WO2021197092A1

WO2021197092A1 - Deposit certificate and recovery of balance of blockchain account

Info

Publication number: WO2021197092A1
Application number: PCT/CN2021/081720
Authority: WO
Inventors: 黄洲荣; 陈盛龙; 陈能贵
Original assignee: 支付宝(杭州)信息技术有限公司
Priority date: 2020-04-02
Filing date: 2021-03-19
Publication date: 2021-10-07
Also published as: CN111160913A; CN111160913B; CN112001731A; CN112001731B

Abstract

Provided are a method and apparatus for deposit certificate and recovery of the balance of a blockchain account. The method comprises: a blockchain user client sending a deposit certificate transaction to a node device of a blockchain on the basis of a preset sending period so as to correspondingly update, in a state database of a blockchain account, the current block height and the current recovery parameters comprised in the deposit certificate transaction; acquiring the latest current recovery parameters and the latest current block height corresponding to the latest construction moment of the deposit certificate transaction; decrypting at least some of the latest current recovery parameters, and obtaining, on the basis of the latest current recovery parameters obtained by decryption, plaintext of an account balance encrypted at the latest construction moment; and on the basis of the plaintext of the account balance encrypted at the latest construction moment, starting from a block after the latest current block height, and recovering the plaintext of the current account balance of a blockchain user on the basis of a transfer transaction that is stored in the blockchain and related to the blockchain user.

Description

Deposit and recovery of blockchain account balance

Technical field

One or more implementations of this specification relate to the field of blockchain technology, and in particular to the deposit and recovery of a blockchain account balance.

Background technique

In order to protect users’ data privacy, account balance information on the blockchain can be stored in an encrypted privacy state. Specific encryption methods can include homomorphic encryption, so that blockchain accounts can be chained in an encrypted privacy state. Up-transfer transactions; each blockchain user can keep the encryption or decryption parameters related to his own account balance in the local database (or private database) under the corresponding node device or the client's chain, so as to facilitate the knowledge of their own chain at any time The plain text corresponding to the account balance.

However, the localized stored plaintext of the account balance and the encryption or decryption parameters related to the account balance are easy to be deleted, modified, or lost when the node device or client system fails or the storage medium is damaged. At this time, Blockchain users will find it difficult to know the plaintext corresponding to the account balance on their own chain.

Summary of the invention

In view of this, one or more embodiments of this specification provide a deposit certificate, recovery method, device, and computer equipment of a blockchain account balance.

In order to achieve the above objectives, one or more implementations of this specification provide a method for depositing a blockchain account balance. The account balances of user accounts stored on the blockchain are all encrypted using the first encryption algorithm. Processing, the method includes: a node device of the blockchain receives a deposit certificate transaction sent by a blockchain user client based on a preset sending cycle; the deposit certificate transaction includes the current block height and the current recovery parameter; wherein, all The block height at the time is the block height at the time when the attestation transaction is constructed, and the at the time recovery parameter is a value stored locally by the client and available to the blockchain user at the time at which the attestation transaction is constructed. The plaintext of the encrypted account balance is restored with multiple parameters, and at least some of the parameters of the restored parameters at the time are encrypted; the deposit certificate transaction is published to the blockchain, so that the blockchain can pair Consensus processing is performed on the deposit transaction; when the deposit transaction consensus is passed, the deposit transaction is stored in the distributed ledger of the blockchain, and the current block height and the current recovery parameters are correspondingly updated In the state database of the blockchain users.

In another illustrated embodiment, the attestation transaction is constructed based on a storage snapshot of the blockchain client, and the storage snapshot includes the current block height and current recovery parameters.

In another embodiment shown, the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the account balances of the user accounts stored on the blockchain The first encryption algorithm is adopted, and the random number is used as the encryption factor for encryption processing; the recovery parameters at the time include the random number corresponding to the encrypted account balance at the construction time, and the blockchain user in the The encrypted account balance at the time of construction of the deposit certificate transaction; wherein the random number at that time is encrypted.

In another embodiment shown, the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the account balances of the user accounts stored on the blockchain The first encryption algorithm is adopted, and the random number is used as the encryption factor for encryption processing; the recovery parameters at the time include the random number corresponding to the encrypted account balance at the construction time, and the blockchain user in the The plaintext of the encrypted account balance at the construction time of the deposit certificate transaction; wherein the plaintext of the random number at the time and the encrypted account balance at the construction time are encrypted.

In another embodiment shown, the first encryption algorithm is a homomorphic encryption algorithm, and the current random number is an encrypted random number corresponding to the encrypted account balance at the construction time; the blockchain user The transfer amount of the related transfer transaction is also encrypted using the homomorphic encryption algorithm, based on the transfer amount random number as the encryption factor, and the transfer amount and the transfer amount random number are combined with the blockchain user’s The key encryption related to the public key.

Correspondingly, this specification also provides a method for restoring the balance of a blockchain account. The account balances of user accounts stored on the blockchain are all encrypted using the first encryption algorithm, and the method includes: The block chain user client sends a deposit transaction to the node device of the blockchain based on the preset sending cycle, so that after the deposit transaction is passed by consensus, the current block height and the current block height included in the deposit transaction are restored. The parameters are correspondingly updated in the state database of the blockchain account; wherein, the current block height is the block height of the blockchain synchronized by the client at the time the deposit transaction is constructed, and the current recovery The parameters are multiple parameters that are stored locally by the client and can restore the plaintext of the encrypted account balance of the blockchain user at the time of the construction of the deposit transaction, and at least the restored parameters at that time Part of the parameters are encrypted; obtain the latest current recovery parameters and the latest current block height corresponding to the latest construction time of the deposit transaction in the state database of the blockchain account; decrypt at least part of the latest current recovery parameters Parameters, and obtain the plaintext of the encrypted account balance at the latest construction time based on the latest recovery parameters obtained by decryption; After the beginning of the block, based on the transfer transaction related to the blockchain user stored on the blockchain, the plaintext of the current account balance of the blockchain user is restored.

In another embodiment shown, the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the account balances of the user accounts stored on the blockchain The first encryption algorithm is adopted, and the random number is used as the encryption factor for encryption processing; the recovery parameters at the time include the random number corresponding to the encrypted account balance at the construction time, and the blockchain user in the The plain text of the encrypted account balance at the time of construction of the deposit certificate transaction; wherein the plain text of the random number at the time and the account balance at the time of construction are encrypted.

In another embodiment shown, the first encryption algorithm is a homomorphic encryption algorithm, and the current random number is a random number used when homomorphically encrypting the encrypted account balance at the construction time; The transfer amount of the transfer transaction related to the blockchain user is also encrypted using the homomorphic encryption algorithm, based on the transfer amount random number as an encryption factor, and the transfer amount and the transfer amount random number are combined with the The key encryption related to the public key of the blockchain user; the plaintext based on the encrypted account balance at the latest construction time starts from the height of the latest current block and is based on the stored on the blockchain For transfer transactions related to the blockchain user, recovering the plaintext of the current account balance of the blockchain user includes: the plaintext of the encrypted account balance based on the latest construction time, from the latest At the beginning of the block after the block height at that time, the key related to the private key of the blockchain user is used to decrypt the transfer transactions related to the blockchain user one by one to obtain the transfer amount and the transfer amount of the transfer transaction one by one. Transfer amount random number; based on the transfer amount of the transfer transaction and the transfer amount random number, restore the plaintext of the blockchain user’s account balance corresponding to the transfer transaction one by one until the blockchain user’s account balance is recovered The clear text of the current account balance.

Correspondingly, this specification also provides a device for depositing blockchain account balances. The account balances of user accounts stored on the blockchain are all encrypted using the first encryption algorithm. The device is applied to The node equipment of the block chain includes: a receiving unit that receives a deposit certificate transaction sent by a blockchain user client based on a preset sending cycle; the deposit certificate transaction includes the current block height and the current recovery parameter; wherein, the The block height at that time is the block height at the time when the attestation transaction is constructed, and the at that time recovery parameters are stored locally by the client and can be used by the blockchain user at the time when the attestation transaction is constructed. The clear text of the encrypted account balance is used to restore multiple parameters, and at least part of the parameters of the restored parameters at that time are encrypted; the issuing unit publishes the deposit certificate transaction to the blockchain, so that the block The chain performs consensus processing on the deposit transaction; the storage unit, when the deposit transaction consensus is passed, stores the deposit transaction in the distributed ledger of the blockchain, and combines the current block height and At that time, the recovery parameters are correspondingly updated in the state database of the blockchain user.

Correspondingly, this specification also provides a device for restoring the balance of a blockchain account. The account balances of user accounts stored on the blockchain are all encrypted using the first encryption algorithm. The device is used in the district. The blockchain user client includes: a sending unit, which sends a deposit transaction to the node device of the blockchain based on a preset sending cycle, so that after the deposit transaction is passed by consensus, the deposit transaction includes the current The block height and the recovery parameters at the time are correspondingly updated in the state database of the blockchain account; wherein the current block height is the block at the time of the construction of the deposit transaction on the blockchain synchronized by the client Height, the recovery parameters at that time are multiple parameters stored locally by the client that can recover the plaintext of the encrypted account balance of the blockchain user at the time of construction of the deposit transaction, and all At least part of the parameters of the restoration parameters at the time are encrypted; an obtaining unit obtains the latest restoration parameters and the latest current block height corresponding to the latest construction time of the deposit transaction in the state database of the blockchain account; decryption And a recovery unit to decrypt at least part of the parameters of the latest recovery parameters at the time, and obtain the plaintext of the encrypted account balance at the latest construction time based on the latest recovery parameters obtained from the decryption; The clear text of the account balance, starting from the block after the latest current block height, based on the transfer transaction related to the blockchain user stored on the blockchain, recovering the blockchain user’s The clear text of the current account balance.

In another embodiment shown, the first encryption algorithm is a homomorphic encryption algorithm, and the current random number is a random number used when homomorphically encrypting the encrypted account balance at the construction time; The transfer amount of the transfer transaction related to the blockchain user is also encrypted using the homomorphic encryption algorithm, based on the transfer amount random number as an encryption factor, and the transfer amount and the transfer amount random number are combined with the The key encryption related to the public key of the blockchain user; the decryption and recovery unit is further based on the plaintext of the encrypted account balance at the latest construction time, starting from the block after the latest current block height , Using the key related to the private key of the blockchain user to decrypt the transfer transactions related to the blockchain user one by one to obtain the transfer amount and the transfer amount random number of the transfer transaction one by one; based on the transfer The transfer amount and the transfer amount random number of the transaction are restored one by one in the plaintext of the account balance of the blockchain user corresponding to the transfer transaction, until the plaintext of the current account balance of the blockchain user is recovered.

Correspondingly, this specification also provides a computer device, including: a memory and a processor; the memory stores a computer program that can be run by the processor; when the processor runs the computer program, it executes as described above The blockchain account balance deposit method implemented by the node device described in each embodiment.

This specification also provides a computer device, including: a memory and a processor; the memory stores a computer program that can be run by the processor; when the processor runs the computer program, it executes the above-mentioned embodiments The described method for restoring the balance of the blockchain account executed by the client.

The blockchain account balance deposit certificate, recovery method, device, and computer equipment provided by the various embodiments of this specification. In this embodiment, the client can send deposit certificates to the node devices of the blockchain based on a preset sending cycle. Transaction, so that the current block height and recovery parameters included in the deposit transaction are updated in the state database of the blockchain account correspondingly, and the anti-tampering mechanism based on the blockchain is the above-mentioned current block height and the current recovery Parameter deposit; the client starts from the latest current block height of the above-mentioned deposit transaction certificate, for transfer transactions on blocks after the above-mentioned latest current block height, the clear text of the client user’s blockchain account balance is Perform recovery outside the chain until it catches up with the current block height of the blockchain, and obtain the clear text of the current account balance of the client user; compared to the initial value of the account balance and the genesis block, all blocks are combined with For the return visit and calculation of user-related transfer transactions, the method for restoring the account balance provided by this embodiment greatly reduces the processing time and the amount of calculation.

Description of the drawings

FIG. 1 is a schematic flowchart of a method for depositing and recovering a blockchain account balance according to an exemplary embodiment;

2 is a schematic diagram of the process of depositing and restoring a homomorphic encrypted blockchain account balance provided by an exemplary embodiment;

FIG. 3 is a schematic diagram of an account balance deposit certification device applied to a blockchain on a node device side according to an exemplary embodiment;

FIG. 4 is a schematic diagram of an account balance recovery device applied to a client's blockchain according to an exemplary embodiment;

Fig. 5 is a hardware structure diagram of the implementation of the device for depositing or restoring the account balance provided in this specification.

Detailed ways

Here, exemplary embodiments will be described in detail, and examples thereof are shown in the accompanying drawings. When the following description refers to the accompanying drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementation manners described in the following exemplary implementation manners do not represent all implementation manners consistent with one or more implementation manners of this specification. On the contrary, they are merely examples of devices and methods consistent with some aspects of one or more embodiments of this specification as detailed in the appended claims.

It should be noted that in other embodiments, the steps of the corresponding method are not necessarily executed in the order shown and described in this specification. In some other embodiments, the method may include more or fewer steps than described in this specification. In addition, a single step described in this specification may be decomposed into multiple steps for description in other embodiments; and multiple steps described in this specification may also be combined into a single step in other embodiments. describe.

The blockchain or blockchain network described in one or more embodiments of this specification can specifically refer to a P2P network system with a distributed data storage structure reached by each node device through a consensus mechanism. Ledger data is distributed in time-connected "blocks". The next block can contain the data summary of the previous block and is based on the specific consensus mechanism (such as POW, POS, DPOS or PBFT, etc.) ) To achieve full backup of all or part of the node data. The ledger data in the above-mentioned block chain can be stored in the block in a transaction format. The node device or client of the blockchain can construct the real data generated by the physical world into a standard transaction format supported by the blockchain, and then publish it to the blockchain. The nodes in the blockchain The device performs consensus processing on the received transaction, and after reaching a consensus, the node device as the accounting node in the blockchain will package the transaction into a block and store it persistently in the block of the blockchain. certificate.

In order to easily obtain the current value of the ledger data, the blockchain also sets up a state database (or world state) to store the current value of the ledger data, eliminating the need for node devices to traverse the entire blockchain to calculate the current value of the ledger data The value of the state can be read directly from the state database. When the above transaction is stored in a block of the blockchain, each node device can update its current value in the state database according to the data in the above transaction.

Those skilled in the art are well aware that because the blockchain network system operates under the corresponding consensus mechanism, the data that has been included in the blockchain database is difficult to be tampered with by any node. For example, a blockchain using Pow consensus requires at least full Only 51% of the network's computing power can tamper with existing data. Therefore, the blockchain system has the characteristics of ensuring data security and preventing attack and tampering that other centralized database systems cannot match. It can be seen that the data included in the distributed database of the blockchain will not be attacked or tampered with, and even if some node devices have a system failure or the storage medium is damaged, because other node devices have stored the global blockchain Data, some of the above-mentioned node devices can still recover global blockchain data from other node devices, thereby ensuring the authenticity of the data information stored in the distributed database of the blockchain.

Example types of blockchain networks may include public blockchain networks, private blockchain networks, and consortium blockchain networks. Although the term blockchain is usually associated with cryptocurrency networks, the blockchain used in this article can refer to DLS (Distributed Ledger System) that does not refer to any specific use case.

In the public blockchain network, the consensus process is controlled by the nodes of the consensus network. For example, hundreds, thousands, or even millions of entities can collaborate in a public blockchain network, and each entity operates at least one node in the public blockchain network. Therefore, the public blockchain network can be considered as a public network relative to the participating entities. Generally, public blockchain networks support public transactions. Public transactions are shared with all nodes in the public blockchain network and stored in the global blockchain. The global blockchain is a blockchain that replicates across all nodes. In other words, for the global blockchain, all nodes are in a completely consistent state. In order to reach consensus (for example, agree to add blocks to the blockchain), a consensus agreement is implemented within the public blockchain network. Example consensus protocols include, but are not limited to, proof-of-work (POW).

Generally, private blockchain networks are provided to specific entities, and specific entities centrally control read and write permissions. This entity controls which nodes can participate in the blockchain network. Therefore, a private blockchain network is often referred to as a permissioned network, which imposes restrictions on who is allowed to participate in the network and its level of participation (for example, only in certain transactions). Various types of access control mechanisms can be used (for example, existing participants vote to add new entities, and regulators can control access).

Generally, the alliance blockchain network is private among participating entities. In a consortium blockchain network, the consensus process is controlled by an authorized group of nodes (consortium member nodes), and one or more nodes are operated by corresponding entities (for example, enterprises). For example, a consortium consisting of ten (10) entities (e.g., enterprises) can operate a consortium blockchain network, and each entity operates at least one node in the consortium blockchain network. Therefore, in terms of participating entities, the consortium blockchain network can be considered a private network. In some examples, each entity (node) must sign each block in order to make the block valid and add the valid block to the blockchain. In some examples, at least a subset of entities (nodes) (e.g., at least 7 entities) must sign each block to make the block valid, and add the valid block to the blockchain.

It can be expected that the implementation provided in this specification can be implemented in any suitable type of blockchain network.

The state database (or "world state") of the blockchain can set up corresponding user accounts for different blockchain users to store state information such as the account balance of the blockchain users. In order to protect users’ data privacy, account balance information on the blockchain can be stored in an encrypted privacy state. Specific encryption methods can include homomorphic encryption, so that blockchain accounts can be chained in an encrypted privacy state. Up-transfer transactions; each blockchain user can keep the encryption or decryption parameters related to his own account balance in the local database (or private database) under the corresponding node device or the client's chain, so as to facilitate the knowledge of their own chain at any time The plain text corresponding to the account balance.

In view of the above problems, one or more implementations of this specification provide a method for depositing and restoring the balance of a blockchain account for blockchain users to restore the plaintext corresponding to their account balance based on the client where they are located.

It is worth noting that the blockchain client described in one or more implementations provided in this specification can be an independent device connected to the node device of the blockchain, or it can be integrated inside the node device. Functional plug-in, this is not limited.

In the field of blockchain, an important concept is Account; taking Ethereum as an example, Ethereum usually divides accounts into external accounts and contract accounts; external accounts are accounts directly controlled by users; and contracts An account is created by a user through an external account, and an account containing contract code (ie, a smart contract). The user account described in this specification may include the above-mentioned external account or contract account.

Of course, for some blockchain models derived from the Ethereum architecture (such as the Ant blockchain), the account types supported by the blockchain can also be further extended, which is not particularly limited in this specification.

For accounts in the blockchain, a structure is usually used to maintain the account status of the account. When the transaction in the block is executed, the state of the account related to the transaction in the blockchain will usually change. Taking Ethereum as an example, the structure of an account usually includes fields such as Balance, Nonce, Code, and Storage. The Balance field is used to maintain the current account balance of the account. Since the account balance is information related to user privacy, some blockchains will use encryption to process the account balance on the blockchain.

Figure 1 illustrates the process steps of a method for depositing and restoring a blockchain account balance provided by an exemplary embodiment of this specification. The account balances of user accounts stored on the above-mentioned blockchain are all encrypted using the first encryption algorithm. deal with.

Step 102: The blockchain client sends a certificate deposit transaction to the node device of the blockchain based on a preset sending cycle, and the certificate deposit transaction includes the current block height and the current recovery parameter; wherein, the current block The height is the block height of the block chain synchronized by the client at the moment the deposit transaction is constructed, and the recovery parameters at that time are stored locally by the client and available to the blockchain users in the deposit. The encrypted account balance at the time of construction of the certificate transaction is restored with multiple parameters, and at least part of the restored parameters are encrypted.

The "local storage" mentioned in this specification refers to the private storage off-chain relative to the on-chain storage of the blockchain (which may include block ledgers and state databases). As the transfer transactions related to blockchain users are continuously included in the blockchain, the encrypted account balance of the blockchain users is correspondingly continuously updated in the state database stored on the client. The blockchain client can save the recovery parameters at the time in the local storage (private storage under the chain), which is used to restore the plaintext of the encrypted account balance of the above-mentioned blockchain user on the blockchain at the time the deposit transaction is constructed. Or decrypt the encrypted account balance on the blockchain of the blockchain user who logs in to the client to obtain the corresponding plaintext.

As the block height on the blockchain increases, the blockchain state database will be updated accordingly; and the account balance of the blockchain user may be updated as the related transfer transactions are included in the block. . The blockchain client at least stores the on-chain account information of the blockchain users who log in to the above client (the account information includes the encrypted account balance), and updates the blockchain as the blockchain status database is updated User's on-chain account information. Based on the preset sending cycle, the client periodically sends the deposit transaction to the node device connected to it to deposit the current block height at the time of deposit transaction construction and the current recovery parameters of the plaintext of the encrypted account balance to the block. On the chain.

Since the block height on the client terminal may be different from the block height synchronized by the node device at the time of the construction of the above-mentioned deposit transaction, the above-mentioned block height at that time and the recovery parameters at the time are all based on the blockchain information synchronized on the client. Generated.

In an illustrated embodiment, the above-mentioned blockchain client can periodically go to multiple preset locations in the memory to read the content of each parameter included in the recovery parameter at the time, based on the read recovery parameters at the time. Parameter construction of deposit transaction. In another embodiment shown, the content of the recovery parameters at the time and the height of the current block are stored by the blockchain client, and the client can periodically obtain the information including the recovery parameters at the time and the height of the current block based on a preset sending cycle. Based on the storage snapshot of the storage snapshot, the above-mentioned attestation transaction is constructed.

In order to prevent other node devices on the blockchain from learning the plaintext of the recovery parameter at that time and recovering or decrypting the plaintext of the account balance of the blockchain user, at least part of the parameters of the recovery parameter are encrypted.

In another embodiment shown, the account balance of the user account stored on the above-mentioned blockchain is encrypted using the first encryption algorithm, and the random number is used as the encryption factor; when the ciphertext of the known account balance is Under the premise, when the plaintext of the account balance can be calculated inversely based on the first encryption algorithm and the random number, the above-mentioned recovery parameters at the time may include the current random number corresponding to the encrypted account balance at the time the deposit transaction is constructed, and the blockchain The user’s encrypted account balance at the time of the construction of the deposit transaction; because based on the above-mentioned random number and the encrypted account balance, the plaintext of the encrypted account balance can be calculated in reverse, in order to protect the user on the blockchain For the privacy of the account balance, the above-mentioned client should at least encrypt the above-mentioned random number at that time.

For example, the client can encrypt the latest current random number based on its own public key, or the client can encrypt the latest current random number based on a password key. The specific encryption method is not limited in this embodiment. .

In another embodiment shown, the account balance of the user account stored on the above-mentioned blockchain is encrypted using the first encryption algorithm, and the random number is used as the encryption factor; when the ciphertext of the known account balance is Under the premise, when the plaintext of the account balance cannot be calculated in reverse based on the first encryption algorithm and the random number, the above-mentioned recovery parameters at the time may include the current random number corresponding to the encrypted account balance at the time the deposit transaction is constructed, and the blockchain The plaintext corresponding to the user’s encrypted account balance at the time of construction of the deposit transaction; in order to protect the privacy of the user’s account balance on the blockchain, the value of the random number at that time and the encrypted account balance at the time of construction The plaintext should be encrypted.

This embodiment does not limit the specific encryption method of the client to the plaintext of the random number and account balance included in the recovery parameter at that time, and the client can encrypt the plaintext of the random number and account balance included in the recovery parameter at the time. The same encryption method is used for encryption, and different encryption methods can also be used for encryption, which is not limited here.

Step 104: The node device of the blockchain receives the certificate deposit transaction and publishes the certificate deposit transaction to the blockchain, so that the blockchain performs consensus processing on the certificate deposit transaction.

Among them, the consensus algorithms supported in the blockchain can include: the first type of consensus algorithm, that is, the consensus algorithm that node devices need to compete for the accounting right of each round of accounting cycle; for example, Proof of Work (POW) ), Proof of Stake (POS), Delegated Proof of Stake (DPOS) and other consensus algorithms; the second type of consensus algorithm, that is, pre-election of accounting nodes for each round of accounting cycle (no need to compete Accounting rights) consensus algorithms; for example, practical Byzantine Fault Tolerance (PBFT) and other consensus algorithms.

In the blockchain network using the first type of consensus algorithm, all node devices that compete for the right to keep accounts can execute the transaction after receiving the transaction. Among the node devices that compete for the right to bookkeeping, one node device may win this round of contention for the right to bookkeeping and become the bookkeeping node. The accounting node can package the received transaction with other transactions to generate the latest block, and send the generated latest block or the block header of the latest block to other node devices for consensus.

In the blockchain network using the second type of consensus algorithm, the node device with the right to book accounts has been agreed before this round of bookkeeping. Therefore, after the node device receives the transaction, if it is not the accounting node of this round, it can send the transaction to the accounting node. For this round of accounting nodes, the transaction can be executed during or before the process of packaging the transaction with other transactions to generate the latest block. After the accounting node generates the latest block, it can send the latest block or the block header of the latest block to other node devices for consensus.

As mentioned above, no matter which consensus algorithm shown above is adopted by the blockchain, the accounting node in this round can package the received transaction to generate the latest block, and the generated latest block or the latest block The header of the block is sent to other node devices for consensus verification. If other node equipment receives the latest block or the block header of the latest block, it is verified that there is no problem, and the latest block can be appended to the end of the original blockchain to complete the accounting process of the blockchain. In the process of other nodes verifying the new block or block header sent by the accounting node, the transactions contained in the block can also be executed.

Step 106: When the deposit transaction consensus is passed, the node device stores the deposit transaction in the distributed ledger of the blockchain, and updates the current block height and the current recovery parameters in the corresponding State database of blockchain users.

This embodiment does not limit the storage location of the block height at the time and the recovery parameters at the time in the state database of the blockchain. For example, the content of blockchain user accounts (including external accounts or contract accounts, etc.) can be expanded to The current block height and recovery parameters at the time when the above-mentioned deposit transaction was constructed are included.

When the above-mentioned deposit transaction is approved by consensus, a notification message can be returned to the above-mentioned client; and the client can determine whether the deposit transaction returned by the node device is received after the above-mentioned deposit transaction is published to the blockchain. After the notification message is passed, and after the notification message is received, the current block height and the recovery parameter at the time of the construction are correspondingly updated to the user's state database stored in the client.

When the above-mentioned client loses the locally stored plaintext of the current blockchain account balance due to possible reasons, or the recovery parameters of the plaintext of the current account balance, the user will not be able to know the current blockchain account. The clear text of the account balance (Balance). At this point, the client can be based on the latest recovery parameters and the latest current block height corresponding to the latest construction time of the deposit transaction in the above-mentioned blockchain state database, and related to the user in the blockchain block The transfer transaction is to restore the clear text of the current account balance (Balance) in the user account stored on the blockchain.

The specific process of recovery can include:

Step 108: The above-mentioned blockchain client obtains the latest recovery parameters and the latest current block height corresponding to the latest construction time of the deposit certificate transaction in the state database of the blockchain account.

The above-mentioned blockchain client can update the blockchain database synchronously, and obtain the latest recovery parameters and the latest current block height corresponding to the latest construction time of the deposit transaction from the updated state database of its own account.

In step 110, the blockchain client decrypts at least part of the latest recovery parameters at the time, and obtains the plaintext of the encrypted account balance at the latest construction time based on the latest recovery parameters obtained from the decryption.

In an illustrated embodiment, the account balance of the user account stored on the blockchain is encrypted using the first encryption algorithm, using a random number as an encryption factor, and the ciphertext of the account balance is known Next, the plaintext of the account balance can be calculated inversely based on the first encryption algorithm and the random number. At this time, the above-mentioned latest current recovery parameters may include the latest current random number corresponding to the encrypted account balance at the latest construction time of the deposit transaction, and the The encrypted account balance of the blockchain user at the latest construction time of the deposit certificate transaction, and the above-mentioned latest random number at that time is encrypted using an algorithm known to the client.

For example, the client can encrypt the above-mentioned latest current random number based on its own public key, and accordingly, it should decrypt the latest current random number obtained from the blockchain based on its own private key. Alternatively, the client can encrypt the latest current random number based on the password key, and accordingly, the latest current random number obtained from the blockchain should be decrypted based on the password key.

After decrypting and obtaining the above-mentioned latest current random number, the client can reversely calculate the encrypted account balance corresponding to the encrypted account balance based on the above-mentioned latest current random number and the encrypted account balance at the latest construction time of the deposit certificate transaction. The clear text of the account balance at the latest construction time of the deposit certificate transaction.

In another embodiment shown, the account balance of the user account stored on the above-mentioned blockchain is encrypted using the first encryption algorithm, and the random number is used as the encryption factor; when the ciphertext of the known account balance is Under the premise, when the plaintext of the account balance cannot be calculated inversely based on the first encryption algorithm and the random number, the above-mentioned latest current recovery parameters may include the latest current random number corresponding to the encrypted account balance at the latest construction time of the deposit transaction, and the The plaintext corresponding to the encrypted account balance of the blockchain user at the latest construction time of the deposit transaction; in order to protect the privacy of the user account balance on the blockchain, the latest current random number and the latest construction time The plaintext of the encrypted account balance should be encrypted. The client can obtain the latest current random number included in the latest current recovery parameter and the plaintext of the account balance corresponding to the encrypted account balance at the latest construction time through decryption.

Step 112: Based on the plaintext of the account balance corresponding to the encrypted account balance at the latest construction time, starting from the height of the latest current block, based on the information stored on the blockchain related to the blockchain user In the transfer transaction, the plaintext of the current account balance of the blockchain user is restored.

In this embodiment, the client terminal can start from the latest current block height of the above-mentioned deposit certificate transaction certificate. For transfer transactions on the above-mentioned latest current block height and subsequent blocks, the client user’s blockchain The clear text of the account balance is restored off-chain until it catches up with the current block height of the blockchain, and the clear text of the current account balance of the client user is obtained; compared to starting from the initial value of the account balance and the genesis block, For the return visits and calculations of user-related transfer transactions on all blocks, the method for restoring the account balance provided by this embodiment greatly reduces the processing time and the amount of calculation.

Hereinafter, as shown in Figure 2, this specification takes the account balance of the blockchain encrypted using a homomorphic encryption algorithm as an example to describe in detail the method of restoring the account balance of the blockchain user based on the method described in one or more of the above embodiments step.

In this embodiment, the on-chain account balance of blockchain user A is encrypted using a homomorphic encryption algorithm:

PC(X,R)=G^X*H^R

Among them, X is the plaintext amount of the balance, R is a random number, G and H are the global public parameters of the homomorphic encryption algorithm, and PC is the ciphertext of the balance after homomorphic encryption. User A's client terminal locally stores the balance plaintext X and random number R corresponding to the PC value of his account balance.

As shown in Figure 2, the method for depositing and restoring the blockchain balance described in this embodiment includes:

Step 201: The user A client sends a deposit certificate transaction to the node device of the blockchain based on a preset sending cycle. The deposit transaction includes the current block of the blockchain synchronized by the user A client at the time the deposit transaction is constructed. Height h, and multiple parameters stored locally by the client that can restore the encrypted plaintext of the account balance of the blockchain user at the time of the construction of the deposit certificate transaction: the plaintext X of the account balance and At that time, the random number R, and the above X and R are all encrypted.

Since in the homomorphic encryption algorithm used in this embodiment, it is difficult to reversely calculate X under the premise that PC and R are known, the recovery parameters for recovering the plaintext of the encrypted account balance may include the above X And R value; calculate the PC value through the forward encryption of X and R, and verify whether the obtained PC value is the same as the encrypted account balance in the user account on the chain, and it can be verified whether the above plaintext X is the same as that on the chain Corresponding to the encrypted account balance in the user account, thereby recovering the correct plaintext X.

In step 202, the above-mentioned node device publishes the certificate deposit transaction to the blockchain, so that the blockchain performs consensus processing on the deposit transaction; when the deposit transaction consensus is passed, the deposit transaction The certificate transaction is stored in the distributed ledger of the blockchain, and the current block height h and the current recovery parameters (X, R) are correspondingly updated in the state database of the blockchain user.

As the aforementioned client continues to send the deposit transaction, the current block height h and the current recovery parameter (X, R) in the deposit transaction are continuously updated in the state database of the blockchain user. By synchronizing with the blockchain, the client can synchronize the contents of the client user's state database to the client memory, and store the encrypted data of the user account on the blockchain in the client's local database (private database under the chain) The plain text X'and the encrypted random number R'corresponding to the account balance PC'. At a certain moment, the above client may experience system failure or hardware damage, and its locally stored plaintext X'and encrypted random number R'corresponding to the encrypted account balance PC' of the user account on the blockchain are lost, and the above client It is impossible to know the account balance X'of the user's blockchain account at this time.

In order to recover the above account balance X’, the client can perform the following steps:

Step 203: Obtain the latest current recovery parameters (X ₀ , R ₀ ) and the latest current block height h ₀ _{corresponding to the latest construction time t 0 of} the deposit certificate transaction in the state database of the blockchain account;

_{Step 204: Decrypt X 0} and R ₀ in the latest recovery parameters at the _{time to obtain the plaintext X 0 of the} encrypted account balance at the latest construction time;

Step 205, based on the plaintext X _{0 of the} encrypted account balance at the latest construction time, starting from the block after the latest current block height, based on the data stored on the blockchain and the blockchain For user-related transfer transactions, recover the plaintext of the current account balance of the blockchain user:

After the block with the block height h ₀ is included, the plaintext of the account balance of the blockchain user A is X ₀ , and the corresponding encrypted random number is R ₀ , at this time: the account balance PC ₀ (X ₀ , R ₀ )=G^X ₀ *H^R ₀ ;

Traverse the transactions included in the block after the block height is h ₀ one by one, and obtain the transfer transactions related to the blockchain user A one by one: transaction 1, transaction 2...transaction N.

For example, transaction 1 is _{a transfer transaction in which user A transfers x 1} to user B. In this transaction, the transfer amount x ₁ is also encrypted using the same homomorphic encryption algorithm and based on the random number r ₁ as the encryption factor: PC ₁ (x ₁ , r ₁ )=G^x ₁ *H^r ₁ ; at this time, the content of transaction 1 included in the block can include [user A address, user B address, encypt(x ₁ ), encrypt( r ₁ )], where x ₁ and r ₁ are encrypted using a key related to user A's public key.

The client uses the keys related to user A's private key to decrypt encypt(x ₁ ) and encrypt(r ₁ ) respectively to obtain the transfer amount x ₁ and the transfer random number r ₁ , and based on the homomorphic characteristics of the homomorphic encryption algorithm, _{In order to obtain the ciphertext PC 01} , the plaintext X ₀₁ and the random number R ₀₁ of the account balance of user A after transaction 1:

PC ₀₁ =PC ₀ -PC ₁ ;

X ₀₁ ＝X ₀ -x ₁ ;

R ₀₁ =R ₀ -r ₁ .

Transaction 2 is a transfer transaction in which user C transfers x ₂ to user A. In this transaction, the transfer amount x ₂ is also encrypted using the same homomorphic encryption algorithm and based on the random number r ₂ as the encryption factor: PC ₂ ( x ₂ , r ₂ )=G^x ₂ *H^r ₂ ; at this time, the content of transaction 2 included in the block can include [user C address, user A address, encypt(x ₂ ), encrypt(r ₂ )], where x ₂ and r ₂ are encrypted using a key related to user A's public key.

The client uses the keys related to user A's private key to decrypt encypt(x ₂ ) and encrypt(r ₂ ) respectively to obtain the transfer amount x ₂ and the transfer random number r ₂ , and based on the homomorphic characteristics of the homomorphic encryption algorithm, _{In order to obtain the ciphertext PC 12} , the plaintext X ₁₂ and the random number R ₁₂ of the account balance of user A after transaction 2:

PC ₁₂ =PC ₀₁ +PC ₂ ;

X ₁₂ ＝X ₀₁ +x ₂ ;

R ₁₂ =R ₀₁₊ r ₂ .

...

Until the current block, the transfer transaction related to user A is obtained, and the encrypted transfer amount and the encrypted transfer amount in the transfer transaction related to the user A are decrypted using the key related to the private key of the blockchain user Transfer random numbers; thus, based on the homomorphic characteristics of the homomorphic encryption algorithm, the ciphertext, plaintext and corresponding random numbers of the current account balance of the blockchain user are restored: PC', X', and R'.

It is worth noting that when the calculation speed of the client cannot match the block speed of the above-mentioned blockchain, the X'and R'of the current account balance of the blockchain user obtained by the client finally recovered may not be the original loss of the client. X'and R', but based on the account balance recovery method provided by the above implementation, the client can recover the plaintext X'and random number R'of the account balance that matches the current highest block of the blockchain, and then based on The above-mentioned plain text X', random number R', and the transfer transactions that are continuously and newly included on the chain are updated with the recovery parameters stored locally.

Corresponding to the above-mentioned process implementation, the embodiment of this specification also provides a deposit certificate device 30 for a blockchain account balance and a recovery device 40 for a blockchain account balance. The devices 30 and 40 can be implemented by software, or can be implemented by hardware or a combination of software and hardware. Taking software implementation as an example, as a logical device, it is formed by reading the corresponding computer program instructions into the memory by the CPU (Central Process Unit, central processing unit) of the device where it is located. From the perspective of hardware, in addition to the CPU, memory, and storage shown in Figure 5, the device where the above-mentioned device is located usually also includes other hardware such as chips for wireless signal transmission and reception, and/or for implementing network communication functions. Other hardware such as boards.

As shown in Figure 3, this specification also provides a device 30 for depositing a blockchain account balance. The account balances of user accounts stored on the blockchain are all encrypted using the first encryption algorithm. The device 30 is applied to the node equipment of the blockchain and includes: a receiving unit 302, which receives a deposit transaction sent by a blockchain user client based on a preset sending cycle; the deposit transaction includes the current block height and the current recovery Parameters; wherein, the block height at the time is the block height at the time of construction of the deposit certificate transaction, and the recovery parameters at that time are stored locally by the client and can be used by the blockchain user in the deposit certificate The multiple parameters of the encrypted account balance at the time of construction of the transaction are restored in plaintext, and at least some of the parameters of the restored parameters at that time are encrypted; the issuing unit 304 publishes the deposit certificate transaction to the blockchain , So that the blockchain performs consensus processing on the deposit transaction; the storage unit 306, when the deposit transaction consensus is passed, store the deposit transaction in the distributed ledger of the blockchain, and The current block height and the current recovery parameters are correspondingly updated in the state database of the blockchain user.

For the implementation process of the functions and roles of each unit in the above device 30, please refer to the implementation process of the corresponding steps in the method for depositing the balance of a blockchain account executed by the above-mentioned blockchain node device. For details, please refer to the part of the method implementation. Just explain it, so I won't repeat it here.

As shown in Figure 4, this specification also provides a device 40 for restoring the balance of a blockchain account. The account balances of user accounts stored on the blockchain are all encrypted using the first encryption algorithm. The device 40 is applied to a blockchain user client and includes a sending unit 402, which sends a deposit transaction to a node device of the blockchain based on a preset sending period, so that after the deposit transaction is passed by consensus, the The current block height and the current recovery parameters included in the deposit certificate transaction are correspondingly updated in the state database of the blockchain account; wherein, the current block height is that the block chain synchronized by the client is in the deposit certificate The block height at the time of transaction construction, and the restoration parameters at that time are stored locally by the client and can restore the plaintext of the encrypted account balance of the blockchain user at the time of construction of the deposit transaction Multiple parameters, and at least part of the recovery parameters at the time are encrypted; the acquiring unit 404 acquires the latest recovery parameters and the latest recovery parameters corresponding to the latest construction time of the deposit transaction in the state database of the blockchain account The latest block height at the time; the decryption and recovery unit 406 decrypts at least part of the latest recovery parameters at the time, and obtains the clear text of the encrypted account balance at the latest construction time based on the latest recovery parameters obtained at the time. The plaintext of the encrypted account balance at the latest construction time starts from the block after the latest current block height, based on the transfer transactions stored on the blockchain and related to the blockchain user, and restores Obtain the plaintext of the current account balance of the blockchain user.

For the implementation process of the functions and roles of each unit in the above device 40, please refer to the implementation process of the corresponding steps in the method for restoring the balance of the blockchain account executed by the blockchain client. For related details, please refer to the description of the method implementation. That's it, I won't repeat it here.

The device implementations described above are merely illustrative, where the units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical modules, that is, they may be located in One place, or it can be distributed to multiple network modules. Some or all of the units or modules can be selected according to actual needs to achieve the purpose of the solution in this specification. Those of ordinary skill in the art can understand and implement it without creative work.

The devices, units, and modules described in the foregoing implementation manners may be specifically implemented by computer chips or entities, or implemented by products with certain functions. A typical implementation device is a computer. The specific form of the computer can be a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email receiving and sending device, and a game control A console, a tablet computer, a wearable device, or a combination of any of these devices.

Corresponding to the foregoing method embodiments, the embodiments of this specification also provide a computer device. As shown in FIG. 5, the computer device includes a memory and a processor. Wherein, the memory stores a computer program that can be run by the processor; when the processor runs the stored computer program, it executes each step of the blockchain account balance deposit method executed by the node device in the embodiment of this specification. Please refer to the previous content for a detailed description of each step of the blockchain account balance deposit method executed by the above node device, and will not be repeated.

Corresponding to the foregoing method embodiments, the embodiments of this specification also provide a computer device. As shown in FIG. 5, the computer device includes a memory and a processor. Among them, the memory stores a computer program that can be run by the processor; when the processor runs the stored computer program, it executes each of the blockchain account balance recovery methods executed by the blockchain client in the embodiment of this specification. step. Please refer to the previous content for a detailed description of each step of the method for restoring the balance of the blockchain account executed by the blockchain client, and will not be repeated.

The above descriptions are only the preferred embodiments of this specification, and are not intended to limit this specification. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this specification shall be included in this specification. Within the scope of protection.

In a typical configuration, the computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

The memory may include non-permanent memory in computer readable media, random access memory (RAM) and/or non-volatile memory, such as read-only memory (ROM) or flash memory (flash RAM). Memory is an example of computer readable media.

Computer-readable media include permanent and non-permanent, removable and non-removable media, and information storage can be realized by any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data.

Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical storage, Magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media can be used to store information that can be accessed by computing devices. According to the definition in this article, computer-readable media does not include transitory media, such as modulated data signals and carrier waves.

It should also be noted that the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or equipment including a series of elements includes not only those elements, but also Other elements that are not explicitly listed, or also include elements inherent to such processes, methods, commodities, or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, commodity, or equipment that includes the element.

Those skilled in the art should understand that the implementation of this specification can be provided as a method, a system or a computer program product. Therefore, the implementation manners in this specification may adopt the form of a complete hardware implementation, a complete software implementation, or a combination of software and hardware implementations. Moreover, the implementation of this specification can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes. .

Claims

A method for depositing a blockchain account balance, wherein the account balances of user accounts stored on the blockchain are all encrypted using a first encryption algorithm, and the method includes:

The node device of the blockchain receives the deposit certificate transaction sent by the blockchain user client based on the preset sending cycle; the deposit certificate transaction includes the current block height and the current recovery parameters; wherein, the current block height is all The block height at the time of construction of the attestation transaction, and the recovery parameters at that time are the plaintext of the encrypted account balance of the blockchain user at the time of construction of the attestation transaction, which is stored locally by the client Multiple parameters to be restored, and at least part of the parameters restored at that time are encrypted;

Publishing the certificate deposit transaction to the blockchain, so that the blockchain performs consensus processing on the certificate deposit transaction;

When the attestation transaction consensus is passed, the attestation transaction is stored in the distributed ledger of the blockchain, and the current block height and recovery parameters at the time are updated correspondingly to the state of the blockchain user database.
The method according to claim 1, wherein the attestation transaction is constructed based on a storage snapshot of the blockchain client, and the storage snapshot includes the current block height and current recovery parameters.
The method according to claim 1 or 2, wherein the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the account of the user account stored on the blockchain The balance is encrypted using the first encryption algorithm and the random number as the encryption factor;

The recovery parameters at that time include the current random number corresponding to the encrypted account balance at the time of construction, and the encrypted account balance of the blockchain user at the time of construction of the deposit transaction; The random number is encrypted.
The method according to claim 1 or 2, wherein the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the account of the user account stored on the blockchain The balance is encrypted using the first encryption algorithm and the random number as the encryption factor;

The recovery parameters at that time include the current random number corresponding to the encrypted account balance at the time of construction, and the plaintext of the encrypted account balance of the blockchain user at the time of construction of the deposit certificate transaction; The plaintext of the random number at the time and the encrypted account balance at the time of construction is encrypted.
The method according to claim 4, wherein the first encryption algorithm is a homomorphic encryption algorithm, and the current random number is an encrypted random number corresponding to the encrypted account balance at the construction time;

The transfer amount of the transfer transaction related to the blockchain user is also encrypted using the homomorphic encryption algorithm, based on the transfer amount random number as the encryption factor, and the transfer amount and the transfer amount random number are combined with the transfer amount. The key encryption related to the public key of the blockchain user.
A method for restoring the balance of a blockchain account. The account balances of user accounts stored on the blockchain are all encrypted using a first encryption algorithm. The method includes:

The blockchain user client sends a deposit transaction to the node device of the blockchain based on the preset sending cycle, so that after the deposit transaction is passed by consensus, the current block height and the current block height included in the deposit transaction are included in the transaction. The recovery parameters are correspondingly updated in the state database of the blockchain account; wherein, the current block height is the block height of the blockchain synchronized by the client at the time the deposit transaction is constructed, and the current block height The recovery parameters are multiple parameters that are stored locally by the client and can recover the plaintext of the encrypted account balance of the blockchain user at the time of construction of the deposit transaction, and the parameters of the recovery parameters at that time At least part of the parameters are encrypted;

Acquiring the latest recovery parameters and the latest current block height corresponding to the latest construction time of the deposit transaction in the state database of the blockchain account;

Decrypt at least part of the parameters of the latest recovery parameters at the time, and obtain the plaintext of the encrypted account balance at the latest construction time based on the latest recovery parameters obtained from the decryption;

Based on the clear text of the encrypted account balance at the latest construction time, starting from the block after the latest current block height, based on the transfer transaction related to the blockchain user stored on the blockchain , Restore the plaintext of the current account balance of the blockchain user.
The method according to claim 6, wherein the attestation transaction is constructed based on a storage snapshot of the blockchain client, and the storage snapshot includes the current block height and current recovery parameters.
According to the method of claim 6 or 7, the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the account of the user account stored on the blockchain The balance is encrypted using the first encryption algorithm and the random number as the encryption factor;

The recovery parameters at that time include the current random number corresponding to the encrypted account balance at the time of construction, and the encrypted account balance of the blockchain user at the time of construction of the deposit transaction; The random number is encrypted.
According to the method of claim 6 or 7, the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the accounts of the user accounts stored on the blockchain The balance is encrypted using the first encryption algorithm and the random number as the encryption factor;

The recovery parameters at that time include the current random number corresponding to the encrypted account balance at the time of construction, and the plaintext of the encrypted account balance of the blockchain user at the time of construction of the deposit certificate transaction; The plain text of the random number at the time and the account balance at the time of construction is encrypted.
The method according to claim 9, wherein the first encryption algorithm is a homomorphic encryption algorithm, and the current random number is a random number used for homomorphic encryption of the encrypted account balance at the construction time;

The transfer amount of the transfer transaction related to the blockchain user is also encrypted using the homomorphic encryption algorithm, based on the transfer amount random number as the encryption factor, and the transfer amount and the transfer amount random number are combined with the transfer amount. The key encryption related to the public key of the blockchain user;

The plaintext of the encrypted account balance based on the latest construction time starts from the height of the latest current block, based on the transfer transactions stored on the blockchain related to the blockchain user, and restores Obtain the plaintext of the current account balance of the blockchain user, including:

Based on the plaintext of the encrypted account balance at the latest construction time, starting from the block after the latest current block height, the key related to the private key of the blockchain user is used to decrypt one by one with the Blockchain user-related transfer transactions to obtain the transfer amount and the transfer amount random number of the transfer transaction one by one;

Based on the transfer amount of the transfer transaction and the transfer amount random number, restore the plaintext of the account balance of the blockchain user corresponding to the transfer transaction one by one, until the current account balance of the blockchain user is recovered Plaintext.
A device for depositing a blockchain account balance. The account balances of user accounts stored on the blockchain are all encrypted using a first encryption algorithm. The device is applied to the node equipment of the blockchain and includes :

The receiving unit receives the deposit certificate transaction sent by the blockchain user client based on the preset sending cycle; the deposit certificate transaction includes the current block height and the current recovery parameter; wherein, the current block height is the deposit certificate The block height at the time of transaction construction, and the restoration parameters at that time are stored locally by the client and can restore the plaintext of the encrypted account balance of the blockchain user at the time of construction of the deposit certificate transaction Multiple parameters, and at least part of the parameters of the restored parameters at the time are encrypted;

A publishing unit that publishes the certificate deposit transaction to the blockchain, so that the blockchain performs consensus processing on the certificate deposit transaction;

The storage unit, when the attestation transaction consensus is passed, store the attestation transaction in the distributed ledger of the blockchain, and update the current block height and recovery parameters in the blockchain correspondingly The user's state database.
The device according to claim 11, wherein the deposit certificate transaction is constructed based on a storage snapshot of the blockchain client, and the storage snapshot includes the current block height and current recovery parameters.
The device according to claim 11 or 12, the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the accounts of the user accounts stored on the blockchain The balance is encrypted using the first encryption algorithm and the random number as the encryption factor;

The recovery parameters at that time include the current random number corresponding to the encrypted account balance at the time of construction, and the encrypted account balance of the blockchain user at the time of construction of the deposit transaction; The random number is encrypted.
The device according to claim 11 or 12, the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the accounts of the user accounts stored on the blockchain The balance is encrypted using the first encryption algorithm and the random number as the encryption factor;

The recovery parameters at that time include the current random number corresponding to the encrypted account balance at the time of construction, and the plaintext of the encrypted account balance of the blockchain user at the time of construction of the deposit certificate transaction; The plaintext of the random number at the time and the encrypted account balance at the time of construction is encrypted.
The device according to claim 14, wherein the first encryption algorithm is a homomorphic encryption algorithm, and the current random number is an encrypted random number corresponding to the encrypted account balance at the construction time;

The transfer amount of the transfer transaction related to the blockchain user is also encrypted using the homomorphic encryption algorithm, based on the transfer amount random number as the encryption factor, and the transfer amount and the transfer amount random number are combined with the transfer amount. The key encryption related to the public key of the blockchain user.
A device for restoring a blockchain account balance. The account balances of user accounts stored on the blockchain are all encrypted using a first encryption algorithm. The device is applied to a blockchain user client and includes:

The sending unit sends a deposit transaction to the node device of the blockchain based on a preset sending cycle, so that after the deposit transaction is passed by consensus, the current block height included in the deposit transaction corresponds to the current recovery parameter Updated in the state database of the blockchain account; wherein, the current block height is the block height of the blockchain synchronized by the client at the time the deposit transaction is constructed, and the current recovery parameter is A plurality of parameters stored locally by the client that can restore the plaintext of the encrypted account balance of the blockchain user at the time of construction of the deposit certificate transaction, and at least some of the parameters of the restored parameters at that time Be encrypted

An acquiring unit to acquire the latest current recovery parameters and the latest current block height corresponding to the latest construction time of the deposit certificate transaction in the state database of the blockchain account;

The decryption and recovery unit decrypts at least part of the parameters of the latest recovery parameters at the time, and obtains the plaintext of the encrypted account balance at the latest construction time based on the latest recovery parameters obtained by the decryption; the encrypted account balance at the latest construction time is based on the encryption The clear text of the account balance of, starting from the block after the latest current block height, based on the transfer transaction related to the blockchain user stored on the blockchain, the blockchain user is restored The clear text of the current account balance.
The device according to claim 16, wherein the attestation transaction is constructed based on a storage snapshot of the blockchain client, and the storage snapshot includes the current block height and current recovery parameters.
According to the device of claim 16 or 17, the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the accounts of the user accounts stored on the blockchain The balance is encrypted using the first encryption algorithm and the random number as the encryption factor;

The recovery parameters at that time include the current random number corresponding to the encrypted account balance at the time of construction, and the encrypted account balance of the blockchain user at the time of construction of the deposit transaction; The random number is encrypted.
According to the device of claim 16 or 17, the account balances of the user accounts stored on the blockchain are all encrypted using the first encryption algorithm, including: the accounts of the user accounts stored on the blockchain The balance is encrypted using the first encryption algorithm and the random number as the encryption factor;

The recovery parameters at that time include the current random number corresponding to the encrypted account balance at the time of construction, and the plaintext of the encrypted account balance of the blockchain user at the time of construction of the deposit certificate transaction; The plaintext of the random number at the time and the encrypted account balance at the time of construction is encrypted.
The device according to claim 19, wherein the first encryption algorithm is a homomorphic encryption algorithm, and the current random number is a random number used when homomorphically encrypting the encrypted account balance at the construction time;

The transfer amount of the transfer transaction related to the blockchain user is also encrypted using the homomorphic encryption algorithm, based on the transfer amount random number as the encryption factor, and the transfer amount and the transfer amount random number are combined with the transfer amount. The key encryption related to the public key of the blockchain user;

The decryption and recovery unit is further based on the plaintext of the encrypted account balance at the latest construction time, starting from the block after the latest current block height, and using the private key related to the blockchain user Decrypt the transfer transactions related to the blockchain user one by one to obtain the transfer amount and the transfer amount random number of the transfer transaction one by one;

Based on the transfer amount of the transfer transaction and the transfer amount random number, restore the plaintext of the account balance of the blockchain user corresponding to the transfer transaction one by one, until the current account balance of the blockchain user is recovered Plaintext.
A computer device, comprising: a memory and a processor; the memory stores a computer program that can be run by the processor; when the processor runs the computer program, it executes as described in any one of claims 1 to 5 The method described.
A computer device, comprising: a memory and a processor; the memory stores a computer program that can be run by the processor; when the processor runs the computer program, the processor executes any one of claims 6 to 10 The method described.