WO2021098140A1

WO2021098140A1 - Blockchain network deployment method, electronic device, and computer-readable storage medium

Info

Publication number: WO2021098140A1
Application number: PCT/CN2020/086275
Authority: WO
Inventors: 鲁铁华
Original assignee: 深圳壹账通智能科技有限公司
Priority date: 2019-11-21
Filing date: 2020-04-23
Publication date: 2021-05-27
Also published as: CN111130841A; CN111130841B

Abstract

The present application relates to blockchain technology, and disclosed therein is a blockchain network deployment method. The method comprises: using a Java service to provide a Restful API interface, and receiving an HTTP request for creating a blockchain network that is initiated by a client; generating, according to parameters in the HTTP request, a yaml configuration file by using a template; calling a Kubernetes Restful API interface, starting up a container according to the yaml configuration file, and establishing a blockchain network; and generating a user certificate by using Fabric-CA and saving same to a network-attached storage (NAS) disk for sharing. Further provided in the present application are an electronic device and a computer-readable storage medium. The blockchain network deployment method, electronic device, and computer-readable storage medium provided in the present application can solve the defects and deficiencies in an official example and are applied to a production environment.

Description

Block chain network deployment method, electronic device and computer readable storage medium

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on November 21, 2019, the application number is 201911151724.5, and the invention title is "Blockchain network deployment method, electronic device, and computer-readable storage medium". All of them The content is incorporated in this application by reference.

Technical field

This application relates to the field of blockchain technology, and in particular to a blockchain network deployment method, electronic device, and computer-readable storage medium.

Background technique

Hyperledger Fabric (hereinafter referred to as Fabric) is a blockchain open source project. It officially provides a sample of one-click deployment of blockchain network based on Docker (application container engine), which can quickly build a blockchain for testing and demonstration purposes. Network, but the scenario considered in the official sample is relatively simple and cannot meet the needs of the production environment. The inventor realizes that the official sample has the following shortcomings: (1) The private key and certificate are generated using command-line tools, and all certificates are generated at once, and cannot be dynamically added. (2) The bottom layer is implemented based on Docker and Docker-Compose technology. The container is started with Docker-Compose, does not support distributed, and all components are limited to run on one host. (3) One-click deployment is completed through Shell script, the organizational structure is fixed, the modification is complicated, and the addition of new organizations is not supported.

Summary of the invention

In view of this, this application proposes a blockchain network deployment method, electronic device, and computer-readable storage medium to solve at least one of the above technical problems.

First of all, in order to achieve the above purpose, this application proposes a blockchain network deployment method, which includes the steps:

Provides a Restful API interface through JAVA services, and receives HTTP requests initiated by the client to create a blockchain network;

Use a template to generate a yaml configuration file according to the parameters in the HTTP request;

Call the Restful API interface of Kubernetes, start the container according to the yaml configuration file, and build a blockchain network; and

Use Fabric-CA to generate user certificates and save them to the NAS network disk share.

Optionally, the method further includes the steps:

When a new user needs to be created, the interface of Fabric-CA is called to dynamically generate a new user certificate and save it to the NAS network disk.

Optionally, the steps of starting the container according to the yaml configuration file, building a blockchain network, and using Fabric-CA to generate a user certificate, and save it to a NAS network disk share include:

Start the Root-CA server as the root node of the CA server;

Start the ICA server of each organization;

Start the Setup node to complete the initialization, and generate the user certificate file through the ICA server;

Save the generated user certificate file to the NAS network disk share;

Start the Orderer node and Peer node.

Optionally, the step of generating a user certificate file through the ICA server includes:

Use the register identity command of Fabric-ca-client to register a user on the ICA server and set the user name and password;

Generate a pair of public key and private key, and save the private key file to the local disk;

Use Fabric-ca-client's registration identity command to send the registered user name, password, and public key file to the ICA server, and the ICA server returns the issued digital certificate.

Optionally, the HTTP request includes parameters in JSON format, and the parameters in JSON format are used to customize the blockchain network structure and configure according to the blockchain network information entered by the user, including the blockchain network Name, the name and number of organizations included in the blockchain network, and the name and number of nodes included in each organization.

In addition, in order to achieve the above object, the present application also provides an electronic device, including a memory and a processor, the memory stores a blockchain network deployment system that can run on the processor, and the blockchain network When the deployment system is executed by the processor, the steps of the above-mentioned blockchain network deployment method are realized.

Further, in order to achieve the above object, the present application also provides a computer-readable storage medium, the computer-readable storage medium stores a blockchain network deployment system, and the blockchain network deployment system can be used by at least one processor Execute, so that the at least one processor executes the steps of the blockchain network deployment method described above.

Compared with the prior art, the blockchain network deployment method, electronic device and computer-readable storage medium proposed in this application can provide Java services by the server, generate yaml configuration files according to HTTP requests initiated by the client, and call K8s According to the Restful API interface, start each container according to the yaml configuration file, complete the blockchain network construction, realize the blockchain as a service, and support the one-click deployment of the Fabric blockchain network. In addition, Fabric-CA is used to generate user certificates, and each organization deploys an ICA server to ensure data security, and all certificates are saved to the NAS network disk for sharing. This application solves the shortcomings and deficiencies in the official sample, and can be applied to the production environment.

Description of the drawings

FIG. 1 is a schematic diagram of an optional hardware architecture of the electronic device of the present application;

2 is a schematic diagram of program modules of the first embodiment of the blockchain network deployment system of the present application;

Figure 3 is a schematic diagram of the architecture of a blockchain network deployed in this application;

4 is a schematic diagram of program modules of the second embodiment of the blockchain network deployment system of the present application;

FIG. 5 is a schematic flowchart of the first embodiment of the blockchain network deployment method of the present application;

Fig. 6 is a detailed flowchart of steps S404 and S406 in Fig. 5;

FIG. 7 is a schematic flowchart of a second embodiment of a blockchain network deployment method according to the present application;

Detailed ways

This application refers to FIG. 1, which is a schematic diagram of an optional hardware architecture of the electronic device 2 of this application.

In this embodiment, the electronic device 2 may include, but is not limited to, a memory 11, a processor 12, and a network interface 13 that can communicate with each other through a system bus. It should be pointed out that FIG. 1 only shows the electronic device 2 with the components 11-13, but it should be understood that it is not required to implement all the illustrated components, and more or fewer components may be implemented instead.

The electronic device 2 may be a node forming a blockchain network.

The network interface 13 may include a wireless network interface or a wired network interface, and the network interface 13 is generally used to establish a communication connection between the electronic device 2 and other electronic devices.

So far, the hardware structure and functions of the relevant equipment of this application have been introduced in detail. Hereinafter, various embodiments of the present application will be presented based on the above introduction. First, this application proposes a blockchain network deployment system 200.

Refer to FIG. 2, which is a program module diagram of the first embodiment of the blockchain network deployment system 200 of the present application.

In this embodiment, the blockchain network deployment system 200 includes a series of computer program instructions stored on the memory 11, and when the computer program instructions are executed by the processor 12, the blocks of the various embodiments of the present application can be implemented. Chain network deployment operation. In some embodiments, the blockchain network deployment system 200 may be divided into one or more modules based on specific operations implemented by the various parts of the computer program instructions. For example, in FIG. 2, the blockchain network deployment system 200 can be divided into a receiving module 201, a configuration module 202, a starting module 203, and a generating module 204. among them:

The receiving module 201 is used to receive an HTTP request for creating a blockchain network.

Specifically, this embodiment uses Kubernetes (K8s for short) to manage Docker containers, supports expansion (which can be expanded to more nodes based on the node created for the first time), provides Java services, supports one-click deployment of the Fabric blockchain network, and completes the area. The start-up of the various components required by the blockchain network. The so-called one-click deployment means that the user only needs to issue an instruction to start the deployment, and then wait for the deployment to be completed, without intervention during the deployment process. In addition, this embodiment uses one-click deployment as a Web service and supports HTTP requests. The Java service calls the API interface of K8s to start and stop the container.

The client user enters the blockchain network related information (for example, information related to each organization) through the browser, and initiates an HTTP request to create the blockchain network, and the HTTP request contains parameters in JSON format. The parameters in the JSON format are used to customize the blockchain network structure, and are configured according to the relevant information of the blockchain network entered by the user, including the network name, the name of the organization included, the number of organizations, and the name of the node initiated by each organization And the number, etc.

The Java service of the server (the electronic device 2) provides a Restful API interface. After receiving the HTTP request, it parses the parameters in JSON format, assembles the parameters required by K8s, and then sends the HTTP request to K8s to create a blockchain network .

The configuration module 202 is configured to generate a yaml configuration file according to the HTTP request.

Specifically, the Java service uses a template to generate yaml configuration files, such as namespace.yaml, pvc.yaml, deployment.yaml, svc.yaml, etc., according to the parameters in the JSON format.

The starting module 203 is used to start the container according to the yaml configuration file to build a blockchain network.

The generating module 204 is configured to use Fabric-CA (Certificate Authority) to generate a user certificate.

The startup sequence of each container of the blockchain network has a dependency relationship, and the specific processing procedures of the startup module 203 and the generation module 204 include:

(1) Start the Root-CA server as the root node of the CA server.

(2) Start the ICA (Intermediate CA) server of each organization.

(3) Start the Setup node to complete the initialization, and generate the user certificate file through the ICA server.

Specifically, in order to facilitate communication with the ICA server, Fabric-ca-client is used to complete sending an HTTP request to the ICA server and parse the returned result. The Fabric-ca-client is a Shell script, and there are two most commonly used commands: register identity and register identity.

The steps to generate a digital certificate file for a user through the ICA server include:

a) Use the register identity command of Fabric-ca-client to register a user on the ICA server and set the user name and password;

b) Generate a pair of public key and private key, and save the private key file to the local disk;

c) Use the registered identity command of Fabric-ca-client to send the registered user name, password and public key file to the ICA server, and the ICA server returns the issued digital certificate.

(4) Save the generated user certificate file to the NAS network disk share.

Specifically, after the ICA server returns the digital certificate, it saves the digital certificate file (ca-cert.pem) to the NAS network disk.

(5) Start the Orderer node and Peer node.

Specifically, both the Orderer node and the Peer node are started based on the Docker container technology. They both create and run the container based on the Docker image file, and execute the shell command to start the service after the container is started. The Docker image file can be compared to the GHO image file when the GHOST tool is used to install the operating system.

The startup of Orderer nodes and Peer nodes is also different: Orderer nodes are started based on the Docker image of hyperledger/fabric-orderer, and the Orderer command is executed after the container is started; Peer nodes are started based on the Docker image of hyperledger/fabric-peer, and after the container is started Execute the peer node start command.

You can set environment variables through the yaml configuration file before starting the container. For example, the path of the digital certificate file required to start the Orderer node is achieved by configuring environment variables.

Since the Kubernetes technology is used in this embodiment, the container is actually started by Kubernetes. The specific method is to call the Restful API interface provided by Kubernetes and pass in the yaml configuration file to start the Orderer node and the Peer node.

Refer to Figure 3, which is a schematic diagram of the architecture of a blockchain network deployed in this application.

This embodiment supports the expansion of nodes or organizations in the blockchain network. Wherein, when a new Peer node joins the organization, the specific processing procedures of the configuration module 202 and the startup module 203 include:

(1) Start a new Peer node (start the container and execute the shell script to start the service).

(2) Modify the organization's Crypto-config.yaml configuration file to increase the number of Peer nodes.

(3) Modify the Network-config.json configuration file, add Peer node information, and realize SDK node discovery of new Peer nodes.

In addition, if necessary, new Peer nodes must be added to the channel, and smart contracts must be installed on the new Peer nodes.

When a new organization joins the blockchain alliance, the specific processing procedures of the configuration module 202 and the activation module 203 include:

(1) Start a new organization network (using container technology), including starting ICA node, Peer node and SDK node.

(2) Submit an application to join the blockchain alliance (the application includes organization network information), and the alliance administrator will join after approval.

(3) Modify the channel configuration and add the organization to the channel. Specifically, it includes the following steps:

a) Get the current configuration block of the channel.

b) Use the Configtxlator tool to read the configuration block and generate a configuration file in JSON format.

c) Modify the configuration file in JSON format and add new organization information.

d) Use the Configtxlator tool to generate a new channel configuration in Protobuf format.

e) Create a configuration transaction and submit a signed configuration transaction to update the channel configuration.

In addition, if necessary, the Peer nodes in the new organization should be added to the channel, and smart contracts should be installed on the Peer nodes in the new organization.

The blockchain network deployment system provided in this embodiment can deploy blockchain networks with one click based on Kubernetes and Fabric-CA. Kubernetes supports distributed deployment and can be expanded as needed. It can be started by calling Java services instead of executing Shell scripts. Fabric blockchain network realizes blockchain as a service. In addition, through the integration of Fabric-CA to generate user certificates, each organization deploys an ICA server to ensure data security. This embodiment solves the defects and deficiencies in the official sample, and can be applied to a production environment.

Refer to FIG. 4, which is a program module diagram of the second embodiment of the blockchain network deployment system 200 of the present application. In this embodiment, the blockchain network deployment system 200 includes a creation module 205 in addition to the receiving module 201, the configuration module 202, the activation module 203, and the generation module 204 in the first embodiment.

The creation module 205 is used to call the interface of Fabric-CA to dynamically generate a new user certificate when a new user needs to be created, and save it to the NAS network disk.

Specifically, after the blockchain network is started, during the operation process, it may be necessary to create new users and dynamically create new user certificates according to business needs. In this embodiment, the user can be obtained by accessing the SDK node when creating the user. The SDK node invokes the interface of the Fabric-CA (ICA server) to generate a new user certificate, which is then saved to the NAS network disk.

Use Network-config.yaml in the SDK node to access Fabric-CA. SDK is a Java service that provides a Restful API interface. Users can operate the blockchain network by accessing the API interface of the SDK node. Network-config.yaml is the SDK configuration file. The ICA server information is defined in the yaml file, including access addresses, users and passwords, and access certificates. Network-config.yaml can be provided not only for SDK use, but also for Used by other applications (such as blockchain browsers). When the SDK node starts, it parses the Network-config.yaml configuration file to read the configuration information of the ICA server and automatically construct a client to access the ICA server, which simplifies the interaction with the CA server and facilitates the dynamic generation of user certificates.

The blockchain network deployment system provided in this embodiment can deploy blockchain networks with one click based on Kubernetes and Fabric-CA. Kubernetes supports distributed deployment and can be expanded as needed. It can be started by calling Java services instead of executing Shell scripts. Fabric blockchain network realizes blockchain as a service. In addition, through the integration of Fabric-CA to generate user certificates, each organization deploys an ICA server, which can dynamically generate new certificates after the blockchain network is started. This embodiment solves the defects and deficiencies in the official sample, and can be applied to a production environment.

In addition, this application also proposes a blockchain network deployment method.

Refer to FIG. 5, which is a schematic flowchart of the first embodiment of the blockchain network deployment method of the present application. In this embodiment, according to different requirements, the execution order of the steps in the flowchart shown in FIG. 5 can be changed, and some steps can be omitted. The method includes:

Step S400, receiving an HTTP request for creating a blockchain network.

Step S402: Generate a yaml configuration file according to the HTTP request.

The yaml configuration file includes the configuration file of k8s and the configuration file of Fabric. In order to start a Docker container, whether you use K8s or Docker-compose, you need to write a large number of yaml configuration files to define the container's image, mount volume, environment variables, startup script and other information. In the official Fabric sample, these configuration files are manually written and prepared before starting the network. If you need to modify the blockchain network information, such as adding an organization, then you need to rewrite these yaml configuration files, which is time-consuming and labor-intensive. In this embodiment, these configuration files are abstracted as Freemarker templates to realize the separation of data and templates, so that the information input by the user can be received, the yaml configuration files required by K8s and Fabric are dynamically generated, and the one-click deployment of the blockchain network is realized.

Step S404: Start the container according to the yaml configuration file to build a blockchain network.

Specifically, the Java service calls the Restful API interface of K8s to create a blockchain network. K8s starts the Docker container according to the request parameters in the yaml configuration file to complete the blockchain network construction.

The Fabric blockchain network is based on Docker containers. Using K8s to manage Docker containers can support the deployment of the Fabric blockchain network in a distributed environment without restricting all components to run on one host. The Fabric blockchain network contains several organizations. Organization is a very important concept in the Fabric network. Nodes, channels, smart contracts, etc. are closely related to the organization. This embodiment implements blockchain as a service, supports one-click deployment of blockchain networks through APIs, and supports dynamic joining of new organizations.

Step S406: Use Fabric-CA to generate a user certificate, and save it to the NAS network disk share.

Specifically, encryption and decryption technologies are widely used in the blockchain, and private keys and certificates need to be generated for encryption, decryption, and signatures. In the official example, the private key and certificate are generated using command-line tools to generate all certificates at once. However, in a production environment, certain business scenarios (such as adding new users) need to dynamically generate new certificates, which cannot be satisfied by using command-line tools. Claim. In this embodiment, Fabric-CA is used as the authentication center to generate user certificates, new certificates can be added at any time, and the CSR information of the certificates can be customized. Fabric-CA can provide identity registration, issuance of registration certificates, issuance of transaction certificates, certificate renewal and revocation functions. During the startup phase of the blockchain network, Orderer nodes, Peer nodes, and transaction submissions need to use CA certificates. These certificates are generated when the blockchain network is started. After generation, they are stored on the NAS network disk, and from the NAS network when needed. Read these certificates on the disk.

In addition, the use of Fabric-CA can ensure that the private key is stored on different nodes to ensure the security of the private key (the official example uses the command line tool to generate the private key and is stored together, which is not secure).

In this embodiment, the startup sequence of each container of the blockchain network has a dependency relationship. Referring to FIG. 6, the steps S404 and S406 specifically include:

Step S4000, start the Root-CA server as the root node of the CA server.

Specifically, asymmetric encryption technology is used in the blockchain for data encryption and decryption. In the asymmetric encryption technology, a private key and a public key are required. The private key is only known by the data recipient, and the public key is public. The data sender uses the public key of the data receiver to encrypt the data and sends it to the data receiver, and the data receiver uses its own corresponding private key to decrypt it.

As a third-party authority, the CA server certifies that the public key is safe and has not been tampered with, and is used to ensure the security of the public key. The specific method of proof is: the data receiver sends its own public key to the CA server, the CA server returns a digital certificate (that is, the user certificate) to the data receiver, and then the data receiver sends the digital certificate issued by the CA server to the data receiver. The data sender uses it for encryption (the digital certificate contains the public key of the data receiver).

In this embodiment, for multiple organizations of the blockchain, multiple CA servers need to be deployed, and the Root-CA server is used as the root node of the CA server.

Step S4002, start the ICA server of each organization.

Specifically, each organization deploys an ICA server, and the certificate of each organization's ICA server is issued by the same Root-CA server, and the Root-CA server and the ICA server form a chain of trust. The ICA server of each organization provides certificate verification services for other nodes of the current organization (including Peer nodes and SDK nodes, etc.) to issue digital certificates required within the organization. The ICA server is a web server that can receive and process HTTP requests.

In step S4004, the Setup node is started to complete the initialization, and the user certificate file is generated through the ICA server.

Step S4006: Save the generated user certificate file to the NAS network disk share.

Step S4008, start the Orderer node and the Peer node.

This embodiment supports the expansion of nodes or organizations in the blockchain network. Among them, when a new Peer node joins the organization, the specific processing steps include:

When a new organization joins the blockchain alliance, the specific processing steps include:

a) Get the current configuration block of the channel.

The blockchain network deployment method provided in this embodiment can deploy the blockchain network with one click based on Kubernetes and Fabric-CA. Kubernetes supports distributed deployment and can be expanded as needed. It can be started by calling Java services instead of executing Shell scripts. Fabric blockchain network realizes blockchain as a service. In addition, through the integration of Fabric-CA to generate user certificates, each organization deploys an ICA server to ensure data security. This embodiment solves the defects and deficiencies in the official sample, and can be applied to a production environment.

As shown in FIG. 7, it is a schematic flowchart of the second embodiment of the blockchain network deployment method of the present application. In this embodiment, steps S500-S506 of the blockchain network deployment method are similar to steps S400-S406 of the first embodiment, except that the method further includes step S508.

The method includes the following steps:

Step S500, receiving an HTTP request for creating a blockchain network.

The Java service of the server (the electronic device 2) provides a Restful interface. After receiving the HTTP request, it parses the parameters in the JSON format, assembles the parameters required by K8s, and then sends the HTTP request to the K8s to create a blockchain network.

Step S502: Generate a yaml configuration file according to the HTTP request.

The yaml configuration file includes the configuration file of k8s and the configuration file of Fabric. In order to start a Docker container, whether you use K8s or Docker-compose, you need to write a large number of yaml configuration files to define the container's image, mount volume, environment variables, startup script and other information. In the official Fabric sample, these configuration files are manually written and prepared before starting the network. If you need to modify the blockchain network information, such as adding an organization, then you need to rewrite these yaml configuration files, which is time-consuming and labor-intensive. In this embodiment, these configuration files are abstracted as Freemarker templates to realize the separation of data and templates, so that the information input by the user can be received, and the yaml configuration files required by K8s and Fabric can be dynamically generated to realize one-click deployment of the blockchain network.

Step S504: Start the container according to the yaml configuration file to build a blockchain network.

Step S506: Use Fabric-CA to generate a user certificate, and save it to the NAS network disk share.

In step S508, when a new user needs to be created, the interface of the Fabric-CA is called to dynamically generate a new user certificate and save it to the NAS network disk.

The blockchain network deployment method provided in this embodiment can deploy the blockchain network with one click based on Kubernetes and Fabric-CA. Kubernetes supports distributed deployment and can be expanded as needed. It can be started by calling Java services instead of executing Shell scripts. Fabric blockchain network realizes blockchain as a service. In addition, through the integration of Fabric-CA to generate user certificates, each organization deploys an ICA server, which can dynamically generate new certificates after the blockchain network is started. This embodiment solves the defects and deficiencies in the official sample, and can be applied to a production environment.

This application also provides another implementation manner, that is, a computer-readable storage medium is provided. The computer-readable storage medium may be non-volatile or volatile, and the computer-readable storage medium has a storage area A blockchain network deployment program, the blockchain network deployment program can be executed by at least one processor, so that the at least one processor executes the steps of the blockchain network deployment method described above.

The serial numbers of the foregoing embodiments of the present application are only for description, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above implementation manners, those skilled in the art can clearly understand that the above-mentioned embodiment method can be implemented by means of software plus the necessary general hardware platform, of course, it can also be implemented by hardware, but in many cases the former is better.的实施方式。 Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology can be embodied in the form of a software product, and the computer software product is stored in a storage medium (such as ROM/RAM, magnetic disk, The optical disc) includes several instructions to enable a terminal device (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the method described in each embodiment of the present application.

The above are only the preferred embodiments of the application, and do not limit the scope of the patent for this application. Any equivalent structure or equivalent process transformation made using the content of the description and drawings of the application, or directly or indirectly applied to other related technical fields , The same reason is included in the scope of patent protection of this application.

Claims

A blockchain network deployment method, the method includes the steps:

Provides a Restful API interface through JAVA services, and receives HTTP requests initiated by the client to create a blockchain network;

Use a template to generate a yaml configuration file according to the parameters in the HTTP request;

Call the Restful API interface of Kubernetes, start the container according to the yaml configuration file, and build a blockchain network; and

Use Fabric-CA to generate user certificates and save them to the network attached storage NAS network disk share.
The blockchain network deployment method according to claim 1, the method further comprising the steps:

When a new user needs to be created, the interface of Fabric-CA is called to dynamically generate a new user certificate and save it to the NAS network disk.
The method for deploying a blockchain network according to claim 1 or 2, wherein the steps of starting a container according to the yaml configuration file, building a blockchain network, and using Fabric-CA to generate a user certificate, and save it to the NAS network disk sharing include:

Start the Root-CA server as the root node of the CA server;

Start the ICA server of each organization;

Start the Setup node to complete the initialization, and generate the user certificate file through the ICA server;

Save the generated user certificate file to the NAS network disk share;

Start the Orderer node and Peer node.
5. The blockchain network deployment method of claim 3, wherein the step of generating a user certificate file through the ICA server comprises:

Use the register identity command of Fabric-ca-client to register a user on the ICA server and set the user name and password;

Generate a pair of public key and private key, and save the private key file to the local disk;

Use Fabric-ca-client's registration identity command to send the registered user name, password, and public key file to the ICA server, and the ICA server returns the issued digital certificate.
The blockchain network deployment method according to claim 1 or 2, wherein the HTTP request contains parameters in JSON format, and the parameters in JSON format are used to customize the blockchain network structure according to the blockchain entered by the user. The network information is configured, including the name of the blockchain network, the name and number of organizations included in the blockchain network, and the name and number of nodes included in each organization.
A blockchain network deployment device, the device includes:

The receiving module is used to provide a Restful API interface through JAVA services and receive HTTP requests initiated by the client to create a blockchain network;

The configuration module is used to generate a yaml configuration file using a template according to the parameters in the HTTP request;

The startup module is used to call the Restful API interface of Kubernetes, start the container according to the yaml configuration file, and build a blockchain network; and

The generation module is used to use Fabric-CA to generate user certificates and save them to the network attached storage NAS network disk share.
The blockchain network deployment device according to claim 6, said device comprising:

The creation module is used to call the interface of Fabric-CA to dynamically generate a new user certificate when a new user needs to be created, and save it to the NAS network disk.
The device for deploying a blockchain network according to claim 6 or 7, wherein the activation module comprises:

The server start unit is used to start the Root-CA server as the root node of the CA server;

The starting unit is also used to start the ICA server of each organization;

The generating module includes:

The generating unit is used to start the Setup node to complete the initialization, and generate the user certificate file through the ICA server;

The saving unit is used to save the generated user certificate file to the NAS network disk share;

The node starting unit is used to start the Orderer node and the Peer node.
The blockchain network deployment device according to claim 8, wherein the generating unit comprises:

The registration subunit is used to use the registration identity command of Fabric-ca-client to register users on the ICA server and set the user name and password;

Generation subunit, used to generate a pair of public key and private key, and save the private key file to the local disk;

The sending subunit is used to send the registered user name, password, and public key file to the ICA server using the registration identity command of Fabric-ca-client, and the ICA server returns the issued digital certificate.
The blockchain network deployment device according to claim 6 or 7, wherein the HTTP request contains parameters in JSON format, and the parameters in JSON format are used to customize the blockchain network structure according to the blockchain entered by the user. The network information is configured, including the name of the blockchain network, the name and number of organizations included in the blockchain network, and the name and number of nodes included in each organization. ,
An electronic device, characterized in that the electronic device includes a memory and a processor, the memory stores a blockchain network deployment system that can run on the processor, and the blockchain network deployment system is When the processor executes, the following steps are implemented:

Provides a Restful API interface through JAVA services, and receives HTTP requests initiated by the client to create a blockchain network;

Use a template to generate a yaml configuration file according to the JSON format parameters in the HTTP request;

Call the Restful API interface of Kubernetes, start the container according to the yaml configuration file, and build a blockchain network; and

Use Fabric-CA to generate user certificates and save them to the network attached storage NAS network disk share.
11. The electronic device of claim 11, wherein the blockchain network deployment system further implements the steps when being executed by the processor:

When a new user needs to be created, the interface of Fabric-CA is called to dynamically generate a new user certificate and save it to the NAS network disk.
The electronic device according to claim 11 or 12, wherein the steps of starting the container according to the yaml configuration file, building a blockchain network, and using Fabric-CA to generate a user certificate, and save it to a NAS network disk sharing step include:

Start the Root-CA server as the root node of the CA server;

Start the ICA server of each organization;

Start the Setup node to complete the initialization, and generate the user certificate file through the ICA server;

Save the generated user certificate file to the NAS network disk share;

Start the Orderer node and Peer node.
The electronic device of claim 13, wherein the step of generating a user certificate file through the ICA server comprises:

Use the register identity command of Fabric-ca-client to register a user on the ICA server and set the user name and password;

Generate a pair of public key and private key, and save the private key file to the local disk;

Use Fabric-ca-client's registration identity command to send the registered user name, password, and public key file to the ICA server, and the ICA server returns the issued digital certificate.
The electronic device according to claim 11 or 12, wherein the HTTP request contains parameters in JSON format, and the parameters in JSON format are used to customize the blockchain network structure and configure according to the blockchain network information entered by the user , Including the name of the blockchain network, the name and number of organizations included in the blockchain network, and the name and number of nodes included in each organization.
A computer-readable storage medium, wherein the computer-readable storage medium stores a blockchain network deployment system, and the blockchain network deployment system can be executed by at least one processor, so that the at least one The processor executes the steps of the blockchain network deployment method:

Wherein, the blockchain network deployment method includes:

Provides a Restful API interface through JAVA services, and receives HTTP requests initiated by the client to create a blockchain network;

Use a template to generate a yaml configuration file according to the parameters in the HTTP request;

Call the Restful API interface of Kubernetes, start the container according to the yaml configuration file, and build a blockchain network; and

Use Fabric-CA to generate user certificates and save them to the network-attached storage NAS network disk share.
The computer-readable storage medium of claim 16, the method further comprising the steps:

When a new user needs to be created, the interface of Fabric-CA is called to dynamically generate a new user certificate and save it to the NAS network disk.
The computer-readable storage medium according to claim 16 or 17, wherein the steps of starting a container according to the yaml configuration file, building a blockchain network, and using Fabric-CA to generate a user certificate, and save it to a NAS network disk sharing :

Start the Root-CA server as the root node of the CA server;

Start the ICA server of each organization;

Start the Setup node to complete the initialization, and generate the user certificate file through the ICA server;

Save the generated user certificate file to the NAS network disk share;

Start the Orderer node and Peer node.
The computer-readable storage medium according to claim 18, wherein the step of generating a user certificate file through the ICA server comprises:

Use the register identity command of Fabric-ca-client to register a user on the ICA server and set the user name and password;

Generate a pair of public key and private key, and save the private key file to the local disk;

Use Fabric-ca-client's registration identity command to send the registered user name, password, and public key file to the ICA server, and the ICA server returns the issued digital certificate.
The computer-readable storage medium according to claim 16 or 17, wherein the HTTP request contains parameters in JSON format, and the parameters in JSON format are used to customize the blockchain network structure according to the blockchain network entered by the user Information configuration includes the name of the blockchain network, the name and number of organizations included in the blockchain network, and the name and number of nodes included in each organization.