WO2021046668A1

WO2021046668A1 - Blockchain system, information transmission method, system and apparatus, and computer medium

Info

Publication number: WO2021046668A1
Application number: PCT/CN2019/104853
Authority: WO
Inventors: 李武璐; 张骁; 辛佳骏; 陈磊
Original assignee: 深圳市网心科技有限公司
Priority date: 2019-09-09
Filing date: 2019-09-09
Publication date: 2021-03-18
Also published as: CN112789824B; CN112789824A

Abstract

A blockchain system, an information transmission method, system and apparatus, and a computer storage medium, wherein same are applied to a target blockchain node. The method comprises: acquiring a predetermined discrete cipher group generator and an encrypted group element, wherein the encrypted group element comprises a cipher group element obtained after an operation, based on a preset format, of a first random number and the discrete cipher group generator, and the first random number is a trapdoor generated and saved by a supervision node; and according to the preset format, processing, on the basis of the discrete cipher group generator and the encrypted group element, private data thereof, and publishing a corresponding processing result to a blockchain, such that the supervision node can supervise a target blockchain node and/or the private data on the basis of the processing result and the first random number. In the present application, a supervision node performs identity supervision and privacy data supervision on a target blockchain node by means of a discrete cipher group generator, an encrypted group element and a first random number.

Description

Block chain system and information transmission method, system, device, computer medium

Technical field

The present invention relates to the technical field of information security, in particular to a blockchain system and information transmission methods, systems, devices, and computer media.

Background technique

With the development of communication technology, users have higher requirements for the security and transmission of information. In this environment, blockchain gains users’ attention by virtue of its decentralized, non-tamperable, and traceable advantages. Pay attention. Blockchain is a new application mode of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, encryption algorithm, etc. It is an important concept of Bitcoin. Blockchain is essentially a decentralized The database, as the underlying technology of Bitcoin at the same time, is a series of data blocks related to the use of cryptographic methods. Each data block contains a batch of Bitcoin network transaction information to verify the validity of the information ( Anti-counterfeiting) and generate the next block. However, in the application process of the blockchain, in order to better hide the user’s private information, such as hiding the user’s transaction information in the blockchain, etc., blockchain systems such as Monero came into being, with the help of Monero. In this type of blockchain, other users can only know that a certain user has made a transaction, but cannot learn specific user information, so that criminals can conduct illegal transactions through the blockchain, reducing the supervision of the privacy protection blockchain system Sex.

In summary, how to improve the supervisability of the privacy protection blockchain system is a problem that needs to be solved urgently.

Summary of the invention

The main purpose of this application is to provide a blockchain system, information transmission method, system, device, and computer-readable storage medium, which aims to solve the technical problem of improving the supervisability of the blockchain system.

To achieve the above objective, the present application provides a blockchain information transmission method, which is applied to a target blockchain node in a blockchain system, the blockchain system further includes a supervisory node, and the method includes:

Obtain a predetermined discrete cipher group generator and an encrypted group element, where the encrypted group element includes a cipher group element obtained by calculating a first random number and the discrete cipher group generator based on a preset format, and the first The random number is a trapdoor generated and saved by the supervisory node;

According to the preset format, process its own private data based on the discrete cipher group generator and the encrypted group element, and publish the corresponding processing result to the blockchain, so that the supervisory node can Supervise the target blockchain node and/or the private data based on the processing result and the first random number.

Preferably, the discrete cipher group generator includes an elliptic curve group generator, and the encrypted group element includes an elliptic curve group element;

According to the preset format, process its own private data based on the discrete cipher group generator and the encryption group element, and publish the corresponding processing result to the blockchain, so that the supervision The node can supervise the target blockchain node and/or the private data based on the processing result and the first random number, including:

Generate a signature private key once, and generate and publish a signature public key based on the elliptic curve group element and the one-time signature private key according to the preset format;

Perform operations on the elliptic curve group generator and the one-time signature private key according to the preset format to obtain identity verification information, and publish the identity verification information to the blockchain so that the supervisory node can be based on The first random number, the identity verification information, and the one-time signature public key determine the sender of the target data.

Preferably, the blockchain system further includes a verification blockchain node, and after generating a signature public key based on the elliptic curve group element and the one-time signature private key according to the preset format and publishing it, include:

Generate a ring signature private key, and generate a traceable and linkable public key for traceable and linkable ring signatures based on the elliptic curve group generator, the elliptic curve group element, the ring signature private key, and the one-time signature private key ；

Obtain target data based on the traceable and linkable public key, the elliptic curve group generator, the elliptic curve group element, the ring signature private key, the one-time signature private key, and the pair of the one-time signature public key Performing a traceable and linkable ring signature on the target data to obtain a traceable and linkable ring signature result of the target data;

Publish the traceable and linkable ring signature result to the verification blockchain node, so that the verification blockchain node can verify the traceable and linkable ring signature result.

Preferably, said generating a traceable and linkable public key for traceability and linkability based on the elliptic curve group generator, the elliptic curve group element, the ring signature private key and the one-time signature private key includes:

According to the first calculation formula, the traceable and linkable ring signature is generated based on the elliptic curve group generator, the elliptic curve group element, the ring signature private key, and the one-time signature private key Public key

The first calculation formula includes:

Wherein, i represents the label of the target blockchain node; PK _i represents the traceable and linkable public key for the target blockchain node to sign the traceable and linkable ring; g represents the elliptic curve group generator ；

Represents the UPK generated last time; h represents the elliptic curve group element; x _i represents the ring signature private key of _{the target blockchain node; a i} represents the one-time signature private key of the target blockchain node key;

Represents the zero-knowledge proof result of the legitimacy of the traceable and linkable public key.

Preferably, based on the traceable and linkable public key, the elliptic curve group generator, the elliptic curve group element, the ring signature private key, the one-time signature private key, and the one-time signature public key Perform a traceable and linkable ring signature on the target data to obtain a traceable and linkable ring signature result of the data, including:

A preset number of other blockchain nodes are selected, and a ring signature public key is generated based on the public key of the other blockchain node and the public key of the target blockchain node through a second calculation formula, the preset number N-1, n is an integer greater than or equal to 2;

Perform a ring signature on the target data based on the ring signature public key and the ring signature private key through the third calculation formula to obtain a common ring signature result;

According to the fourth calculation formula, the ordinary ring signature result is signed once based on the one-time signature private key, the ring signature public key, and the one-time signature public key to obtain a signature result;

Using the ring signature public key, the target data, the ordinary ring signature result, and the one-time signature result as the traceable and linkable ring signature result;

The second calculation formula includes:

The third calculation formula includes:

A=SIG(x _i ,L,m);

The fourth calculation formula includes:

σ=OSIG(a _i ,SIG(x _i ,L,m),L,OPK);

Where, L represents the public key of the ring signature; when 1≤j≤n-1, and j≠i, x _j represents the ring signature private key of the other _{blockchain node, and a j} represents the other blockchain The one-time signature private key of the node; A represents the ordinary ring signature result; SIG represents the ring signature algorithm; m represents the target data; σ represents the one-time signature result; OSIG represents the one-time signature algorithm; OPK represents the one-time signature public key key.

Obtain the target value and generate a second random number;

Calculating the target value based on the elliptic curve group generator, the elliptic curve group element, and the second random number to obtain the commitment value;

Split the target value into sub-target values according to a preset split format, and split the second random number into sub-second random numbers corresponding to the sub-target value;

Calculate the first commitment value and second commitment value of each of the sub-target values and the corresponding sub-second random numbers based on the elliptic curve group generator and the elliptic curve group elements, and publish the first commitment value Commitment value

Based on the elliptic curve group elements, calculate and publish the numerical verification results of each of the sub-target values and the corresponding sub-second random numbers, so that the supervisory node can be based on the first commitment value and the numerical value. The verification result and the first random number determine the target value.

Preferably, after the calculation and publication of the numerical verification result of each of the sub-target values and the corresponding sub-second random numbers based on the elliptic curve group elements, the method further includes:

Calculating the sub-public key of each sub-target value based on the first commitment value, the second commitment value, and the numerical verification result of each of the sub-target values;

Calculating a sub-ring signature result of each of the sub-target values based on the commitment value, the sub-public key of each of the sub-target values, and the sub-second random number;

Taking the commitment value and all the sub-ring signature results as the verification result of the traceable interval of the target value;

Publish the verification result of the numerical traceable interval to the verification blockchain node, so that the verification blockchain node can verify the verification result of the numerical traceable interval and the numerical verification result, and pass the verification Afterwards, the result of the traceable interval of the numerical value is shown on the chain.

Preferably, the calculating the target value based on the elliptic curve group generator, the elliptic curve group element, and the second random number to obtain the commitment value includes:

Calculating the target value based on the elliptic curve group generator, the elliptic curve group element, and the second random number through a promise value calculation formula to obtain the promise value;

The commitment value calculation formula includes:

c=g ^y h ^b ;

Wherein, c represents the commitment value; y represents the second random number; b represents the target value.

Preferably, the splitting the target value into sub-target values according to a preset split format, and splitting the second random number into sub-second random numbers corresponding to the sub-target value, includes :

Split the target value into the sub-target value by a first split formula;

Split the second random number into the sub-second random number corresponding to the sub-target value by using a second split formula;

The first splitting formula includes:

b=b ₀ +…+2 ⁱ b _i +…+2 ^v-1 b _v-1 ;

The second splitting formula includes:

y ₀ +…+y _i +…+y _v-1 =y;

Wherein, b _i represents the i-th sub-target value, v represents the total number of the sub-target values, and the value of b _i is 0 or 1; y _i represents the i-th sub-target value corresponding to the The second random number.

Preferably, the calculation of the first commitment value and the second commitment value of each of the sub-target value and the corresponding sub-second random number based on the elliptic curve group generator and the elliptic curve group element includes :

According to the fifth calculation formula, the first commitment value and the first commitment value of each sub-target value and the corresponding sub-second random number are calculated based on the elliptic curve group generator and the elliptic curve group element. 2. Commitment value;

The fifth operation formula includes:

Wherein, c _i represents the i-th first commitment value; c′ _i represents the i-th second commitment value;

The calculating and publishing the numerical verification result of each sub-target value and the corresponding sub-second random number based on the elliptic curve group element includes:

Calculate and publish the numerical verification result of each sub-target value and the corresponding sub-second random number based on the elliptic curve group element through a sixth calculation formula;

The sixth operation formula includes:

Wherein, TK′ _i represents the i-th numerical verification result;

The calculating the sub-public key of each of the sub-target values based on the first commitment value, the second commitment value, and the value verification result of each of the sub-target values includes:

Calculating the sub-public key of each sub-target value based on the first commitment value, the second commitment value, and the numerical verification result of each of the sub-target values through a seventh calculation formula;

The seventh operation formula includes:

PK′ _i =(c _i ,c′ _i ,TK′ _i ,π(c _i ,c′ _i ,TK′ _i )); where PK′ _i represents the i-th said child public key; π(c _i ,c′ _i ,TK′ _i ) represents the zero-knowledge proof result of the legitimacy of _{TK′ i;}

The calculating the sub-ring signature result of each of the sub-target values based on the commitment value, the sub-public key and the sub-second random number of each of the sub-target values includes:

Calculating the sub-ring signature result of each of the sub-target values based on the commitment value, the sub-public key of each of the sub-target values, and the sub-second random number by using an eighth operation formula;

The eighth operation formula includes:

σ _i =SIG(PK' _i ,y _i ,c); where σ _i represents the i-th sub-ring signature result.

Preferably, the preset format includes α ^β , α represents a password group element, and β represents a random number.

The block chain information transmission method provided by the present application is applied to a verification block chain node in a block chain system, the block chain system further includes a target block chain node, and the method includes:

Obtain the one-time signature public key published by the target blockchain node, and determine whether the one-time signature public key already exists in the blockchain system;

If the one-time signature public key already exists in the blockchain system, output abnormal information, if the one-time signature public key does not exist in the blockchain system, then obtain the target blockchain node Traceable and linkable ring signature results of published data;

Obtain and verify

Is it correct; π means zero-knowledge proof, g means generator of elliptic curve group;

Represents the UPK generated last time; h represents the elliptic curve group element; x _i represents the ring signature private key of _{the target blockchain node; a i} represents the primary signature private key of the target blockchain node;

If

If it is correct, check whether the ring signature public key in the traceable linkable ring signature result is correct;

If the ring signature public key is correct, check whether the ordinary ring signature result in the traceable linkable ring signature result is correct;

If the result of the ordinary ring signature is correct, check whether the one-time signature result in the traceable and linkable ring signature result is correct;

If the one-time signature result is correct, check whether the traceable linkable ring signature result is correct.

Preferably, it also includes:

Obtain the commitment value, the first commitment value, the second commitment value, the numerical verification result, and the numerical traceable interval verification result generated by the target blockchain node; acquire the elliptic curve group element;

Verify that all π(c _i ,c′ _i ,TK′ _i ) are correct; c _i represents the first commitment value; c′ _i represents the second commitment value; TK′ _i represents the numerical verification result ；

If all π(c _i ,c′ _i ,TK′ _i ) are correct, verify all

Whether they are all correct; h represents the elliptic curve group element;

If all

If it is correct, verify that Πc _i =c is correct, Π represents the summation operation, and c represents the commitment value;

If Πc _i = c is correct, verify the correctness of the result by verifying the traceable interval of the value;

If the value traceable interval proves that the result is correct, then the value mentioned on the chain can pursue the interval proof result.

The block chain information transmission method provided by the present application is applied to a supervisory node in a block chain system, the block chain system further includes a target block chain node, and the method includes:

Generating a first random number and saving it as a trapdoor, so that the blockchain performs operations on the first random number and the discrete cipher group generator based on a preset format to obtain an encrypted group element;

Publish the encrypted group element, so that the blockchain node in the blockchain system generates a corresponding one-time signature public key based on the discrete password group generator, the encrypted group element, and the corresponding one-time signature private key;

Obtain the first series of calculation results published by the blockchain node in the blockchain, where the first series of calculation results include the block chain node’s Describe the result obtained after a signature private key is calculated;

Obtain the target's one-time signature public key;

Performing an operation on each operation result in the first series of operation results by using the first random number according to the preset format to obtain a corresponding first operation value;

Determining the blockchain node corresponding to the first operation value equal to the value of the target primary signature public key as the target blockchain node;

Wherein, the preset format includes α ^β , α represents a cipher group element, and β represents a random number.

Preferably, after the publication of the encrypted group element, the method further includes:

Obtaining the first commitment value and the value verification result corresponding to the target value published by the target blockchain node;

For each of the first commitment values, according to the preset format, the second operation value corresponding to the first commitment value is calculated by the first random number, and it is determined whether the second operation value is the same as the numerical value. If the verification results are equal, determine that the value of the sub-target value corresponding to the first commitment value is 0, if not, determine that the value of the sub-target value of the first commitment value is 1;

According to the preset split format, the target value is determined based on the sub-target value.

In order to achieve the above objective, this application further provides a blockchain information transmission system, which is applied to a target blockchain node in a blockchain system, the blockchain system further includes a supervisory node, and the system includes:

The first obtaining module is configured to obtain a predetermined discrete cipher group generator and an encrypted group element, where the encrypted group element includes a cipher group element obtained by calculating a first random number and the initial cipher group based on a preset format, And the first random number is a trapdoor generated and saved by the supervisory node;

The first processing module is configured to process its own private data based on the discrete cipher group generator and the encrypted group element according to the preset format, and publish the corresponding processing result to the blockchain, So that the supervision node can supervise the target blockchain node and/or the private data based on the processing result and the first random number.

In order to achieve the above object, the present application further provides a blockchain information transmission device, the device includes a memory and a processor, the memory stores a blockchain information transmission program that can run on the processor, so When the blockchain information transmission program is executed by the processor, the method described above is implemented.

In order to achieve the above objective, the present application further provides a computer-readable storage medium having a blockchain information transmission program stored on the computer-readable storage medium, and the blockchain information transmission program can be used by one or more processors Execute to realize the block chain information transmission method as described above.

In order to achieve the above objective, this application further provides a blockchain system, including ordinary blockchain nodes and supervisory nodes;

The ordinary blockchain node is used to execute any one of the blockchain information transmission methods applied to the target blockchain node as described above;

The supervisory node is used to execute any one of the above-mentioned blockchain information transmission methods applied to the supervisory node.

Preferably, it also includes verifying the blockchain node;

The verification blockchain node is used to execute any one of the above-mentioned blockchain information transmission methods applied to the verification blockchain node.

The block chain information transmission method provided in this application is applied to a target block chain node to obtain a predetermined discrete cryptographic group generator and an encrypted group element. The encrypted group element includes the first random number and the discrete number based on a preset format. The cryptographic group element obtained after the cryptographic group generator operation, and the first random number is the trapdoor generated and saved by the supervisory node; according to the preset format, the private data of its own is processed based on the discrete cryptographic group generator and the encrypted group element, And publish the corresponding processing result to the blockchain, so that the supervisory node can supervise the target blockchain node and/or private data based on the processing result and the first random number. In this application, the target blockchain node processes its own private data based on the obtained discrete cipher group generators and encryption group elements in accordance with the preset format, realizes the encryption processing of its own private data, and protects its own private data. Security, and the corresponding processing results are released to the blockchain. Since the encrypted group elements are based on the preset format on the first random number and the discrete cipher group generators, the cipher group elements are obtained, so the calculation results and the encrypted group elements There is format consistency between the two, so the supervisory node can perform identity supervision and/or privacy data supervision on the target blockchain node through the discrete password group generator, the encrypted group element and the first random number, which improves the privacy protection of the blockchain system. Supervisable. The blockchain system, information transmission system, device, and computer-readable storage medium provided by this application also solve the corresponding technical problems.

Description of the drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only It is an embodiment of the present invention. For those of ordinary skill in the art, without creative work, other drawings can be obtained according to the provided drawings.

FIG. 1 is a schematic structural diagram of a blockchain system 10 provided by an embodiment of the application;

FIG. 2 is a schematic flowchart of the first embodiment of the application;

FIG. 3 is a schematic flowchart of a second embodiment of this application;

Figure 4 is a schematic diagram of the process of identity tracking of target blockchain nodes by supervisory nodes;

FIG. 5 is a schematic flowchart of a third embodiment of this application;

FIG. 6 is a schematic structural diagram of a blockchain information transmission system disclosed in an embodiment of the application;

FIG. 7 is a schematic diagram of the internal structure of a blockchain information transmission device disclosed in an embodiment of the application.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of the present invention.

The terms "first", "second", "third", "fourth", etc. (if any) in the description and claims of this application and the above-mentioned drawings are used to distinguish similar objects, without having to use To describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances, so that the embodiments described herein can be implemented in a sequence other than the content illustrated or described herein. In addition, the terms "including" and "having" and any variations of them are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or device that includes a series of steps or units is not necessarily limited to those clearly listed. Those steps or units may include other steps or units that are not clearly listed or are inherent to these processes, methods, products, or equipment.

It should be noted that the descriptions related to "first", "second", etc. in the present invention are only for descriptive purposes, and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of technical features indicated. . Therefore, the features defined with "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the technical solutions between the various embodiments can be combined with each other, but it must be based on what can be achieved by a person of ordinary skill in the art. When the combination of technical solutions is contradictory or cannot be achieved, it should be considered that such a combination of technical solutions does not exist. , Is not within the protection scope of the present invention. This application provides a blockchain information transmission method.

Please refer to FIG. 1, which is a schematic structural diagram of a blockchain system 10 provided by an embodiment of the application. In this application, the blockchain system 10 includes a supervisory node 11, a verification blockchain node 12, and a normal blockchain node 13. The number of supervisory nodes 11, a verification blockchain node 12, and a normal blockchain node 13 can be Determined according to actual needs. And when the ordinary blockchain node 13 sends information, it becomes the target blockchain node described in this application.

It should be pointed out that the blockchain information transmission method provided in this application involves the target blockchain node transmitting information, verifying that the blockchain node verifies the information accordingly, and deciding whether to upload the information to the chain, and the supervisory node to perform the information on the chain. Supervise these three processes. Below, this application describes the blockchain information transmission method provided by this application from the three perspectives of the target blockchain node, the verification blockchain node, and the supervisory node.

First, from the perspective of the target blockchain node, the blockchain information transmission method provided in this application is described.

The first embodiment:

Referring to FIG. 1, FIG. 1 is a schematic flowchart of a first embodiment of this application.

In the first embodiment, a blockchain information transmission method provided in this application, applied to a target blockchain node, may include the following steps:

Step S101: Obtain a predetermined discrete cipher group generator and an encrypted group element. The encrypted group element includes a cipher group element obtained by calculating a first random number generated based on a preset format and the discrete cipher group generator, and the first random number The number is a trapdoor generated and saved by the supervisory node.

In practical applications, the supervisory node can first obtain the predetermined discrete cipher group generator, and then generate the first random number, and finally calculate the first random number and the discrete cipher group generator according to the preset format to obtain the encrypted group element; After that, the supervisory node saves the first random number as a trapdoor, and publishes the encrypted group element to the blockchain system, so that the blockchain node in the blockchain system can compare itself based on the discrete password group generator and the encrypted group element. The private data is processed. It should be pointed out that the discrete cryptographic group generators can be generated by supervisory nodes and passed by the consensus of the blockchain, or generated by other devices receiving the privacy protection blockchain and passed by consensus; the types of supervisory nodes in this application can be based on actual conditions. It needs to be determined. For example, the supervisory node can be a bank node connected to the blockchain system, a financial management node connected to the blockchain system, etc.; the target blockchain node can be any blockchain node in the blockchain system . In addition, the type of the discrete cipher group can be determined according to specific application scenarios. For example, the type of the discrete cipher group can be an elliptic curve group. In addition, the supervisory node can also only be responsible for generating the first random number, and the blockchain can then use external security components to generate discrete cryptographic group generators and encrypted group elements. For example, the discrete cryptographic group generator can be an elliptic curve group generator. The encryption group element may be an elliptic curve group element, which is obtained by the external security component processing the first random number and the discrete cipher group generator according to a preset format.

Step S102: According to the preset format, process its own private data based on the discrete cipher group generator and the encrypted group element, and publish the corresponding processing result to the blockchain, so that the supervisory node can be based on the processing result and the first random Data supervises the target blockchain node and/or private data on the blockchain.

In practical applications, the type of private data transmitted by the target blockchain node can be determined according to actual needs. For example, it can be the data to be transmitted, the value to be transmitted, etc., and the target blockchain node publishes the processing result to the blockchain. The conditions can be determined according to actual needs. For example, the target blockchain node can publish the processing results to the blockchain when it conducts transactions. The format of the preset format can also be determined according to actual needs. For example, the preset format can include α ^β , where α represents a cipher group element, that is, a discrete cipher group generator or an encrypted group element, and β represents a random number.

The block chain information transmission method provided in this application is applied to a target block chain node to obtain a predetermined discrete cryptographic group generator and an encrypted group element. The encrypted group element includes the first random number and the discrete number based on a preset format. The cryptographic group element obtained after the cryptographic group generator operation, and the first random number is the trapdoor generated and saved by the supervisory node; according to the preset format, the private data of its own is processed based on the discrete cryptographic group generator and the encrypted group element, And publish the corresponding processing result to the blockchain, so that the supervisory node can supervise the target blockchain node and/or private data based on the processing result and the first random number. In this application, the target blockchain node processes its own private data based on the obtained discrete cipher group generators and encryption group elements in accordance with the preset format, realizes the encryption processing of its own private data, and protects its own private data. Security, and publish the corresponding operation result to the blockchain. Since the encrypted group element is the cipher group element obtained by calculating the first random number and the discrete cipher group generator based on the preset format, the operation result and the encrypted group element There is format consistency between the two, so the supervisory node can perform identity supervision and/or privacy data supervision on the target blockchain node through the discrete password group generator, the encrypted group element and the first random number, which improves the privacy protection of the blockchain system. Supervisable.

The second embodiment:

Referring to FIG. 2, FIG. 2 is a schematic flowchart of a second embodiment of this application.

In the second embodiment, a discrete cryptographic group is taken as an example of an elliptic curve group. The blockchain information transmission method provided in this application is applied to a target blockchain node, in order to realize that the supervisory node compares the target blockchain node For the tracking and supervision of identity, the following steps can be performed:

Step S201: Obtain the elliptic curve group generator and the elliptic curve group element announced by the supervisory node. The elliptic curve group element includes the curve group element obtained after the supervisory node calculates the generated first random number and the elliptic curve group generator based on a preset format. .

In practical applications, the supervisory node can first select the generator of the elliptic curve group, and then generate the first random number, and finally calculate the first random number and the generator of the elliptic curve group according to the preset format to obtain the elliptic curve group element; The regulatory node saves the first random number as a trapdoor, and publishes the elliptic curve group generator and the elliptic curve group element to the blockchain system, so that the blockchain node in the blockchain system is based on the elliptic curve group generator and The elliptic curve group element processes the target data. It should be pointed out that the type of supervision node in this application can be determined according to actual needs. For example, the supervision node can be a bank node connected to the blockchain system, a financial management node connected to the blockchain system, etc.; the target blockchain Node refers to the blockchain node used to transmit information in the blockchain system.

Step S202: Generate a signature private key once, according to a preset format, generate a signature public key based on the elliptic curve group element and a signature private key and publish it.

In practical applications, after the target blockchain node obtains the elliptic curve group generator and the elliptic curve group element, it can generate a signature private key, such as generating a random number as a signature private key, etc. It should be pointed out that when generating the first signature At the same time as the private key, it is also necessary to generate the ring signature private key, and according to the preset format, generate the first signature public key based on the elliptic curve group element and the one-time signature private key and publish it, such as when it is signed, so that the supervisory node and All other blockchain nodes in the blockchain system can obtain the one-time signature public key of the target blockchain node, so that they can interact with the target blockchain node based on the one-time signature public key. In this process, since the one-time signature private key is generated by the target blockchain node itself, the one-time signature private key only belongs to the target blockchain, which ensures the security of the private key of the target blockchain.

Step S203: Perform operations on the elliptic curve group generator and the primary signature private key according to the preset format to obtain identity verification information, and publish the identity verification information to the blockchain, so that the supervisory node is based on the first random number, identity verification information, and primary The signature public key determines the sender of the target data.

In practical applications, after the target blockchain node generates and publishes a signature public key, it can perform operations on the elliptic curve group generator and a signature private key according to the preset format to obtain identity verification information, and publish the identity verification information to Blockchain, so that the supervisory node can determine the sender of the target data based on the first random number, identity verification information, and one-time signature private key. In this process, since the elliptic curve group element is the point obtained by the supervising node after calculating the first random number and the elliptic curve group generator according to the preset format, and the one-time signature public key is the target blockchain node according to the preset format The elliptic curve group element and the point obtained after a signature private key operation, and the identity verification information is the result obtained after the target blockchain node calculates the elliptic curve group generator and a signature private key according to the preset format, so the elliptic curve The group element, the one-time signature public key and the identity verification information have format uniformity and relevance; then, the supervisory node can perform operations on the identity verification information and the first random number according to the preset format to obtain the corresponding operation results, and once The signature public key involves the transmission of the target data, so the supervisory node can compare the result of the operation with the value of the signature public key to determine the sender of the target data. Specifically, when the result of the operation is equal to the value of the signature public key When the target data is sent to the target blockchain node, and the calculation result is not equal to the value of the signature public key, the target data is not sent to the target blockchain node. Specifically, the preset format may include α ^β , where α represents an elliptic curve group, that is, an elliptic curve group generator or an elliptic curve group element, and β represents a random number.

It should be pointed out that in the application of the blockchain, in order to ensure the privacy of the target data, a blockchain node will cooperate with other blockchain nodes when transmitting data, such as interacting with other blockchain nodes on the target data. Perform ring signatures, which makes it difficult to determine the sender of the target data. At this time, the supervisory node needs to identify a certain number of blockchain nodes according to the blockchain information transmission method provided in this application to determine the sender of the target data . The ring signature involved in this application is a special digital signature scheme. The signer uses his and his user’s public keys to generate a public key set, and then signs with his own private key. The verifier is verifying the signature. After the legality of the signature, it can only be known that the signature comes from a certain user in the public key set, but the specific identity of the user cannot be known, and the identity privacy protection of the signer is realized.

The block chain information transmission method provided by this application is applied to a target block chain node to obtain predetermined elliptic curve group generators and elliptic curve group elements published by supervisory nodes. The elliptic curve group elements include supervisory nodes based on preset The format is the curve group element obtained by calculating the first random number and the elliptic curve group generator; generate a signature private key, according to the preset format, generate a signature public key based on the elliptic curve group element and a signature private key and publish it ; Perform operations on the elliptic curve group generator and the primary signature private key according to the preset format to obtain the identity verification information, and publish the identity verification information to the blockchain, so that the supervisory node is based on the first random number, identity verification information and a signature public key The key determines the sender of the target data. In the blockchain information transmission method provided by this application, the target blockchain node obtains the elliptic curve group generator selected by the supervisory node and the elliptic curve group element generated according to a preset format, and is based on the elliptic curve group according to the preset format The element and the one-time signature private key generate one-time signature public key, so that the private key of the target blockchain node is completely controlled by the target blockchain node itself, and the elliptic curve group generator and the one-time signature private key are calculated according to the preset format. Obtain the identity verification information, and publish the identity verification information to the blockchain, so that the supervisory node can determine the sender of the target data based on the first random number, identity verification information, and the one-time signature public key, thus realizing the supervisory function of the blockchain system.

In the second embodiment, when transmitting data, in order to protect the data, the data can be transmitted using a ring signature method. Therefore, according to the preset format, a signature public key is generated based on the elliptic curve group element and the signature private key. After the announcement, the above method can also include:

Step S204: Generate a ring signature private key;

In practical applications, a random number can be generated as the ring signature private key. Of course, there can also be other ways to generate the ring signature private key, such as processing its own identification data information, and using the processed identification data information as the ring signature private key Wait.

Step S205: Based on the elliptic curve group generator, the elliptic curve group element, the ring signature private key, and the one-time signature private key, a traceable and linkable public key is generated to perform a traceable and linkable ring signature;

Step S206: Obtain the target data, and perform a traceable and linkable ring signature on the target data based on the traceable and linkable public key, the elliptic curve group generator, the elliptic curve group element, the ring signature private key, the one-time signature private key, and the one-time signature public key , To obtain the traceable and linkable ring signature result of the data;

Step S207: Publish the traceable and linkable ring signature result to the verification blockchain node, so that the verification blockchain node verifies the traceable and linkable ring signature result, and uploads the traceable and linkable ring signature result after the verification is passed chain.

It should be noted that the traceable and linkable ring signature result also realizes the hidden protection of the target data transmitted by the target blockchain node; realizes the hiding of the identity of the target blockchain node, so that other ordinary blockchain nodes cannot know the target The identity of the blockchain node; and with the help of the one-time signature public key, the supervisory node can track and supervise the target blockchain node through the traceable and linkable ring signature result.

In the second embodiment, in order to improve the transmission efficiency of the blockchain information transmission method, the target blockchain node is traceable based on the elliptic curve group generator, elliptic curve group element, ring signature private key, and one-time signature private key generation. When linking the public key (S205), you can:

Through the first calculation formula, based on the elliptic curve group generator, the elliptic curve group element, the ring signature private key and the one-time signature private key, a traceable and linkable public key is generated to perform a traceable and linkable ring signature;

The first calculation formula includes:

Among them, i represents the label of the target blockchain node; PK _i represents the traceable and linkable public key when the target blockchain node performs the traceable and linkable ring signature; g represents the elliptic curve group generator;

Represents the UPK generated last time, that is, the UTXO public key; h represents the elliptic curve group element; x _i represents the ring signature private key of the target _{blockchain node; a i} represents the one-time signature private key of the target blockchain node;

Represents the zero-knowledge proof result of the legitimacy of the traceable and linkable public key It should be noted that UTXO refers to the digital currency that has been confirmed but not spent on the current blockchain.

It can be seen from the above first calculation formula that in this process, the target blockchain node generates the public key according to the preset format to generate the elliptic curve group element, the elliptic curve group element, the ring signature private key and the one-time signature private key. Perform calculations to unify the public key of the target blockchain node with the format of the elliptic curve group element, identity verification information, etc., and ensure its legitimacy through zero-knowledge proof. In addition, the corresponding description of the zero-knowledge proof in this application can refer to the prior art, which will not be repeated here.

In the second embodiment, the target blockchain node performs a traceable and linkable loop on the target data based on the public key, the elliptic curve group generator, the elliptic curve group element, the ring signature private key, the one-time signature private key, and the one-time signature public key. Signing, the process of obtaining the traceable and linkable ring signature result of the data (S206), may specifically be:

Select a preset number of other blockchain nodes, and use the second calculation formula to generate a ring signature public key L based on the public keys of other blockchain nodes and the public key of the target blockchain node;

Through the third calculation formula, the target data is ring-signed based on the ring signature public key and the ring signature private key, and the ordinary ring signature result A is obtained;

Through the fourth calculation formula, the ordinary ring signature result is signed once based on the one-time signature private key, the ring signature public key, and the one-time signature public key, and a signature result σ is obtained;

Take the ring signature public key L, the target data m, the ordinary ring signature result A, and the one-time signature result σ as the traceable and linkable ring signature result;

The second calculation formula includes:

The third calculation formula includes:

A=SIG(x _i ,L,m);

The fourth calculation formula includes:

σ=OSIG(a _i ,SIG(x _i ,L,m),L,OPK);

Among them, L represents the ring signature public key; when 1≤j≤n-1, and j≠i, x _j represents the ring signature private key of other _{blockchain nodes, and a j} represents the one-time signature private key of other blockchain nodes; A represents the ordinary ring signature result; SIG represents the ring signature algorithm; m represents the target data; σ represents the one-time signature result; OSIG represents the one-time signature algorithm; OPK represents the one-time signature public key.

It should be pointed out that in this process, the process of generating public keys by other blockchain nodes is the same as the process of generating public keys by the target blockchain node in this application, and will not be repeated here.

In the second embodiment, from the perspective of the target blockchain node, the steps required to perform data transmission by the target blockchain node are described. In this process, the verification of the blockchain node is against the target blockchain node. The corresponding verification process of the transmitted data information can be as follows:

If the one-time signature public key already exists in the blockchain system, it means that the target blockchain has double spending, and the corresponding abnormal information is output. If the one-time signature public key does not exist in the blockchain In the system, the traceable and linkable ring signature result of the data released by the target blockchain node is obtained;

Obtain and verify

Represents the UPK generated last time; h represents the elliptic curve group element; x _i represents the ring signature private key of the _{target blockchain node; a i} represents the primary signature private key of the target blockchain node;

If

If the ordinary ring signature result is correct, check whether the one signature result in the traceable linkable ring signature result is correct;

If the result of a signature is correct, check whether the result of the traceable linkable ring signature is correct.

It should be pointed out that on the basis of no other verification conditions, once the signature result is correct, it can be considered that the traceable linkable ring signature result has passed the verification, and when there are other verification conditions, the traceable linkable ring signature can be signed according to the verification conditions. The result continues to be verified until the verification result is obtained.

It is not difficult to understand that after verifying that the blockchain node uploads the traceable and linkable ring signature result to the chain, the supervisory node can track the blockchain node. Now referring to Figure 3, the supervisory node in the second embodiment compares the target block The process of the chain node tracking is described, and the supervisory node can perform the following steps in this process:

Step S301: Generate a first random number and save it as a trapdoor, so that the blockchain performs operations on the first random number and the elliptic curve group generator based on a preset format to obtain the elliptic curve group element.

Step S302: Publish the elliptic curve group element, so that the blockchain node in the blockchain system generates a corresponding one-time signature public key based on the elliptic curve group generator, the elliptic curve group element, and the corresponding one-time signature private key.

Step S303: Obtain the first series of calculation results published by the preset number of blockchain nodes in the blockchain. The first series of calculation results include the generation of the elliptic curve group by the blockchain node according to the preset format and the private key for one-time signature The result obtained after the calculation.

Step S304: Obtain the target one-time signature public key; according to the preset format, perform operations on each operation result in the first series of operation results through the first random number to obtain the corresponding first operation value.

Step S305: Determine the blockchain node corresponding to the first operation value equal to the value of the target primary signature public key as the target blockchain node.

Specifically, the preset format may include α ^β , α represents an elliptic curve group, and β represents a random number; taking the first series of calculation results as

The target's one-time signature public key is

The first random number is γ as an example, the supervisory node passes the calculation and will satisfy

The blockchain node of is determined as the target blockchain node.

The third embodiment:

Referring to FIG. 4, FIG. 4 is a schematic flowchart of a third embodiment of this application.

In the third embodiment, in order to realize the tracking and supervision of the value transmitted by the supervisory node, after the target blockchain node obtains the elliptic curve group generator g and the elliptic curve group element h published by the supervisory node, the following steps may be performed:

Step S401: Obtain the target value, and generate a second random number.

In practical applications, the target value refers to the value to be transmitted by the target block chain node, which can be the currency of the target block chain node's transaction, the transmitted value information, and so on.

Step S402: Calculate the target value based on the elliptic curve group generator, the elliptic curve group element, and the second random number to obtain the commitment value.

In practical applications, after the target blockchain node obtains the target value and generates the second random number, it can calculate the target value based on the elliptic curve group generator, the elliptic curve group element, and the second random number to obtain the corresponding promise value. The commitment value involved in this application has the same principle and function as the existing amount commitment, and will not be repeated here. In addition, the target blockchain node can calculate the target value based on the elliptic curve group generator, the elliptic curve group element, and the second random number according to a preset format.

Step S403: According to the preset split format, split the target value into sub-target values, and split the second random number into sub-second random numbers corresponding to the sub-target values.

In practical applications, since the target value may be split into different values for protection during the transmission process, for example, in Monero, a value will be split into multiple values for transmission, so the target blockchain node can According to the preset split format, the target value is split into sub-target values, and the second random number is split into sub-second random numbers corresponding to the sub-target values. It is not difficult to understand that the sub-second random number is used for matching The corresponding sub-target value is protected.

Step S404: Calculate the first commitment value and the second commitment value of each sub-target value and the corresponding sub-second random number based on the elliptic curve group generator and the elliptic curve group element, and announce the first commitment value.

In actual applications, when the target blockchain node protects the corresponding sub-target value based on the sub-second random number, it can calculate each sub-target value and the corresponding sub-target value based on the elliptic curve group generator and the elliptic curve group element. The first commitment value and the second commitment value of the random number, specifically, can be calculated based on the elliptic curve group generator and the elliptic curve group element according to the preset format, and the first value of each sub-target value and the corresponding sub-second random number Commitment value and second commitment value.

Step S405: Calculate and publish the numerical verification result of each sub-target value and the corresponding sub-second random number based on the elliptic curve group elements, so that the supervisory node determines the target value based on the first commitment value, the numerical verification result, and the first random number .

In practical applications, since the first commitment value is calculated based on the elliptic curve group generator, elliptic curve group element, sub-target value, and sub-second random number, the numerical verification result is based on the elliptic curve group element, sub-target value, and The second random number is calculated, and the elliptic curve group element is related to the elliptic curve group generator and the first random number. Therefore, the first commitment value, the numerical verification result, and the first random number are related, and the target The value is composed of sub-target values, so the supervisory node can determine the target value based on the first commitment value, the numerical verification result, and the first random number.

The block chain information transmission method provided by this application is applied to a target block chain node to obtain predetermined elliptic curve group generators and elliptic curve group elements published by supervisory nodes. The elliptic curve group elements include supervisory nodes based on preset The format is the point obtained after the first random number and the elliptic curve group generator are calculated; the target value is obtained, and the second random number is generated; the target value is based on the elliptic curve group generator, encrypted elliptic curve group, and the second random number Perform calculations to get the promised value; according to the preset split format, split the target value into sub-target values, and split the second random number into sub-second random numbers corresponding to the sub-target values; generate based on the elliptic curve group Element and elliptic curve group elements calculate the first commitment value and second commitment value of each sub-target value and the corresponding sub-second random number, and announce the first commitment value; calculate each sub-target value and value based on the elliptic curve group element The numerical verification result of the corresponding sub-second random number is published, so that the supervisory node determines the target value based on the first commitment value, the numerical verification result, and the first random number. In this application, the target blockchain node can use the elliptic curve group generator and the elliptic curve group element announced by the regulatory node to realize the encryption and concealment of the target value, and the preset blockchain node can be based on the target blockchain node. The calculation process of the target value and the trapdoor saved by itself determine the specific value of the target value, and realize the supervision of the target value.

In the third embodiment, in order to ensure the secure transmission of the value, the target value can be ring-signed by means of a ring signature to hide the corresponding value. Then the target blockchain node calculates each sub-target value based on the elliptic curve group element After the numerical verification result of the corresponding sub-second random number is published, the above method may further include:

Calculate the sub-public key of each sub-target value based on the first commitment value, second commitment value, and value verification result of each sub-target value;

Calculate the sub-ring signature result of each sub-target value based on the committed value and the sub-public key and sub-second random number of each sub-target value;

Take the promised value and all the sub-ring signature results as the target value's value traceable interval proof result;

Publish the verification result of the traceable value interval to the verification blockchain node, so that the verification blockchain node verifies the verification result of the traceable value interval and the verification result of the value, and uploads the verification result of the traceable value interval to the chain after the verification is passed.

It should be pointed out that in the process of calculating the sub-ring signature result of each sub-target value based on the commitment value and the sub-public key and sub-second random number of each sub-target value, the Borromean scheme can also be used to complete all sub-rings at once. signature.

In the third embodiment, in order to improve the calculation efficiency, the target blockchain node calculates the target value based on the elliptic curve group generator, the elliptic curve group element, and the second random number to obtain the promised value (S402), which can be specific for:

Through the promise value calculation formula, the target value is calculated based on the elliptic curve group generator, the elliptic curve group element, and the second random number to obtain the promise value;

The promise value calculation formula includes:

c=g ^y h ^b ;

Among them, c represents the commitment value; y represents the second random number; b represents the target value.

In the third embodiment, in order to improve computing efficiency, the target blockchain node splits the target value into sub-target values according to a preset split format, and splits the second random number into sub-target values corresponding to the sub-target values. The second random number process (S403) may be specifically:

Split the target value into sub-target values through the first split formula;

Split the second random number into sub-second random numbers corresponding to the sub-target values through the second split formula;

The first split formula includes:

b=b ₀ +…+2 ⁱ b _i +…+2 ^v-1 b _v-1 ;

The second split formula includes:

y ₀ +…+y _i +…+y _v-1 =y;

Among them, b _i represents the i-th sub-target value, v represents the total number of sub-target values, and the value of b _i is 0 or 1; y _i represents the sub-second random number corresponding to the i-th sub-target value, 1≤i≤ v-1.

In the third embodiment, in order to improve computational efficiency, the target blockchain node calculates the first commitment value and second commitment value of each sub-target value and the corresponding sub-second random number based on the elliptic curve group generator and the elliptic curve group element. The process of promised value (S404) can be specifically as follows:

Calculate the first commitment value and the second commitment value of each sub-target value and the corresponding sub-second random number based on the elliptic curve group generator and the elliptic curve group element through the fifth calculation formula;

The fifth calculation formula includes:

Among them, c _i represents the i-th first commitment value; c′ _i represents the i-th second commitment value;

Calculate the numerical verification results of each sub-target value and the corresponding sub-second random number based on the elements of the elliptic curve group and publish (S405), including:

Calculate the numerical verification results of each sub-target value and the corresponding sub-second random number based on the elliptic curve group element through the sixth calculation formula and publish it;

The sixth calculation formula includes:

Among them, TK′ _i represents the i-th numerical verification result;

Calculate the sub-public key of each sub-target value based on the first commitment value, second commitment value, and value verification result of each sub-target value, including:

Calculate the sub-public key of each sub-target value based on the first commitment value, second commitment value, and value verification result of each sub-target value through the seventh calculation formula;

The seventh calculation formula includes:

PK′ _i =(c _i ,c′ _i ,TK′ _i ,π(c _i ,c′ _i ,TK′ _i )); where PK′ _i represents the i-th child public key; π(c _i ,c′ _i ,TK′ _i ) represents the zero-knowledge proof result of the legitimacy of _{TK′ i;}

Calculate the sub-ring signature result of each sub-target value based on the commitment value and the sub-public key and sub-second random number of each sub-target value, including:

Calculate the sub-ring signature result of each sub-target value based on the commitment value and the sub-public key and sub-second random number of each sub-target value through the eighth calculation formula;

The eighth calculation formula includes:

σ _i =SIG(PK′ _i ,y _i ,c); where σ _i represents the i-th sub-ring signature result.

In practical applications, in order to improve the computational efficiency, when calculating the sub-ring signature result of each sub-target value based on the promised value and the sub-public key and sub-second random number of each sub-target value through the eighth arithmetic formula, you can use Borromean signature method, complete the ring signature of n rings at the same time.

In the second embodiment, from the perspective of the target blockchain node, the steps required to perform the numerical transmission of the target blockchain node are described. In this process, the verification of the blockchain node to the target blockchain node The corresponding verification process of the transmitted value information can be as follows:

Obtain the commitment value, the first commitment value, the second commitment value, the numerical verification result and the numerical traceability interval verification result generated by the target blockchain node; obtain the elliptic curve group element;

Verify that all π(c _i ,c′ _i ,TK′ _i ) are correct; c _i represents the first commitment value; c′ _i represents the second commitment value; TK′ _i represents the result of numerical verification;

If all π(c _i ,c′ _i ,TK′ _i ) are correct, verify all

Are all correct; h represents the element of the elliptic curve group;

If all

If it is correct, verify that Πc _i = c is correct, Π represents the summation operation, and c represents the promised value;

If Πc _i = c is correct, the verification value can be traced to the interval to prove the correctness of the result;

If the value traceable interval proves that the result is correct, the chain value traceable interval proves the result.

It should be pointed out that in this embodiment, the verification blockchain node achieves the traceable interval verification of the target value by verifying the verification result of the traceable interval of the value; and with the cooperation of the target blockchain node and the supervisory node , Realizes the supervision and tracking function of the target value, and improves the supervisability of the privacy protection blockchain system.

It is not difficult to understand that after the verification block chain node puts the value traceable interval proof result on the chain, the supervising node can track and supervise the value transmitted by the block chain node. The value transmitted by the node is described in the process of tracking and supervision. After the supervision node announces the elliptic curve group generator and the elliptic curve group element, the following steps can be performed:

Obtain the first commitment value and value verification result corresponding to the target value published by the target blockchain node;

For each first promise value, calculate the second operation value corresponding to the first promise value through the first random number according to the preset format, and determine whether the second operation value is equal to the numerical verification result, and if so, determine the first promise value The value of the corresponding sub-goal value is 0, if not, the value of the sub-goal value of the first commitment value is determined to be 1;

In this process, the process by which the supervisory node determines the target value based on the first commitment value, the numerical verification result, and the first random number is expressed by the following formula:

For each i, calculate

The value of λ represents the first random number, that is, the trapdoor saved by the supervisory node;

For each i, if

Then output b _i =0, if

Then output b _i =1;

According to the formula b=b ₀ +...+2 ⁱ b _i +...+2 ^v-1 b _v-1 ; the value of b is calculated.

Now combined with Monero in the blockchain system to explain the blockchain information transmission method provided in this application.

Monero is the current mature privacy digital currency system. It uses the UTXO model on the basis of Bitcoin, realizes the concealment of transaction identity through linkable ring signature technology, and realizes the concealment of transaction amount through interval proof The application process is as follows:

Each UTXO in Monero includes the currency's public and private keys (PK, SK) and amount commitment (COM). The owner of the money has the currency private key (SK), currency public key (PK) and amount commitment (COM) public. Every time the user consumes, the user randomly selects other UTXOs on the chain, combines them with the UTXOs they want to spend to generate a public key set (L={PK1,PK2,,PKn}), using their own random number and the recipient’s private key to generate The new currency public key, and the new currency public key can only be calculated by the recipient. The new amount commitment, the interval proof of the new amount commitment, and other billing information are combined with the ring signature of L and published on the blockchain . The transaction verifier checks whether it is a double-spending transaction. If it is not a double-spending transaction, it verifies the legitimacy of the interval proof and the legitimacy of the ring signature. After all passes, the transaction is packaged into blocks. The verifier cannot obtain the identity information and amount information of both parties in the transaction. For all transactions of new blocks on the chain, the transaction receiver uses his private key to check whether there is a transfer to himself, and if so, calculates the private key of the new UTXO and deposits the money in his wallet.

In the above process, it also involves asymmetric encryption, digital signatures, etc.; among them, UTXO refers to the confirmed but unspent digital currency on the current blockchain, that is, an unspent amount of money; double spending refers to It is that the blockchain does not pay attention to the fact that users spend twice on a transaction of money; asymmetric encryption system (Asymmetric encryption system) is different from the traditional symmetric encryption algorithm, based on the asymmetry of the computational complexity in the encryption and decryption process A type of algorithm to ensure security. In an asymmetric encryption system, the encrypting party needs to generate a private key and a public key pair. The private key is kept by itself, and the public key can be sent to the other party. Digital signature (Digital signature) is a type of asymmetric cryptography. For branch, the user generates a public and private key, keeps the private key, and signs any message with the private key. The verifier can use the public key to verify the legitimacy of the signature. The digital signature realizes identity authentication and data integrity verification; Linkable ring signature (Linkable ring signature) is a special ring signature scheme. The user must provide a tag information when performing a ring signature. When the user performs an illegal signature (or illegal transactions such as double spending), the transaction tag can be compared. It can be judged whether it is an illegal signature (double-spending transaction), which realizes a safe transaction guarantee; Range proof is a zero-knowledge proof system that gives a certain amount of money belongs to a specified interval without revealing the specific amount of information.

It can be seen from the use process of Monero that the blockchain node cannot obtain the transaction amount and cannot determine the sender of a certain transaction amount, so that Monero does not have the supervision and tracking function, but the first embodiment provided by this application realizes In order to track the sender and realize the function of linking information, the first embodiment of this application provides a traceable and linkable ring signature scheme; the traceable and traceable ring signature (Linkable and Traceable ring signature) is also realized The signature of the dual function of traceable and linkable, among which traceable ring signature (Traceable ring signature) refers to the signature that can trace the identity of the specific signing user, and realizes the signature of the supervision function. In addition, the second embodiment provided in this application implements the tracking of the value. Its essence is to provide a traceable range proof. The traceable range proof refers to a certain amount of money belonging to a specified amount. Interval proof system, for ordinary verification users, the proof meets zero knowledge (no amount information is leaked), and the specific amount can be solved through proof, which realizes the proof of supervision function.

In actual application, the Monero application process using the traceable linkable ring signature and traceable interval proof provided by this application can be as follows:

The blockchain system has a center, which generates system parameters (elliptic curve group generator), trapdoor (first random number) and trapdoor public key MPK (elliptic curve group element);

For each UTXO, the user generates the private key SK, and then adds the public key generation algorithm according to MPK to obtain the public key PK=Gen(SK, MPK). The verifier of the public key can verify whether the public key of the UTXO is in accordance with Generated in a prescribed way;

The user conducts transactions in accordance with the same transaction framework as Monero. During the transaction, the user replaces the original Monero interval certificate with the traceable interval certificate of the application in the interval proof of the transaction amount, and replaces the Monero coin in the interval proof of the application. The linkable ring signature of is replaced with a traceable linkable ring signature;

In the process of verifying transactions, the verifier performs the same verification work as Monero, that is, verifying the correctness of the interval proof, verifying the correctness of the ring signature, verifying whether the transaction can be linked (whether it is double spend), and confirming the transaction after all verifications are passed. Block

The central node (supervisor) on the chain is not responsible for confirming the legality of the transaction, nor is it responsible for packaging transactions and block production. It only works when supervision is required. The center uses its own trapdoor Trapdoor to verify the interval certification and loop of the transaction. The signature is tracked and calculated to obtain the specific transaction amount and the identity of the signer, which realizes a complete supervision function. However, the supervisor does not have the user's private key, and cannot forge the user's signature or transfer the user's money. The function of interference realizes the function of multi-level supervision.

From the above description, it can be seen that the blockchain information transmission method provided by this application realizes the tracking of the data sender and the supervision of the value, and avoids the block caused by the data sender cannot be tracked and the value cannot be known. The chain system hides the shortcomings of criminal information, which can be applied to specific application scenarios such as criminal investigation, data statistics, and fund freezing in the blockchain application scenario; in addition, the user’s own private key is completely controlled by the user, including the supervisor No one inside can forge user signatures and counterfeit user transactions, which preserves the requirements of blockchain "decentralization" to the greatest extent; and the regulator does not need to be responsible for transaction verification, and does not require complicated packaging transactions and block production, etc. It only appears when supervision is needed, effectively reducing the supervisor's calculation and communication pressure, and improving the transaction efficiency of the blockchain system compared with the existing technology that requires supervisors.

On the other hand, this application provides a blockchain information transmission system.

Please refer to FIG. 5, which is a schematic structural diagram of a blockchain information transmission system disclosed in an embodiment of the application.

The block chain information transmission system provided by the embodiment of the present application, applied to a target block chain node, may include:

The first obtaining module 101 is configured to obtain a predetermined discrete cipher group generator and an encrypted group element. The encrypted group element includes a cipher group element obtained by calculating a first random number and an initial cipher group based on a preset format, and the first Random numbers are trapdoors generated and saved by supervisory nodes;

The first processing module is used to process its own private data based on the discrete cipher group generator and the encrypted group element according to the preset format, and publish the corresponding processing result to the blockchain, so that the supervisory node can be based on the processing result And the first random number supervises the target blockchain node and/or private data.

For the relevant description of each module in the block chain information transmission system provided by the embodiment of the present application, please refer to the above-mentioned embodiment, which will not be repeated here.

On the other hand, this application provides a block chain information transmission device.

Referring to FIG. 6, FIG. 6 is a schematic diagram of the internal structure of a block chain information transmission device disclosed in an embodiment of the application.

In this embodiment, the block chain information transmission device 1 can be a PC (Personal Computer), or a smart phone, a tablet computer, a palmtop computer, a portable computer, a smart router, a mining machine, a network storage device terminal device .

The block chain information transmission device 1 may be a node constituting a block chain network.

The block chain information transmission device 1 may include a memory 11, a processor 12 and a bus 13.

The memory 11 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, hard disk, multimedia card, card-type memory (for example, SD or DX memory, etc.), magnetic memory, magnetic disk, optical disk, etc. The memory 11 may be an internal storage unit of the blockchain information transmission device 1 in some embodiments, such as a hard disk of the blockchain information transmission device 1. In other embodiments, the memory 11 may also be an external storage device of the blockchain information transmission device 1, for example, a plug-in hard disk or a smart media card (SMC) equipped on the blockchain information transmission device 1. Secure Digital (SD) card, Flash Card, etc. Further, the memory 11 may also include both an internal storage unit of the blockchain information transmission device 1 and an external storage device. The memory 11 can be used not only to store application software and various data installed in the blockchain information transmission device 1, such as the code of the blockchain information transmission program 01, but also to temporarily store data that has been output or will be output. .

In some embodiments, the processor 12 may be a central processing unit (CPU), controller, microcontroller, microprocessor, or other data processing chip, for running program codes or processing stored in the memory 11 Data, such as execution of blockchain information transmission program 01, etc.

The bus 13 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus. The bus can be divided into address bus, data bus, control bus and so on. For ease of representation, only one thick line is used in FIG. 6, but it does not mean that there is only one bus or one type of bus.

Further, the blockchain information transmission device may also include a network interface 14. The network interface 14 may optionally include a wired interface and/or a wireless interface (such as a WI-FI interface, a Bluetooth interface, etc.), which is usually used in the device 1 Establish a communication connection with other electronic devices.

Optionally, the blockchain information transmission device 1 may also include a user interface. The user interface may include a display (Display), an input unit such as a keyboard (Keyboard), and the optional user interface may also include a standard wired interface and a wireless interface. . Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode, organic light-emitting diode) touch device, etc. Among them, the display can also be appropriately called a display screen or a display unit, which is used to display the information processed in the blockchain information transmission device 1 and to display a visualized user interface.

Fig. 6 only shows the block chain information transmission device 1 with components 11-14 and block chain information transmission program 01. Those skilled in the art can understand that the structure shown in Fig. 6 does not constitute a block chain The definition of the information transmission device 1 may include fewer or more components than shown, or a combination of certain components, or a different component arrangement.

A computer-readable storage medium provided by the present application. The computer-readable storage medium stores a blockchain information transmission program. The blockchain information transmission program can be executed by one or more processors to implement any of the above embodiments. The described blockchain information transmission method.

The computer-readable storage media involved here include random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disks, removable disks, CD-ROMs, Or any other form of storage medium known in the technical field.

In the above-mentioned embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented by software, it can be implemented in the form of a computer program product in whole or in part.

The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions described in the embodiments of the present invention are generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from a website, computer, server, or data center. Transmission to another website site, computer, server or data center via wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be stored by a computer or a data storage device such as a server or a data center integrated with one or more available media. The usable medium may be a magnetic medium (for example, a floppy disk, a hard disk, and a magnetic tape), an optical medium (for example, a DVD), or a semiconductor medium (for example, a solid state disk (SSD)).

Those skilled in the art can clearly understand that, for the convenience and conciseness of the description, the specific working process of the above-described system, device, and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed system, device, and method may be implemented in other ways. For example, the device embodiments described above are merely illustrative, for example, the division of the units is only a logical function division, and there may be other divisions in actual implementation, for example, multiple units or components may be combined or It can be integrated into another system, or some features can be ignored or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.

In addition, the functional units in the various embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or software functional unit.

If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the technical solution of the present application essentially or the part that contributes to the existing technology or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , Including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disks or optical disks and other media that can store program codes. .

It should be noted that the sequence numbers of the above-mentioned embodiments of the present invention are only for description, and do not represent the superiority or inferiority of the embodiments. And the terms "include", "include" or any other variants thereof in this article are intended to cover non-exclusive inclusion, so that a process, device, article or method including a series of elements not only includes those elements, but also includes those elements that are not explicitly included. The other elements listed may also include elements inherent to the process, device, article, or method. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, device, article, or method that includes the element.

The foregoing description of the disclosed embodiments enables those skilled in the art to implement or use this application. Various modifications to these embodiments will be obvious to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, this application will not be limited to the embodiments shown in this document, but should conform to the widest scope consistent with the principles and novel features disclosed in this document.

Claims

A block chain information transmission method, characterized in that it is applied to a target block chain node in a block chain system, the block chain system further includes a supervisory node, and the method includes:

Obtain a predetermined discrete cipher group generator and an encrypted group element, where the encrypted group element includes a cipher group element obtained by calculating a first random number and the discrete cipher group generator based on a preset format, and the first A random number is a trapdoor generated and saved by the supervisory node;

According to the preset format, process its own private data based on the discrete cipher group generator and the encrypted group element, and publish the corresponding processing result to the blockchain, so that the supervisory node can Supervise the target blockchain node and/or the private data based on the processing result and the first random number.
The method according to claim 1, wherein the discrete cipher group generator includes an elliptic curve group generator, and the encrypted group element includes an elliptic curve group element;

According to the preset format, process its own private data based on the discrete cipher group generator and the encryption group element, and publish the corresponding processing result to the blockchain, so that the supervision The node can supervise the target blockchain node and/or the private data based on the processing result and the first random number, including:

Generate a signature private key once, generate and publish a signature public key based on the elliptic curve group element and the one-time signature private key according to the preset format;

Perform operations on the elliptic curve group generator and the one-time signature private key according to the preset format to obtain identity verification information, and publish the identity verification information to the blockchain so that the supervisory node can be based on The first random number, the identity verification information, and the one-time signature public key determine the sender of the target data.
The method according to claim 2, characterized in that the blockchain system further comprises verifying the blockchain node, said according to the preset format, based on the elliptic curve group element and the one-time signature private key After generating and publishing the signature public key once, it also includes:

Generate a ring signature private key, and generate a traceable and linkable public key for traceable and linkable ring signatures based on the elliptic curve group generator, the elliptic curve group element, the ring signature private key, and the one-time signature private key ；

Obtain target data based on the traceable and linkable public key, the elliptic curve group generator, the elliptic curve group element, the ring signature private key, the one-time signature private key, and the pair of the one-time signature public key Performing a traceable and linkable ring signature on the target data to obtain a traceable and linkable ring signature result of the target data;

Publish the traceable and linkable ring signature result to the verification blockchain node, so that the verification blockchain node can verify the traceable and linkable ring signature result.
The method of claim 3, wherein the generation of the elliptic curve group generator, the elliptic curve group element, the ring signature private key, and the one-time signature private key is traceable and linkable The traceable and then linked public key includes:

According to the first calculation formula, the traceable and linkable ring signature is generated based on the elliptic curve group generator, the elliptic curve group element, the ring signature private key, and the one-time signature private key Public key

The first calculation formula includes:

Where i represents the label of the target blockchain node; PK i represents the traceable and linkable public key for the target blockchain node to sign the traceable and linkable ring; g represents the elliptic curve group generator ；
Represents the UPK generated last time; h represents the elliptic curve group element; x i represents the ring signature private key of the target blockchain node; a i represents the one-time signature private key of the target blockchain node key;
Represents the zero-knowledge proof result of the legitimacy of the traceable and linkable public key.
The method according to claim 4, wherein the traceable and linkable public key, the elliptic curve group generator, the elliptic curve group element, the ring signature private key, the one-time The signature private key and the one-time signature public key perform a traceable and linkable ring signature on the target data to obtain a traceable and linkable ring signature result of the data, including:

A preset number of other blockchain nodes are selected, and a ring signature public key is generated based on the public key of the other blockchain node and the public key of the target blockchain node through a second calculation formula, the preset number N-1, n is an integer greater than or equal to 2;

Perform a ring signature on the target data based on the ring signature public key and the ring signature private key through the third calculation formula to obtain a common ring signature result;

According to the fourth calculation formula, the ordinary ring signature result is signed once based on the one-time signature private key, the ring signature public key, and the one-time signature public key to obtain a signature result;

Using the ring signature public key, the target data, the ordinary ring signature result, and the one-time signature result as the traceable and linkable ring signature result;

The second calculation formula includes:

The third calculation formula includes:

A=SIG(x i ,L,m);

The fourth calculation formula includes:

σ=OSIG(a i ,SIG(x i ,L,m),L,OPK);

Where, L represents the public key of the ring signature; when 1≤j≤n-1, and j≠i, x j represents the ring signature private key of the other blockchain node, and a j represents the other blockchain The one-time signature private key of the node; A represents the ordinary ring signature result; SIG represents the ring signature algorithm; m represents the target data; σ represents the one-time signature result; OSIG represents the one-time signature algorithm; OPK represents the one-time signature public key key.
The method according to claim 1, wherein the discrete cipher group generator includes an elliptic curve group generator, and the encrypted group element includes an elliptic curve group element;

According to the preset format, process its own private data based on the discrete cipher group generator and the encryption group element, and publish the corresponding processing result to the blockchain, so that the supervision The node can supervise the target blockchain node and/or the private data based on the processing result and the first random number, including:

Obtain the target value and generate a second random number;

Calculating the target value based on the elliptic curve group generator, the elliptic curve group element, and the second random number to obtain a promised value;

Split the target value into sub-target values according to a preset split format, and split the second random number into sub-second random numbers corresponding to the sub-target value;

Calculate the first commitment value and second commitment value of each of the sub-target values and the corresponding sub-second random numbers based on the elliptic curve group generator and the elliptic curve group elements, and publish the first commitment value Commitment value

Based on the elliptic curve group elements, calculate and publish the numerical verification results of each of the sub-target values and the corresponding sub-second random numbers, so that the supervisory node can be based on the first commitment value and the numerical value. The verification result and the first random number determine the target value.
The method according to claim 6, characterized in that, after calculating and publishing the numerical verification result of each of the sub-target values and the corresponding sub-second random numbers based on the elliptic curve group elements, the method further comprises :

Calculating the sub-public key of each sub-target value based on the first commitment value, the second commitment value, and the numerical verification result of each of the sub-target values;

Calculating a sub-ring signature result of each of the sub-target values based on the commitment value, the sub-public key of each of the sub-target values, and the sub-second random number;

Taking the commitment value and all the sub-ring signature results as the verification result of the traceable interval of the target value;

Publish the verification result of the numerical traceable interval to the verification blockchain node, so that the verification blockchain node can verify the verification result of the numerical traceable interval and the numerical verification result, and pass the verification Afterwards, the result of the traceable interval of the numerical value is shown on the chain.
The method according to claim 7, wherein the calculating the target value based on the elliptic curve group generator, the elliptic curve group element, and the second random number to obtain a promised value comprises :

Calculating the target value based on the elliptic curve group generator, the elliptic curve group element, and the second random number through a promise value calculation formula to obtain the promise value;

The commitment value calculation formula includes:

c=g y h b ;

Wherein, c represents the commitment value; y represents the second random number; b represents the target value.
The method according to claim 8, wherein the target value is split into sub-target values according to a preset split format, and the second random number is split into sub-target values. The second random number corresponding to the value, including:

Split the target value into the sub-target value by a first split formula;

Split the second random number into the sub-second random number corresponding to the sub-target value by using a second split formula;

The first splitting formula includes:

b=b 0 +…+2 i b i +…+2 v-1 b v-1 ;

The second splitting formula includes:

y 0 +…+y i +…+y v-1 =y;

Wherein, b i represents the i-th sub-target value, v represents the total number of the sub-target values, and the value of b i is 0 or 1; y i represents the i-th sub-target value corresponding to the The second random number.
The method according to claim 9, wherein the calculation of each of the sub-target value and the corresponding sub-second random number is based on the elliptic curve group generator and the elliptic curve group element. The first commitment value and the second commitment value include:

According to the fifth calculation formula, the first commitment value and the first commitment value of each sub-target value and the corresponding sub-second random number are calculated based on the elliptic curve group generator and the elliptic curve group element. 2. Commitment value;

The fifth operation formula includes:

Wherein, c i represents the i-th first commitment value; c′ i represents the i-th second commitment value;

The calculating and publishing the numerical verification result of each sub-target value and the corresponding sub-second random number based on the elliptic curve group element includes:

Calculate and publish the numerical verification result of each sub-target value and the corresponding sub-second random number based on the elliptic curve group element through a sixth calculation formula;

The sixth operation formula includes:

Wherein, TK′ i represents the i-th numerical verification result;

The calculating the sub-public key of each of the sub-target values based on the first commitment value, the second commitment value, and the value verification result of each of the sub-target values includes:

Calculating the sub-public key of each sub-target value based on the first commitment value, the second commitment value, and the numerical verification result of each of the sub-target values through a seventh calculation formula;

The seventh operation formula includes:

PK′ i =(c i ,c′ i ,TK′ i ,π(c i ,c′ i ,TK′ i )); where PK′ i represents the i-th said child public key; π(c i ,c′ i ,TK′ i ) represents the zero-knowledge proof result of the legitimacy of TK′ i;

The calculating the sub-ring signature result of each of the sub-target values based on the commitment value, the sub-public key and the sub-second random number of each of the sub-target values includes:

Calculating the sub-ring signature result of each of the sub-target values based on the commitment value, the sub-public key of each of the sub-target values, and the sub-second random number by using an eighth operation formula;

The eighth operation formula includes:

σ i =SIG(PK' i ,y i ,c); where σ i represents the i-th sub-ring signature result.
The method according to any one of claims 1 to 10, wherein the preset format includes α β , α represents a password group element, and β represents a random number.
A block chain information transmission method, characterized in that it is applied to a verification block chain node in a block chain system, the block chain system further includes a target block chain node, and the method includes:

Obtain the one-time signature public key published by the target blockchain node, and determine whether the one-time signature public key already exists in the blockchain system;

If the one-time signature public key already exists in the blockchain system, output abnormal information. If the one-time signature public key does not exist in the blockchain system, then obtain the information issued by the target blockchain node Data traceable and linkable ring signature results;

Obtain and verify
Is it correct; π means zero-knowledge proof, g means generator of elliptic curve group;
Represents the UPK generated last time; h represents the elliptic curve group element; x i represents the ring signature private key of the target blockchain node; a i represents the primary signature private key of the target blockchain node;

If
If it is correct, check whether the ring signature public key in the traceable linkable ring signature result is correct;

If the ring signature public key is correct, check whether the ordinary ring signature result in the traceable linkable ring signature result is correct;

If the result of the ordinary ring signature is correct, check whether the one-time signature result in the traceable and linkable ring signature result is correct;

If the one-time signature result is correct, check whether the traceable linkable ring signature result is correct.
The method according to claim 12, further comprising:

Obtain the commitment value, the first commitment value, the second commitment value, the numerical verification result, and the numerical traceable interval verification result generated by the target blockchain node; acquire the elliptic curve group element;

Verify that all π(c i ,c′ i ,TK′ i ) are correct; c i represents the first commitment value; c′ i represents the second commitment value; TK′ i represents the numerical verification result ；

If all π(c i ,c′ i ,TK′ i ) are correct, verify all
Whether they are all correct; h represents the elliptic curve group element;

If all
If it is correct, verify whether ∏c i =c is correct, ∏ represents the summation operation, and c represents the promised value;

If ∏c i = c is correct, verify the correctness of the result by verifying the traceable interval of the value;

If the value traceable interval proves that the result is correct, then the value traceable interval proves the result.
A block chain information transmission method, characterized in that it is applied to a supervisory node in a block chain system, the block chain system further includes a target block chain node, and the method includes:

Generating a first random number and saving it as a trapdoor, so that the blockchain performs an operation on the first random number and a discrete cipher group generator based on a preset format to obtain an encrypted group element;

Publishing the encrypted group element, so that the blockchain node in the blockchain generates a corresponding one-time signature public key based on the discrete cryptographic group generator, the encrypted group group element, and the corresponding one-time signature private key;

Obtain the first series of calculation results published by the blockchain node in the blockchain, where the first series of calculation results include the block chain node’s Describe the result obtained after a signature private key is calculated;

Obtain the target's one-time signature public key;

Performing an operation on each operation result in the first series of operation results by using the first random number according to the preset format to obtain a corresponding first operation value;

Determining the blockchain node corresponding to the first operation value equal to the value of the target primary signature public key as the target blockchain node;

Wherein, the preset format includes α β , α represents a cipher group element, and β represents a random number.
The method according to claim 14, wherein after the publishing of the encrypted group element, the method further comprises:

Obtaining the first commitment value and the value verification result corresponding to the target value published by the target blockchain node;

For each of the first commitment values, according to the preset format, the second operation value corresponding to the first commitment value is calculated by the first random number, and it is determined whether the second operation value is the same as the numerical value. If the verification results are equal, determine that the value of the sub-target value corresponding to the first commitment value is 0, if not, determine that the value of the sub-target value of the first commitment value is 1;

According to the preset split format, the target value is determined based on the sub-target value.
A block chain information transmission system, characterized in that it is applied to a target block chain node in a block chain system, the block chain system further includes a supervision node, and the system includes:

The first obtaining module is configured to obtain a predetermined discrete cipher group generator and an encrypted group element. The encrypted group element includes a cipher group obtained by calculating a first random number and the discrete cipher group generator based on a preset format Element, and the first random number is a trapdoor generated and saved by the supervisory node;

The first processing module is configured to process its own private data based on the discrete cipher group generator and the encrypted group element according to the preset format, and publish the corresponding processing result to the blockchain, So that the supervision node can supervise the target blockchain node and/or the private data based on the processing result and the first random number.
A block chain information transmission device, characterized in that the device includes a memory and a processor, the memory stores a block chain information transmission program that can run on the processor, and the block chain information When the transmission program is executed by the processor, the method according to any one of claims 1 to 15 is implemented.
A computer-readable storage medium, characterized in that a blockchain information transmission program is stored on the computer-readable storage medium, and the blockchain information transmission program can be executed by one or more processors to achieve such The blockchain information transmission method according to any one of claims 1 to 15.
A blockchain system, which is characterized by including ordinary blockchain nodes and supervisory nodes;

The ordinary blockchain node is used to implement the blockchain information transmission method according to any one of claims 1 to 11;

The supervisory node is used to implement the blockchain information transmission method according to claim 14 or 15.
The system according to claim 19, further comprising a verification blockchain node;

The verification blockchain node is used to implement the blockchain information transmission method according to claim 12 or 13.