WO2020177109A1

WO2020177109A1 - Lot-drawing processing method, trusted chip, node, storage medium and electronic device

Info

Publication number: WO2020177109A1
Application number: PCT/CN2019/077250
Authority: WO
Inventors: 段夕华; 钟林
Original assignee: 北京建极练科技有限公司
Priority date: 2019-03-07
Filing date: 2019-03-07
Publication date: 2020-09-10

Abstract

A blockchain-based lot-drawing processing method, a trusted execution chip, a blockchain network node, a computer storage medium and an electronic device, which relate to the field of blockchain and cryptology technology. Said method comprises: a node sending a random information request of a user and a public key of the user to a trusted execution chip; the node receiving a random information commitment, a signature of the random information commitment and ciphertext of the random information that are outputted by the trusted execution chip; and the node broadcasting the random information commitment, the signature of the random information commitment, and the ciphertext of the random information to a block chain network so as to form a blockchain. The existence of the trusted execution chip avoids potential risks such as predictability, peeking, and operability, so as to facilitate the blockchain network to reach consensus, and a generation party cannot operate the generation of a sequence, ensuring the fairness of the solution in an open and verifiable manner.

Description

Lottery processing method, trusted chip, node, storage medium and electronic device

Technical field

The present disclosure relates to the field of blockchain technology, and in particular to a lottery processing method based on blockchain, a trusted execution chip, a blockchain network node, a computer storage medium, and an electronic device.

Background technique

At present, there are various lottery activities in society, such as the license plate drawing system being implemented in Beijing and Shanghai, the welfare lottery issued by the state or government departments, the lottery activities organized by the company, or chess and card activities. Lottery has inherent requirements for fairness, non-controllability and confidentiality. Fairness means that the output result of the lottery algorithm is fair, that is, the probability of being drawn should be equal for all users. Uncontrollability means that the result of the lottery cannot be manipulated by the attacker, thus destroying the fairness of the result. Confidentiality means that the attacker cannot know the result of the lottery in advance. At present, the lottery is usually processed through a centralized operator or management server, the fairness of the lottery is guaranteed through algorithms, and the operator or management is handled in accordance with regulations through notarization and other means. However, technically there is no guarantee that the operator or management party will operate in compliance with laws and regulations, and will not cheat or manipulate.

Therefore, a credible, fair, non-manipulable, non-peeping, and verifiable technology is needed in the prior art to solve the problems in the lottery process.

Summary of the invention

The inventor of the present invention found that there are problems in the above-mentioned prior art, and therefore proposes a new technical solution for at least one of the problems.

According to one aspect of the present disclosure, there is provided a lottery processing method based on blockchain, including: a node receives a random information request from a user, and sends the random information request of the user and the public key of the user to a trusted execution chip The node receives the random information promise, the signature of the random information promise, and the ciphertext of the random information output by the trusted execution chip; wherein the random information is requested by the trusted execution chip based on the user's random information request Generated, the ciphertext of the random information is generated by encrypting the random information with the public key of the user, the random information promise is generated according to the random information, and the signature of the random information promise is executed by using the trusted The private key of the chip is obtained by signing the random information promise; the node broadcasts the random information promise, the signature of the random information promise, and the ciphertext of the random information to the blockchain network to form a blockchain.

In an embodiment, the method further includes: the user decrypts the ciphertext of the random information with a private key to obtain the random information.

In an embodiment, the method further includes: other users receiving the random information provided by the user, and verifying the validity of the random information based on the random information promise.

In an embodiment, after the node receives the random information promise, the signature of the random information promise, and the ciphertext of the random information output by the trusted execution chip, the method further includes: the node according to the public key of the trusted execution chip The signature of the promise with the random information verifies the validity of the promise with the random information.

In one embodiment, the user's random information request is a digital signature of the user's random information request; after the node receives the user's random information request, the method further includes: the node verifies the user's random information The validity of the requested digital signature.

In one embodiment, the random information is generated by the trusted execution chip based on the private key of the trusted execution chip and the random information request of the user.

In an embodiment, the public key sent by the user to the trusted execution chip is encrypted and transmitted by the public key of the trusted execution chip.

In one embodiment, the blockchain network includes multiple nodes, and each node has a trusted execution chip. The user’s random information request is sent to multiple nodes, and the user’s random information request is generated and combined by the trusted execution chips of the multiple nodes. Output the random information promise, the signature of the random information promise, and the cipher text of the random information.

In one embodiment, the method further includes: initializing a plurality of trusted execution chips, so that the plurality of trusted execution chips have the same public key, private key, and seed.

In one embodiment, the node broadcasting the random information promise, the signature of the random information promise, and the ciphertext of the random information to the blockchain network to form a blockchain includes: broadcasting to the blockchain network for the multiple nodes The random information promise, the signature of the random information promise, and the ciphertext of the random information are generated based on the blockchain consensus algorithm.

According to another aspect of the present disclosure, a trusted execution chip is provided, including:

The receiving module is used to receive the random information request of the user and the public key of the user;

A random information generating module, configured to receive a random information request from the user, and generate random information according to the random information request of the user;

A promise generation module, used to generate a random information promise based on the random information;

A commitment signature generation module, configured to sign the random information commitment through the private key of the trusted execution chip to obtain a digital signature of the random information commitment;

A random ciphertext generating module, configured to generate a ciphertext of the random information by encrypting the random information with the public key of the user;

The output module is used to output the random information promise, the signature of the random information promise, and the ciphertext of the random information.

In one embodiment, the random information generating module generates the random information based on the private key of the trusted execution chip and the random information request of the user.

According to another aspect of the present disclosure, there is provided a blockchain network node, including the above-mentioned trusted execution chip, wherein the blockchain network node receives a user's random information request, and combines the user's random information request with The public key of the user is sent to the trusted execution chip, and the random information promise, the signature of the random information promise, and the ciphertext of the random information output by the trusted execution chip are received, and the random information promise and random information promise The signature and ciphertext of random information are broadcast to the blockchain network to form a blockchain.

According to another aspect of the present disclosure, there is provided a computer-readable storage medium on which a computer program is stored, wherein the computer program is characterized in that the above-mentioned blockchain-based lottery processing method is implemented when the computer program is executed by a processor.

According to another aspect of the present disclosure, there is provided an electronic device, including:

Processor; and

A memory for storing executable instructions of the processor;

Wherein, the processor is configured to execute the above-mentioned blockchain-based lottery processing method by executing the executable instruction.

In the embodiment of the present disclosure, the node inputs the user's random information request to the trusted execution chip, and the trusted execution chip generates random information and related promises and signatures. The process is fair, confidential and non-tamperable, and the trusted execution chip The content output by the execution chip is broadcast to the blockchain; users decrypt and disclose random information, while other users verify the validity of the promise. In this way, random information is generated through the trusted execution chip and a consensus is reached in the blockchain system, then the random information has fairness, uncontrollability and confidentiality.

Through the following detailed description of exemplary embodiments of the present invention with reference to the accompanying drawings, other features and advantages of the present invention will become clear.

Description of the drawings

The drawings constituting a part of the specification describe the embodiments of the present invention, and together with the specification are used to explain the principle of the present invention.

With reference to the drawings, the present invention can be understood more clearly according to the following detailed description, in which:

Figure 1 shows a schematic structural diagram of an embodiment of a blockchain network according to the present disclosure;

FIG. 2 shows a flowchart of an embodiment of a lottery processing method based on blockchain according to the present disclosure;

3 shows a flowchart of another embodiment of a lottery processing method based on blockchain according to the present disclosure;

FIG. 4 shows a flowchart of an embodiment of a method for drawing lots of license plates according to the present disclosure;

Figure 5 shows a flow chart of an embodiment of a chess and card activity according to the present disclosure;

FIG. 6 shows a schematic structural diagram of an embodiment of a trusted execution chip used in the present disclosure; and

FIG. 7 shows a schematic diagram of an electronic device used in the blockchain-based lottery processing method of the present disclosure.

detailed description

Various exemplary embodiments of the present invention will now be described in detail with reference to the accompanying drawings. It should be noted that unless specifically stated otherwise, the relative arrangement, numerical expressions and numerical values of the components and steps set forth in these embodiments do not limit the scope of the present invention.

At the same time, it should be understood that, for ease of description, the sizes of the various parts shown in the drawings are not drawn in accordance with actual proportional relationships.

The following description of at least one exemplary embodiment is actually only illustrative, and in no way serves as any limitation to the present invention and its application or use.

The technologies, methods, and equipment known to those of ordinary skill in the relevant fields may not be discussed in detail, but where appropriate, the technologies, methods, and equipment should be regarded as part of the authorization specification.

In all examples shown and discussed here, any specific value should be interpreted as merely exemplary, rather than as a limitation. Therefore, other examples of the exemplary embodiment may have different values.

It should be noted that similar reference numerals and letters indicate similar items in the following drawings, so once a certain item is defined in one drawing, it does not need to be further discussed in subsequent drawings.

Blockchain technology can be used to deal with lottery issues. For example, the random information generation method of distributed smart contracts based on blockchain is used for lottery. The distributed characteristics of blockchain can be used to ensure the fairness and uncontrollability of lottery. Since the operation of smart contracts in blockchain smart contracts is open and transparent, any node or user can generate random information, so this type of scheme is insufficient for the confidentiality of random information. In addition, the execution efficiency of smart contracts depends on the blockchain system. If the blockchain system has low operating efficiency or high operating costs, the efficiency of this type of random information generation scheme will be lower or higher operating costs. .

In an embodiment of the present disclosure, a blockchain network node has a trusted execution chip, that is, a black box; the black box input node provides a transaction ticket, for example, includes transaction data and user public key, and outputs user public key encryption Random information; the node broadcasts the ciphertext of the random information to the blockchain, and only the user corresponding to the private key can decrypt and disclose the random information, thereby achieving the confidentiality of the random information, thereby providing a fair and unmanageable Distributed random information generation scheme with security and confidentiality.

Fig. 1 shows a schematic structural diagram of an embodiment of a blockchain network according to the present disclosure. As shown in FIG. 1, the blockchain network includes multiple nodes 11, and the nodes 11 have a trusted execution chip 110. The trusted execution chip 110 may also be referred to as a software-impenetrable black box, and may use specialized hardware, such as Intel's SGX (SoftwareGuard Extensions, software protection extensions) technology or ARM's TrustZone technology and similar technologies. The trusted execution chip 110 can read external data and at the same time expose the interface through the API, thereby providing initialization and extraction functions. Through the initialization operation, the trusted execution chip 110 can have the same seed for generating random information or lottery information. The trusted execution chip 110 has the same public key and private key through initialization, or has the same public key for the lottery function. And private key. In the lottery process, one or more registered users 12 participate in the lottery, and the registered users 12 provide their own public key and signature Sig to make a request. The node 11 sends the public key and signature Sig of the registered user 12 to the trusted execution chip 110. The trusted execution chip 110 executes the lottery. The extracted data and the random salt calculated according to the seed form C, and are encrypted and transmitted back to the registered user 12. The data C can be decrypted with the private key of the registered user 12. Others include trusted execution The host of the chip 110 cannot read the plaintext, thus avoiding the possibility of peeping. While sending encrypted data, the black box will also send a proof P of the extracted data to the host node, where

Broadcast to the blockchain network and synchronously recorded by each node, ensuring the public verifiability of the data. The algorithm itself will guarantee fairness, credibility, and verifiability, but the data cannot be reversed before the holder publishes it. Conversely, if the user forged results are extracted, it will not be able to pass the verification of the blockchain network that each node can participate in.

The trusted execution chip 110 executes the lottery, which is a consensus random algorithm based on cryptography, and all random numbers are generated by an original seed, external input, and a private key for seed transformation. The three parts of data between each node (for example, through the initialization process) are kept consistent, so the consensus of the generated random numbers is guaranteed. At the same time, the private key is kept secret from the outside world, thus ensuring the unpredictability of the random number, and the seed is automatically changed every time with the input from the outside, which further ensures the unpredictability of the random number.

In one embodiment, the trusted execution chip provides the public key to the user at the same time. The user's data, including the original sequence, signature, etc., can be encrypted for transmission, thereby further improving the privacy of data transmission and further improving the verifiability. safer.

Compared with other random sequence generation methods, the foregoing embodiment has the following advantages:

1) Compared with the centralized random sequence generation algorithm, the sender cannot manipulate the sequence generation, and the fairness of the algorithm is guaranteed in a publicly verifiable manner;

2) Compared with the algorithm of random sequence generation based on smart contract, because of the existence of the trusted execution chip, it avoids potential risks such as predictability, peeping, and operation. Combined with other architectural optimization measures, the performance can also reach a practical level.

Fig. 2 shows a flowchart of an embodiment of a lottery processing method based on blockchain according to the present disclosure.

As shown in Fig. 2, in step S202, the node receives the random information request of the user, and sends the random information request of the user and the public key of the user to the trusted execution chip.

Step S204, the node receives the random information promise, the signature of the random information promise, and the ciphertext of the random information output by the trusted execution chip; wherein, the random information is generated by the trusted execution chip based on the user's random information request, and the ciphertext of the random information is generated by the trusted execution chip The user's public key encrypts and generates the random information, the random information promise is generated based on the random information, and the signature of the random information promise is obtained by signing the random information promise using the private key of the trusted execution chip.

Step S206, the node broadcasts the random information promise, the signature of the random information promise, and the ciphertext of the random information to the blockchain network to form a blockchain.

In the above embodiment, the node inputs the user's random information request to the trusted execution chip, and the trusted execution chip generates random information and related promises and signatures. The process is fair, confidential and non-tamperable, and the trusted execution The content output by the chip is broadcast to the blockchain; users decrypt and disclose random information, while other users verify the validity of the promise. In this way, random information is generated through the trusted execution chip and a consensus is reached in the blockchain system, and the random information uses fairness, uncontrollability, and confidentiality.

The following briefly introduces the four cryptographic tools used in the lottery process: random information generation algorithm, commitment algorithm, digital signature algorithm, and public key encryption algorithm:

1) Random information generation algorithm: Input the private key and data, and output the random number.

In one embodiment, the random information generation algorithm is a deterministic polynomial time algorithm Rand, which satisfies the following two conditions:

Scalability: There is a function, l: N→N, so that for all n∈N, l(n)>n holds, and for all s∈{0,1}*, |Rand(s)|=l (|s|) is established. The function l is called the expansion factor of Rand.

Randomness: distribution {Rand(n)}, n∈N is random distribution.

2) Commitment algorithm:

Defining the commitment algorithm includes two phases, the commitment phase and the open phase.

Commitment stage: input message, output commitment.

Opening phase: input message and promise, output validity judgment.

In one embodiment:

Commitment stage Com: input message m, output commitment δ=Com(m);

Opening phase Ver: input message m and promise δ, output validity judgment, Valid/Invalid←Ver(m, δ).

The promise algorithm has the characteristics of correctness, binding and concealment.

Correctness: Input the correct message and promise, and the output verification is successful.

Binding: If you input other messages, the verification fails, and the probability of output success can be ignored.

Concealment: According to the promise, the message cannot be calculated in polynomial time.

3) Digital signature algorithm:

Digital signature algorithms can include secret key generation algorithms, signature algorithms, and verification algorithms.

Signature algorithm: input the private key and message, and output the signature.

Verification algorithm: Input message signature and public key, and output validity judgment.

In one embodiment:

Key generation algorithm KeyGen: Enter the security parameter ^1λ , enter the private key SK and the public key PK, (SK, PK)←KeyGen(1 ^λ ).

Signature algorithm Sig: Input the private key SK and message m, and output the signature σ, σ←Sig(SK, m).

Verification algorithm Ver: Input the message signature pair (m, σ) and the public key PK, and output the validity judgment Valid/Invalid←Ver(m, σ, PK).

The digital signature algorithm has the characteristics of correctness and unforgeability.

Correctness: Input the correct message and public key, and output the verification promise.

Unforgeability: The attacker cannot forge a signature in polynomial time to make the signature verification successful.

4) Public key encryption algorithm:

Public key encryption algorithms may include secret key generation algorithms, encryption algorithms, and decryption algorithms.

Encryption algorithm: input message and public key, output ciphertext.

Decryption algorithm: input ciphertext and private key, and output plaintext.

In one embodiment:

Encryption algorithm Enc: input public key PK and message m, output cipher text C, C←Enc(PK, m).

Authentication algorithm Dec: input ciphertext C and private key SK, output plaintext m, m←Dec(SK, C).

The public key encryption algorithm has the characteristics of correctness and confidentiality.

Correctness: Input the correct ciphertext and private key, and output the correct plaintext.

Confidentiality: The attacker only obtains the ciphertext and cannot calculate the plaintext in polynomial time.

FIG. 3 shows a flowchart of another embodiment of a lottery processing method based on blockchain according to the present disclosure.

As shown in FIG. 3, in step 301, the user calls the signature algorithm, outputs the digital signature of the random information request, and sends it to the blockchain network node.

In one embodiment, the digital signature of the random information request: Tx _i = Sig(SK _i , m), where i represents any user, SK _i represents the user’s private key, m represents the message that needs to be signed, and Sig represents The signature algorithm in the digital signature algorithm, Tx _i represents the signature of the message.

In step 302, the node invokes the verification algorithm to verify the validity of the digital signature of the random information request.

In one embodiment, the validity verification of the digital signature of the random information request: Valid/Invalid←Ver(Tx _i , m, PK _i ), where i represents any user, PK _i represents the user’s public key, and m represents For messages that need to be signed, Ver represents the verification algorithm in the digital signature algorithm, and Tx _i represents the signature of the message.

In step 303, the node sends the digital signature of the random information request and the user's public key to the trusted execution chip.

In step 304, the trusted execution chip generates random information, random information promise, random information promise signature, and random information ciphertext. In an embodiment, it specifically includes the following steps:

Random information generation:

The trusted execution chip calls the random information generation algorithm, inputs the chip's private key and the digital signature requested by the user, and outputs random information. In one embodiment, RandNum _i ←Rand(SK ₀ , Tx _i ), where 0 represents the trusted execution chip, SK ₀ represents the private key of the chip, Rand represents the random number generation algorithm, and RandNum _i represents the random number output by the chip .

Random Information Commitment:

The trusted execution chip calls the promise algorithm, inputs random information, and outputs random information promises. In one embodiment, δ _i =Com(RandNum _i ), where i represents any user, RandNum _i represents the random number output by the chip, Com represents the commitment algorithm, and δ _i represents the commitment value output by the commitment algorithm.

Signature of Random Information Commitment:

The trusted execution chip calls the signature algorithm, inputs the chip private key and random information promise, and outputs the signature. In one embodiment, σ _i =Sig(SK ₀ , Hash(δ _i )), where i represents any user, δ _i represents the commitment value output by the commitment algorithm, Hash represents the hash algorithm, and SK ₀ represents trusted Execute the private key of the chip, Sig represents the signature algorithm in the digital signature algorithm, and σ _i represents the signature value output by the digital signature algorithm.

Random information encryption:

The trusted execution chip calls encryption algorithms, inputs random information and user public keys, and outputs cipher text. In one embodiment, C _i ←Enc(PK _i , RandNum _i ), where i represents any user, RandNum _i represents the random number output by the chip, PK _i represents the public key of the user, Enc represents the public key encryption algorithm The encryption algorithm, C _i represents the ciphertext output by the encryption algorithm.

In step 305, the trusted execution chip sends the random information promise, the signature of the random information promise, and the ciphertext of the random information to the node.

In step 306, the node verifies the validity of the signature promised by the random information. The node calls the verification algorithm, inputs the chip public key and random information promise signature pair, and outputs the validity judgment.

In one embodiment, Valid/Invalid=Ver(PK ₀ , Hash(δ _i ), σ _i ), where i represents any user, σ _i represents the signature value output by the digital signature algorithm, and δ _i represents the commitment algorithm output Hash indicates the hash algorithm, PK ₀ indicates the public key of the trusted execution chip, Ver indicates the verification algorithm in the digital signature algorithm, and Valid/Invalid indicates the output result of the signature verification algorithm, that is, valid or invalid.

In step 307, the node broadcasts the promise of random information, the signature of the promise of random information, and the ciphertext of the random information to the blockchain. Broadcast information node _{_{comprising: (δ i, σ i,}} C i, PK i), where, i denotes any user, PK _i represents the user's public key, C _i represents the output ciphertext encryption algorithm, σ _i represents a number The signature value output by the signature algorithm, δ _i represents the commitment value output by the commitment algorithm.

In step 308, the user calls the decryption algorithm, inputs the private key and the ciphertext of random information, and outputs the plaintext of random information.

In one embodiment, the user decrypts: RandNum _i ←Dec(SK _i , C _i ), where i represents any user, C _i represents the ciphertext output by the encryption algorithm, SK _i represents the user’s private key, and Dec represents the public The decryption algorithm in the key encryption algorithm, RandNum _i represents the random number output by the chip.

The user decrypts and discloses the random information, while other users verify the validity of the promise, by calling the verification algorithm, input the random information plaintext and the random information promise, and output the validity judgment. In one embodiment, other users verify the commitment: Valid/Invalid←Ver(RandNum _i , δ _i ), where i represents any user, δ _i represents the commitment value output by the commitment algorithm, and RandNum _i represents the random number output by the chip , Ver represents the verification algorithm in the commitment algorithm, Valid/Invalid represents the output result of the commitment verification algorithm, that is, valid or invalid.

FIG. 4 shows a flowchart of an embodiment of a method for drawing lots of license plates according to the present disclosure. There are multiple users and multiple drawing companies (miners) in the license plate lottery system. User: Submit identity information to the license plate lottery blockchain network, and download lottery information from the blockchain. Lottery company (miner): Lottery company draws lots based on user identity information and broadcasts the lottery results to the blockchain.

As shown in Figure 4, in S402, the applicant submits the digital signature of the identity information to the license plate lottery blockchain network.

In S404, each node (lottery company) in the blockchain network verifies the validity of the identity information and the digital signature.

Each node then performs the lottery process independently:

In S406, each node inputs the digital signature of the applicant's identity information to the trusted execution chip.

In S408, the trusted execution chip generates a piece of random information based on the digital signature of the applicant's identity information; the trusted execution chip inputs random information and outputs random information promises; the trusted execution chip inputs random information promises and private keys, and outputs signatures; trusted The implementation chip inputs random information and applicant public key, and outputs ciphertext.

In S410, each node receives the random information promise, the signature of the random information promise, and the ciphertext of the random information, inputs the chip public key and the random information promise signature pair, and outputs the validity judgment.

In S412, multiple lottery companies broadcast the random information promise, random information promise signature, and random information cipher text to the blockchain.

In S414, the applicant obtains the ciphertext of the random information from the blockchain, and decrypts to obtain the plaintext of the random information.

In S416, the applicant determines that the lottery is successful according to whether the random information meets the predetermined conditions. For example, if the random information is less than a certain threshold, the draw is successful (that is, the license plate number is obtained).

In S416, if the applicant discloses random information, blockchain network users can verify the correctness of the random information. Otherwise, wait for the next draw.

In the steps of the foregoing embodiment, random information is generated inside the trusted execution chip, and each node (lottery company) cannot obtain it. Random information promises to be complete, binding, and concealed. Therefore, users can publish random information for integrity verification; users cannot open random information as other random information; attackers cannot obtain random information. Random information digital signature can ensure that random information is generated by a trusted execution chip. The random information encryption ensures that no random lottery company knows the plain text of the user's random information, and only the applicant can decrypt and obtain it. If a few lottery companies cheat, they will be discarded in the blockchain network verification (dishonest data will not get the consensus of the entire network). Only when the lottery company honestly draws the lottery can it be broadcast to the blockchain. The blockchain consensus algorithm used for blockchain network verification does not need to limit the specific consensus algorithm. It only requires an algorithm that can ensure the security of the system and reach a consensus when the honest participants are the majority, such as the proof-of-work mechanism POW consensus Algorithms, consensus algorithms for proof of rights and interests, etc

In the distributed license plate lottery method in the foregoing embodiment, the entire lottery system is based on a blockchain system and a trusted execution chip. The license plate lottery cannot be cheated, and has fairness, non-controllability, and confidentiality. Only the applicant knows whether the lottery is successful, but other people can verify whether the applicant is successful.

Another similar application scenario is the company's year-end prize draw. Similar to the lottery for license plates, applicants receive a random number to determine whether to draw the year-end prize or not. For details, please refer to the implementation of the above-mentioned license plate drawing, which is not described in detail here for the sake of brevity.

FIG. 5 shows a flowchart of an embodiment of a chess and card activity according to the present disclosure. There are multiple users and multiple chess and card operators (miners) in the chess and card game system. Among them, the user digitally signs a certain board game, applies to participate in the game, and downloads the random number required for the board game from the blockchain. The chess and card operator (miner) generates a random number based on the user's digital signature and broadcasts the result to the blockchain.

As shown in Figure 5, in step S502, the user digitally signs the game.

In step S504, the chess and card operator verifies the validity of the digital signature.

In step S506, the chess and card operator inputs the user's digital signature to the trusted execution chip.

Each chess and card operator conducts the drawing process independently:

In step S508, the trusted execution chip generates random information, random information promise, digital signature of random information promise, and ciphertext of random information.

Random information generation: Input the user's digital signature to the trusted execution chip, and the trusted execution chip generates a piece of random information based on the user's digital signature.

Random information promise: Trusted execution chip inputs random information and outputs random information promise.

Random information digital signature: Trusted execution chip inputs random information promise and private key, and outputs signature.

Random information encryption: The trusted execution chip inputs random information and the applicant's public key, and outputs ciphertext.

In step S510, multiple chess and card operators receive the credible execution chip to generate random information promises, digital signatures of random information promises, and ciphertexts of random information. Chess and card operators (miners) verify the validity of the signature: input the chip public key and random information promise signature pair, and output the validity judgment.

In step S512, multiple chess and card operators broadcast the random information promise, random information promise signature, and random information cipher text to the blockchain.

In step S514, the user obtains the ciphertext of the random information from the blockchain, and decrypts to obtain the plaintext of the random information.

In step S516, the user participates in the board game in plaintext according to random information.

In step S518, if the user discloses the random information, the card operator or the entire network user can verify the correctness of the random information.

In the distributed chess and card game in the foregoing embodiment, the entire chess and card game system is based on a blockchain system and a trusted execution chip. Therefore, the generation of random numbers cannot be cheated, and has fairness, uncontrollability, and confidentiality. Multiple users can jointly apply for a total random information and obtain part of the random information separately. Part of the random information of each user is mutually exclusive, and the union of mutually exclusive random information is equal to the total random information. So meet the requirements of chess and card games.

Fig. 6 shows a schematic structural diagram of an embodiment of a trusted execution chip used in the present disclosure. As shown in Figure 6, the trusted execution chip includes:

The receiving module 61 is configured to receive a random information request from a user and the public key of the user;

The random information generating module 62 is configured to receive the random information request of the user, and generate random information according to the random information request of the user;

The promise generating module 63 is configured to generate a random information promise according to the random information;

The commitment signature generating module 64 is configured to sign the random information commitment through the private key of the trusted execution chip to obtain a digital signature of the random information commitment;

A random ciphertext generating module 65, configured to encrypt the random information with the user's public key to generate a ciphertext of the random information;

The output module 66 is configured to output the random information promise, the signature of the random information promise, and the cipher text of the random information.

In one embodiment, the random information generating module 62 generates random information based on the private key of the trusted execution chip and the random information request of the user.

For the implementation of the above-mentioned various functional modules, reference may be made to the description of the corresponding method in the above embodiment, and the detailed description is omitted here for brevity.

Those skilled in the art can understand that various aspects of the present invention can be implemented as a system, a method, or a program product. Therefore, various aspects of the present invention can be specifically implemented in the following forms, namely: complete hardware implementation, complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software implementations, which can be collectively referred to herein as "Circuit", "Module" or "System".

The electronic device 600 according to this embodiment of the present invention will be described below with reference to FIG. 7. The electronic device 600 shown in FIG. 7 is only an example, and should not bring any limitation to the function and application scope of the embodiment of the present invention.

As shown in FIG. 7, the electronic device 600 is represented in the form of a general-purpose computing device. The components of the electronic device 600 may include, but are not limited to: the aforementioned at least one processing unit 610, the aforementioned at least one storage unit 620, and a bus 630 connecting different system components (including the storage unit 620 and the processing unit 610).

Wherein, the storage unit stores program code, and the program code can be executed by the processing unit 610, so that the processing unit 610 executes the various exemplary methods described in the "exemplary method" section of this specification. Implementation steps. For example, the processing unit 610 may execute S202 as shown in FIG. 2, receive a random information request from a user, and send the random information request of the user and the public key of the user to the trusted execution chip; S204, receive The random information promise, the signature of the random information promise, and the ciphertext of the random information output by the trusted execution chip; wherein the random information is generated by the trusted execution chip based on the random information request of the user, and the random information The ciphertext of the information is generated by encrypting the random information with the public key of the user, the random information promise is generated according to the random information, and the signature of the random information promise is generated by using the private key pair of the trusted execution chip The random information promise is obtained by signing; S206, the random information promise, the signature of the random information promise, and the ciphertext of the random information are broadcast to the blockchain network to form a blockchain.

The storage unit 620 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 6201 and/or a cache storage unit 6202, and may further include a read-only storage unit (ROM) 6203.

The storage unit 620 may also include a program/utility tool 6204 having a set of (at least one) program module 6205. Such program module 6205 includes but is not limited to: an operating system, one or more application programs, other program modules, and program data, Each of these examples or some combination may include the implementation of a network environment.

The bus 630 may represent one or more of several types of bus structures, including a storage unit bus or a storage unit controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local area using any bus structure among multiple bus structures. bus.

The electronic device 600 may also communicate with one or more external devices (such as keyboards, pointing devices, Bluetooth devices, etc.), and may also communicate with one or more devices that enable a user to interact with the electronic device 600, and/or communicate with The electronic device 600 can communicate with any device (such as a router, modem, etc.) that communicates with one or more other computing devices. This communication can be performed through an input/output (I/O) interface 650. In addition, the electronic device 600 may also communicate with one or more networks (for example, a local area network (LAN), a wide area network (WAN), and/or a public network, such as the Internet) through the network adapter 660. As shown in the figure, the network adapter 660 communicates with other modules of the electronic device 600 through the bus 630. It should be understood that although not shown in the figure, other hardware and/or software modules can be used in conjunction with the electronic device 600, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives And data backup storage system, etc.

Through the description of the foregoing embodiments, those skilled in the art can easily understand that the exemplary embodiments described herein can be implemented by software, or can be implemented by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (can be a CD-ROM, U disk, mobile hard disk, etc.) or on the network , Including several instructions to make a computing device (which may be a personal computer, a server, a terminal device, or a network device, etc.) execute the method according to the embodiments of the present disclosure.

In the exemplary embodiment of the present disclosure, there is also provided a computer-readable storage medium on which is stored a program product capable of implementing the above method in this specification. In some possible implementation manners, various aspects of the present invention may also be implemented in the form of a program product, which includes program code, and when the program product runs on a terminal device, the program code is used to make the The terminal device executes the steps according to various exemplary embodiments of the present invention described in the above "Exemplary Method" section of this specification.

The program product for implementing the above method according to the embodiment of the present invention may adopt a portable compact disk read-only memory (CD-ROM) and include program code, and may run on a terminal device, such as a personal computer. However, the program product of the present invention is not limited thereto. In this document, the readable storage medium can be any tangible medium that contains or stores a program, and the program can be used by or in combination with an instruction execution system, device, or device.

The program product can use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or device, or a combination of any of the above. More specific examples (non-exhaustive list) of readable storage media include: electrical connections with one or more wires, portable disks, hard disks, random access memory (RAM), read only memory (ROM), erasable Type programmable read only memory (EPROM or flash memory), optical fiber, portable compact disk read only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the above.

The computer-readable signal medium may include a data signal propagated in baseband or as a part of a carrier wave, and readable program code is carried therein. This propagated data signal can take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. The readable signal medium may also be any readable medium other than a readable storage medium, and the readable medium may send, propagate, or transmit a program for use by or in combination with the instruction execution system, apparatus, or device.

The program code contained on the readable medium can be transmitted by any suitable medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

The program code used to perform the operations of the present invention can be written in any combination of one or more programming languages. The programming languages include object-oriented programming languages-such as Java, C++, etc., as well as conventional procedural programming languages. Programming language-such as "C" language or similar programming language. The program code can be executed entirely on the user's computing device, partly on the user's device, executed as an independent software package, partly on the user's computing device and partly executed on the remote computing device, or entirely on the remote computing device or server Executed on. In the case of a remote computing device, the remote computing device can be connected to a user computing device through any kind of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using Internet service providers) Business to connect via the Internet).

In addition, although the various steps of the method of the present disclosure are described in a specific order in the drawings, this does not require or imply that these steps must be performed in the specific order, or that all the steps shown must be performed to achieve the desired result. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step for execution, and/or one step may be decomposed into multiple steps for execution, etc.

Through the description of the foregoing embodiments, those skilled in the art can easily understand that the exemplary embodiments described herein can be implemented by software, or can be implemented by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (can be a CD-ROM, U disk, mobile hard disk, etc.) or on the network , Including several instructions to make a computing device (which may be a personal computer, a server, a mobile terminal, or a network device, etc.) execute the method according to the embodiment of the present disclosure.

Those skilled in the art will easily think of other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses, or adaptive changes of the present disclosure, which follow the general principles of the present disclosure and include common knowledge or conventional technical means in the technical field not disclosed in the present disclosure . The description and the embodiments are only regarded as exemplary, and the true scope and spirit of the present disclosure are pointed out by the appended claims.

Claims

A lottery processing method based on blockchain, which is characterized in that it includes:

The node receives the user's random information request, and sends the user's random information request and the user's public key to the trusted execution chip;

The node receives the random information promise, the signature of the random information promise, and the ciphertext of the random information output by the trusted execution chip; wherein the random information is generated by the trusted execution chip based on the user's random information request , The ciphertext of the random information is generated by encrypting the random information with the public key of the user, the random information promise is generated according to the random information, and the signature of the random information promise is generated by using the trusted execution chip The private key of is obtained by signing the random information promise;

The node broadcasts the random information promise, the signature of the random information promise, and the ciphertext of the random information to the blockchain network to form a blockchain.
The method according to claim 1, further comprising:

The user decrypts the ciphertext of the random information by using the private key to obtain the random information.
The method according to claim 1, further comprising:

Other users receive the random information provided by the user, and promise to verify the validity of the random information based on the random information.
The method according to claim 1, wherein after the node receives the random information promise, the signature of the random information promise, and the ciphertext of the random information output by the trusted execution chip, the method further comprises:

The node verifies the validity of the random information promise according to the public key of the trusted execution chip and the signature of the random information promise.
The method according to claim 1, wherein the random information request of the user is a digital signature of the random information request of the user;

After the node receives the random information request from the user, the method further includes:

The node verifies the validity of the digital signature of the random information request of the user.
The method according to claim 1, wherein the random information is generated by the trusted execution chip based on a private key of the trusted execution chip and a random information request of the user.
The method according to claim 1, wherein the public key sent by the user to the trusted execution chip is encrypted and transmitted by the public key of the trusted execution chip.
The method according to any one of claims 1 to 7, wherein the blockchain network includes multiple nodes, each node has a trusted execution chip, and the user's random information request is sent to The multiple nodes generate and output the random information promise, the signature of the random information promise, and the ciphertext of the random information by the trusted execution chips of the multiple nodes.
The method according to claim 8, further comprising:

The multiple trusted execution chips are initialized so that the multiple trusted execution chips have the same public key, private key, and seed.
The method according to claim 9, wherein the node broadcasting the random information promise, the signature of the random information promise, and the ciphertext of the random information to a blockchain network to form a blockchain comprises:

For the random information promise, the signature of the random information promise, and the ciphertext of the random information that the multiple nodes broadcast to the blockchain network, a blockchain is generated based on a blockchain consensus algorithm.
A trusted execution chip, characterized in that it comprises:

The receiving module is used to receive the random information request of the user and the public key of the user;

A random information generating module, configured to receive a random information request from the user, and generate random information according to the random information request of the user;

A promise generation module, used to generate a random information promise based on the random information;

A commitment signature generation module, configured to sign the random information commitment through the private key of the trusted execution chip to obtain a digital signature of the random information commitment;

A random ciphertext generating module, configured to generate a ciphertext of the random information by encrypting the random information with the public key of the user;

The output module is used to output the random information promise, the signature of the random information promise, and the ciphertext of the random information.
The trusted execution chip according to claim 11, wherein the random information generation module generates the random information based on a private key of the trusted execution chip and a random information request of the user.
A block chain network node, characterized by comprising the trusted execution chip according to claim 11 or 12, wherein the block chain network node receives a user's random information request, and transfers the user's random information The request and the public key of the user are sent to the trusted execution chip, and the random information promise, the signature of the random information promise and the ciphertext of the random information output by the trusted execution chip are received, and the random information promises, random information The signature of the information promise and the ciphertext of the random information are broadcast to the blockchain network to form a blockchain.
A computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the blockchain-based lottery processing method according to any one of claims 1 to 10 when the computer program is executed by a processor.
An electronic device, characterized in that it comprises:

Processor; and

A memory for storing executable instructions of the processor;

Wherein, the processor is configured to execute the blockchain-based lottery processing method according to any one of claims 1 to 10 by executing the executable instructions.