WO2021032196A1 - Blockchain-based multi-stage signing method, device, computer apparatus, and storage medium - Google Patents

Abstract

A blockchain-based multi-stage signing method, a device, an apparatus, and a medium. The blockchain-based multi-stage signing method comprises the following steps: receiving a transaction sent by a transaction party, the transaction carrying identity authentication information of the transaction party, and the identity authentication information comprising a first signature; acquiring a transaction certificate corresponding to the transaction, sending the transaction certificate to a blockchain node, signing the transaction according to the transaction certificate to obtain a second signature, and sending the transaction carrying the second signature to a blockchain node; and the blockchain node authenticating the second signature of the transaction and the identity authentication information, and storing the transaction to a blockchain if the authentication succeeds. The invention realizes traceability of an entire transaction forwarding link by means of multi-stage signing, thereby enhancing the overall security of transaction links, and improving the transaction traceability mechanism.

Description

Block chain-based multi-level signature method, device, computer equipment and storage medium

Related application

This application requires the application on August 21, 2019, the application number is 201910772495.2, the title of the invention is "a configuration block-based blockchain multi-level signature method" and the application on September 3, 2019, the application number is 201910827936.4 , The priority of the Chinese patent application with the title of "A multi-level signature method with anonymity for alliance blockchain", the entire content of which is incorporated in this application by reference.

Technical field

This application relates to the field of blockchain technology, and specifically to blockchain-based multi-level signature methods, devices, equipment and media.

Background technique

Blockchain technology. Blockchain is a new type of decentralized protocol that can safely store digital currency transactions or other data, and information cannot be forged and tampered with. The transaction confirmation on the blockchain is completed by all nodes on the blockchain, and its consistency is guaranteed by the consensus algorithm. By maintaining the same ledger together by all nodes, it can be ensured that the information in the blockchain cannot be tampered with, and the integrity of the data can still be maintained even when a node is doing evil.

At present, whether it is a public chain or a consortium chain, there is only a first-level signature, that is, the signature of the transaction sender. As to which end the transaction is sent to the blockchain platform, there is no relevant technical support. The traditional alliance blockchain mainly uses the public key infrastructure (Public Key Infrastructure, PKI) PKI system to control access. The traditional PKI system generally uses certificates to control access and uses certificates to represent user identities. For example, Hyperleger Fabric uses a centralized The CA server is responsible for the authentication of the identity and the issuance and control of the certificate. The corresponding certificate is used to represent the identity of the client and to control the client connection. The use of certificates to identify individuals makes it impossible to trace the source of signatures. For example, existing institutions A and B, user a of institution A, user b of institution B, if institution A gets the public and private keys of user b of institution B to initiate a transaction, then it cannot be traced back to the fact that the transaction was actually issued by institution A .

Summary of the invention

In order to overcome the deficiencies of the prior art, the purpose of this application is to provide a method, device, equipment and medium for multi-level signature based on blockchain.

According to the first aspect of the present application, there is provided a blockchain-based multi-level signature method, the method comprising: receiving a transaction sent by a transaction party, wherein the transaction carries identity verification information of the transaction party , The identity verification information includes a first signature; obtaining a transaction certificate corresponding to the transaction and sending the transaction certificate to a blockchain node, wherein the blockchain node agrees on the transaction certificate; The transaction certificate signs the transaction to obtain a second signature, and sends the transaction with the second signature to the blockchain node, where the blockchain node is The second signature and identity verification information are verified, and if the verification is successful, the transaction is stored in the blockchain.

In some of the embodiments, a transaction certificate request is constructed, and the transaction certificate request includes a request body, a request body signature, and a client certificate, wherein the client certificate is the client when the verification of the first signature is successful The request body signature is generated by signing the request body with the private key of the client certificate; verify the request body signature and the client certificate, and if the verification is successful, parse the request And generate the transaction certificate according to the temporary public key in the body, wherein the temporary public key is generated by the transaction party.

According to the second aspect of this application, a blockchain-based multi-level signature method is provided. The method includes: receiving a transaction certificate sent by a service party node of an institution, and passing a consensus mechanism on all nodes of the blockchain Synchronize the transaction certificate, wherein the transaction certificate is generated after the institution server node obtains the transaction with the transaction party identity verification information; the receiving institution server node sends the multi-level signature The transaction, wherein the multi-level signature includes the identity verification information of the transaction party and the signature of the institution service party node on the transaction according to the transaction certificate; verifying the multi-level signature of the transaction , In the case of successful verification, store the transaction on the blockchain.

In some of the embodiments, receiving the transaction certificate sent by the institution server node, and synchronizing the transaction certificate through the consensus mechanism on the entire network nodes of the blockchain includes: receiving the transaction certificate sent by the institution server node, The transaction certificate is stored on the configuration block chain, and the certificates are synchronized through the consensus mechanism on the entire network nodes of the block chain.

In some of the embodiments, the performing signature verification on the multi-level signature of the transaction includes: obtaining the transaction certificate from the blockchain; The signature is verified. After the verification is passed, the identity verification information of the transaction party is verified. After the verification is passed, the transaction is stored on the blockchain, and the entire network updates the transaction synchronously. Otherwise, the transaction is rejected.

According to a third aspect of the present application, there is provided a blockchain-based multi-level signature method, the method includes: an institutional service party receives a transaction sent by a transaction party, wherein the transaction carries the transaction party’s Identity verification information, the identity verification information includes a first signature; the agency service party obtains the transaction certificate corresponding to the transaction and sends the transaction certificate to the blockchain node, where the The transaction certificate carries out a consensus; the agency service party signs the transaction according to the transaction certificate to obtain a second signature, and sends the transaction with the identity verification information and the second signature to the district Block chain node; the block chain node receives the transaction with the multi-level signature sent by the agency server node, verifies the multi-level signature of the transaction, and in the case of successful verification, the The transaction is stored on the blockchain, where the multi-level signature includes the first signature and the second signature.

In some of the embodiments, the consensus on the transaction certificate on the blockchain platform includes: storing the transaction certificate on the configuration blockchain, and adopting a consensus mechanism on the entire network nodes of the blockchain Synchronize the certificate.

In some of the embodiments, before the institution service party receives the transaction sent by the transaction party, the method includes: the transaction party signs the transaction through the transaction party's private key to obtain a first signature, which will carry the The first signed transaction is sent to the agency service party.

In some of the embodiments, obtaining the transaction certificate corresponding to the transaction by the institution service party includes: the client of the institution service party generates a temporary public key and a temporary private key pair, and sends the transaction to the blockchain node A certificate request, the transaction certificate request includes a request body, a request body signature, and a client certificate corresponding to the client; the blockchain node verifies the request body signature and the client certificate, and when the verification is successful In this case, the temporary public key in the request body is parsed, and the transaction certificate is generated according to the temporary public key, and the agency service party obtains the transaction certificate.

In some of the embodiments, after the institution service party receives the transaction sent by the transaction party, the method includes: the blockchain node verifies the first signature, verifies the private key type of the transaction party, and When the transaction party private key type is ECC, the client certificate and the client certificate private key are generated according to the transaction party public key, and the client certificate and the client certificate private key are sent to the Party to the transaction.

In some of the embodiments, the transaction party public key and the transaction party private key are generated by an elliptic curve digital signature algorithm, and the hash value of the transaction party public key is the account address of the transaction party.

According to a fourth aspect of the present invention, there is provided a blockchain multi-level signature method based on configuration blocks. The method includes: a transaction sender performs a first-level signature: before a transaction is sent to the blockchain network, The transaction sender digitally signs with its own private key, and forwards the transaction with the sender's digital signature to the node of the service provider; the service provider obtains the certificate and stores it in the configuration blockchain: the service provider receives the pen After the transaction, obtain the corresponding certificate and send the certificate information to the blockchain node. The blockchain node stores the certificate on the configuration blockchain and synchronizes the certificate information through the consensus mechanism on the entire network node; used by the agency service party The certificate performs the secondary signature, and the agency service party performs a secondary signature on the transaction, and forwards the transaction and the certificate with the two-level signature to the blockchain node; the blockchain node performs the secondary verification and signs and transactions On the chain: After the blockchain node receives the transaction and certificate with the two-level signature, it will perform the signature verification of the agency service party; after the verification is passed, it will perform the signature verification of the transaction sender and the first-level signature of the transaction sender After the verification is passed, the transaction is stored on the blockchain, and the entire network updates the transaction synchronously, otherwise the transaction is refused to be uploaded to the chain.

In some of the embodiments, the corresponding certificate is obtained in step 2 to perform the second-level signature, and the certificate is stored in the configuration blockchain.

In some of these embodiments, the certificate is stored in the configuration block chain so that the certificate is used to verify the signature of the agency service party, and the agency forwarder who knows the transaction; the sender signs the transaction to know the sender of the transaction.

According to a fifth aspect of the present application, there is provided a blockchain-based multi-level signature device, the device includes an institutional service party, the institution service party is used to receive a transaction sent by the transaction party, and obtain a transaction with the transaction Corresponding transaction certificate and send the transaction certificate to the blockchain node, sign the transaction according to the transaction certificate to obtain a second signature, and send the transaction with the second signature to the blockchain Node, wherein the transaction carries identity verification information of the transaction party, the identity verification information includes a first signature, the blockchain node agrees on the transaction certificate, and the blockchain node The second signature and identity verification information of the transaction are verified, and the transaction is stored in the blockchain if the verification is successful.

According to a sixth aspect of the present application, there is provided a blockchain-based multi-level signature device, the device includes a blockchain node, and the blockchain node is used to receive a transaction certificate sent by an agency service party node, And synchronize the transaction certificate through the consensus mechanism on the entire network nodes of the blockchain, receive the transaction with the multi-level signature sent by the service side node of the institution, and verify the multi-level signature of the transaction, In the case of successful verification, the transaction is stored on the blockchain, where the transaction certificate is generated after the agency service node obtains the transaction with the identity verification information of the transaction party, and the multi-level The signature includes the identity verification information of the transaction party and the signature performed by the agency server node on the transaction according to the transaction certificate.

According to a seventh aspect of the present application, there is provided a blockchain-based multi-level signature device. The device includes an institutional service party and a blockchain node. The institution service party receives a transaction sent by a transaction party, wherein, The transaction carries the identity verification information of the transaction party; the institutional service party obtains the transaction certificate corresponding to the transaction and sends the transaction certificate to the blockchain node, where Consensus on the transaction certificate; the agency service party signs the transaction according to the transaction certificate to obtain a second signature, and sends the transaction with the identity verification information and the second signature to the office The blockchain node; the blockchain node receives the transaction with a multi-level signature sent by the agency server node, verifies the multi-level signature of the transaction, and in the case of successful verification, will The transaction is stored on the blockchain, wherein the multi-level signature includes the first signature and the second signature.

According to the eighth aspect of the present application, there is provided a block chain multi-level signature device based on configuration blocks. The device includes a transaction sender, an institution service party and a block chain node, and the transaction sender performs a first-level signature : Before a transaction is sent to the blockchain network, the sender of the transaction digitally signs it with its own private key, and forwards the transaction with the sender's digital signature to the node of the service provider; the service provider of the institution obtains the certificate and stores it in Configure blockchain: After receiving the transaction, the agency service party obtains the corresponding certificate, sends the certificate information to the blockchain node, and the blockchain node stores the certificate on the configuration blockchain, and consensus is reached on the entire network nodes The mechanism performs full synchronization of certificate information; the agency service party uses the certificate to perform the second-level signature, and the agency service party second-signs the transaction, and forwards the transaction and the certificate with the two-level signature to the blockchain node; block The chain node performs two-level verification and uploads the signature and transaction to the chain: After the blockchain node receives the transaction and certificate with the two-level signature, it performs the signature verification of the agency service party; after the verification is passed, the transaction is sent The signature verification of the party, after the transaction sender’s signature verification is passed, the transaction is stored on the blockchain and the entire network updates the transaction synchronously, otherwise the transaction is refused to be uploaded to the chain.

According to a ninth aspect of the present application, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and capable of running on the processor. The processor implements the above-mentioned Configure the steps of the block chain multi-level signature method.

According to a tenth aspect of the present application, there is provided a computer-readable storage medium on which a computer program is stored, which, when executed by a processor, implements the above-mentioned configuration block-based blockchain multi-level signature method A step of.

The above-mentioned blockchain-based multi-level signature method, device, equipment and medium receive the transaction sent by the transaction party, obtain the transaction certificate corresponding to the transaction and send the transaction certificate to the blockchain node, and perform the transaction according to the transaction certificate The signature obtains a multi-level signature, and the transaction with the multi-level signature is sent to the blockchain node. The multi-level signature can realize the traceability of the whole chain of transaction forwarding, strengthen the security of the entire transaction link, and improve the transaction traceability mechanism.

Description of the drawings

In order to better describe and illustrate the embodiments and/or examples of the inventions disclosed herein, one or more drawings may be referred to. The additional details or examples used to describe the drawings should not be considered as limiting the scope of any of the disclosed inventions, the currently described embodiments and/or examples, and the best mode of these inventions currently understood.

Fig. 1 is a flowchart of a blockchain-based multi-level signature method according to an embodiment of the present application.

Fig. 2 is a flowchart of a blockchain-based multi-level signature method according to another embodiment of the present application.

Fig. 3 is a flowchart of a blockchain-based multi-level signature method according to another embodiment of the present application.

Figure 4 is a schematic diagram of a blockchain-based multi-level signature method according to an embodiment of the present application.

Fig. 5 is a schematic diagram of a first-level signature in a blockchain-based multi-level signature method according to an embodiment of the present application.

Fig. 6 is a schematic diagram of a blockchain-based multi-level signature method according to an embodiment of the present application.

detailed description

In order to make the purpose, technical solutions, and advantages of this application clearer, the following describes and illustrates this application with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the application, and are not used to limit the application. Based on the embodiments provided in this application, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this application.

Obviously, the drawings in the following description are only some examples or embodiments of the application. For those of ordinary skill in the art, without creative work, the application can also be applied to the application according to these drawings. Other similar scenarios. In addition, it is also understandable that although the efforts made in this development process may be complicated and lengthy, for those of ordinary skill in the art related to the content disclosed in this application, the technology disclosed in this application Some design, manufacturing, or production changes based on the content are just conventional technical means, and should not be understood that the content disclosed in this application is insufficient.

The reference to "embodiments" in this application means that a specific feature, structure or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. Those of ordinary skill in the art understand explicitly and implicitly that the embodiments described in this application can be combined with other embodiments without conflict.

Unless otherwise defined, the technical terms or scientific terms involved in this application shall have the usual meanings understood by those with general skills in the technical field to which this application belongs. The terms "a", "an", "one", "the" and other similar words involved in this application do not mean a quantitative limit, and may mean a singular or plural number. The terms "include", "include", "have" and any of their variations involved in this application are intended to cover non-exclusive inclusion; for example, a process, method, system, product or product that includes a series of steps or modules (units) The equipment is not limited to the listed steps or units, but may further include unlisted steps or units, or may further include other steps or units inherent to these processes, methods, products, or equipment. The terms "connected", "connected", "coupled" and the like mentioned in this application are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. The "plurality" referred to in this application refers to two or more. "And/or" describes the association relationship of the associated objects, which means that there can be three kinds of relationships. For example, "A and/or B" can mean: A alone exists, A and B exist at the same time, and B exists alone. The character "/" generally indicates that the associated objects are in an "or" relationship. The terms "first", "second", "third", etc. involved in this application only distinguish similar objects, and do not represent a specific order for objects.

In an embodiment, FIG. 1 is a flowchart of a blockchain-based multi-level signature method according to an embodiment of the present application. As shown in FIG. 1, the method includes the following steps: Step S110, the institution service party receives the transaction The transaction sent by the party. Wherein, the transaction carries the identity verification information of the transaction party, and the identity verification information includes the first signature.

In step S120, the institution service party obtains the transaction certificate corresponding to the transaction and sends the transaction certificate to the blockchain node. Among them, the blockchain nodes agree on the transaction certificate.

In step S130, the agency service party signs the transaction according to the transaction certificate to obtain a second signature, and sends the transaction with the second signature to the blockchain node. Among them, the blockchain node verifies the second signature of the transaction and the identity verification information, and stores the transaction in the blockchain when the verification is successful.

In step S110 to step S130, after receiving the transaction sent by the transaction sender, the agency service party obtains the transaction certificate corresponding to the transaction. The transaction certificate can be a certificate issued by a certification authority or corresponding to the agency service party The node generates a transaction certificate through transaction information according to a preset smart contract. The institutional service party sends the transaction certificate to the blockchain node, and the transaction certificate is agreed upon through the blockchain node. In addition, the institutional service party signs the transaction according to the transaction certificate to obtain a second signature, and sends the transaction with the second signature to the blockchain node. It should be noted that in actual application scenarios, as the transaction continues to flow, the transaction not only includes the first signature and the second signature, but can also include multi-level signatures. At the same time, each node in the blockchain can obtain The transaction certificate is used to verify the multi-level signature in the transaction through the transaction certificate to realize the full-chain traceability of the transaction.

In some of the embodiments, in the case that the institution service party includes an institution service platform and a blockchain node corresponding to the institution service party platform, the method for obtaining a transaction certificate corresponding to the transaction includes: the institution service party constructs a transaction certificate request, The transaction certificate request includes the request body, the request body signature and the client certificate; the blockchain node verifies the request body signature and the client certificate in the transaction certificate request, and in the case of successful verification, parses the temporary public key in the request body, And generate a transaction certificate based on the temporary public key. Among them, the temporary public key is generated by the transaction party, the above-mentioned client is the client of the agency service party, and the request body signature is generated by signing the request body by the private key of the client certificate. This embodiment provides a method for generating transaction certificates, so that there are unified transaction certificate generation rules on the blockchain, which can make transaction traceability more accurate and efficient.

According to another aspect of the present application, FIG. 2 is a flowchart of a blockchain-based multi-level signature method according to another embodiment of the present application. As shown in FIG. 2, a blockchain-based multi-level signature is provided Method, the method includes the following steps: Step S210, the blockchain node receives the transaction certificate sent by the agency server node, and synchronizes the transaction certificate through the consensus mechanism on the entire network nodes of the blockchain. Among them, the transaction certificate is generated after the service party node of the institution obtains the transaction with the identity verification information of the transaction party.

In step S220, the blockchain node receives the transaction with the multi-level signature sent by the institution server node. Wherein, the multi-level signature includes the identity verification information of the transaction party and the signature of the transaction performed by the institution server node according to the transaction certificate.

Step S230, the blockchain node verifies the multi-level signature of the transaction, and if the verification is successful, the transaction is stored on the blockchain.

Through step S210 to step S230, the blockchain node stores both the transaction certificate and the transaction on the blockchain, and verifies the multi-level signature in the transaction through the transaction certificate, so as to realize the full-chain traceability of the transaction.

In some of the embodiments, verifying the multi-level signature of the transaction includes verifying the second signature, and if the second signature verification is passed, then verifying the identity verification information of the transaction sender. To verify the multi-level signature layer by layer, the signature verification of the agency service party is performed first, and then the signature verification of the transaction party is performed. Optionally, in the case where the transaction includes a multi-level signature, the signature verification is performed in the order of the post-signature verification first. This makes the verification more accurate and easier to trace.

In some of these embodiments, the blockchain node stores the transaction certificate on the configuration blockchain, and synchronizes the certificate through the consensus mechanism on the entire network of the blockchain, and stores the transaction certificate in a specific blockchain For example, one blockchain is used to store transactions, and the other is dedicated to storing transaction certificates. The process of obtaining certificates during the verification process will be more efficient, and the reliability of transaction certificates will be stronger.

In some of the embodiments, performing signature verification on the multi-level signature of the transaction includes: obtaining a transaction certificate from the blockchain, and verifying the signature of the agency server node according to the transaction certificate. In this implementation, since each node in the blockchain can obtain the transaction certificate, any node on the blockchain can verify the multi-level signature in the transaction when the transaction certificate is obtained.

According to another aspect of the present application, FIG. 3 is a flowchart of a blockchain-based multi-level signature method according to another embodiment of the present application. As shown in FIG. 3, the method includes: step S310, the institution service party receives the transaction A transaction sent by a party, where the transaction carries identity verification information of the transaction party, and the identity verification information includes the first signature.

In step S320, the service party of the institution obtains the transaction certificate corresponding to the transaction and sends the transaction certificate to the blockchain node, where the transaction certificate is agreed upon.

In step S330, the agency service party signs the transaction according to the transaction certificate to obtain a second signature, and sends the transaction with the identity verification information and the second signature to the blockchain node.

In step S340, the blockchain node receives the transaction with the multi-level signature sent by the agency server node, verifies the multi-level signature of the transaction, and stores the transaction on the blockchain if the verification is successful. Among them, the multi-level signature includes the first signature and the second signature. In this embodiment, the institutional service party receives the transaction sent by the transaction party, obtains the transaction certificate corresponding to the transaction, sends the transaction certificate to the blockchain node, and signs the transaction according to the transaction certificate to obtain a multi-level signature, which will carry multiple signatures. Level-signatured transactions are sent to blockchain nodes, and the full-chain traceability of transaction forwarding can be realized through multi-level signatures, which strengthens the security of the entire transaction link and improves the transaction traceability mechanism.

In some of these embodiments, the transaction certificate is stored on the configuration blockchain, and the certificates are synchronized through the consensus mechanism on the entire network nodes of the blockchain, and the transaction certificate is stored in a specific blockchain, such as a block. The block chain is used to store transactions, and the other is dedicated to storing transaction certificates. The process of obtaining certificates in the verification process will be more efficient and make the transaction certificates more reliable.

In some of the embodiments, performing signature verification on the multi-level signature of the transaction includes: obtaining a transaction certificate from the blockchain, and verifying the signature of the agency server node according to the transaction certificate. In this implementation, since each node in the blockchain can obtain the transaction certificate, any node on the blockchain can verify the multi-level signature in the transaction when the transaction certificate is obtained.

In some of these embodiments, before the institution service party receives the transaction sent by the transaction party, the transaction party signs the transaction with the transaction party's private key to obtain the first signature, and sends the transaction with the first signature to the institution service party.

In some of the embodiments, the client of the agency service party generates a temporary public key and a temporary private key pair, and sends a transaction certificate request to the blockchain node. The transaction certificate request includes the request body, the request body signature, and the client corresponding to the client End certificate; the blockchain node verifies the signature of the request body and the client certificate, and in the case of successful verification, parses the temporary public key in the request body, and generates the transaction certificate according to the temporary public key, and the agency service party obtains the transaction certificate. This implementation provides a specific process for generating transaction certificates, so that there are unified transaction certificate generation rules on the blockchain, which can make transaction traceability more accurate and efficient.

In some of these embodiments, after the institutional service party receives the transaction sent by the transaction party, the blockchain node verifies the first signature and verifies the transaction party’s private key type. In the case that the transaction party’s private key type is ECC, according to the transaction party’s public key type The key generates the client certificate and client certificate private key, and sends the client certificate and client certificate private key to the transaction party. In this embodiment, a client certificate generation method is provided, which is used to authenticate the client of the agency service party, thereby making the blockchain-based multi-level signature method more reliable.

Another aspect of the fundamental application. Figure 4 is a schematic diagram of a blockchain-based multi-level signature method according to an embodiment of this application. As shown in Figure 4, a blockchain multi-level signature based on configuration blocks is provided. The method specifically includes the following steps: Step 1, the transaction sender performs a primary signature: Before a transaction is sent to the blockchain network, the transaction sender uses its own private key to digitally sign the transaction with the sender’s digital signature Forward to the node of the service provider. This step confirms the rights of the transaction through cryptographic means, and proves that the transaction is indeed sent by the sender, which can effectively prevent user denial. Step 2: The institution service party obtains the certificate and stores it in the configuration blockchain: After the institution service party accepts the transaction, it obtains the corresponding certificate, performs the second-level (institutional level) signature, and sends the certificate information to the blockchain node , The blockchain node stores the certificate on the configuration blockchain, and all nodes in the whole network synchronize the certificate information through a consensus mechanism to realize the certificate on the chain. The server certificate is stored in the configuration block chain, and is used for subsequent signature verification of the agency server. The certificate is on the chain, using the non-tamperable feature of the blockchain, which has the effect of notarizing the identity of the organization. The subsequent use of the certificate to verify the signature is more convincing and irresistible. Step 3: The institution service party uses the certificate to perform the secondary signature: the institution service party performs a secondary signature on the transaction, and forwards the transaction and the certificate with the two-level signature to the blockchain node. The second signature effectively records the forwarding path of the transaction and proves that the transaction is forwarded on the chain by the corresponding agency service party, which can effectively track the entire transaction process. Step 4: The blockchain node performs two-level verification and uploads the signature and transaction to the chain: After the blockchain node receives the transaction and certificate with the two-level signature, it performs the signature verification of the agency service party; after the verification is passed , And then verify the signature of the transaction sender, otherwise the transaction will be rejected; after the transaction sender’s signature verification is passed, the transaction will be stored on the blockchain and the entire network will update the transaction synchronously; otherwise, the transaction will be rejected.

The on-chain storage of transactions with multi-level signatures makes use of the non-tamperable characteristics of the blockchain to make the entire transaction chain information more reliable and credible. When users inquire about transactions, they will configure the certificate of the blockchain to verify the signature of the agency service party, and the agency forwarder who knows the transaction; through the sender's signature transaction, know the sender of the transaction, so that the multi-level signature of the transaction can be traced.

Figure 5 is a schematic diagram of the first level signature in the blockchain-based multi-level signature method according to an embodiment of the present application. As shown in Figure 5, the user initiates a transaction to the blockchain node after signing, and the node performs a consensus after passing the verification Put the transaction on the chain, the multi-level signature method of this application is compared with the original first-level signature process, by adding the signature of the service node that forwards the transaction in the transaction, and storing the service node certificate in the configuration blockchain for signature verification, A complete record of the forwarding path of the transaction is realized to ensure the traceability of the entire transaction link, especially in the alliance chain scenario, which can effectively record the forwarding service organization of the transaction, prevent the institution from sending malicious transactions, and strengthen the security of the entire transaction link Improve the transaction traceability mechanism.

In some embodiments, when the institutional service party includes a client, FIG. 6 is a schematic diagram of a blockchain-based multi-level signature method according to an embodiment of the present application. As shown in FIG. 6, the method includes the following steps: One: The client user is the transaction party requesting the client certificate. The client user sends a request to the owner of the blockchain node to obtain the client certificate. The content of the request includes the public key generated by the client user and the corresponding private key. The signature of the public key; the private key is only properly kept by the user. Step 2: The owner of the blockchain node verifies the client certificate request. First, it verifies the validity of the signature, and secondly verifies whether the private key type is ECC. After the verification is passed, the owner of the blockchain node generates a client certificate and private key for the public key. Key and return it to the requesting client user. Client request transaction certificate: Before each transaction, the client user first requests a transaction certificate, first generates a pair of temporary public and private key pairs to send a transaction certificate request to the blockchain node owner. The content of the transaction certificate request includes the transaction certificate The request body, the signature of the client certificate private key to the request body, and the client certificate, where the request body is the main content of the transaction, and other accompanying information is used to complete the corresponding identity certification based on the cryptographic algorithm. Step 4: The owner of the blockchain node verifies the transaction certificate request: it specifically includes verifying the legitimacy of the signature and verifying the client certificate. After the verification is passed, the blockchain node parses out the temporary public key in the transaction certificate request and is the public key Generate the corresponding transaction certificate and return it to the requesting client. In addition, the transaction certificate will also be used for consensus on the blockchain through blockchain nodes. Step 5, initiating a transaction: the client user initiates a transaction after obtaining the transaction certificate, specifically: first generate a transaction, then the client user uses the private key generated by the client to sign the transaction to obtain the signed transaction, and use the transaction to construct a request , And then use the transaction certificate to sign the request, and then attach the transaction certificate to send the corresponding request body to the blockchain node. The blockchain node stores the transaction information and verifies the transaction, and then synchronizes other transactions except the client transaction certificate signature Information to all nodes. The blockchain node feeds back the verification result to the user. If the verification is successful, the transaction is successful; if the verification fails, it indicates that the transaction failed. The signature method of this application adds an extension field to the transaction to store the signature of the channel, that is, the client transaction certificate signature, and the consensus on the blockchain is used to realize the traceability of the transaction forwarding through the multi-level signature and strengthen the entire transaction The security of the link improves the transaction traceability mechanism.

According to another aspect of the present application, a multi-level signature device based on blockchain is provided. The device includes an institutional service party, which is used to receive a transaction sent by a transaction party, obtain a transaction certificate corresponding to the transaction, and The transaction certificate is sent to the blockchain node, the transaction is signed according to the transaction certificate to obtain the second signature, and the transaction with the second signature is sent to the blockchain node, where the transaction carries the identity verification information of the transaction party, and identity verification The information includes the first signature, the blockchain node agrees on the transaction certificate, the blockchain node verifies the second signature of the transaction and the identity verification information, and stores the transaction in the blockchain if the verification is successful. The above-mentioned blockchain-based multi-level signature device signs the transaction according to the transaction certificate to obtain a multi-level signature, and sends the transaction with the multi-level signature to the blockchain node, and the transaction forwarding can be traced through the multi-level signature. , Strengthen the security of the entire transaction link and improve the transaction traceability mechanism.

According to another aspect of the present application, a multi-level signature device based on a blockchain, the device includes a blockchain node, and the blockchain node is used to receive a transaction certificate sent by an institution's server node, and is used in the entire blockchain. The network node synchronizes the transaction certificate through the consensus mechanism, receives the transaction with the multi-level signature sent by the agency service node, verifies the multi-level signature of the transaction, and stores the transaction on the blockchain when the verification is successful , Where the transaction certificate is generated after the agency service party node obtains the transaction with the transaction party identity verification information, and the multi-level signature includes the transaction party’s identity verification information and the agency service party node’s signature on the transaction based on the transaction certificate. The above-mentioned blockchain-based multi-level signature device signs the transaction according to the transaction certificate to obtain a multi-level signature, and sends the transaction with the multi-level signature to the blockchain node, and the transaction forwarding can be traced through the multi-level signature. , Strengthen the security of the entire transaction link and improve the transaction traceability mechanism.

According to another aspect of the present application, a multi-level signature device based on blockchain is provided. The device includes an institution service party and a block chain node. The institution service party receives a transaction sent by a transaction party, wherein the transaction has a transaction party. The identity verification information includes the first signature; the agency service party obtains the transaction certificate corresponding to the transaction and sends the transaction certificate to the blockchain node, and the transaction certificate is agreed upon at the blockchain node; the agency service party according to the transaction The certificate signs the transaction to obtain the second signature, and sends the transaction with the identity verification information and the second signature to the blockchain node; the blockchain node receives the transaction with the multi-level signature sent by the agency server node, and then the transaction If the verification is successful, the transaction is stored on the blockchain, where the multi-level signature includes the first signature and the second signature. The above-mentioned blockchain-based multi-level signature device signs the transaction according to the transaction certificate to obtain a multi-level signature, and sends the transaction with the multi-level signature to the blockchain node, and the transaction forwarding can be traced through the multi-level signature. , Strengthen the security of the entire transaction link and improve the transaction traceability mechanism.

According to another aspect of the present application, a block chain multi-level signature device based on configuration blocks is provided. The device includes a transaction sender, an institution service party, and a blockchain node. The transaction sender performs a first-level signature: Before the transaction is sent to the blockchain node, the sender of the transaction digitally signs it with its own private key, and forwards the transaction with the sender's digital signature to the node of the service provider; the service provider of the institution obtains the certificate and stores it in the configuration block Chain: After receiving the transaction, the institutional service party obtains the corresponding certificate, sends the certificate information to the blockchain node, and the blockchain node stores the certificate on the configuration blockchain, and performs the certificate through the consensus mechanism on the entire network node Full synchronization of information; the agency service party uses the certificate to perform the secondary signature, the agency service party performs the secondary signature on the transaction, and forwards the transaction and the certificate with the two-level signature to the blockchain node; the blockchain node performs Two-level verification and the signature and transaction on the chain: After the blockchain node receives the transaction and certificate with the two-level signature, it will verify the signature of the agency service party; after the verification is passed, the transaction sender's signature verification will be performed. After the transaction sender's signature is verified, the transaction is stored on the blockchain, and the entire network updates the transaction synchronously, otherwise the transaction is refused to be uploaded to the chain. The above-mentioned blockchain-based multi-level signature device signs the transaction according to the transaction certificate to obtain a multi-level signature, and sends the transaction with the multi-level signature to the blockchain node, and the transaction forwarding can be traced through the multi-level signature. , Strengthen the security of the entire transaction link and improve the transaction traceability mechanism.

According to another aspect of the present application, there is provided a computer device including a memory, a processor, and a computer program stored in the memory and capable of running on the processor. The processor implements the above-mentioned blockchain-based multiplexing when the computer program is executed. Level signature method. The above-mentioned multi-level signature computer equipment based on the block chain receives the transaction sent by the transaction party, obtains the transaction certificate corresponding to the transaction and sends the transaction certificate to the blockchain node, and signs the transaction according to the transaction certificate to obtain a multi-level signature. By sending transactions with multi-level signatures to blockchain nodes, the full-chain traceability of transaction forwarding can be realized through multi-level signatures, strengthening the security of the entire transaction link, and improving the transaction traceability mechanism.

According to another aspect of the present application, there is provided a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the above-mentioned blockchain-based multi-level signature method is realized. The above-mentioned block chain-based multi-level signature computer-readable storage medium receives the transaction sent by the transaction party, obtains the transaction certificate corresponding to the transaction, sends the transaction certificate to the blockchain node, and signs the transaction according to the transaction certificate. Multi-level signatures, which send transactions with multi-level signatures to blockchain nodes, can achieve full-chain traceability of transaction forwarding through multi-level signatures, strengthen the security of the entire transaction link, and improve the transaction traceability mechanism.

A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage. In the medium, when the computer program is executed, it may include the procedures of the above-mentioned method embodiments. Wherein, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and/or volatile memory. Non-volatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not a limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain Channel (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

The technical features of the above embodiments can be combined arbitrarily. In order to make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction between the combinations of these technical features, they should It is considered as the range described in this specification.

The above-mentioned embodiments only express several implementation manners of the present application, and the description is relatively specific and detailed, but it should not be understood as a limitation on the scope of the invention patent. It should be pointed out that for those of ordinary skill in the art, without departing from the concept of this application, several modifications and improvements can be made, and these all fall within the protection scope of this application. Therefore, the scope of protection of the patent of this application shall be subject to the appended claims.

Claims (20)

1. A blockchain-based multi-level signature method, characterized in that the method includes:

   Receiving a transaction sent by a transaction party, wherein the transaction carries identity verification information of the transaction party, and the identity verification information includes a first signature;

   Obtaining a transaction certificate corresponding to the transaction and sending the transaction certificate to a blockchain node, where the blockchain node agrees on the transaction certificate;

   Sign the transaction according to the transaction certificate to obtain a second signature, and send the transaction with the second signature to the blockchain node, where the blockchain node is in charge of the transaction. The second signature and identity verification information are verified, and if the verification is successful, the transaction is stored in the blockchain.
2. The method according to claim 1, wherein the method for obtaining a transaction certificate corresponding to the transaction comprises:

   Construct a transaction certificate request. The transaction certificate request includes a request body, a request body signature, and a client certificate, where the client certificate is a certificate obtained by the client when the verification of the first signature succeeds, so The request body signature is generated by signing the request body by the private key of the client certificate;

   The signature of the request body and the client certificate are verified, and if the verification is successful, the temporary public key in the request body is parsed, and the transaction certificate is generated according to the temporary public key, wherein the temporary public key The key is generated by the transaction party.
3. A blockchain-based multi-level signature method, characterized in that the method includes:

   Receive the transaction certificate sent by the institutional server node, and synchronize the transaction certificate through the consensus mechanism on the entire network nodes of the blockchain, where the transaction certificate is obtained by the institutional server node with the identity of the transaction party Generated after the transaction of verification information;

   Receive the transaction with a multi-level signature sent by an agency server node, wherein the multi-level signature includes the transaction party identity verification information and the agency server node performs the transaction on the transaction according to the transaction certificate signature;

   The multi-level signature of the transaction is verified, and if the verification is successful, the transaction is stored on the blockchain.
4. The method according to claim 3, characterized in that receiving the transaction certificate sent by the service party node of the institution, and synchronizing the transaction certificate through a consensus mechanism on the entire network nodes of the blockchain comprises:

   Receive the transaction certificate sent by the service party node of the institution, store the transaction certificate on the configuration blockchain, and synchronize the certificate through a consensus mechanism on all nodes of the blockchain.
5. The method according to claim 3, wherein said performing signature verification on said multi-level signature of said transaction comprises:

   Obtaining the transaction certificate from the blockchain;

   According to the transaction certificate, the signature of the service party node of the institution is verified. After the verification is passed, the identity verification information of the transaction sender is verified. After the verification is passed, the transaction is stored on the blockchain. The network updates the transaction synchronously, otherwise the transaction is refused to be uploaded to the chain.
6. A blockchain-based multi-level signature method, characterized in that the method includes:

   The institutional service party receives the transaction sent by the transaction party, wherein the transaction carries identity verification information of the transaction party, and the identity verification information includes a first signature;

   The institutional service party obtains a transaction certificate corresponding to the transaction and sends the transaction certificate to a blockchain node, where a consensus is reached on the transaction certificate;

   The agency service party signs the transaction according to the transaction certificate to obtain a second signature, and sends the transaction with the identity verification information and the second signature to the blockchain node;

   The blockchain node receives the transaction with a multi-level signature sent by the service party node of the organization, verifies the multi-level signature of the transaction, and stores the transaction in the area if the verification is successful. On a block chain, wherein the multi-level signature includes the first signature and the second signature.
7. The method according to claim 6, wherein the consensus on the transaction certificate on the blockchain platform comprises:

   The transaction certificate is stored on the configuration block chain, and the certificates are synchronized through the consensus mechanism on the entire network nodes of the block chain.
8. The method according to claim 6, characterized in that, before the service party of the institution receives the transaction sent by the transaction party, the method comprises:

   The transaction party signs the transaction using the transaction party's private key to obtain a first signature, and sends the transaction with the first signature to the institution service party.
9. The method according to claim 6, wherein the obtaining of the transaction certificate corresponding to the transaction by the service party of the institution comprises:

   The client of the agency service party generates a pair of a temporary public key and a temporary private key, and sends a transaction certificate request to the blockchain node. The transaction certificate request includes the request body, the request body signature, and the client Client certificate;

   The blockchain node verifies the signature of the request body and the client certificate, and in the case of successful verification, parses the temporary public key in the request body, and generates the transaction according to the temporary public key certificate;

   The service party of the institution obtains the transaction certificate.
10. The method according to claim 6, wherein after the service party of the institution receives the transaction sent by the transaction party, the method comprises:

    The blockchain node verifies the first signature, verifies the private key type of the transaction party, and in the case that the private key type of the transaction party is the ECC elliptic curve secret algorithm, generates the Client certificate and client certificate private key, and sending the client certificate and the client certificate private key to the transaction party.
11. The method according to claim 10, wherein the transaction party public key and the transaction party private key are generated by an elliptic curve digital signature algorithm, and the hash value of the transaction party public key is the transaction party’s Account address.
12. A blockchain multi-level signature method based on configuration blocks, characterized in that the method includes:

    The transaction sender performs primary signature: Before a transaction is sent to the blockchain network, the transaction sender digitally signs with its own private key, and forwards the transaction with the sender's digital signature to the node of the service provider;

    The institutional service party obtains the certificate and stores it on the configuration blockchain: After the institution service party accepts the transaction, it obtains the corresponding certificate, sends the certificate information to the blockchain node, and the blockchain node stores the certificate on the configuration blockchain , And perform full synchronization of certificate information through a consensus mechanism in the entire network nodes;

    The agency service party uses the certificate to perform the secondary signature, and the agency service party performs the secondary signature on the transaction, and forwards the transaction and the certificate with the two-level signature to the blockchain node;

    The blockchain node performs the second-level verification and uploads the signature and transaction to the chain: After the blockchain node receives the transaction and certificate with the two-level signature, it performs the signature verification of the agency service party; after the verification is passed, it is performed again The signature of the transaction sender is verified. After the transaction sender's signature verification is passed, the transaction is stored on the blockchain, and the entire network updates the transaction synchronously, otherwise the transaction is rejected on the chain.
13. The method according to claim 12, wherein the corresponding certificate is obtained in step 2 to perform the second-level signature, and the certificate is stored in the configuration blockchain.
14. The method according to claim 12, wherein the certificate is stored in the configuration block chain so as to use the certificate to verify the signature of the agency service party, know the agency forwarder of the transaction; and know the transaction sender by signing the transaction by the sender .
15. A block chain-based multi-level signature device, characterized in that the device includes an institutional service party,

    The institutional service party is used to receive the transaction sent by the transaction party, obtain the transaction certificate corresponding to the transaction and send the transaction certificate to the blockchain node, and sign the transaction according to the transaction certificate to obtain the second Signing, sending the transaction with the second signature to the blockchain node, wherein the transaction carries the identity verification information of the transaction party, the identity verification information includes the first signature, and the zone The block chain node performs a consensus on the transaction certificate, the block chain node verifies the second signature of the transaction and the identity verification information, and stores the transaction in the block chain if the verification is successful .
16. A block chain-based multi-level signature device, characterized in that the device includes a block chain node,

    The blockchain node is used to receive the transaction certificate sent by the agency server node, and synchronize the transaction certificate through the consensus mechanism on the entire network of the blockchain, and receive the multi-level signature sent by the agency server node The transaction, the multi-level signature of the transaction is verified, and in the case of a successful verification, the transaction is stored on the blockchain, wherein the transaction certificate is obtained by the institution server node Generated after the transaction with the identity verification information of the transaction party, the multi-level signature includes the identity verification information of the transaction party and the signature of the transaction by the agency service node according to the transaction certificate.
17. A block chain-based multi-level signature device, characterized in that the device includes an institution service party and a block chain node,

    The agency service party receives a transaction sent by a transaction party, wherein the transaction carries identity verification information of the transaction party, and the identity verification information includes a first signature;

    The institutional service party obtains a transaction certificate corresponding to the transaction and sends the transaction certificate to the blockchain node, and the transaction certificate is agreed upon at the blockchain node;

    The agency service party signs the transaction according to the transaction certificate to obtain a second signature, and sends the transaction with the identity verification information and the second signature to the blockchain node; The blockchain node receives the transaction with the multi-level signature sent by the agency service node, verifies the multi-level signature of the transaction, and stores the transaction in the blockchain if the verification is successful Above, wherein the multi-level signature includes the first signature and the second signature.
18. A block chain multi-level signature device based on configuration blocks, characterized in that the device includes a transaction sender, an institution service party and a block chain node,

    The transaction sender performs primary signature: Before a transaction is sent to the blockchain node, the transaction sender digitally signs with its own private key, and forwards the transaction with the sender's digital signature to the node of the service provider ；

    The institutional service party obtains the certificate and stores it on the configuration blockchain: After the institution service party accepts the transaction, it obtains the corresponding certificate, sends the certificate information to the blockchain node, and the blockchain node stores the certificate on the configuration blockchain , And perform full synchronization of certificate information through a consensus mechanism in the entire network nodes;

    The agency service party uses the certificate to perform the secondary signature, and the agency service party performs the secondary signature on the transaction, and forwards the transaction and the certificate with the two-level signature to the blockchain node;

    The blockchain node performs the second-level verification and uploads the signature and transaction to the chain: After the blockchain node receives the transaction and certificate with the two-level signature, it performs the signature verification of the agency service party; after the verification is passed, it is performed again The signature of the transaction sender is verified. After the transaction sender's signature verification is passed, the transaction is stored on the blockchain, and the entire network updates the transaction synchronously, otherwise the transaction is rejected on the chain.
19. A computer device, comprising a memory, a processor, and a computer program stored on the memory and running on the processor, wherein the processor implements any one of claims 1 to 18 when the computer program is executed The steps of the method.
20. A computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the steps of the method according to any one of claims 1 to 18 when the computer program is executed by a processor.

Images