockchain.
  • the narrow sense of the transaction refers to a value transfer issued by the user to the blockchain; for example, in the traditional Bitcoin blockchain network, the transaction can be a transfer initiated by the user in the blockchain.
  • the generalized transaction refers to an arbitrary piece of data released by the user to the blockchain: for example, the operator can build an alliance chain based on actual business needs, relying on the alliance chain to deploy some other types of online services that are not related to value transfer (For example, rental business, vehicle scheduling business, insurance claims business, credit service, medical service, etc.), and in this type of alliance chain, the transaction can be a business message or business published by the user in the alliance chain with business intent Request; for another example, the transaction can also be data sent by the user to the blockchain to change the user's account status (such as account balance, etc.). Therefore, as long as it is any data released by the user to the distributed database of the blockchain, whether the arbitrary data is stored in the block body, block header, or other location of the block, it can belong to the "transaction" described in the present invention.
  • the transaction can be a business message or business published by the user in the alliance chain with business intent Request; for another example, the transaction can also be data sent by the user to the blockchain to change the user'
  • the identity of the node is not recorded in the distributed database of the blockchain; after the user joins the blockchain through the blockchain network registration protocol, the registered user identity (or account identity) is usually bound to The node device running the registration protocol displays the user identity bound to the node in the network routing table.
  • the user obtains the user account by running the network registration protocol on the node device, and adds information in the form of enode: // pubkey1 @ ip1: port1 to the network routing of the blockchain Table for communication with other nodes in the blockchain.
  • the above routing information will expose the node IP and port information of users in the blockchain, causing hidden dangers of insecurity.
  • a node identity table is stored in the distributed database of the blockchain to record the blockchain network And the unique identification of the blockchain node corresponding to the certificate.
  • the certificate of the node may include the public key corresponding to the node and the digital signature of the node's identity certification authority at least on the node's public key, and may also include identity information such as the node's ID name, affiliation, and physical address.
  • This specification does not limit the type of protocol followed by the certificate, and certificates such as TLS certificates that are certified by a CA certification authority can be applied to the embodiments provided in this description.
  • the node identity authentication organization may include the management organization of the above-mentioned blockchain system, or users with higher credit in the above-mentioned blockchain, etc., which is not limited herein.
  • the unique identifier of the above-mentioned blockchain node may include the name of the node, the identity code of the node, the public key of the node, and so on.
  • the node identity table is used to manage the nodes on the blockchain, which increases the security of the blockchain system.
  • Step 102 the blockchain node receives a target transaction, the target transaction including the new node's certificate and the unique identity of the new node.
  • the new node to be added to the blockchain can communicate with any identity management node in the blockchain that has the authority to manage the identity of the node through off-chain communication or by running the node to join the protocol, and identify its own certificate and uniqueness. Sent to the above-mentioned identity management node, so that the above-mentioned identity management node sends the target transaction to update the node's identity table to the blockchain to propagate the target transaction within the blockchain, so the blockchain node can receive the Target transaction.
  • the above target transaction may include the certificate of the existing node in the blockchain and its corresponding unique identifier, so that after the node identity table update transaction is agreed by the blockchain, it will contain the certificate of the existing node and the above new node , And its corresponding uniquely-identified node identity table is updated in the distributed database of the blockchain; it may also contain only the newly-added node certificate and its unique identifier to update the transaction in the node identity table. After the blockchain consensus, the newly added node certificate and its unique identifier are updated in the state of the node identity table set in the distributed database of the blockchain.
  • Step 104 verify the target transaction, so that the target transaction will be included in the blockchain identity table corresponding to the node identity table containing the unique identifier and certificate of the new node after the consensus verification of the blockchain Distributed database.
  • the existing node of the blockchain After receiving the target transaction, the existing node of the blockchain will verify the target transaction based on the verification rules of the blockchain for the target transaction, so that the target transaction will be included after the consensus verification of the blockchain
  • the unique identification of the new node and the node identity table of the certificate are included in the distributed database of the blockchain.
  • the verification of the target transaction by the existing nodes in the blockchain described in this embodiment may generally include verification of the content of the target transaction, such as verifying whether the certificate of the new node is legal using the public key of the node identity certification authority, and Verify whether the node identity certification authority that signed the new node certificate belongs to the node identity certification authority recognized by the blockchain.
  • the verification may further include verification of the digital signature of the endorsement node of the blockchain included in the target transaction based on at least the certificate of the new node, and calculating whether the verified digital signature satisfies the preset.
  • the number that is, there must be an endorsement node that meets the preset number to endorse the addition of the new node, can the above-mentioned node identity table update transaction be verified.
  • a node with accounting authority in the blockchain adds the target transaction to the candidate block, and the joining position includes but is not limited to the block body or block header;
  • the consensus accounting node broadcasts the candidate block to the nodes of the blockchain
  • the candidate block After the candidate block passes the verification and approval of the predetermined number of nodes of the blockchain, the candidate block is regarded as the latest block and is added to the distributed database of the blockchain.
  • the node with accounting authority refers to a node with authority to generate candidate blocks, which may include nodes with higher credit users or other nodes in the above-mentioned blockchain.
  • a consensus accounting node can be determined from the nodes that have accounting authority for the candidate block.
  • the consensus mechanism can include a proof of work mechanism (PoW) or a proof of rights mechanism ( PoS), or share authorization certification mechanism (DPoS), etc., or the Byzantine fault-tolerant algorithm consensus mechanism PBFT commonly used by the alliance chain.
  • the above-mentioned inclusion of the certificate and unique identification of the new node in the node identity table can also be achieved by calling a smart contract, which stores the node identity table in the smart contract
  • the nodes in the blockchain network are managed.
  • the above target transaction may include the newly added node certificate and its unique identification, as well as the address and interface of the smart contract called, so that after the operation result of the smart contract called by the target exchange is agreed by the blockchain, it will be The newly added node certificate and its unique identifier are updated in the node identity table stored in the smart contract.
  • the blockchain-based node management method described in the above embodiment further includes: calling a smart contract corresponding to the node identity table management, executing the node identity table update logic declared by the smart contract, and verifying the target transaction After the verification is passed, the unique identifier and the certificate of the new node are included in the node identity table.
  • verifying the target transaction may generally include verifying the content of the target transaction, such as using the public key of the node identity certification authority to verify the above new A node ’s certificate and verify whether the node ’s identity certification authority belongs to a node identity certification authority recognized by the blockchain; it may also include verification of the digital signature of the blockchain ’s endorsement node based at least on the new node ’s certificate , And calculate whether the verified digital signature meets the preset number, that is, an endorsement node that meets the preset number must endorse the new node before the node identity table update transaction can pass the above Verification of the legality of smart contracts.
  • the smart contract can be called at any time in response to the target transaction sent by the node with the node identity table management authority of the blockchain, so as to achieve consensus among the nodes of the blockchain.
  • the next management updates the node identity table, which improves the security, legality and fairness of the blockchain node management.
  • the above-mentioned new node to be added to the blockchain already has the authority to join the above-mentioned blockchain.
  • the new node can learn the network address of at least one existing node in the blockchain through off-chain communication or other methods, and use the network address to communicate with the at least one existing node. Make a communication connection.
  • the network addresses described in the embodiments of this specification may generally include the content such as the IP address and port where the node is located.
  • the blockchain-based node management method provided in this specification further includes steps 106 to 110.
  • Step 106 Receive the network address of the new node, the unique identifier of the new node, and the digital signature made by the new node.
  • the above new node can send its own network address, unique identification (such as name, or hardware address, or identity code or public key, etc.) and the digital signature made by the new node To the existing node of the blockchain that generates the communication connection; accordingly, the existing node of the blockchain receives the network address of the new node, the unique identifier of the new node, and the digital signature made by the new node.
  • unique identification such as name, or hardware address, or identity code or public key, etc.
  • the digital signature made by the new node is a digital signature made by the new node using the public key corresponding to the private key in the certificate that has been included in the node identity table.
  • the digital signature can be made based on any content, for example, Based on the network address of the new node, or the unique identifier of the new node, or other content, the purpose of which is to facilitate the existing node with which the communication connection is made can sign the digital based on the certificate of the new node included in the above node identity table Perform verification to confirm whether the new node with which it communicates is indeed a new node approved by the blockchain consensus. It is worth noting that when the digital signatures made by the new nodes are based on other content, the new nodes should also send their signed content to the existing nodes on the blockchain to facilitate their verification of the digital signatures.
  • Step 108 Obtain the node identity table from the distributed database of the blockchain, and obtain the certificate of the new node based on the unique identification code.
  • existing nodes in the above-mentioned blockchain can be included in the target transaction included in the distributed database of the blockchain, or in the state of the node identity table, or called to run
  • the above-mentioned smart contract for storing and managing the node identity table retrieves and obtains the certificate of the corresponding new node based on the unique identification code sent by the new node.
  • Step 110 Based on the certificate of the new node, verify the digital signature.
  • the above-mentioned new nodes of the communication connection are indeed trusted nodes that have been verified by consensus among the nodes of the blockchain.
  • Step 112 After the verification is passed, store the network address to the local database of the existing node.
  • each node in the blockchain needs to know the network address of at least one other blockchain node to complete the data transmission, broadcast or synchronization
  • the nodes of the blockchain can save the network addresses of other blockchain nodes in the local database, such as configuring a special Config file to include the IP addresses and ports of other blockchain nodes.
  • the network address of the new node should be stored To the local database, for example, the network address of the new node is included in the above-mentioned specially configured Config file.
  • the new node can synchronize the block data with the existing node by the identity of the blockchain node, that is, send the distributed database of the blockchain backed up by the existing node to the new node Data.
  • the synchronization of the block data may include the following steps:
  • the new node device initiates a block data synchronization request to an existing node on the blockchain network; synchronizes the existing block data from the existing node.
  • the existing node is usually a neighboring node around the new node, further
  • the "block header first" download method can be used to first download the block headers of all existing blocks from neighboring nodes, and after the block headers are downloaded,
  • the new node can simultaneously download blocks of different heights from multiple neighboring nodes in parallel, greatly improving the synchronization speed of existing block data; after synchronization is completed, block data verification is performed.
  • the above block data verification process includes blocks Format verification (including version, timestamp), block header hash value verification, and verification of all transactions according to transaction verification rules, etc.
  • the above verification of all transactions is based on transaction verification rules, including Whether the format is correct, the Merkle Root generated according to the data structure of the transaction is correct, and so on, to verify the correctness of the existing block data; the above block After the test is completed, according to participate as a node to the block chain block chain to run, receiving, authentication, the new node block consensus storing block chain produced, and the like.
  • the Some nodes may send network addresses of other existing nodes stored in the local database of the existing node to the new node, so as to facilitate the communication connection of the above new node.
  • the other existing nodes mentioned above also recognize the new node as a trusted node of the blockchain by performing the steps described in steps 102 to 112 described in the above embodiment, so as to carry out data synchronization with the new node , Sending the data in the distributed database of the blockchain backed up by the existing node to the new node.
  • the node management method based on the blockchain provided by the above embodiments, by establishing a storage node identity table in the distributed database of the blockchain, including the certificates of the nodes that can be added to the blockchain, thus preventing any nodes from going through Nodes in the chain agree or agree to join the blockchain, providing the security of the blockchain.
  • Existing nodes in the above blockchain communicate with the new node off-chain to verify whether the new node belongs to a trusted node that has been agreed to be accepted by the blockchain node consensus, and after passing the verification, the new node is regarded as the blockchain
  • the nodes in include the network address of the new node of the blockchain in the local database, so that the existing node and the new node can communicate and transmit or broadcast data within the blockchain network.
  • the embodiments of the present specification also provide a node management device of the blockchain.
  • the above device may be implemented by software, or by hardware or a combination of hardware and software.
  • software implementation as an example, as a logical device, it is formed by reading the corresponding computer program instructions into the memory through the CPU (Central Processing Unit) of the device where it is located.
  • CPU Central Processing Unit
  • the device where the device for implementing network risk services usually includes other hardware such as chips for wireless signal transmission and reception, and / or for implementation Network communication function boards and other hardware.
  • FIG. 2 shows a node management device 20 based on a blockchain.
  • the distributed database of the blockchain stores a node identity table, where the node identity table is used to record the A certificate and the unique identification of the blockchain node corresponding to the certificate; the device 20 includes:
  • Receiving unit 202 the existing node of the blockchain receives the target transaction, the target transaction includes the certificate of the new node and the unique identification of the new node;
  • the verification unit 204 verifies the target transaction, so that the target transaction will be included in the blockchain corresponding to the node identity table containing the unique identification and certificate of the new node after the consensus verification of the blockchain Distributed database.
  • the verification unit 204 the verification unit 204:
  • the target transaction further includes a digital signature with an endorsement node in the blockchain based at least on the certificate of the new node;
  • the verification unit 204 The verification unit 204:
  • the device 20 further includes:
  • the smart contract execution unit 208 invokes the smart contract corresponding to the management of the node identity table, executes the update logic of the node identity table declared by the smart contract, verifies the target transaction, and converts the new node ’s
  • the unique identifier and the certificate are included in the node identity table.
  • the device 20 further includes an acquisition unit 210 and a storage unit 212,
  • the receiving unit 202 receives the network address of the new node, the unique identifier of the new node, and the digital signature made by the new node;
  • the obtaining unit 210 obtains the node identity table from the distributed database of the blockchain, and obtains the certificate of the new node based on the unique identification code;
  • the verification unit 204 verifies the digital signature based on the certificate of the new node
  • the storage unit 212 stores the network address to a local database of existing nodes in the blockchain.
  • the device 20 further includes:
  • the sending unit 214 sends the network addresses of other existing nodes in the blockchain stored in the local database of the blockchain node to the new node.
  • the device 20 further includes:
  • the sending unit 214 sends the data in the distributed database of the blockchain backed up by the existing nodes of the blockchain to the new node.
  • the device embodiments described above are only schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical modules, that is, may be located One place, or can be distributed to multiple network modules. Some or all of the units or modules may be selected according to actual needs to achieve the objectives of the solutions in this specification. Those of ordinary skill in the art can understand and implement without paying creative labor.
  • a typical implementation device is a computer, and the specific form of the computer may be a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email sending and receiving device, and a game control Desk, tablet computer, wearable device, or any combination of these devices.
  • the embodiments of the present specification also provide a computer device, which includes a memory and a processor.
  • a computer program that can be executed by the processor is stored on the memory; when the processor runs the stored computer program, each step of the node management method based on blockchain in the embodiment of the present specification is executed.
  • each step of the node management method based on blockchain in the embodiment of the present specification is executed.
  • the embodiments of the present specification also provide a computer-readable storage medium, which stores computer programs on the storage medium.
  • the computer program is executed based on The various steps of the node management method of the blockchain.
  • the various steps of the blockchain-based node management method please refer to the previous content, and it will not be repeated.
  • the computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory.
  • processors CPUs
  • input / output interfaces output interfaces
  • network interfaces network interfaces
  • memory volatile and non-volatile memory
  • the memory may include non-permanent memory, random access memory (RAM) and / or non-volatile memory in computer-readable media, such as read only memory (ROM) or flash memory (flash RAM). Memory is an example of computer-readable media.
  • RAM random access memory
  • ROM read only memory
  • flash RAM flash memory
  • Computer-readable media including permanent and non-permanent, removable and non-removable media, can store information by any method or technology.
  • the information may be computer readable instructions, data structures, modules of programs, or other data.
  • Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, read-only compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, Magnetic tape cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media can be used to store information that can be accessed by computing devices. As defined in this article, computer-readable media does not include temporary computer-readable media (transitory media), such as modulated data signals and carrier waves.
  • PRAM phase change memory
  • SRAM static random access memory
  • DRAM dynamic random access memory
  • RAM random access memory
  • ROM read-only memory
  • EEPROM electrically erasable programmable read-only memory
  • flash memory or other memory technologies
  • CD-ROM compact disc read-only memory
  • DVD digital versatile disc
  • the embodiments of the present specification may be provided as methods, systems, or computer program products. Therefore, the embodiments of the present specification may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of this specification may take the form of computer program products implemented on one or more computer usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer usable program code .
  • computer usable storage media including but not limited to disk storage, CD-ROM, optical storage, etc.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • General Business, Economics & Management (AREA)
  • Finance (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computing Systems (AREA)
  • Computer Hardware Design (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

本说明书的一个或多个实施例提供了一种基于区块链的节点管理方法和装置，所述区块链的分布式数据库中存储有节点身份表，其中，所述节点身份表用以记录所述区块链节点的证书和与所述证书对应的所述区块链节点的唯一性标识；所述方法包括：区块链已有节点接收目标交易，所述目标交易包括新节点的证书和新节点的唯一性标识；验证所述目标交易，以使所述目标交易经过所述区块链的共识验证后将包含所述新节点的唯一性标识和证书的节点身份表对应收录于所述区块链的分布式数据库中。

Description

一种基于区块链的节点管理方法和装置 技术领域
本说明书涉及网络技术领域，尤其涉及一种基于区块链的节点管理方法和装置。
背景技术
区块链技术，也被称之为分布式账本技术，是一种由若干台计算设备共同参与“记账”，共同维护一份完整的分布式数据库的新兴技术。由于区块链技术具有去中心化、公开透明、每台计算设备可以参与数据库记录、并且各计算设备之间可以快速的进行数据同步的特性，使得区块链技术已在众多的领域中广泛的进行应用。
发明内容
本说明书提供了一种基于区块链的节点管理方法，所述区块链的分布式数据库中存储有节点身份表，其中，所述节点身份表用以记录所述区块链节点的证书和与所述证书对应的所述区块链节点的唯一性标识；所述方法包括：
区块链已有节点接收目标交易，所述目标交易包括新节点的证书和新节点的唯一性标识；
验证所述目标交易，以使所述目标交易经过所述区块链的共识验证后将包含所述新节点的唯一性标识和证书的节点身份表对应收录于所述区块链的分布式数据库中。
在又一示出的实施中，所述验证所述目标交易，包括:
验证所述新节点的证书，并验证所述新节点的证书对应的节点身份认证机构是否属于所述区块链认可的节点身份认证机构。
在又一示出的实施中，所述目标交易还包括和区块链中的背书节点至少基于所述新节点的证书所作的数字签名；
所述验证所述目标交易，包括:
验证所述区块链的背书节点至少基于所述新节点的证书所作的合法的数字签名是否符合预设的数量。
在又一示出的实施中，所述的方法还包括：
调用与所述节点身份表管理对应的智能合约，执行所述智能合约声明的节点身份表更新逻辑，验证所述目标交易，在所述验证通过后将所述新节点的唯一性标识和证书对应收录于所述节点身份表。
在又一示出的实施中，所述的方法还包括：
接收所述新节点的网络地址、所述新节点的唯一性标识和所述新节点所作的数字签名；
从所述区块链的分布式数据库中获取所述节点身份表中，基于所述唯一性识别码获取所述新节点的证书；
基于所述新节点的证书，验证所述数字签名；
在所述验证通过后，将所述网络地址存储至所述区块链已有节点的本地数据库。
在又一示出的实施中，所述的方法还包括：
向所述新节点发送所述区块链节点的本地数据库存储的区块链中其他已有节点的网络地址。
在又一示出的实施中，所述的方法还包括：
向所述新节点发送所述区块链已有节点备份的所述区块链的分布式数据库中的数据。
相应的，本说明书还提供了一种基于区块链的节点管理装置，所述区块链的分布式数据库中存储有节点身份表，其中，所述节点身份表用以记录所述区块链节点的证书和与所述证书对应的所述区块链节点的唯一性标识；所述装置包括：
接收单元，区块链已有节点接收目标交易，所述目标交易包括新节点的证书和新节点的唯一性标识；
验证单元，验证所述目标交易，以使所述目标交易经过所述区块链的共识验证后将包含所述新节点的唯一性标识和证书的节点身份表对应收录于所述区块链的分布式数据库中。
在又一示出的实施中，所述验证单元:
验证所述新节点的证书，并验证所述新节点的证书对应的节点身份认证机构是否属于所述区块链认可的节点身份认证机构。
在又一示出的实施中，所述目标交易还包括和区块链中的背书节点至少基于所述新 节点的证书所作的数字签名；
所述验证单元:
验证所述区块链的背书节点至少基于所述新节点的证书所作的合法的数字签名是否符合预设的数量。
在又一示出的实施中，所述的装置还包括：
智能合约执行单元，调用与所述节点身份表管理对应的智能合约，执行所述智能合约声明的节点身份表更新逻辑，验证所述目标交易，在所述验证通过后将所述新节点的唯一性标识和证书对应收录于所述节点身份表。
在又一示出的实施中，所述的装置还包括获取单元和存储单元，
所述接收单元，接收所述新节点的网络地址、所述新节点的唯一性标识和所述新节点所作的数字签名；
所述获取单元，从所述区块链的分布式数据库中获取所述节点身份表中，基于所述唯一性识别码获取所述新节点的证书；
所述验证单元，基于所述新节点的证书，验证所述数字签名；
所述存储单元，在所述验证通过后，将所述网络地址存储至所述区块链已有节点的本地数据库。
在又一示出的实施中，所述的装置还包括：
发送单元，向所述新节点发送所述区块链节点的本地数据库存储的区块链中其他已有节点的网络地址。
在又一示出的实施中，所述的装置还包括：
发送单元，向所述新节点发送所述区块链已有节点备份的所述区块链的分布式数据库中的数据。
本说明书还提供了一种计算机设备，包括：存储器和处理器；所述存储器上存储有可由处理器运行的计算机程序；所述处理器运行所述计算机程序时，执行上述基于区块链的节点管理方法所述的步骤。
本说明书还提供了一种计算机可读存储介质，其上存储有计算机程序，所述计算机程序被处理器运行时，执行上述基于区块链的节点管理方法所述的步骤。
本说明书提供的基于区块链的节点管理方法和装置，通过在区块链的分布式数据库内建立存储节点身份表，收录可加入该区块链的节点的证书，从而防止任意节点无需经过链内的节点共识或同意而加入区块链，提供了区块链的安全性。
附图说明
图1为本说明书一示例性实施例提供的区块链的节点管理方法的流程图；
图2为本说明书一示例性实施例提供的区块链的节点管理装置的示意图；
图3为运行本说明书所提供的区块链的节点管理装置实施例的一种硬件结构图。
具体实施方式
这里将详细地对示例性实施例进行说明，其示例表示在附图中。下面的描述涉及附图时，除非另有表示，不同附图中的相同数字表示相同或相似的要素。以下示例性实施例中所描述的实施方式并不代表与本说明书一个或多个实施例相一致的所有实施方式。相反，它们仅是与如所附权利要求书中所详述的、本说明书一个或多个实施例的一些方面相一致的装置和方法的例子。
需要说明的是：在其他实施例中并不一定按照本说明书示出和描述的顺序来执行相应方法的步骤。在一些其他实施例中，其方法所包括的步骤可以比本说明书所描述的更多或更少。此外，本说明书中所描述的单个步骤，在其他实施例中可能被分解为多个步骤进行描述；而本说明书中所描述的多个步骤，在其他实施例中也可能被合并为单个步骤进行描述。
如图1所示，本说明书一示意性实施例提供了一种基于区块链的节点管理方法，所述区块链的分布式数据库中存储有用以记录可信节点的身份证书的可信节点表，所述节点身份表用以记录所述区块链节点的证书和与所述证书对应的所述区块链节点的唯一性标识。
本实施例所述的区块链，具体可指一个各节点设备通过共识机制达成的、具有分布式数据存储结构的P2P网络系统，该区块链内的数据分布在时间上相连的一个个“区块(block)”之内，后一区块包含前一区块的数据摘要，且根据具体的共识机制(如POW、POS、DPOS或PBFT等)的不同，达成全部或部分节点设备的数据全备份。本领域的技术人员熟知，由于区块链系统在相应共识机制下运行，已收录至区块链数据库内的数 据很难被任意的节点设备篡改，例如采用Pow共识的区块链，至少需要全网51％算力的攻击才有可能篡改已有数据，因此区块链系统有着其他中心化数据库系统所法比拟的保证数据安全、防攻击篡改的特性。
本说明书所述的区块链节点，不仅可包括备份有区块链的分布式数据库的全量数据的全节点设备，还可包括备份有区块链的分布式数据库的部分数据的轻节点设备，以及其他的终端设备或客户端，在本说明书中不做限定。
在本说明书中所描述的交易(transaction)，是指用户通过区块链的节点设备创建，并需要最终发布至区块链的分布式数据库中的一笔数据。其中，区块链中的交易，存在狭义的交易以及广义的交易之分。狭义的交易是指用户向区块链发布的一笔价值转移；例如，在传统的比特币区块链网络中，交易可以是用户在区块链中发起的一笔转账。而广义的交易是指用户向区块链发布的一笔任意的数据：例如，运营方可以基于实际的业务需求搭建一个联盟链，依托于联盟链部署一些与价值转移无关的其它类型的在线业务(比如，租房业务、车辆调度业务、保险理赔业务、信用服务、医疗服务等)，而在这类联盟链中，交易可以是用户在联盟链中发布的一笔具有业务意图的业务消息或者业务请求；又如，该交易还可以是用户向区块链发送的、用以更改用户的账户状态的数据(如账户余额等)。因此，只要是用户向区块链的分布式数据库发布的任意数据，无论该任意数据被保存在区块的区块体、区块头还是其他位置，均可属于本发明所述的“交易”。
在传统区块链中，区块链的分布式数据库中并不记录节点的身份；用户通过区块链网络注册协议加入区块链后，通常会将注册用户身份(或账户身份)绑定在运行注册协议的节点设备上，并在网络路由表中显示与该节点绑定的用户身份。例如，在以太坊区块链中，用户通过在节点设备上运行网络注册协议，获取到用户账户，并以将形如enode://pubkey1@ip1:port1的信息加入该区块链的网络路由表，以供与区块链中的其他节点进行通信。上述路由信息会暴露区块链中的用户所在的节点IP及端口信息，造成不安全的隐患。
在本实施例中，为方便对区块链的节点进行管理，经过区块链节点的共识，在上述区块链的分布式数据库中存储有节点身份表，用以记录该区块链网络中的节点的证书和与所述证书对应的所述区块链节点的唯一性标识。节点的证书可包括节点对应的公钥和节点身份认证机构至少对节点的公钥所作的数字签名，还可以包括节点的ID名称、所属机构、物理地址等身份信息。本说明书并不限定证书所遵循的协议类型，如TLS证书等通过CA认证机构认证的证书均可应用至本说明提供的实施例中。节点身份认证机构 可包括上述区块链系统的管理机构、或上述区块链中信用较高的用户等，在此不作限定。上述区块链节点的唯一性标识可以包括节点的名称、节点的身份编码、节点的公钥等。经区块链上的节点的共识，利用节点身份表管理区块链上的节点，增加了区块链系统的安全性。
本实施例所提供的区块链的节点管理方法包括：
步骤102，区块链节点接收目标交易，所述目标交易包括新节点的证书和新节点的唯一性标识。
待加入区块链的新节点可通过链外通信、或运行节点加入协议的方式，与区块链内的任一具有节点身份表管理权限的身份管理节点通信，将自身的证书及唯一性标识发送给上述身份管理节点，以使上述身份管理节点通过向区块链中发送用以更新节点身份表的目标交易，将目标交易在区块链内进行传播，因此区块链节点可接收到该目标交易。
上述目标交易，既可以包含该区块链内已有节点的证书及其对应的唯一性标识，以在该节点身份表更新交易被区块链共识后将包含已有节点和上述新节点的证书、及其对应的唯一性标识的节点身份表更新于所述区块链的分布式数据库；也可以仅包含新增的节点的证书及其唯一性标识，以在该节点身份表更新交易被区块链共识后将新增的节点的证书及其唯一性标识更新于所述区块链的分布式数据库为节点身份表设置的状态中。
步骤104，验证所述目标交易，以使所述目标交易经过所述区块链的共识验证后将包含所述新节点的唯一性标识和证书的节点身份表对应收录于所述区块链的分布式数据库中。
区块链已有节点在接收到目标交易后，基于该区块链对目标交易的验证规则，对该目标交易进行验证，以使所述目标交易经过所述区块链的共识验证后将包含所述新节点的唯一性标识和证书的节点身份表对应收录于所述区块链的分布式数据库中。
本实施例所述的区块链中已有节点对上述目标交易的验证，通常可包括对该目标交易的内容的验证，如利用节点身份认证机构的公钥验证新节点的证书是否合法，且验证签署该新节点证书的节点身份认证机构是否属于该区块链认可的节点身份认证机构。
为保证安全性，通常在区块链中加入新节点还需经过一些已有节点的背书，所述“背书”通常通过这些节点至少基于所述新节点证书进行数字签名来表现，在本说明书中，将上述对新节点进行“背书”的节点称为“背书节点”。因此上述验证还可包括对该目标交易中包含的所述区块链的背书节点至少基于所述新节点的证书所作的数字签名的 验证，并计算上述已被验证合法的数字签名是否满足预设的数量，亦即要有符合预设的数量的背书节点对该新节点的加入进行背书，方可使上述节点身份表更新交易通过验证。
本领域的技术人员应知，将上述目标交易收录到所述区块链的分布式数据库中的具体步骤，可以包括:
所述区块链中具有记账权限的节点将所述目标交易加入到候选区块，加入位置包括但不限于区块体或区块头；
从所述具有记账权限的节点中确定满足所述区块链共识机制的共识记账节点；
所述共识记账节点向所述区块链的节点广播所述候选区块；
在所述候选区块通过所述区块链符合预设数量的节点的验证认可后，所述候选区块被视为最新区块，加入到所述区块链的分布式数据库中。
在上述的实施例中，具有记账权限的节点是指具有生成候选区块权限的节点，可包括具有较高信用用户的节点、或上述区块链中的其他节点。根据所述区块链的共识机制，可从上述对所述候选区块具有记账权限的节点中确定共识记账节点，上述共识机制可以包括工作量证明机制(PoW)、或权利证明机制(PoS)、或股份授权证明机制(DPoS)等，或联盟链通常采用的拜占庭容错算法共识机制PBFT等。
在又一示出的实施方式中，上述将新节点的证书和唯一性标识收录于节点身份表还可通过调用智能合约的方式来实现，该智能合约内存储有节点身份表，用以对区块链网络中的节点进行管理。上述目标交易可包含新增的节点的证书及其唯一性标识，及其所调用的智能合约的地址及接口，以在该目标交易所调用的智能合约的运行结果被区块链共识后，将新增的节点的证书及其唯一性标识更新于所述智能合约存储的节点身份表中。
因此，上述实施例所述的基于区块链的节点管理方法还包括：调用与所述节点身份表管理对应的智能合约，执行所述智能合约声明的节点身份表更新逻辑，验证所述目标交易，在所述验证通过后将所述新节点的唯一性标识和证书对应收录于所述节点身份表。
类似的，在本实施例所述的智能合约所执行的节点身份表更新逻辑中，验证所述目标交易通常可包括对目标交易的内容的验证，如利用节点身份认证机构的公钥验证上述新节点的证书，且验证该节点身份认证机构是否属于该区块链认可的节点身份认证机构；还可包括对所述区块链的背书节点至少基于所述新节点的证书所作的数字签名的验证，并计算上述已被验证合法的数字签名是否满足预设的数量，亦即要有符合预设的数量的背书节点对该新节点的加入进行背书，方可使上述节点身份表更新交易通过上述智能合 约的合法性验证。
利用智能合约管理更新区块链的节点身份表，该智能合约可在任意时刻应区块链的具有节点身份表管理权限的节点发送的目标交易而被调用，从而在区块链各节点的共识下管理更新该节点身份表，提高了区块链节点管理的安全性、合法性和公平性。
经过步骤102至104的执行，上述待加入区块链的新节点已经具备了加入上述区块链的权限。在具备了加入上述区块链的权限后，上述新节点可通过链外通信或其他方式获知上述区块链中至少一个已有节点的网络地址，并通过该网络地址与上述至少一个已有节点开展通信连接。本说明书各实施例所述的网络地址，通常可以包括节点所在的IP地址及端口等内容。
在又一示出的实施例中，本说明书所提供的基于区块链的节点管理方法还包括步骤106至110。
步骤106，接收所述新节点的网络地址、所述新节点的唯一性标识和所述新节点所作的数字签名。
通过与上述新节点产生链外通信连接，上述新节点可将自身的网络地址、唯一性标识(如名称、或硬件地址、或身份编码或公钥等)及所述新节点所作的数字签名发送至上述产生通信连接的区块链的已有节点；相应地，上述区块链已有节点接收上述新节点的网络地址、所述新节点的唯一性标识和所述新节点所作的数字签名。
值得注意的是，上述新节点所作的数字签名是上述新节点利用已被上述节点身份表收录的证书中的公钥对应私钥所作的数字签名，该数字签名可以基于任何内容而作，例如可以基于该新节点的网络地址、或新节点的唯一性标识、或其他内容，其目的在于方便与之进行通信连接的已有节点可以基于上述节点身份表中收录的新节点的证书对该数字签名进行验证，以确认与其通信的新节点是否确实是经过区块链共识认可的新节点。值得注意的是，当上述新节点所作的数字签名是基于其他内容时，上述新节点应将其所签署的内容也发送至上述区块链已有节点，方便其对数字签名进行验证。
步骤108，从所述区块链的分布式数据库中获取所述节点身份表中，基于所述唯一性识别码获取所述新节点的证书。
基于以上多个实施例提供的节点身份表的更新方法，上述区块链中的已有节点可以从被区块链的分布式数据库收录的目标交易中、或节点身份表状态中、或调用运行上述用于存储及管理节点身份表的智能合约等方式，基于所述新节点发送的唯一性识别码检 索获取对应的新节点的证书。
步骤110，基于所述新节点的证书，验证所述数字签名。
从所述新节点的证书中获取所述新节点的公钥，利用新节点的公钥对新节点所作的数字签名进行验证，如果上述验证通过，则证明与区块链的上述已有节点进行通信连接的上述新节点确实为已经过区块链各节点共识验证的可信节点。
步骤112，在所述验证通过后，将所述网络地址存储至所述已有节点的本地数据库。
为方便区块链内的节点更新同步区块链分布式数据库中的数据，区块链中的每个节点需获知其他至少一个区块链节点的网络地址，以完成数据的传递、广播或同步，区块链的节点可以将其他区块链节点的网络地址保存在本地数据库中，如配置专门的Config文件收录其他区块链节点的IP地址及端口。因此，在上述区块链已有节点验证上述新节点的证书被收录于节点身份表，确定该新节点确为区块链共识同意加入的可信节点时，应将该新节点的网络地址存储至本地数据库中，例如，将该新节点的网络地址收录在上述专门配置的Config文件中。
通过以上步骤，上述新节点即可以区块链节点的身份与已有节点进行区块数据的同步，亦即向所述新节点发送所述已有节点备份的所述区块链的分布式数据库中的数据。在一示出的实施方式中，上述区块数据的同步可以包括以下步骤：
新节点设备向区块链网络上的已有节点发起区块数据的同步请求；从已有节点上同步现有的区块数据，上述已有节点通常为上述新节点的周围邻近的节点，进一步地，为提高初始区块数据下载的进程，可采用“区块报头先行”(header first)的下载方式，先行从邻节点下载所有现有区块的区块头，并在区块头下载完毕后，新节点可并行地从多个邻节点同时下载不同高度区间的区块，大大提升现有的区块数据的同步速度；同步完成后，进行区块数据验证，上述区块数据验证过程包括区块的格式校验(包括版本、时间戳)、区块头哈希值的校验、及对所有交易按交易验证规则进行校验等，上述对所有交易按交易验证规则进行校验，包括如交易的格式是否正确、按照交易的数据结构生成的Merkle Root是否正确等多项内容，以检验已有区块数据的正确性；上述区块数据检验完毕后，作为区块链节点参与到所述区块链运行中来，接收、验证、存储经区块链的节点共识产生的新的区块，等等。
在上述实施方式中，为方便上述新节点可以并行地从多个邻节点同时下载不同高度区间的区块，以提高数据同步效率，在又一示出的实施方式中，上述实施例中的已有节 点可向所述新节点发送所述已有节点的本地数据库存储的其他已有节点的网络地址，以方便上述新节点进行通信连接。类似的，上述其他已有节点也通过执行如上述实施例所述的步骤102至112所述的步骤后，认可上述新节点为该区块链的可信节点，从而与上述新节点开展数据同步，向所述新节点发送所述已有节点备份的所述区块链的分布式数据库中的数据。
以上多个实施例提供的基于区块链的节点管理方法，通过在区块链的分布式数据库内建立存储节点身份表，收录可加入该区块链的节点的证书，从而防止任意节点无需经过链内的节点共识或同意而加入区块链，提供了区块链的安全性。上述区块链中的已有节点通过与新节点链外通信，验证新节点是否属于已被区块链的节点共识同意接收的可信节点，并在通过验证后将该新节点作为区块链中的节点、在本地数据库中收录该区块链新节点的网络地址，以方便该已有节点和新节点进行区块链网络内的通信和数据传输或广播。
与上述流程实现对应，本说明书的实施例还提供了一种区块链的节点管理装置。上述装置可以通过软件实现，也可以通过硬件或者软硬件结合的方式实现。以软件实现为例，作为逻辑意义上的装置，是通过所在设备的CPU(Central Process Unit，中央处理器)将对应的计算机程序指令读取到内存中运行形成的。从硬件层面而言，除了图3所示的CPU、内存以及存储器之外，网络风险业务的实现装置所在的设备通常还包括用于进行无线信号收发的芯片等其他硬件，和/或用于实现网络通信功能的板卡等其他硬件。
图2所示为一种基于区块链的节点管理装置20，所述区块链的分布式数据库中存储有节点身份表，其中，所述节点身份表用以记录所述区块链节点的证书和与所述证书对应的所述区块链节点的唯一性标识；所述装置20包括：
接收单元202，区块链已有节点接收目标交易，所述目标交易包括新节点的证书和新节点的唯一性标识；
验证单元204，验证所述目标交易，以使所述目标交易经过所述区块链的共识验证后将包含所述新节点的唯一性标识和证书的节点身份表对应收录于所述区块链的分布式数据库中。
在又一示出的实施中，所述验证单元204:
验证所述新节点的证书，并验证所述新节点的证书对应的节点身份认证机构是否属于所述区块链认可的节点身份认证机构。
在又一示出的实施中，所述目标交易还包括和区块链中的背书节点至少基于所述新节点的证书所作的数字签名；
所述验证单元204:
验证所述区块链的背书节点至少基于所述新节点的证书所作的合法的数字签名是否符合预设的数量。
在又一示出的实施中，所述的装置20还包括：
智能合约执行单元208，调用与所述节点身份表管理对应的智能合约，执行所述智能合约声明的节点身份表更新逻辑，验证所述目标交易，在所述验证通过后将所述新节点的唯一性标识和证书对应收录于所述节点身份表。
在又一示出的实施中，所述的装置20还包括获取单元210和存储单元212，
所述接收单元202，接收所述新节点的网络地址、所述新节点的唯一性标识和所述新节点所作的数字签名；
所述获取单元210，从所述区块链的分布式数据库中获取所述节点身份表中，基于所述唯一性识别码获取所述新节点的证书；
所述验证单元204，基于所述新节点的证书，验证所述数字签名；
所述存储单元212，在所述验证通过后，将所述网络地址存储至所述区块链已有节点的本地数据库。
在又一示出的实施中，所述的装置20还包括：
发送单元214，向所述新节点发送所述区块链节点的本地数据库存储的区块链中其他已有节点的网络地址。
在又一示出的实施中，所述的装置20还包括：
发送单元214，向所述新节点发送所述区块链已有节点备份的所述区块链的分布式数据库中的数据。
上述装置中各个单元或模块的功能和作用的实现过程具体详见上述方法中对应步骤的实现过程，相关之处参见方法实施例的部分说明即可，在此不再赘述。
以上所描述的装置实施例仅仅是示意性的，其中所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理 模块，即可以位于一个地方，或者也可以分布到多个网络模块上。可以根据实际的需要选择其中的部分或者全部单元或模块来实现本说明书方案的目的。本领域普通技术人员在不付出创造性劳动的情况下，即可以理解并实施。
上述实施例阐明的装置、单元、模块，具体可以由计算机芯片或实体实现，或者由具有某种功能的产品来实现。一种典型的实现设备为计算机，计算机的具体形式可以是个人计算机、膝上型计算机、蜂窝电话、相机电话、智能电话、个人数字助理、媒体播放器、导航设备、电子邮件收发设备、游戏控制台、平板计算机、可穿戴设备或者这些设备中的任意几种设备的组合。
与上述方法实施例相对应，本说明书的实施例还提供了一种计算机设备，该计算机设备包括存储器和处理器。其中，存储器上存储有能够由处理器运行的计算机程序；处理器在运行存储的计算机程序时，执行本说明书实施例中基于区块链的节点管理方法的各个步骤。对基于区块链的节点管理方法的各个步骤的详细描述请参见之前的内容，不再重复。
与上述方法实施例相对应，本说明书的实施例还提供了一种计算机可读存储介质，该存储介质上存储有计算机程序，这些计算机程序在被处理器运行时，执行本说明书实施例中基于区块链的节点管理方法的各个步骤。对基于区块链的节点管理方法的各个步骤的详细描述请参见之前的内容，不再重复。
以上所述仅为本说明书的较佳实施例而已，并不用以限制本说明书，凡在本说明书的精神和原则之内，所做的任何修改、等同替换、改进等，均应包含在本说明书保护的范围之内。
在一个典型的配置中，计算设备包括一个或多个处理器(CPU)、输入/输出接口、网络接口和内存。
内存可能包括计算机可读介质中的非永久性存储器，随机存取存储器(RAM)和/或非易失性内存等形式，如只读存储器(ROM)或闪存(flash RAM)。内存是计算机可读介质的示例。
计算机可读介质包括永久性和非永久性、可移动和非可移动媒体可以由任何方法或技术来实现信息存储。信息可以是计算机可读指令、数据结构、程序的模块或其他数据。
计算机的存储介质的例子包括，但不限于相变内存(PRAM)、静态随机存取存储 器(SRAM)、动态随机存取存储器(DRAM)、其他类型的随机存取存储器(RAM)、只读存储器(ROM)、电可擦除可编程只读存储器(EEPROM)、快闪记忆体或其他内存技术、只读光盘只读存储器(CD-ROM)、数字多功能光盘(DVD)或其他光学存储、磁盒式磁带，磁带磁磁盘存储或其他磁性存储设备或任何其他非传输介质，可用于存储可以被计算设备访问的信息。按照本文中的界定，计算机可读介质不包括暂存电脑可读媒体(transitory media)，如调制的数据信号和载波。
还需要说明的是，术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含，从而使得包括一系列要素的过程、方法、商品或者设备不仅包括那些要素，而且还包括没有明确列出的其他要素，或者是还包括为这种过程、方法、商品或者设备所固有的要素。在没有更多限制的情况下，由语句“包括一个……”限定的要素，并不排除在包括所述要素的过程、方法、商品或者设备中还存在另外的相同要素。
本领域技术人员应明白，本说明书的实施例可提供为方法、系统或计算机程序产品。因此，本说明书的实施例可采用完全硬件实施例、完全软件实施例或结合软件和硬件方面的实施例的形式。而且，本说明书的实施例可采用在一个或多个其中包含有计算机可用程序代码的计算机可用存储介质(包括但不限于磁盘存储器、CD-ROM、光学存储器等)上实施的计算机程序产品的形式。

Claims (16)

  1. 一种基于区块链的节点管理方法，所述区块链的分布式数据库中存储有节点身份表，其中，所述节点身份表用以记录所述区块链节点的证书和与所述证书对应的所述区块链节点的唯一性标识；所述方法包括：
    区块链已有节点接收目标交易，所述目标交易包括新节点的证书和新节点的唯一性标识；
    验证所述目标交易，以使所述目标交易经过所述区块链的共识验证后将包含所述新节点的唯一性标识和证书的节点身份表对应收录于所述区块链的分布式数据库中。
  2. 根据权利要求1所述的方法，所述验证所述目标交易，包括:
    验证所述新节点的证书，并验证所述新节点的证书对应的节点身份认证机构是否属于所述区块链认可的节点身份认证机构。
  3. 根据权利要求1所述的方法，所述目标交易还包括和区块链中的背书节点至少基于所述新节点的证书所作的数字签名；
    所述验证所述目标交易，包括:
    验证所述区块链的背书节点至少基于所述新节点的证书所作的合法的数字签名是否符合预设的数量。
  4. 根据权利要求1至3中任一权利要求所述的方法，还包括：
    调用与所述节点身份表管理对应的智能合约，执行所述智能合约声明的节点身份表更新逻辑，验证所述目标交易，在所述验证通过后将所述新节点的唯一性标识和证书对应收录于所述节点身份表。
  5. 根据权利要求1所述的方法，还包括：
    接收所述新节点的网络地址、所述新节点的唯一性标识和所述新节点所作的数字签名；
    从所述区块链的分布式数据库中获取所述节点身份表中，基于所述唯一性识别码获取所述新节点的证书；
    基于所述新节点的证书，验证所述数字签名；
    在所述验证通过后，将所述网络地址存储至所述区块链已有节点的本地数据库。
  6. 根据权利要求5所述的方法，还包括：
    向所述新节点发送所述区块链节点的本地数据库存储的区块链中其他已有节点的网络地址。
  7. 根据权利要求5或6所述的方法，还包括：
    向所述新节点发送所述区块链已有节点备份的所述区块链的分布式数据库中的数据。
  8. 一种基于区块链的节点管理装置，所述区块链的分布式数据库中存储有节点身份表，其中，所述节点身份表用以记录所述区块链节点的证书和与所述证书对应的所述区块链节点的唯一性标识；所述装置包括：
    接收单元，区块链已有节点接收目标交易，所述目标交易包括新节点的证书和新节点的唯一性标识；
    验证单元，验证所述目标交易，以使所述目标交易经过所述区块链的共识验证后将包含所述新节点的唯一性标识和证书的节点身份表对应收录于所述区块链的分布式数据库中。
  9. 根据权利要求8所述的装置，所述验证单元:
    验证所述新节点的证书，并验证所述新节点的证书对应的节点身份认证机构是否属于所述区块链认可的节点身份认证机构。
  10. 根据权利要求8所述的装置，所述目标交易还包括和区块链中的背书节点至少基于所述新节点的证书所作的数字签名；
    所述验证单元:
    验证所述区块链的背书节点至少基于所述新节点的证书所作的合法的数字签名是否符合预设的数量。
  11. 根据权利要求8至10中任一权利要求所述的装置还包括：
    智能合约执行单元，调用与所述节点身份表管理对应的智能合约，执行所述智能合约声明的节点身份表更新逻辑，验证所述目标交易，在所述验证通过后将所述新节点的唯一性标识和证书对应收录于所述节点身份表。
  12. 根据权利要求8所述的装置，还包括获取单元和存储单元，
    所述接收单元，接收所述新节点的网络地址、所述新节点的唯一性标识和所述新节点所作的数字签名；
    所述获取单元，从所述区块链的分布式数据库中获取所述节点身份表中，基于所述唯一性识别码获取所述新节点的证书；
    所述验证单元，基于所述新节点的证书，验证所述数字签名；
    所述存储单元，在所述验证通过后，将所述网络地址存储至所述区块链已有节点的本地数据库。
  13. 根据权利要求12所述的装置，还包括：
    发送单元，向所述新节点发送所述区块链节点的本地数据库存储的区块链中其他已有节点的网络地址。
  14. 根据权利要求12或13所述的装置，还包括：
    发送单元，向所述新节点发送所述区块链已有节点备份的所述区块链的分布式数据库中的数据。
  15. 一种计算机设备，包括：存储器和处理器；所述存储器上存储有可由处理器运行的计算机程序；所述处理器运行所述计算机程序时，执行如权利要求1到7任意一项所述的方法。
  16. 一种计算机可读存储介质，其上存储有计算机程序，所述计算机程序被处理器运行时，执行如权利要求1到7任意一项所述的方法。
PCT/CN2019/104965 2018-10-31 2019-09-09 一种基于区块链的节点管理方法和装置 WO2020088110A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
EP19880324.9A EP3813321A4 (en) 2018-10-31 2019-09-09 METHOD AND DEVICE FOR KNOT MANAGEMENT BASED ON A CHAIN OF BLOCKS
SG11202100503UA SG11202100503UA (en) 2018-10-31 2019-09-09 Blockchain-based node management methods and apparatuses
US17/162,850 US11461773B2 (en) 2018-10-31 2021-01-29 Blockchain-based node management methods and apparatuses

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201811283607.XA CN109327528B (zh) 2018-10-31 2018-10-31 一种基于区块链的节点管理方法和装置
CN201811283607.X 2018-10-31

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US17/162,850 Continuation US11461773B2 (en) 2018-10-31 2021-01-29 Blockchain-based node management methods and apparatuses

Publications (1)

Publication Number Publication Date
WO2020088110A1 true WO2020088110A1 (zh) 2020-05-07

Family

ID=65259781

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/104965 WO2020088110A1 (zh) 2018-10-31 2019-09-09 一种基于区块链的节点管理方法和装置

Country Status (6)

Country Link
US (1) US11461773B2 (zh)
EP (1) EP3813321A4 (zh)
CN (2) CN109327528B (zh)
SG (1) SG11202100503UA (zh)
TW (1) TWI724391B (zh)
WO (1) WO2020088110A1 (zh)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111865993A (zh) * 2020-07-23 2020-10-30 北京天融信网络安全技术有限公司 身份认证管理方法、装置、分布式系统及可读存储介质
CN113162971A (zh) * 2020-12-03 2021-07-23 腾讯科技（深圳）有限公司 区块链节点管理方法、装置、计算机以及可读存储介质
EP3937458A1 (en) * 2020-07-08 2022-01-12 Alipay (Hangzhou) Information Technology Co., Ltd. Blockchain integrated stations and automatic node adding methods and apparatuses
EP3937459A1 (en) * 2020-07-08 2022-01-12 Alipay (Hangzhou) Information Technology Co., Ltd. Blockchain integrated stations and automatic node adding methods and apparatuses
CN114971421A (zh) * 2022-07-22 2022-08-30 中国长江三峡集团有限公司 一种基于区块链技术的水电站运行风险管控系统
CN117421605A (zh) * 2023-10-27 2024-01-19 绍兴清研微科技有限公司 一种基于区块链技术的步态识别方法及系统
CN118210858A (zh) * 2024-03-20 2024-06-18 人民数据管理(北京)有限公司 人民链数据要素全生命周期溯源查证方法及系统

Families Citing this family (38)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10497267B2 (en) * 2018-01-23 2019-12-03 Textron Innovations Inc. Blockchain airspace management for air taxi services
CN109327528B (zh) * 2018-10-31 2020-10-20 创新先进技术有限公司 一种基于区块链的节点管理方法和装置
CN109769032A (zh) * 2019-02-20 2019-05-17 西安电子科技大学 一种分布式计算方法、系统及计算机设备
CN110046999A (zh) * 2019-02-28 2019-07-23 阿里巴巴集团控股有限公司 区块链交易方法和装置
CN109886690B (zh) * 2019-03-06 2023-07-25 上海共链信息科技有限公司 一种区块链同步账本的方法
CN109993647B (zh) * 2019-03-08 2023-12-22 西安电子科技大学 一种基于区块链的纳税征信系统及处理方法
CN109995594B (zh) * 2019-04-10 2022-06-24 广州致链科技有限公司 区块链网络资源管理方法、装置及区块链系统
CN110059092A (zh) * 2019-04-22 2019-07-26 广州市品高软件股份有限公司 基于区块链的关系型数据库的数据写入方法及系统
CN111914263A (zh) * 2019-05-09 2020-11-10 富士通株式会社 在基于iota的缠结中添加新交易节点的方法
CN110266763B (zh) * 2019-05-20 2022-04-12 深圳壹账通智能科技有限公司 跨网段互连的区块链网络实现方法、系统及存储介质
CN110266765B (zh) * 2019-05-21 2022-03-01 西安中星测控有限公司 一种基于区块链的物联网在线共识节点实时更新方法和装置
CN110189127A (zh) * 2019-06-05 2019-08-30 北京清大智信科技有限公司 基于区块链点对点的信息背书和可信验证的系统及方法
CN116541465A (zh) * 2019-06-28 2023-08-04 创新先进技术有限公司 基于区块链的数据处理方法和装置
CN114401150B (zh) * 2019-09-05 2023-10-20 创新先进技术有限公司 区块链网络中加入节点的方法和区块链系统
KR102326460B1 (ko) 2019-11-13 2021-11-12 알리페이 (항저우) 인포메이션 테크놀로지 씨오., 엘티디. 원장 시스템에서의 신뢰 포인트 관리
CN110855565B (zh) * 2019-11-22 2021-07-20 广州大学 一种基于区块链的可验证域间路由验证方法
CN110992035A (zh) * 2019-12-13 2020-04-10 中国工商银行股份有限公司 区块链节点管理方法、装置及系统
CN110708170B (zh) * 2019-12-13 2020-03-27 腾讯科技（深圳）有限公司 一种数据处理方法、装置以及计算机可读存储介质
CN111343155A (zh) * 2020-02-11 2020-06-26 南京峰凯云歌数据科技有限公司 基于区块链的信息加密系统
CN111343157A (zh) * 2020-02-11 2020-06-26 南京峰凯云歌数据科技有限公司 基于区块链的信息加密系统
KR20210121805A (ko) * 2020-03-31 2021-10-08 삼성전자주식회사 블록체인 기반의 pki 도메인에 속하는 전자 장치, 인증 기관 기반의 pki 도메인에 속하는 전자 장치, 및 이들을 포함하는 암호화 통신 시스템
SG11202103074PA (en) 2020-04-22 2021-04-29 Alipay Hangzhou Inf Tech Co Ltd Managing transaction requests in ledger systems
SG11202102600QA (en) 2020-04-22 2021-04-29 Alipay Hangzhou Inf Tech Co Ltd Managing transaction requests in ledger systems
CN111630549B (zh) 2020-04-22 2022-05-27 支付宝(杭州)信息技术有限公司 管理账本系统中的交易请求
CN111756829A (zh) * 2020-06-19 2020-10-09 深圳市蔚链科技有限公司 账本数据同步方法、装置、设备和存储介质
CN111651525A (zh) * 2020-06-24 2020-09-11 北京米弘科技有限公司 区块链数据存储方法和装置
CN111737758B (zh) * 2020-08-07 2021-01-12 百度在线网络技术（北京）有限公司 区块链网络的权限管理方法、装置、设备以及存储介质
CN111934996B (zh) 2020-09-25 2021-01-12 支付宝(杭州)信息技术有限公司 消息传输方法及装置
CN114598484B (zh) * 2020-12-01 2024-03-19 中移(苏州)软件技术有限公司 一种证书更新方法、装置、集群及存储介质
CN112785318B (zh) * 2021-01-16 2022-05-17 苏州浪潮智能科技有限公司 基于区块链的透明供应链认证方法、装置、设备及介质
CN113301107B (zh) * 2021-03-30 2023-02-07 数界(深圳)科技有限公司 节点计算平台及其实现方法、计算机可读存储介质
CN113301117B (zh) * 2021-04-21 2023-01-20 广东电网有限责任公司 节点加入共识及退出共识方法、装置、计算机设备
CN113536375A (zh) * 2021-07-16 2021-10-22 上海点融信息科技有限责任公司 在区块链节点之间进行数据同步的方法、装置及存储介质
CN113568980B (zh) * 2021-08-09 2023-10-31 北京恒安嘉新安全技术有限公司 区块链信息监测方法、装置、设备及存储介质
CN114817399B (zh) * 2021-09-06 2024-07-23 支付宝(杭州)信息技术有限公司 区块管理方法及装置
CN114385996A (zh) * 2022-01-10 2022-04-22 北京新华夏信息技术有限公司 基于节点身份分层管理的区块链共识方法及系统
US20230308283A1 (en) * 2022-03-22 2023-09-28 Hewlett-Packard Development Company, L.P. Blockchain program verifications
CN116881981B (zh) * 2023-09-06 2024-01-02 深圳奥联信息安全技术有限公司 一种基于证书的数字签名系统及方法

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160098723A1 (en) * 2014-10-01 2016-04-07 The Filing Cabinet, LLC System and method for block-chain verification of goods
CN107171829A (zh) * 2017-04-24 2017-09-15 杭州趣链科技有限公司 一种基于bft共识算法实现的动态节点管理方法
CN107360001A (zh) * 2017-07-26 2017-11-17 阿里巴巴集团控股有限公司 一种数字证书管理方法、装置和系统
CN107508680A (zh) * 2017-07-26 2017-12-22 阿里巴巴集团控股有限公司 数字证书管理方法、装置及电子设备
CN109327528A (zh) * 2018-10-31 2019-02-12 阿里巴巴集团控股有限公司 一种基于区块链的节点管理方法和装置

Family Cites Families (91)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7114037B2 (en) * 2002-07-11 2006-09-26 Oracle International Corporation Employing local data stores to maintain data during workflows
US8438388B2 (en) * 2008-03-31 2013-05-07 Motorola Solutions, Inc. Method and apparatus for distributing certificate revocation lists (CRLs) to nodes in an ad hoc network
US8627073B2 (en) * 2010-03-24 2014-01-07 GM Global Technology Operations LLC Adaptive certificate distribution mechanism in vehicular networks using forward error correcting codes
US8499155B2 (en) * 2010-03-24 2013-07-30 GM Global Technology Operations LLC Adaptive certificate distribution mechanism in vehicular networks using variable inter-certificate refresh period
WO2014094948A1 (fr) * 2012-12-21 2014-06-26 Cassidian Sas Procedes de securisation de transmissions de donnees et de controle d'authentification de noeuds d'un reseau ad hoc
US9960923B2 (en) * 2013-03-05 2018-05-01 Telefonaktiebolaget L M Ericsson (Publ) Handling of digital certificates
RU2673842C1 (ru) * 2015-03-20 2018-11-30 Ривец Корп. Автоматическая аттестация сохранности устройства с применением цепочки блоков
CN105701372B (zh) * 2015-12-18 2019-04-09 布比（北京）网络技术有限公司 一种区块链身份构建及验证方法
EP3405862B1 (en) * 2016-01-19 2020-11-18 Priv8Pay, Inc. Network node authentication
US11170371B2 (en) * 2016-03-03 2021-11-09 Nec Corporation Method for managing data in a network of nodes
US10521775B2 (en) * 2016-04-18 2019-12-31 R3 Ltd. Secure processing of electronic transactions by a decentralized, distributed ledger system
US20170331896A1 (en) * 2016-05-13 2017-11-16 De La Rue International Limited Methods and systems for processing assets
CN107438002B (zh) * 2016-05-27 2022-02-11 索尼公司 基于区块链的系统以及系统中的电子设备和方法
CN105976231A (zh) * 2016-06-24 2016-09-28 深圳前海微众银行股份有限公司 基于区块链智能合约的资产管理方法及节点
KR101723405B1 (ko) * 2016-07-04 2017-04-06 주식회사 코인플러그 블록체인을 기반으로 하는 공인인증서 인증시스템과 이를 이용한 블록체인을 기반으로 하는 공인인증서 인증방법
CN106230782A (zh) * 2016-07-20 2016-12-14 腾讯科技（深圳）有限公司 一种基于内容分发网络的信息处理方法及装置
CN106301792B (zh) * 2016-08-31 2019-10-18 江苏通付盾科技有限公司 基于区块链的ca认证管理方法、装置及系统
CN106384236B (zh) * 2016-08-31 2019-07-16 江苏通付盾科技有限公司 基于区块链的ca认证管理方法、装置及系统
CN106411901B (zh) * 2016-10-08 2018-01-23 北京三未信安科技发展有限公司 一种数字身份标识管理方法及系统
US10348484B2 (en) * 2016-10-24 2019-07-09 Mastercard International Incorporated Method and system for fast tracking navigation of blockchains via data manipulation
US11153297B2 (en) * 2016-12-06 2021-10-19 Vmware, Inc. Systems and methods to facilitate certificate and trust management across a distributed environment
WO2018119930A1 (zh) * 2016-12-29 2018-07-05 深圳前海达闼云端智能科技有限公司 交易验证处理方法、装置及节点设备
CN106845960B (zh) * 2017-01-24 2018-03-20 上海壹账通区块链科技有限公司 基于区块链的安全交易方法及系统
US10484346B2 (en) * 2017-02-07 2019-11-19 Microsoft Technology Licensing, Llc Establishment of consortium blockchain network
WO2018149505A1 (en) * 2017-02-17 2018-08-23 Nokia Technologies Oy Voting-consensus distributed ledger
WO2018149504A1 (en) * 2017-02-17 2018-08-23 Nokia Technologies Oy Changing smart contracts recorded in block chains
US11196573B2 (en) * 2017-03-06 2021-12-07 Nokia Technologies Oy Secure de-centralized domain name system
WO2018165940A1 (en) * 2017-03-16 2018-09-20 Hong Kong R & D Centre for Logistics and Supply Chain Management Enabling Technologies Limited A system and method for controlling a ledger of transactions
EP3382629A1 (de) * 2017-03-31 2018-10-03 Siemens Aktiengesellschaft Verfahren und zeitgeber zum bereitstellen von sicherheitsgeschützten zeitangaben
JP7189144B2 (ja) * 2017-04-11 2022-12-13 エヌチェーン ライセンシング アーゲー 動的ノードグループのための秘密鍵のセキュアな再利用
EP3388994A1 (de) * 2017-04-12 2018-10-17 Siemens Aktiengesellschaft Verfahren und vorrichtung zum rechnergestützten testen einer blockkette
CN107426157B (zh) 2017-04-21 2020-04-17 杭州趣链科技有限公司 一种基于数字证书以及ca认证体系的联盟链权限控制方法
CN107392040B (zh) * 2017-04-28 2019-08-09 阿里巴巴集团控股有限公司 一种共识验证的方法及装置
US10657595B2 (en) * 2017-05-10 2020-05-19 Responsible Gold Operations Ltd. Method of tokenization of asset-backed digital assets
CN110870254B (zh) * 2017-06-01 2023-03-31 斯凯维公司D/B/A阿索尼 提供分布式私有子空间化数据结构的方法和系统
US10341105B2 (en) * 2017-06-07 2019-07-02 At&T Intellectual Property I, L.P. Blockchain-based social media history maps
GB201709219D0 (en) * 2017-06-09 2017-07-26 Nchain Holdings Ltd Computer-implemented system and method
CA3064499A1 (en) * 2017-06-14 2018-12-20 Visa International Service Association Systems and methods for creating multiple records based on an ordered smart contract
GB201709848D0 (en) * 2017-06-20 2017-08-02 Nchain Holdings Ltd Computer-implemented system and method
CN107395343B (zh) * 2017-07-10 2019-10-25 腾讯科技（深圳）有限公司 证书管理方法及系统
CN107528882B (zh) * 2017-07-14 2020-12-25 创新先进技术有限公司 区块链共识网络中处理共识请求的方法、装置和电子设备
CN107547514A (zh) * 2017-07-17 2018-01-05 招商银行股份有限公司 身份认证方法、系统及计算机可读存储介质
EP3444997A1 (de) * 2017-08-18 2019-02-20 Siemens Aktiengesellschaft Vorrichtungen zum bereitstellen einer menge von kryptographisch geschützten und gefilterten sowie sortierten transaktionsdatensätzen eines gliedes einer blockkette
EP3462313A1 (de) * 2017-09-27 2019-04-03 Siemens Aktiengesellschaft Verfahren und verteiltes datenbanksystem zum rechnergestützten ausführen eines programmcodes
EP3468095A1 (en) * 2017-10-06 2019-04-10 Siemens Aktiengesellschaft Transaction selection device for selecting blockchain transactions
US11870597B2 (en) * 2017-10-06 2024-01-09 Telefonaktiebolaget Lm Ericsson (Publ) Incremental billing with blockchains
KR102545178B1 (ko) * 2017-10-23 2023-06-16 지멘스 악티엔게젤샤프트 디바이스들을 제어 및/또는 모니터링하기 위한 방법 및 제어 시스템
US11449864B2 (en) * 2017-10-31 2022-09-20 R3 Ltd. Reissuing obligations to preserve privacy
WO2019092650A1 (en) * 2017-11-09 2019-05-16 Electric Society Sa An ad-hoc network
CN107819777B (zh) * 2017-11-17 2020-07-24 利姆斯(北京)区块链技术有限公司 一种基于区块链技术的数据存证方法及系统
CN108234457A (zh) * 2017-12-18 2018-06-29 苏州涞泽信息科技有限公司 一种基于区块链的可信政务数据共享网络系统及共享方法
US10497267B2 (en) * 2018-01-23 2019-12-03 Textron Innovations Inc. Blockchain airspace management for air taxi services
US20190251573A1 (en) * 2018-02-09 2019-08-15 Airbus (S.A.S.) Systems and methods of verifying credentials of aircraft personnel using a blockchain computer system
CN108256864B (zh) * 2018-02-13 2019-06-07 中链科技有限公司 一种区块链之间的跨链联盟的建立及通信方法、系统
CN108416589A (zh) * 2018-03-08 2018-08-17 深圳前海微众银行股份有限公司 区块链节点的连接方法、系统及计算机可读存储介质
US11263605B2 (en) * 2018-03-22 2022-03-01 R3 Llc Weighted multiple authorizations
US20190295049A1 (en) * 2018-03-22 2019-09-26 NEC Laboratories Europe GmbH System and method for secure transaction verification in a distributed ledger system
EP3543940A1 (de) * 2018-03-23 2019-09-25 Siemens Aktiengesellschaft Computerimplementiertes verfahren zum bereitstellen von daten, insbesondere für eine konformitätsverfolgung
US11315369B2 (en) * 2018-03-23 2022-04-26 The Boeing Company Blockchain configuration history for vehicle maintenance, modification, and activity tracking
EP3777018B1 (en) * 2018-03-29 2024-06-12 Telefonaktiebolaget LM Ericsson (publ) Technique for computing a block in a blockchain network
CN108615144A (zh) * 2018-04-11 2018-10-02 北京奇虎科技有限公司 区块链节点的身份信息处理方法、装置及计算设备
US10728219B2 (en) * 2018-04-13 2020-07-28 R3 Ltd. Enhancing security of communications during execution of protocol flows
US11005664B2 (en) * 2018-04-16 2021-05-11 R3 Ltd. Blockchain post-quantum signature scheme
WO2019201461A1 (de) * 2018-04-18 2019-10-24 Siemens Aktiengesellschaft Verfahren und steuersystem zum steuern und/oder überwachen von geräten
CN108615140B (zh) * 2018-05-03 2020-10-30 北京小米移动软件有限公司 行程提醒方法、装置和存储介质
US10855448B2 (en) * 2018-05-03 2020-12-01 Honeywell International Inc. Apparatus and method for using blockchains to establish trust between nodes in industrial control systems or other systems
CN108667618B (zh) * 2018-05-10 2020-07-03 阿里巴巴集团控股有限公司 区块链成员管理的数据处理方法、装置、服务器及系统
CN111899006A (zh) * 2018-05-29 2020-11-06 创新先进技术有限公司 基于区块链的交易处理方法及装置、电子设备
CN108805569A (zh) * 2018-05-29 2018-11-13 阿里巴巴集团控股有限公司 基于区块链的交易处理方法及装置、电子设备
US11122052B2 (en) * 2018-05-30 2021-09-14 International Business Machines Corporation Sensitive information accessibility in blockchain
US10095888B1 (en) * 2018-06-04 2018-10-09 Capital One Services, Llc Secure decentralized system utilizing smart contracts, a blockchain, and/or a distributed file system
US20190378134A1 (en) * 2018-06-08 2019-12-12 R3 Ltd. Annotations for protocol flow implementing transactions of a distributed ledger system
CN109246179B (zh) * 2018-06-30 2021-06-01 华为技术有限公司 维护区块链的方法和装置、服务器和计算机可读存储介质
US20200013053A1 (en) * 2018-07-06 2020-01-09 Chaitanya Tushar AMIN Controlling asset access based on payments via a distributed ledger
CN109067543B (zh) * 2018-07-24 2020-04-14 腾讯科技（深圳）有限公司 数字证书管理方法、装置、计算机设备和存储介质
CN108964924B (zh) * 2018-07-24 2020-06-05 腾讯科技（深圳）有限公司 数字证书校验方法、装置、计算机设备和存储介质
US11159327B2 (en) * 2018-08-06 2021-10-26 Tyson York Winarski Blockchain augmentation of a material exchange format MXF file
CN109102120B (zh) * 2018-08-14 2020-01-21 上海交通大学 复杂场景下基于区块链的能源系统优化方法
US11063760B2 (en) * 2018-08-22 2021-07-13 Sasken Technologies Ltd Method for ensuring security of an internet of things network
US10901957B2 (en) * 2018-08-29 2021-01-26 International Business Machines Corporation Checkpointing for increasing efficiency of a blockchain
US11196542B2 (en) * 2018-08-29 2021-12-07 International Business Machines Corporation Checkpointing for increasing efficiency of a blockchain
US11334439B2 (en) * 2018-08-29 2022-05-17 International Business Machines Corporation Checkpointing for increasing efficiency of a blockchain
US10833856B2 (en) * 2018-09-04 2020-11-10 International Business Machines Corporation Automatic re-authentication of links using a key server
CN109165945B (zh) * 2018-09-07 2021-04-16 腾讯科技（深圳）有限公司 代表节点设备选举方法、装置、计算机设备及存储介质
US20200084041A1 (en) * 2018-09-07 2020-03-12 Nebulas IO Limited Automated Blockchain Protocol Update
KR102201468B1 (ko) * 2018-09-17 2021-01-12 엔에이치엔 주식회사 블록체인 기반의 게임 제작을 위한 크라우드펀딩 시스템의 동작 방법 및 서비스 환경을 구현하기 위한 시스템
CN110400221B (zh) * 2018-09-29 2021-09-10 腾讯科技（深圳）有限公司 数据处理方法、系统、存储介质及计算机设备
CN109408108A (zh) * 2018-10-12 2019-03-01 天津理工大学 一种基于区块链的软件版本数据管理系统及建立方法
US11025610B2 (en) * 2018-11-20 2021-06-01 Microsoft Technology Licensing, Llc Distributed ledger-based profile verification
US20200193764A1 (en) * 2018-12-12 2020-06-18 Lottery Now, Inc. Instant games based on distributed ledger
US11068316B2 (en) * 2018-12-24 2021-07-20 LiquidApps Ltd Systems and method for managing memory resources used by smart contracts of a blockchain

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160098723A1 (en) * 2014-10-01 2016-04-07 The Filing Cabinet, LLC System and method for block-chain verification of goods
CN107171829A (zh) * 2017-04-24 2017-09-15 杭州趣链科技有限公司 一种基于bft共识算法实现的动态节点管理方法
CN107360001A (zh) * 2017-07-26 2017-11-17 阿里巴巴集团控股有限公司 一种数字证书管理方法、装置和系统
CN107508680A (zh) * 2017-07-26 2017-12-22 阿里巴巴集团控股有限公司 数字证书管理方法、装置及电子设备
CN109327528A (zh) * 2018-10-31 2019-02-12 阿里巴巴集团控股有限公司 一种基于区块链的节点管理方法和装置

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3813321A4 *

Cited By (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3937458A1 (en) * 2020-07-08 2022-01-12 Alipay (Hangzhou) Information Technology Co., Ltd. Blockchain integrated stations and automatic node adding methods and apparatuses
EP3937459A1 (en) * 2020-07-08 2022-01-12 Alipay (Hangzhou) Information Technology Co., Ltd. Blockchain integrated stations and automatic node adding methods and apparatuses
US11424942B2 (en) 2020-07-08 2022-08-23 Alipay (Hangzhou) Information Technology Co., Ltd. Blockchain integrated stations and automatic node adding methods and apparatuses
US11451404B2 (en) 2020-07-08 2022-09-20 Alipay (Hangzhou) Information Technology Co., Ltd. Blockchain integrated stations and automatic node adding methods and apparatuses
CN111865993A (zh) * 2020-07-23 2020-10-30 北京天融信网络安全技术有限公司 身份认证管理方法、装置、分布式系统及可读存储介质
CN113162971A (zh) * 2020-12-03 2021-07-23 腾讯科技（深圳）有限公司 区块链节点管理方法、装置、计算机以及可读存储介质
CN113162971B (zh) * 2020-12-03 2022-07-22 腾讯科技（深圳）有限公司 区块链节点管理方法、装置、计算机以及可读存储介质
CN114971421A (zh) * 2022-07-22 2022-08-30 中国长江三峡集团有限公司 一种基于区块链技术的水电站运行风险管控系统
CN117421605A (zh) * 2023-10-27 2024-01-19 绍兴清研微科技有限公司 一种基于区块链技术的步态识别方法及系统
CN117421605B (zh) * 2023-10-27 2024-04-30 绍兴清研微科技有限公司 一种基于区块链技术的步态识别方法及系统
CN118210858A (zh) * 2024-03-20 2024-06-18 人民数据管理(北京)有限公司 人民链数据要素全生命周期溯源查证方法及系统

Also Published As

Publication number Publication date
EP3813321A4 (en) 2021-06-02
CN112492006A (zh) 2021-03-12
CN109327528B (zh) 2020-10-20
TW202018570A (zh) 2020-05-16
SG11202100503UA (en) 2021-02-25
US20210158347A1 (en) 2021-05-27
CN112492006B (zh) 2023-12-05
CN109327528A (zh) 2019-02-12
TWI724391B (zh) 2021-04-11
EP3813321A1 (en) 2021-04-28
US11461773B2 (en) 2022-10-04

Similar Documents

Publication Publication Date Title
WO2020088110A1 (zh) 一种基于区块链的节点管理方法和装置
WO2020088109A1 (zh) 基于区块链的隐私交易及其应用方法和装置
WO2020082887A1 (zh) 一种区块链的交易方法和装置
TWI690184B (zh) 跨區塊鏈的認證方法及裝置、電子設備
WO2020088074A1 (zh) 基于区块链的隐私交易方法、装置及其应用方法、装置
US20230316273A1 (en) Data processing method and apparatus, computer device, and storage medium
WO2020038105A1 (zh) 基于区块链的数据存证方法和装置
CN111934996B (zh) 消息传输方法及装置
CN112005264A (zh) 实施跨链事务的区块链
JP7228322B2 (ja) ブロックチェーン・ネットワークにおける自動コミット・トランザクション管理
TW202029044A (zh) 區塊鏈交易的產生方法和裝置
WO2020134895A1 (zh) 基于区块链的记账方法及装置、电子设备
WO2021204273A1 (zh) 资产类型注册、交易记录验证
WO2020134631A1 (zh) 基于区块链的数据处理方法和装置
WO2021004058A1 (zh) 基于区块链的数据处理方法和装置
WO2021204044A1 (zh) 区块链数据的订正
KR20240119060A (ko) 대체 불가능한 토큰을 위한 보관 시스템
US20200076619A1 (en) Data certification as a service powered by permissioned blockchain network
WO2023005500A1 (zh) 跨链交易处理方法、装置、电子设备以及存储介质
US12020242B2 (en) Fair transaction ordering in blockchains
WO2023082883A1 (zh) 跨区块链处理事务的方法、装置、计算机设备、计算机存储介质及计算机程序产品
CN116957566A (zh) 基于区块链的数据处理方法及装置、电子设备、存储介质
CN118070339A (zh) 跨区块链的数据处理方法、装置、计算机设备和存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19880324

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2019880324

Country of ref document: EP

Effective date: 20210120

NENP Non-entry into the national phase

Ref country code: DE