WO2021226854A1

WO2021226854A1 - Blockchain machine, blockchain data access authentication method, and computer-readable storage medium

Info

Publication number: WO2021226854A1
Application number: PCT/CN2020/089926
Authority: WO
Inventors: 徐单恒; 林皓
Original assignee: 杭州安存网络科技有限公司; 北京北信源软件股份有限公司
Priority date: 2020-05-09
Filing date: 2020-05-13
Publication date: 2021-11-18
Also published as: CN111586059A; CN111586059B

Abstract

Disclosed are a blockchain machine, a blockchain data access authentication method, and a computer-readable storage medium. The method comprises: when a user purchases a blockchain machine, providing user information, and after the user information passes verification, writing the user information into a chip of the blockchain machine; binding the user information to hardware information with a unique identifier, and writing same into the chip; by means of a blockchain machine node where a manufacturer is located, giving a notification of a hash value of node information of the blockchain machine to other nodes to be connected of a blockchain; when the user starts the blockchain machine, a system testing hardware information, and matching same with hardware information written into the chip, wherein if the hardware information is inconsistent with the hardware information written into the chip, the blockchain machine cannot be started or the blockchain machine displays an error; after being started, the blockchain machine accessing blockchains of different types in the form of a node according to the selection of the user; and when the blockchain machine accesses a corresponding blockchain in the form of a node, the other nodes of the blockchain verifying the blockchain machine node, wherein if signatures of more than two thirds of the nodes pass verification, the access is allowed.

Description

Block chain machine, block chain data access authentication method and computer readable storage medium

Technical field

The invention belongs to the field of blockchain technology, and specifically relates to a blockchain machine, a blockchain data access authentication method and a computer-readable storage medium.

Background technique

Blockchain is based on a P2P (Peer-to-Peer) network. It is a distributed ledger technology that integrates key technologies such as cryptography, consensus algorithms, and smart contracts. It is based on a communication network and is capable of A new generation of information technology that is deeply integrated with the Internet of Things, big data, cloud computing, artificial intelligence, etc., has the key characteristics of multi-party maintenance, non-tampering, openness and transparency, and is multi-person/multi-thing lacking trust or weak trust Between, in accordance with the established consensus rules, a system of collaboration.

The existing blockchain use only deploys related nodes on the server, and users can connect to the node to use the blockchain. With the increasing use of blockchain technology in the field of judicial deposits, it is necessary to realize the circulation of electronic evidence based on the credibility of nodes. However, due to the anonymity of the blockchain in the prior art, the subject information is unknown and the data cannot be confirmed.

In view of this, it is necessary to provide a technical solution to ensure the trustworthiness of the node subject.

Summary of the invention

In view of the above existing technical problems, the present invention is used to provide a blockchain machine, a blockchain data access authentication method, and a computer-readable storage medium, so as to ensure the trustworthiness of the main body of the blockchain machine access node.

To solve the above technical problems, the present invention adopts the following technical solutions:

The first aspect of the embodiments of the present invention provides a blockchain data access authentication method, which includes the following steps:

S1: When a user purchases a blockchain machine, he provides user information and after passing the audit, writes the user information into the chip of the blockchain machine;

S2: Bind user information with uniquely identified hardware information and write it into the chip;

S3: Notify the hash value of the node information of the blockchain machine to other nodes of the blockchain to be connected through the blockchain machine node where the producer is located;

S4: When the user starts the blockchain machine, the system detects the hardware information and matches it with the hardware information written in the chip. If it is inconsistent, the blockchain machine cannot be started or displays an error;

S5: After the blockchain machine is started, it will connect to different types of blockchains in the form of nodes according to the user's choice;

S6: When the blockchain machine is connected to the corresponding blockchain in the form of a node, other nodes of the blockchain will verify the node of the blockchain machine. If more than 2/3 of the nodes pass the verification signature, the access is allowed, otherwise, no Allow access.

Preferably, it further includes:

S7: When the user uses the blockchain machine node, the CPU of the blockchain machine reads the latitude and longitude in the GPS/Beidou chip to match the location information written in the chip. If they are consistent, the user uses the blockchain normally; inconsistency, this area Block chain machine nodes are not allowed to be used.

Preferably, the S7 further includes:

S701: When the user invokes the SDK to perform the chaining operation on the blockchain node, first read the current latitude and longitude A through the GPS/Beidou chip driver and store it temporarily;

S702, then call the geographic location in the main body information stored in the storage chip and convert it into the corresponding latitude and longitude B according to the digital map;

S703, the current latitude and longitude A and the corresponding latitude and longitude B are matched within the range. If they are the same, the user can operate the blockchain machine node to perform an on-chain operation; if they are inconsistent, an alarm message is returned, and the blockchain machine node is inoperable.

Preferably, it further includes:

S8: When the blockchain machine node is uploading data to the chain, it will upload the user's subject information and geographic location as elements to increase the physical attributes of the data.

Preferably, in the step S2, the hardware information with a unique identifier includes at least a motherboard ID, a CPUID and a BIOS number.

Preferably, in the step S3, the blockchain machine node information includes user information, hardware information, node ID, and node address written in the chip.

Preferably, the step S5 further includes:

S501: After the blockchain machine is started, start the SDK and node service program of the corresponding blockchain according to the configuration file;

S502: The node service program connects to other nodes in the corresponding blockchain according to the configuration.

Preferably, the step S6 further includes:

S601, the blockchain machine node connects to other nodes of the blockchain network according to the configuration, and informs other nodes of node information;

S602: After receiving the node information according to the blockchain machine, other nodes perform matching according to the node information received in S3. If they are consistent, the digital signature is returned after verification; if they are inconsistent, the verification fails and returns.

The second aspect of the embodiments of the present invention provides a blockchain machine. The blockchain machine includes a memory, a microprocessor, an encryption module, a GPS/Beidou positioning module, and is stored on the memory and can be located in all locations. A blockchain data access authentication program running on the microprocessor, and when the blockchain data access authentication program is executed by the microprocessor, the blockchain machine access authentication as described in any one of the above is realized A step of.

A third aspect of the embodiments of the present invention provides a computer-readable storage medium, the computer-readable storage medium stores a blockchain data access authentication program, and the blockchain data access authentication program is processed When the device is executed, the steps of blockchain data access authentication as described in any one of the above are implemented.

The use of the present invention has the following beneficial effects:

(1) The blockchain machine is bound to user information, which can ensure the credibility of the main body of the blockchain machine;

(2) The blockchain machine is bound to physical attributes to increase the credibility of the data on the chain;

(3) After the blockchain machine is started, it can connect to different types of blockchains in the form of nodes according to the user's choice, which can be adapted to connect to the domestic mainstream underlying blockchain platform, and it can be used after access;

(4) The bottom layer of the blockchain adopts hardware encryption, supports multiple algorithms, and has higher security;

(5) Solve the problem of blockchain witch attack. Sybil Attack (Sybil Attack) was proposed by John R. Douceur in 2002. It is a form of attack that acts on P2P networks. Attackers use a single node to forge multiple identities to exist in the P2P network, thereby weakening the network. Redundancy, reduce the robustness of the network, monitor or interfere with the normal activities of the network and other purposes.

Description of the drawings

FIG. 1 is a flowchart of steps of a blockchain data access authentication method according to an embodiment of the present invention;

FIG. 2 is a schematic diagram of the hardware structure of a blockchain machine according to an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of the present invention.

Method Example 1

Referring to Figure 1, it shows a blockchain data access authentication method disclosed in the present invention, which includes the following steps:

S1: When a user purchases a blockchain machine, he provides user information and after passing the audit, writes the user information into the chip of the blockchain machine.

In specific application examples, users can be natural persons, legal persons, or other organizations that have undergone other prescribed procedures for filing. If the user is a natural person, the user information includes information such as the name of the natural person, ID number and residential address; if the user is a legal person, the user information includes company name, legal representative, company address, organization code and other information. That is, the user information is the information that has passed the authentication record and can uniquely indicate the user's identity.

User information can be verified manually or by machine comparison. Through user information review, the trustworthiness of the main body of the blockchain machine can be guaranteed.

S2: Bind the user information with the hardware information with a unique identifier and write it into the chip.

In a specific application example, the uniquely identified hardware information includes at least a motherboard ID, a CPU ID, and a BIOS number. For example, the motherboard ID is AZF241001101, the CPU ID is BFEBFBFF00000F27, and the BIOS number is CN24401483. Further, the hardware information may also include a MAC address, such as the following number B0-25-AA-21-75-5E. By binding the user information on the blockchain machine to its physical attributes, the credibility of the data on the chain in the subsequent steps can be increased.

S3, the hash value of the node information of the blockchain machine is notified to other nodes of the blockchain to be connected through the blockchain machine node where the producer is located.

In a specific application example, the blockchain machine node information includes user information, hardware information, node ID, and node address written in the chip. Here, the node address refers to the address of the node body (ie the geographic location of the institution to which it belongs), not the latitude and longitude, but the latitude and longitude can be calculated according to the algorithm, and then compared with the latitude and longitude in the GPS/Beidou chip read by the CPU.

S4: When the user starts the blockchain machine, the system detects the hardware information and matches it with the hardware information written in the chip. If it is inconsistent, the blockchain machine cannot be started or displays an error.

By matching the bound hardware information with the hardware information detected at startup, if it is inconsistent, it means that the hardware system of the blockchain machine may be considered as a replacement, and its credibility cannot be guaranteed. By rejecting the startup of the blockchain machine whose credibility cannot be guaranteed, and confirming that all the started blockchain machines have been audited and certified, their credibility is greatly increased.

S5: After the blockchain machine is started, it connects to different types of blockchains in the form of nodes according to the user's choice.

In specific application examples, different types of blockchains include, but are not limited to, FISCO BCOS, Ant Blockchain, Baidu Super Chain, and Tencent Blockchain.

Further, step S5 includes the following steps:

S501: After the blockchain machine is started, start the SDK (Software Development Kit) and node service program of the corresponding blockchain according to the configuration file;

The node service program here refers to the program that the blockchain node must run for normal operation, and is generally provided by the underlying provider of the blockchain.

In a specific application example, step S6 further includes:

Through the above technical solutions, the blockchain data access authentication method is realized, and the blockchain machine is bound to the user, and the user information is uniquely bound to the key physical equipment of the blockchain machine to ensure that the main body of the blockchain machine is trusted Spend. After verifying the identity of the subject and the physical information, the blockchain machine can be connected to the corresponding blockchain according to the needs of the application, which improves the security of use.

Method Example 2

On the basis of method embodiment 1, and further referring to Figure 1, the blockchain data access authentication method provided by another embodiment of the present invention may further include: S7, when the user uses the blockchain machine node, the blockchain machine The CPU reads the latitude and longitude in the GPS/Beidou chip to match the location information written in the chip. If they are consistent, the user uses the blockchain normally; if they are inconsistent, the blockchain machine node is not allowed to be used. This step is used to verify the physical location of the blockchain machine, which can further ensure the credibility of the blockchain machine during use.

In specific application examples, S7 further includes:

Through the comparison and matching of the latitude and longitude information, it is ensured that the real use position of the blockchain machine is the same as the preset use position, and the credibility of the blockchain machine is enhanced.

Method Example 3

On the basis of method embodiment 1 or method embodiment 2, and further referring to FIG. 1, the blockchain data access authentication method provided by another embodiment of the present invention may further include:

S8: When the blockchain machine node performs data uploading, it will upload the user's subject information and geographic location as elements to increase the physical attributes of the data. By adding physical attributes to the data on the chain, the authenticity of the data can be further confirmed when the blockchain machine is used as a storage device.

The following describes a blockchain machine provided by an embodiment of the present invention with reference to FIG. 2. At the hardware level, the blockchain machine includes a memory, a microprocessor, an encryption module, and a GPS/Beidou positioning module. Among them, the memory may include memory, such as high-speed random access memory (Random-Access Memory, RAM), and may also include non-volatile memory (Non-Volatile Memory, NVM), such as at least one disk storage. Of course, the blockchain machine can also include hardware required by other businesses. The block chain machine in the embodiment of the present invention mainly refers to a type of server, which runs a block chain network credibly, ensuring that all nodes in the entire block chain network are credible.

The processor and the memory can be connected to each other through an internal bus, which can be an industry standard architecture (ISA) bus, a peripheral component interconnect standard (Peripheral Component Interconnect, PCI) bus, or an extended industry standard structure (Extended Industry). Standard Architecture, EISA) bus, etc. Among them, the bus can be divided into address bus, data bus and control bus. For ease of representation, only one double arrow is used to indicate in FIG. 2, but it does not mean that there is only one bus or one type of bus.

The memory is used to store a program. Specifically, the program may include program code, where the program code includes computer operation instructions, and the memory may include memory and non-volatile memory, and provide instructions and data to the processor.

The processor reads the corresponding computer program from the non-volatile memory to the memory and then runs it, forming a content recommendation device on a logical level. The processor executes the program stored in the memory, and is specifically configured to execute the method operation performed when the server is the execution subject described above.

The foregoing blockchain data access authentication method as in the embodiment of the present invention may be applied to a processor or implemented by the processor. The processor can be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor or instructions in the form of software. The above-mentioned processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (Network Processor, NP), etc., or a digital signal processor (DSP), a dedicated integrated Circuit (Application Specific Integrated Circuit, ASIC), Field Programmable Gate Array (Field Programmable Gate Array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps, and logical block diagrams disclosed in the embodiments of the present invention can be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor or the like. The steps of the method disclosed in combination with the embodiments of the present invention may be directly embodied as being executed and completed by a hardware decoding processor, or executed and completed by a combination of hardware and software modules in a decoder. The software module can be located in a mature storage medium in the field, such as random access memory, flash memory, read-only memory, programmable read-only memory, or electrically erasable programmable memory, registers. The storage medium is located in the memory, and the processor reads the information in the memory, and completes the steps of the above method in combination with its hardware. For the specific execution steps, refer to the method embodiment, which will not be repeated here.

In addition, the embodiment of the present invention also provides a computer-readable storage medium, the computer-readable storage medium stores a blockchain machine access authentication program, when the blockchain data access authentication program is executed by a processor The steps of the method for connecting blockchain nodes as described above are realized.

The specific implementation of the computer-readable storage medium of the present invention is basically the same as the foregoing embodiments of the blockchain data access authentication method, and will not be repeated here.

It should be understood that the exemplary embodiments described herein are illustrative and not restrictive. Although one or more embodiments of the present invention have been described with reference to the accompanying drawings, those of ordinary skill in the art should understand that they can make various modifications without departing from the spirit and scope of the present invention as defined by the appended claims. Changes in form and details.

Claims

A blockchain data access authentication method is characterized in that it comprises the following steps:

S1: When a user purchases a blockchain machine, he provides user information and after passing the audit, writes the user information into the chip of the blockchain machine;

S2: Bind user information with uniquely identified hardware information and write it into the chip;

S3: Notify the hash value of the node information of the blockchain machine to other nodes of the blockchain to be connected through the blockchain machine node where the producer is located;

S4: When the user starts the blockchain machine, the system detects the hardware information and matches it with the hardware information written in the chip. If it is inconsistent, the blockchain machine cannot be started or displays an error;

S5: After the blockchain machine is started, it will connect to different types of blockchains in the form of nodes according to the user's choice;

S6: When the blockchain machine is connected to the corresponding blockchain in the form of a node, other nodes of the blockchain will verify the node of the blockchain machine. If more than 2/3 of the nodes pass the verification signature, the access is allowed, otherwise, no Allow access.
The blockchain data access authentication method according to claim 1, further comprising:

S7: When the user uses the blockchain machine node, the CPU of the blockchain machine reads the latitude and longitude in the GPS/Beidou chip to match the position information written in the chip. If they are consistent, the user uses the blockchain normally; if they are inconsistent, the Blockchain machine nodes are not allowed to be used.
The blockchain data access authentication method according to claim 2, wherein the S7 further comprises:

S701: When the user invokes the SDK to perform the chaining operation on the blockchain node, first read the current latitude and longitude A through the GPS/Beidou chip driver and store it temporarily;

S702, then call the geographic location in the main body information stored in the storage chip and convert it into the corresponding latitude and longitude B according to the digital map;

S703, the current latitude and longitude A and the corresponding latitude and longitude B are matched within the range. If they are the same, the user can operate the blockchain machine node to perform an on-chain operation; if they are inconsistent, an alarm message is returned, and the blockchain machine node is inoperable.
The blockchain data access authentication method according to any one of claims 1 to 3, further comprising:

S8: When the blockchain machine node performs data uploading, it will upload the user's subject information and geographic location as elements to increase the physical attributes of the data.
The blockchain data access authentication method according to any one of claims 1 to 3, wherein, in the step S2, the hardware information with a unique identifier includes at least a motherboard ID, a CPU ID, and a BIOS number.
The blockchain data access authentication method according to any one of claims 1 to 3, wherein in the step S3, the blockchain machine node information includes user information, hardware information, and Node ID and node address.
The blockchain data access authentication method according to any one of claims 1 to 3, wherein the step S5 further comprises:

S501: After the blockchain machine is started, start the SDK and node service program of the corresponding blockchain according to the configuration file;

S502: The node service program connects to other nodes in the corresponding blockchain according to the configuration.
The blockchain data access authentication method according to any one of claims 1 to 3, wherein the step S6 further comprises:

S601, the blockchain machine node connects to other nodes of the blockchain network according to the configuration, and informs other nodes of node information;

S602: After receiving the node information according to the blockchain machine, other nodes perform matching according to the node information received in S3. If they are consistent, the digital signature is returned after verification; if they are inconsistent, the verification fails and returns.
A block chain machine, characterized in that, the block chain machine includes a memory, a microprocessor, an encryption module, a GPS/Beidou positioning module, and a device that is stored in the memory and can run on the microprocessor Blockchain data access authentication program, when the blockchain data access authentication program is executed by the microprocessor, the step of implementing the blockchain machine access authentication according to any one of claims 1 to 8 .
A computer-readable storage medium, characterized in that a blockchain data access authentication program is stored on the computer-readable storage medium, and the blockchain data access authentication program is executed by a processor as claimed in the claims The steps of blockchain data access authentication described in any one of 1 to 8.