WO2020114385A1

WO2020114385A1 - Trusted node determining method and apparatus based on block chain network

Info

Publication number: WO2020114385A1
Application number: PCT/CN2019/122641
Authority: WO
Inventors: 王叶松
Original assignee: 阿里巴巴集团控股有限公司
Priority date: 2018-12-05
Filing date: 2019-12-03
Publication date: 2020-06-11
Also published as: CN111277553A; TW202023238A; CN111277553B

Abstract

Embodiments of the present application provide a trusted node determining method and apparatus based on a block chain network. The method comprises: when a device accesses the block chain network, a first program on a node of the block chain network obtains token information of the access device, the token information comprising security information of the access device; the first program calls a first contract object, and the first contract object generates security assessment information for the access device according to the token information; a node corresponding to the first program determines, according to the security assessment information, whether the access device is a trusted node. In embodiments of the present application, the security information of an internet of things device is taken as a selection condition of the trusted node of the networked block chain network, so that the overall security of a consensus mechanism can be maintained or even improved without losing the high performance of a weakly centralized consensus algorithm.

Description

Method and device for determining trusted nodes based on blockchain network

This application requires the priority of the Chinese patent application submitted on December 05, 2018 with the application number 201811481860.6 and the invention titled "A method and device for determining trusted nodes based on the blockchain network", the entire contents of which are incorporated by reference In this application.

Technical field

The present application relates to the field of communication technology, in particular to a method for determining a trusted node based on a blockchain network and a device for determining a trusted node based on a blockchain network.

Background technique

With the development of the Internet of Things IoT, traditional centralized IoT back-end services (for example, device management platform DMP, connection management platform CMP, data aggregation and analysis services), etc., will be difficult to handle a large number of global IoT devices in the foreseeable future With access management and data processing, the topology of the Internet of Things in the future will also evolve from the current end-edge-cloud to a cloud-edge-end + P2P distributed network.

How to establish a trusted connection, data interaction, and de-intermediate service in the Internet of Things of this scale and complexity is a real challenge. The blockchain provides a technical option that may solve the problems related to the Internet of Things in terms of decentralization, P2P peer-to-peer networks, and data tampering.

Among the blockchain-related implementations currently visible on the market, the public blockchain (Bitcoin, Ethereum) uses a high-power, long-confirmation delay consensus algorithm, which is not suitable for a future requiring high concurrency and low latency. Internet of Things environment.

Summary of the invention

In view of the above problems, the embodiments of the present application are proposed in order to provide a method for determining a trusted node based on a blockchain network that overcomes the above problems or at least partially solves the above problems and a corresponding The signaling node determines the device.

In order to solve the above problems, the embodiments of the present application disclose a method for determining a trusted node based on a blockchain network, wherein at least one node of the blockchain network is deployed with a first contract object, and/or the deployment is useful For accessing the first program of the first contract object, the method includes:

When a device accesses the blockchain network, the first program on a node of the blockchain network obtains the token information of the access device, and the token information includes the security information of the access device;

The first program calls the first contract object, and the first contract object generates security evaluation information for the access device according to the token information;

The node corresponding to the first program determines whether the access device is a trusted node according to the security evaluation information.

Preferably, it also includes:

If the access device is a trusted node, the node corresponding to the first program adds the access device to a preset trusted node pool.

Preferably, at least one node of the blockchain network is deployed with a second contract object, and/or a second program for accessing the second contract object is deployed;

Before the first program obtains the token information of the access device, the method further includes:

The second program on a node of the blockchain network receives the token information and identification information of the device;

The step of obtaining the token information of the access device by the first program includes:

The first program obtains identification information of the access device;

The first program generates a token information acquisition request, and sends the token information acquisition request to the second program, where the token information acquisition request includes identification information of the access device;

The first program receives the token information sent by the second program, and the token information is found by the second program according to the identification information.

Preferably, it also includes:

The second program calls the second contract object, and the second contract object stores the token information and identification information of the device to a preset distributed file system.

Preferably, it also includes:

When the second program receives the token information acquisition request sent by the first program, the second program calls the second contract object, and the second contract object The system extracts the token information corresponding to the identification information.

Preferably, the step of the first program acquiring the identification information of the access device includes:

The first program receives the identification information of the access device sent by a trusted node of the blockchain network.

Preferably, the first program is a first decentralized program DApp, and the second program is a second DApp.

An embodiment of the present invention also discloses a trusted node determination device based on a blockchain network, wherein at least one node of the blockchain network is deployed with a first contract object, and/or is deployed to access the The first program of the first contract object, the device includes:

The first program, and the node where the first program is located;

The first procedure includes:

The token information obtaining module is used to obtain the token information of the access device when a device accesses the blockchain network, the token information includes the security information of the access device;

A first calling module, configured to call the first contract object, and the first contract object is used to generate security assessment information for the access device according to the token information;

The node where the first program is located includes:

The trusted node judgment module is used to judge whether the access device is a trusted node according to the security assessment information.

Preferably, the node where the first program is located further includes:

The trusted node pool joining module is used to add the access device to a preset trusted node pool if the access device is a trusted node.

Preferably, at least one node of the blockchain network is deployed with a second contract object, and/or a second program for accessing the second contract object is deployed; the device further includes:

The second program, on a node of the blockchain network, includes: an information receiving module for receiving the token information and identification information of the device;

The token information acquisition module of the first program includes:

An identification acquisition submodule, used to acquire identification information of the access device;

A request submodule, configured to generate a token information acquisition request, and send the token information acquisition request to the second program, where the token information acquisition request includes identification information of the access device;

The token information receiving submodule is configured to receive the token information sent by the second program, and the token information is searched and obtained by the second program according to the identification information.

Preferably, the second program further includes:

A second calling module is used to call the second contract object, and the second contract object stores the token information and identification information of the device to a preset distributed file system.

Preferably, the second program further includes:

The third calling module is used to call the second contract object when receiving the token information acquisition request sent by the first program, and the second contract object is extracted from the preset distributed file system Token information corresponding to the identification information.

Preferably, the identifier acquisition sub-module includes:

The identification receiving unit is configured to receive identification information of the access device sent by a trusted node of the blockchain network.

An embodiment of the present invention also discloses a device, including:

One or more processors; and

One or more machine-readable media having instructions stored thereon, when executed by the one or more processors, cause the apparatus to perform one or more of the methods described above.

Embodiments of the present invention also disclose one or more machine-readable media on which instructions are stored, which when executed by one or more processors, cause the processors to perform one or more methods as described above.

The embodiments of the present application include the following advantages:

In the embodiment of the present application, the security information of the Internet of Things device can be encrypted and added to the token information. By transmitting the token information in the blockchain network, the smart contracts and programs deployed on the nodes of the blockchain network can be based on Security information in the token information to evaluate the security of IoT devices. In the multi-source heterogeneous hardware scenario of the Internet of Things, the security information of different types of Internet of Things devices are different. The embodiments of the present application can generate corresponding security assessment information for different types of Internet of Things devices, which is suitable for the Internet of Things. Security assessment of IoT devices in a multi-source heterogeneous hardware scenario. In the Internet of Things environment, the factors of human intervention are decreasing, and the automatic intervention of the Internet of Things equipment in the network is the main application scenario. In the embodiment of the present application, using the security information of the Internet of Things device as the selection condition of the trusted node of the networked blockchain network can maintain or even improve the overall consensus mechanism without losing the high performance of the weak centralized consensus algorithm safety.

BRIEF DESCRIPTION

FIG. 1 is a flowchart of steps of Embodiment 1 of a method for determining a trusted node based on a blockchain network of the present application;

FIG. 2 is a flow chart of steps of Embodiment 2 of a method for determining a trusted node based on a blockchain network of the present application;

3 is a schematic diagram of a consensus algorithm executed by a trusted node in an embodiment of this application;

4 is a schematic diagram for uploading the identification information and the token information of the device to the blockchain network;

FIG. 5 is a schematic diagram for processing devices connected to the blockchain network;

6 is a schematic diagram of the transaction processing for the blockchain network;

7 is a structural block diagram of an embodiment of an apparatus for determining a trusted node based on a blockchain network of the present application.

detailed description

In order to make the above objects, features and advantages of the present application more obvious and understandable, the present application will be described in further detail below with reference to the accompanying drawings and specific embodiments.

Referring to FIG. 1, it shows a step flowchart of Embodiment 1 of a method for determining a trusted node based on a blockchain network of the present application, wherein at least one node of the blockchain network is deployed with a first contract object, And/or, a first program for accessing the first contract object is deployed, and the method may specifically include the following steps:

Step 101: When a device accesses the blockchain network, the first program on a node of the blockchain network obtains the token information of the access device, the token information includes the Security Information;

The blockchain network is decentralized, which means that there is no server, and the client does not need to rely on the server to obtain or process data. In the blockchain network, there are nodes. A node is both a client and a server. The blockchain network is a P2P (Peer-to-Peer, end-to-end) network. Each node in the blockchain network can be directly connected to other nodes, and its topology is flat.

In practice, in the production stage of IoT devices, the manufacturer can burn the relevant keys for device security certification and the device's unique identification information (for example, DID (Distributed ID, distributed identification)) into the device's secure storage In the area. The manufacturer can also embed the distributed ledger node SDK (Software Development Kit) in the device firmware and install it. The distributed ledger node SDK can provide the ability for the device to connect with the blockchain network, as well as provide the service of collecting device safety certification (Attestation) data on the device side and reporting to the blockchain.

When the IoT device accesses the blockchain network, the IoT device can discover other nodes in the blockchain network and establish links with other nodes. The IoT device connected to the blockchain network is a node of the blockchain network.

In the embodiment of the present application, the nodes constituting the blockchain network may be deployed on the cloud service provider’s BaaS (Blockchain as Service) platform, or on the edge computing server, or deployed on On the computing-rich edge devices in the Internet of Things.

In the embodiment of the present application, the relevant security module (Secure Components) in the Internet of Things device uses the key burned into the device to self-generate the relevant security certification token and return the token to the device vendor. For example, the entity authentication token EAT (Entity Attestation Token) is generated as a token. Of course, in addition to using EAT as a token, other methods can also be used to generate the token, and the embodiments of the present application are not limited herein.

Related security modules can include SE (Secure Element), TEE (Trusted Execution Environment), software security sandbox, SIM (Subscriber Identity Module, customer identification card), Secure MCU (Secure Microcontroller Unit) , Security micro control unit), TPM (Trusted Platform Module, security chip), etc.

In the embodiment of the present application, the token information includes security information of the Internet of Things device, and the security information is information that can measure whether the Internet of Things device is safe from the perspective of the physical world. For example, whether the device has a security module; whether the core firmware of the device is safely updated by a trusted party, whether the device is securely booted (Secure Boot Boot), whether the key App/SDK running in the device is signed and deployed by the trusted party, and the device is deployed in the device Whether the blockchain SDK is running in the security module, etc. In practice, the security information can be set according to the specific business requirements of the Internet of Things device, and the embodiments of the present application are not limited herein.

In the embodiment of the present application, the first contract object is a smart contract for generating security assessment information for the device based on the token information. The first program is used to obtain token information and call the first contract object.

The first program can be deployed on multiple nodes, and the first program on each node can be separately executed to obtain the token information, and the first contract object is called separately. However, the operation of the first contract object to generate security assessment information for the access device needs to rely on the consensus mechanism of the blockchain network.

In the embodiment of the present application, the contract object refers to a smart contract. A smart contract is an application program that can be deployed in a virtual machine of a blockchain network node. The smart contract is generally deployed in several nodes in the blockchain network.

In the embodiment of the present application, the first program may be a first decentralized program.

Decentralized application DApp (Decentralized Application) is a distributed application that can be deployed on one or more nodes of the blockchain network. DApp is a client application (such as a front-end application) for accessing smart contracts , Is mainly responsible for implementing the call to the smart contract and implementing some business layer logic. It should be noted that DApps and smart contracts can be deployed without having to be deployed on the same node. The execution of DApp has nothing to do with the consensus mechanism of the blockchain network, but the execution result of the smart contract invoked by the DApp depends on the consensus mechanism of the blockchain network.

Step 102: The first program calls the first contract object, and the first contract object generates security evaluation information for the access device according to the token information.

In the embodiment of the present application, when the IoT device accesses the blockchain network, the first program running on a node of the blockchain network obtains the token information of the IoT device and calls the first contract object, The first contract object may generate security evaluation information for the device according to the security information in the token information.

For example, if the security information is: the access device does not have any security modules, the blockchain App/SDK deployed in the device does not have a signature from a trusted party, and the deployed smart contract runs a virtual machine image (Image) without a signature from the trusted party. It can be considered that the access device is a device with a low security level, and the security evaluation information generated by the first contract object may be information indicating that the security level is low.

For another example, if the security information is: the access device has multiple security modules, the blockchain App/SDK deployed in the device has the signature of the trusted party, and the deployed smart contract running the virtual machine image (Image) has the signature of the trusted party Wait. It can be considered that the access device is a device with a high security level, and the security evaluation information generated by the first contract object may be information indicating that the security level is high.

Of course, using the security level as the security assessment information is only an example, and in practice, other forms of security assessment messages can be generated, which is not limited herein by the embodiments of the present application.

Step 103: The node corresponding to the first program determines whether the access device is a trusted node according to the security assessment information.

Trusted nodes are nodes that can be used to run consensus algorithms. In transactions on the blockchain network, whenever a node submits a transaction, a certain node is required to run the consensus algorithm.

In the embodiment of the present application, whether the access can be used as a trusted node can be determined according to the security evaluation information of the access device.

For example, if the security assessment information is that the security level of the access device is high, the node running the first program may determine that the access device is a trusted node. If the security assessment information is that the security level of the access device is low, the node running the first program may determine that the access device is not a trusted node.

The above method for determining whether the access device is a trusted node based on the security assessment message is only an example. In practice, other methods may also be used to determine whether the access device is a trusted node based on the security assessment message.

In the embodiment of the present application, the security information of the Internet of Things device can be encrypted and added to the token information. By transmitting the token information in the blockchain network, the smart contracts and programs deployed on the nodes of the blockchain network can be based on Security information in the token information to evaluate the security of IoT devices. In the multi-source heterogeneous hardware scenario of the Internet of Things, the security information of different types of Internet of Things devices are different. The embodiments of the present application can generate corresponding security assessment information for different types of Internet of Things devices, which is suitable for the Internet of Things. Security assessment of IoT devices in a multi-source heterogeneous hardware scenario. In the IoT environment, the factors of human intervention are decreasing, and the IoT device automation intervention network is the main application scenario. In the embodiment of the present application, using the security information of the Internet of Things device as the selection condition of the trusted node of the networked blockchain network can maintain or even improve the overall consensus mechanism without losing the high performance of the weak centralized consensus algorithm safety. For example, if a blockchain network has 10 million nodes, in order to improve the effectiveness of the consensus mechanism, 100 nodes need to be randomly selected as mining nodes. Since these 100 mining nodes are randomly selected, the number of mining nodes is from From 10 million to 100, the security of consensus is reduced. If these 100 mining nodes are selected from 10,000 high-security nodes, the security can be guaranteed.

Referring to FIG. 2, it shows a flowchart of steps of Embodiment 2 of a method for determining a trusted node based on a blockchain network of the present application, wherein at least one node of the blockchain network is deployed with a first contract object, And/or, a first process for accessing the first contract object is deployed; at least one node of the blockchain network is deployed with a second contract object, and/or, is deployed for accessing the second contract object The second program; that is to say, the first contract object and the first program can be deployed on the same node or different nodes; the second contract object and the second program can be deployed on the same node or can be deployed At different nodes; the first contract object and the second contract object can be deployed on the same node or different nodes; the first program and the second program can be deployed on the same node or on different nodes ;

The method may specifically include the following steps:

Step 201: The second program on a node of the blockchain network receives the token information and identification information of the device;

In practice, the manufacturer of the IoT device can access the second program at one node and send the identification information and the token information of the IoT device to the second program. Among them, the identification information of the IoT device uniquely corresponds to an IoT device.

In the embodiment of the present application, the second contract object is used to manage the token information and identification information of the IoT device; the second contract object can store the token information and the identification information in a one-to-one correspondence to the database, or extract it from the database Token information and identification information.

The second program is used to receive the token information and identification information sent by other nodes, and then call the second contract object, and the second contract object stores/extracts the token information and identification information.

In the embodiment of the present application, the second program may be a second decentralized program.

In the embodiment of the present application, the method may further include: the second program calls the second contract object, and the second contract object stores the token information and identification information of the device to a pre- Set up a distributed file system.

The distributed file system (for example, IPFS (InterPlanetary File System)) is not part of the blockchain network. The distributed file system provides off-chain data storage services outside the distributed ledger system of the blockchain network .

Step 202, when a device accesses the blockchain network, a first program on a node of the blockchain network obtains identification information of the access device;

In the embodiment of the present application, the step 202 may include: the first program receives the identification information of the access device sent by a trusted node of the blockchain network.

Specifically, when an IoT device accesses the blockchain network, the nodes of the blockchain network broadcast the identification information of the access device to each other, so all nodes in the entire network can obtain the access device's Identification information. In the embodiment of the present application, the identification information of the access device is stored in the distributed ledger system of the blockchain network, and the tamper-proof feature of the distributed ledger system is used to prevent the identification information from being tampered.

After the IoT device accesses the blockchain network, a known trusted node (TrustedPeer) of the blockchain network can send the identification information of the access device to the first program running on a node to Request the first program to perform security assessment processing on the access device.

Step 203, the first program generates a token information acquisition request, and sends the token information acquisition request to the second DApp; the token information acquisition request includes identification information of the access device;

After the first program obtains the identification information of the access device, a token information acquisition request may be generated, and the token information acquisition request may be sent to the second program.

In the embodiment of the present application, the method may further be: when the second program receives the request for obtaining token information sent by the first program, the second program calls the second contract object, by The second contract object extracts the token information corresponding to the identification information from the preset distributed file system.

Specifically, the second program calls the second contract object after receiving the token information acquisition request, and the second contract object extracts the token information corresponding to the identification information from the distributed file system according to the identification information.

Step 204: The first program receives the token information sent by the second program; the token information includes security information of the access device;

Step 205: The first program calls the first contract object, and the first contract object generates security evaluation information for the access device according to the token information.

In the embodiments of the present application, the Internet of Things devices can be evaluated based on the security information of the Internet of Things devices. In the multi-source heterogeneous hardware scenario of the Internet of Things, the security information of different types of Internet of Things devices are different, so this application is implemented For example, different types of Internet of Things devices can generate corresponding security assessment information, which is suitable for evaluating the security of Internet of Things devices in a multi-source heterogeneous hardware scenario of the Internet of Things.

Step 206: The node corresponding to the first program determines whether the access device is a trusted node according to the security assessment information;

After the first contract object generates the security evaluation information of the access device, the node running the first program can determine whether to add the access device to the trusted node pool based on the security evaluation information.

Step 207: If the access device is a trusted node, the node corresponding to the first program adds the access device to a preset trusted node pool.

In the embodiment of the present application, when a node submits a transaction record to the blockchain network, the blockchain network may select a trusted node from the trusted node pool to execute the consensus algorithm.

3 is a schematic diagram of a consensus algorithm executed by a trusted node in an embodiment of this application. Among them, no matter the transaction initiated by the trusted node or the transaction initiated by the ordinary node, the trusted node can only be selected as the mining node from the trusted node pool.

In the Internet of Things environment, the factors of human intervention are decreasing, and the automatic intervention of the Internet of Things equipment in the network is the main application scenario. In the embodiment of the present application, using the security information of the Internet of Things device as the selection condition of the trusted node of the networked blockchain network can maintain or even improve the overall consensus mechanism without losing the high performance of the weak centralized consensus algorithm safety.

In order to enable those skilled in the art to better understand the embodiments of the present application, the following describes the embodiments of the present application through an example:

Refer to FIG. 4 for a schematic diagram of uploading device identification information and token information to the blockchain network. The upload process can specifically include:

1. The equipment vendor of the IoT device can configure the identification information, key and distributed ledger node SDK for the IoT device A;

2. The relevant security module of the Internet of Things device A can use key autocorrelation to generate token information; the token information includes the security information of the Internet of Things device A;

3. The Internet of Things device A can send the token information to the device vendor node;

4. Some nodes in the blockchain network are deployed with the second contract object and the second DApp. The device vendor node can send the identification information and token information of the Internet of Things device A to the second DApp running on a certain node;

5. The second DApp can call the second contract object to store the identification information and the token information of the Internet of Things device A in the distributed file system.

Refer to FIG. 5 for a schematic diagram of processing devices connected to the blockchain network. The process can specifically include:

1. The Internet of Things device A accesses the blockchain network and provides identification information;

2. Some nodes in the blockchain network are deployed with the first contract object and the first DApp. The identification information of the IoT device A is broadcast between the nodes of the blockchain network, and trusted nodes access the first DApp;

3. The first DApp requests the second DApp to obtain corresponding token information according to the identification information of the Internet of Things device A;

4. The second DApp calls the second contract object, and the second contract object extracts the corresponding token information from the distributed file system;

5. The second DApp obtains the token information extracted from the distributed file system;

6. The second DApp sends the token information to the first DApp;

7. The first DApp calls the first contract object, and the first contract object generates security assessment information based on the token information;

8. The trusted node running the first DApp, according to the security assessment information, determine whether the IoT device A is a trusted node, and if so, add the IoT device A to the trusted node pool.

6 is a schematic diagram of the transaction processing of the blockchain network. The transaction process can specifically include:

1. Internet of Things device B submits a transaction record to the blockchain network;

2. The blockchain network selects mining nodes from the trusted node pool;

3. The Internet of Things device A can be selected as a mining node;

4. IoT device A executes the consensus algorithm to generate new blocks;

5. IoT device A broadcasts new blocks to the entire blockchain network;

6. The transaction is confirmed.

It should be noted that, for simplicity of description, the method embodiments are expressed as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present application are not limited by the described action sequence, because According to the embodiments of the present application, some steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the involved actions are not necessarily required by the embodiments of the present application.

Referring to FIG. 7, a structural block diagram of an embodiment of a device for determining a trusted node based on a blockchain network of the present application is shown, wherein at least one node of the blockchain network is deployed with a first contract object, and/or Or, a first program for accessing the first contract object is deployed, and the device may specifically include the following modules:

The first program 70, and the node 71 where the first program is located;

The first program 70 includes:

The token information obtaining module 701 is used to obtain the token information of the access device when a device accesses the blockchain network, the token information includes the security information of the access device;

The first calling module 702 is used to call the first contract object, and the first contract object is used to generate security evaluation information for the access device according to the token information;

The node 71 where the first program is located may include:

The trusted node judgment module 711 is used to judge whether the access device is a trusted node according to the security evaluation information.

In the embodiment of the present application, the node 71 where the first program is located may further include:

In an embodiment of the present application, at least one node of the blockchain network is deployed with a second contract object, and/or a second program for accessing the second contract object is deployed; the device may further include:

The token information acquisition module 701 of the first program 70 may include:

A request submodule, configured to generate a token information acquisition request and send the token information acquisition request to the second program; the token information acquisition request includes identification information of the access device;

The token information receiving sub-module is configured to receive the token information sent by the second program; the token information is searched and obtained by the second program according to the identification information.

In the embodiment of the present application, the second program may further include:

In the embodiment of the present application, the identifier acquisition submodule may include:

In the embodiment of the present application, the first program is a first decentralized program DApp, and the second program is a second DApp.

For the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant part can be referred to the description of the method embodiment.

An embodiment of the present application also provides an apparatus, including:

One or more processors; and

One or more machine-readable media having instructions stored thereon, when executed by the one or more processors, causes the apparatus to execute the method described in the embodiments of the present application.

An embodiment of the present application further provides one or more machine-readable media on which instructions are stored, and when executed by one or more processors, causes the processor to execute the method described in the embodiments of the present application.

The embodiments in this specification are described in a progressive manner. Each embodiment focuses on the differences from other embodiments, and the same or similar parts between the embodiments may refer to each other.

Those skilled in the art should understand that the embodiments of the embodiments of the present application may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present application may take the form of computer program products implemented on one or more computer usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer usable program code.

The embodiments of the present application are described with reference to flowcharts and/or block diagrams of the method, terminal device (system), and computer program product according to the embodiments of the present application. It should be understood that each flow and/or block in the flowchart and/or block diagram and a combination of the flow and/or block in the flowchart and/or block diagram may be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, special-purpose computer, embedded processing machine, or other programmable data processing terminal device to produce a machine so that the instructions executed by the processor of the computer or other programmable data processing terminal device Means for generating the functions specified in one block or multiple blocks of the flowchart one flow or multiple flows and/or block diagrams.

These computer program instructions may also be stored in a computer readable memory that can guide a computer or other programmable data processing terminal device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which The instruction device implements the functions specified in one block or multiple blocks in the flowchart one flow or multiple flows and/or block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing terminal device, so that a series of operation steps are performed on the computer or other programmable terminal device to generate computer-implemented processing, so that the computer or other programmable terminal device The instructions executed above provide steps for implementing the functions specified in one block or multiple blocks of the flowchart one flow or multiple flows and/or block diagrams.

Although the preferred embodiments of the embodiments of the present application have been described, those skilled in the art can make additional changes and modifications to these embodiments once they learn the basic inventive concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the embodiments of the present application.

Finally, it should also be noted that in this article, relational terms such as first and second are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply these entities Or there is any such actual relationship or order between operations. Moreover, the terms "include", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device that includes a series of elements includes not only those elements, but also those that are not explicitly listed The other elements listed may also include elements inherent to such processes, methods, articles or terminal equipment. Without more restrictions, the element defined by the sentence "include one..." does not exclude that there are other identical elements in the process, method, article, or terminal device that includes the element.

The above provides a detailed description of a method for determining a trusted node based on a blockchain network and a device for determining a trusted node based on a blockchain network provided in this application. In this paper, specific examples are applied to the principles of this application The implementation examples are described. The descriptions of the above examples are only used to help understand the method and the core idea of the present application. At the same time, for those of ordinary skill in the art, according to the ideas of the present application, in the specific implementation manner and application scope All are subject to change. In summary, the content of this specification should not be construed as a limitation of this application.

Claims

A method for determining trusted nodes based on a blockchain network, characterized in that at least one node of the blockchain network is deployed with a first contract object, and/or is deployed with a method for accessing the first contract object The first procedure, the method includes:

When a device accesses the blockchain network, the first program on a node of the blockchain network obtains the token information of the access device, and the token information includes the security information of the access device;

The first program calls the first contract object, and the first contract object generates security evaluation information for the access device according to the token information;

The node corresponding to the first program determines whether the access device is a trusted node according to the security evaluation information.
The method according to claim 1, further comprising:

If the access device is a trusted node, the node corresponding to the first program adds the access device to a preset trusted node pool.
The method according to claim 1 or 2, wherein at least one node of the blockchain network is deployed with a second contract object, and/or a second program for accessing the second contract object is deployed ;

Before the first program obtains the token information of the access device, the method further includes:

The second program on a node of the blockchain network receives the token information and identification information of the device;

The step of obtaining the token information of the access device by the first program includes:

The first program obtains identification information of the access device;

The first program generates a token information acquisition request, and sends the token information acquisition request to the second program, where the token information acquisition request includes identification information of the access device;

The first program receives the token information sent by the second program, and the token information is found by the second program according to the identification information.
The method according to claim 3, further comprising:

The second program calls the second contract object, and the second contract object stores the token information and identification information of the device to a preset distributed file system.
The method according to claim 4, further comprising:

When the second program receives the token information acquisition request sent by the first program, the second program calls the second contract object, and the second contract object The system extracts the token information corresponding to the identification information.
The method according to claim 3, wherein the step of acquiring the identification information of the access device by the first program comprises:

The first program receives the identification information of the access device sent by a trusted node of the blockchain network.
The method according to claim 3, wherein the first program is a first decentralized program DApp, and the second program is a second DApp.
A trusted node determination device based on a blockchain network, characterized in that at least one node of the blockchain network is deployed with a first contract object, and/or is deployed with a method for accessing the first contract object The first procedure, the device includes:

The first program, and the node where the first program is located;

The first procedure includes:

The token information obtaining module is used to obtain the token information of the access device when a device accesses the blockchain network, the token information includes the security information of the access device;

A first calling module, configured to call the first contract object, and the first contract object is used to generate security assessment information for the access device according to the token information;

The node where the first program is located includes:

The trusted node judgment module is used to judge whether the access device is a trusted node according to the security assessment information.
The apparatus according to claim 8, wherein the node where the first program is located further comprises:

The trusted node pool joining module is used to add the access device to a preset trusted node pool if the access device is a trusted node.
The device according to claim 8 or 9, wherein at least one node of the blockchain network is deployed with a second contract object, and/or a second program for accessing the second contract object is deployed ; The device also includes:

The second program, on a node of the blockchain network, includes: an information receiving module for receiving the token information and identification information of the device;

The token information acquisition module of the first program includes:

An identification acquisition submodule, used to acquire identification information of the access device;

A request submodule, configured to generate a token information acquisition request, and send the token information acquisition request to the second program, where the token information acquisition request includes identification information of the access device;

The token information receiving submodule is configured to receive the token information sent by the second program, and the token information is searched and obtained by the second program according to the identification information.
The apparatus according to claim 10, wherein the second program further comprises:

A second calling module is used to call the second contract object, and the second contract object stores the token information and identification information of the device to a preset distributed file system.
The apparatus according to claim 11, wherein the second program further comprises:

The third calling module is used to call the second contract object when receiving the token information acquisition request sent by the first program, and the second contract object is extracted from the preset distributed file system Token information corresponding to the identification information.
The apparatus according to claim 10, wherein the identifier acquisition submodule includes:

The identification receiving unit is configured to receive identification information of the access device sent by a trusted node of the blockchain network.
The apparatus according to claim 10, wherein the first program is a first decentralized program DApp, and the second program is a second DApp.
An apparatus is characterized by comprising:

One or more processors; and

One or more machine-readable media having instructions stored thereon, when executed by the one or more processors, causes the apparatus to perform one or more of the methods of claims 1-7.
One or more machine-readable media having instructions stored thereon, when executed by one or more processors, causing the processors to perform one or more of the methods of claims 1-7.