CN111767569A - Blockchain access authorization method and node - Google Patents

Abstract

The access authorization method and the node of the block chain, which are provided by the invention, utilize the consensus accounting node to obtain the attribute information of the access node, generating an attribute key according to the attribute information, and simultaneously generating the same attribute key by the access node requesting access according to the attribute information of the access node, and further, the security problem that the data owner can share the transaction information in a limited way can be effectively solved by using the attribute key generated by the data owner to decrypt the transaction information encrypted by the common identification accounting node, the invention takes the data provider as the provider of the CA certificate and the authorization subject to design a ciphertext strategy, namely, the attribute encryption is carried out by providing an attribute strategy based on a ciphertext strategy, an information access user applies for the access right through a block chain network, the method gets rid of the bottleneck of dependence on the CA of the authentication center, and improves the reliability and efficiency of privacy protection of transaction data.

Description

Blockchain access authorization method and node

technical field

The invention belongs to the technical field of block chain, and specifically, designs an access authorization method and node of block chain.

Background technique

With the leap of the Internet from information interconnection to value interconnection, and then to order interconnection, blockchain technology emerged as the times require. Blockchain technology is a decentralized consensus bookkeeping technology that is decentralized, non-tamperable, and open. Transparency and so on. In order to reduce the large-scale computing resource control network and cause the risk of collusion, the blockchain network adopts the method of group consensus to ensure the consistency of transactions. Group consensus is a mechanism that adopts multi-node common accounting and voting. Specifically, the blockchain network consists of several consensus accounting nodes. Each accounting node stores the full account book and votes independently to form a group decision. Therefore, the modification of the full account book by a few nodes cannot affect the result of the group voting. Tamper-proof, safe and reliable features.

Although the blockchain network participates in a large number of consensus nodes for bookkeeping, in most cases transactions only occur between limited transaction parties, such as: private item transactions, information sharing, data transfer, etc., all occur in a limited range, limited The transaction information generated by the transaction parties has to be transmitted to the entire network, which not only increases the risk of privacy data leakage, but also reduces the efficiency of transaction concurrency. In order to solve the above problems, the previous patent ("A Loosely Coupled Blockchain Autonomous Transaction System and Method") proposed the concept of a loosely coupled transaction circle, that is, a temporary consensus transaction circle formed by independently selecting partners. The loosely coupled trading circle has the characteristics of temporality, uncertainty and consistency. The trading parties can choose the timing of joining or withdrawing independently. There are uncertainties in the scale, life cycle, transaction type, etc., but it is necessary to ensure group consensus within a limited range. consistency. With the establishment of a loosely coupled transaction circle, the transaction data of the participants is private and confidential. The transaction data owner is allowed to authorize access to the authorized person. Users need to verify the encryption attributes and encryption policies before they can access the data. There are many deficiencies in preventing risks such as collusion, information leakage, and external attacks.

SUMMARY OF THE INVENTION

The present invention provides a block chain access authorization method and node to solve at least one of the above problems.

One aspect of the present invention provides an access authorization method for a blockchain, including:

The consensus accounting node receives the transaction information access request; the transaction information access request includes attribute information of the access node;

The consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information to generate transaction information ciphertext; wherein the access node generates the transaction information based on its own attribute information. property key;

Broadcast the transaction information ciphertext, so that the access node decrypts the transaction information ciphertext by using the attribute key of the access node, and then obtains the transaction information; wherein the attribute key generation method of the access node is the same as that of the access node. The attribute keys of the consensus accounting nodes are generated in the same manner.

In a preferred embodiment, the transaction information access request further includes security authentication information;

Before generating the attribute key according to the attribute information, the access authorization method further includes:

The security authentication information in the transaction information access request is verified, and if the verification is passed, an attribute key is generated according to the attribute information.

In a preferred embodiment, it also includes:

Establish multiple loosely coupled trading circles, and uniquely identify each loosely coupled trading circle with a version number.

In a preferred embodiment, each loosely coupled trading circle is established, and the corresponding loosely coupled trading circle is uniquely identified with a version number, including:

Broadcasting a loosely coupled transaction request, so that each transaction node determines whether it is a node in the loosely coupled transaction circle according to the received loosely coupled transaction request; the loosely coupled transaction request includes a unique version number;

Together with other nodes that determine that they belong to the loosely coupled trading circle, receive a notification response message of loose coupling sent by non-self-trading nodes;

Together with other nodes that determine that they belong to the loosely coupled trading circle, send the version number application success confirmation message and broadcast the version number to inform non-self nodes in the loosely coupled trading circle.

In a preferred embodiment, the loosely coupled transaction request further includes transaction node address information; each transaction node determines whether it is a node in the loosely coupled transaction circle according to the received loosely coupled transaction request, including:

Each transaction node determines whether its own address information is included in the address information in the loosely coupled transaction request, and if so, determines that it is a node in the loosely coupled transaction circle.

In a preferred embodiment, each consensus accounting node corresponds to a unique node identifier; the generating an attribute key according to the attribute information includes:

The attribute key is generated according to the attribute information, the corresponding unique identifier of the node, and the security authentication information.

Another aspect of the present invention provides a block chain access authorization method, including:

The access node sends a transaction information access request to the consensus accounting node in the blockchain; the transaction information access request includes attribute information of the access node;

Receive the transaction information ciphertext sent by the consensus accounting node; wherein the transaction information ciphertext is the transaction information that the consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to access the transaction information encrypted;

Decrypt the ciphertext of the transaction information by using the attribute key of the access node, and then obtain the transaction information; wherein the generation method of the attribute key of the access node is the same as the generation method of the attribute key of the consensus accounting node.

Another aspect of the present invention provides a method for an authorized access system for a blockchain, including:

The consensus accounting node records the transaction information generated by the transaction node;

The access node sends a transaction information access request to the consensus accounting node; the transaction information access request includes attribute information of the access node;

The consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information, generates a transaction information ciphertext, and broadcasts the transaction information ciphertext;

The access node receives the ciphertext of the transaction information sent by the consensus accounting node, and uses its own attribute key to decrypt the ciphertext of the transaction information, and then obtains the transaction information; wherein the attribute key of the access node is generated The method is the same as the method of generating the attribute key of the consensus accounting node.

Another aspect of the present invention provides a consensus accounting node of a blockchain, including:

an access request receiving module, the consensus accounting node receives a transaction information access request; the transaction information access request includes attribute information of the access node;

an attribute key generation module, wherein the consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information to generate transaction information ciphertext; wherein the access node is based on its own to generate the attribute key from the attribute information;

The transaction information ciphertext broadcasting module broadcasts the transaction information ciphertext, so that the access node decrypts the transaction information ciphertext by using the attribute key of the access node, and then obtains the transaction information; wherein the access node The generation method of the attribute key is the same as the generation method of the attribute key of the consensus accounting node.

Another aspect of the present invention provides a block chain access node, including:

an access request sending module, where the access node sends a transaction information access request to the consensus accounting node in the blockchain; the transaction information access request includes attribute information of the access node;

The transaction information ciphertext receiving module receives the transaction information ciphertext sent by the consensus accounting node; wherein the transaction information ciphertext is that the consensus accounting node generates an attribute key according to the attribute information, and uses the attribute The key pair is obtained by encrypting the accessed transaction information;

A decryption module, which uses the attribute key of the access node to decrypt the ciphertext of the transaction information, and then obtains the transaction information; wherein the attribute key generation method of the access node and the attribute key generation method of the consensus accounting node the same way.

Another aspect of the present invention provides an authorized access system for a blockchain, including: a transaction node, a consensus accounting node, and an access node;

The consensus accounting node records the transaction information generated by the transaction node;

The access node sends a transaction information access request to the consensus accounting node; the transaction information access request includes attribute information of the access node;

The consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information, generates a transaction information ciphertext, and broadcasts the transaction information ciphertext;

The access node receives the ciphertext of the transaction information sent by the consensus accounting node, and uses its own attribute key to decrypt the ciphertext of the transaction information, and then obtains the transaction information; wherein the attribute key of the access node is generated The method is the same as the method of generating the attribute key of the consensus accounting node.

According to another aspect of the present invention, an electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, the processor implements the above-mentioned blockchain when executing the program access authorization method.

According to another aspect of the present invention, a computer-readable storage medium is provided with a computer program stored thereon, and when the computer program is executed by a processor, the access authorization method of the above-mentioned blockchain is implemented.

The access authorization method and node of the blockchain proposed by the present invention generate an attribute key according to the attribute information after obtaining the attribute information of the access node by using the consensus accounting node, and the access node requesting access can also be based on its own attribute information The same attribute key is generated, and then the transaction information encrypted by the consensus accounting node is decrypted with the attribute key generated by itself, which can effectively solve the security problem of the limited sharing of transaction information by the data owner. The present invention uses the data provider as the CA certificate. At the same time, it designs ciphertext strategy as an authorized subject, that is, by providing attribute strategy based on ciphertext strategy for attribute encryption, information access users apply for access rights through the blockchain network, this method gets rid of the bottleneck of relying on the certification center CA , which improves the reliability and efficiency of privacy protection of transaction data.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained according to these drawings without creative efforts.

Figure 1: A schematic diagram of a blockchain multi-center transaction privacy protection system based on loose consensus;

Figure 2: A schematic diagram of a blockchain multi-center transaction privacy protection based on loose consensus;

Figure 3: A schematic diagram of a request message format;

Figure 4: A flowchart of a blockchain access authorization method;

Figure 5: A schematic diagram of the structure of a consensus accounting node in a blockchain.

FIG. 6 is a schematic structural diagram of a computer device suitable for an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

The consensus bookkeeping nodes in the blockchain network should add blocks after the consensus is completed to ensure the completeness of the information of each node in the network. However, when an actual transaction occurs, not all transactions require consensus on the entire network, but only within a limited range. Therefore, in order to solve the problem that the traditional blockchain requires consensus on the entire network, this The invention provides a loosely coupled trading circle, which is built on a traditional blockchain network. Compared with the traditional blockchain trading, the loosely coupled trading circle does not need to anchor alliance members in advance to form a relatively stable network. The method proposed by the present invention introduces the concept of a loosely coupled consensus smart contract and an application-level smart contract, wherein the loosely coupled consensus smart contract executes a loosely coupled protocol, and according to the scope of the loosely coupled transaction circle, anchors the nodes to which the transaction participants belong, To achieve consensus accounting within a limited range, application-level smart contracts are responsible for calling loosely coupled consensus smart contracts when executing business transactions. The loosely coupled protocol supports any number of trading parties to join and withdraw from the trading alliance independently, building a flexible ecosystem.

After a series of transactions, the blockchain reaches the final transaction state, where the state is represented by σ, including the account balance, sequence number, timestamp, counterparty and other data of the blockchain transaction; the blockchain transaction is represented by T, is a legal rule to connect the two states before and after. The state is formally represented as follows:

σ _t+1 =γ(σ _t ,T)

where γ represents the state transition function. In order to distinguish it from the traditional blockchain transaction, the version number v is introduced into the state transition function, namely γ _v , and v∈N, v≥0, when v=0, γ _v represents the traditional blockchain transaction; when v When > 0, γ _v represents the execution of loosely coupled transactions. It should be pointed out that the version number v is unique in the whole network, and the version number v used is stored in the consensus accounting node of the whole network, which is used to distinguish the smart contract state transfer function of different loosely coupled trading circles. details as follows:

σ _t+1 = γ _v (σ _t ,T)

The above relationship is formalized as:

After the loosely coupled smart contract state transition function _γv is executed, the transaction information is only physically stored in the node to which the transaction party belongs.

In the present invention, the transaction node is the verification node of the transaction party. For example, if the participant A is a banking institution, the corresponding verification node is the client terminal of the participant A in the blockchain network.

As shown in Figure 1, a schematic diagram of a loosely coupled blockchain autonomous transaction system and method includes: blockchain infrastructure cloud (BaaS) 1, blockchain consensus accounting node 2, loosely coupled transaction circle 3, loosely coupled Trading circle 4, trading party 5. Among them, the essence of loosely coupled trading circles 3 and 4 is the same, but with different number of trading parties.

Blockchain Infrastructure Cloud (BaaS) 1: Responsible for providing and assigning network resources, computing resources and storage resources according to the user's request for networking resources, creating blockchain networking services, and supporting selection based on the user's blockchain product standards Mirroring of blockchain products, creating virtual nodes.

Blockchain consensus accounting node 2: The blockchain network has several blockchain consensus accounting nodes. As a blockchain computing node, it is mainly responsible for blockchain transaction access and processing, providing smart contract execution, transaction consensus and Transaction accounting. In the blockchain infrastructure cloud (BaaS)1, the blockchain consensus accounting nodes are all virtual computing nodes.

Loosely coupled transaction circle 3: In the blockchain infrastructure cloud 1, a transaction circle temporarily composed of transaction parties. Further, the transaction party arbitrarily selects the temporary trading circle formed by other transaction parties according to the transaction needs. In order to reach a transaction, a local consensus agreement is executed. The transaction data is only stored in the node where the transaction party is located, and does not spread to the traditional blockchain network. Network nodes. This loosely coupled circle consists of three transaction parties: Participant A, Participant B, and Participant C.

Loosely coupled transaction circle 4: In the blockchain infrastructure cloud 1, a transaction circle temporarily composed of transaction parties. Further, according to business needs, the transaction party arbitrarily selects a temporary trading circle formed by other transaction parties. In order to reach a transaction, a partial consensus agreement is executed. The transaction data is only stored in the node where the transaction party is located, and does not spread to the traditional blockchain network. Network nodes. This loosely coupled circle consists of three transaction parties: participant D and participant E.

Transaction party 5: The transaction participant who executes the blockchain consensus transaction.

Compared with traditional blockchain transactions, the loosely coupled transaction circle is built on the basis of the traditional blockchain network, and there is no need to anchor alliance members in advance to form a relatively stable network, and only the consensus accounting node to which the transaction party belongs to store the transaction ledger, improving The data storage efficiency is improved; the loosely coupled transaction also has the characteristics of flexible transaction mode and high execution efficiency.

The loosely coupled trading circle has the characteristics of temporality, uncertainty and consistency. The trading parties can choose the timing of joining or withdrawing independently. There are uncertainties in the scale, life cycle, transaction type, etc., but it is necessary to ensure group consensus within a limited range. consistency. With the establishment of a loosely coupled transaction circle, the transaction data of the participants is private and confidential. The transaction data owner is allowed to authorize access to the authorized person. Users need to verify the encryption attributes and encryption policies before they can access the data. To prevent collusion, information leakage, external attacks and other risks.

To this end, the core idea of the present invention is to implement certificate issuance and attribute encryption (Multi-authority CP-ABE) by introducing the CA authentication method into the multi-authority subjects of the loosely coupled transaction circle, and to realize the loosely coupled transaction circle in and out of the circle. The information authorization and protection of multiple transaction parties improves the reliability and efficiency of transaction data privacy protection inside and outside the loosely coupled transaction circle.

Specifically, the present invention uses attribute information as a condition for generating keys, and generates the same key through the access node and the consensus accounting node, so that the consensus accounting node can act as an authentication center to share transaction information with visitors, avoiding the need for Access by other nodes that do not have access.

As shown in FIG. 2 , a schematic diagram of a blockchain multi-center transaction privacy protection based on loose consensus includes: transaction information visitor 20 , loosely coupled transaction circle 21 , accounting node/attribute authorization center 22 , and transaction participants 23 .

Transaction information visitor 20: The transaction participant who executes the blockchain consensus transaction and is also the publisher of transaction information. The transaction information visitor 20 provides the attribute proof required by the attribute access policy Γ. In this example, the participants access the loosely coupled transaction circle through the blockchain consensus accounting node/attribute authorization center 22, execute transactions, and encrypt and authorize transaction information.

In some embodiments, the attribute information includes, but is not limited to, unit address, unit name, unit organization, work group, and position level.

The attribute access policy Γ can be formally expressed as:

Among them, S ₁ , S ₂ ,...,S _N represent the attribute sets of N in Γ. The algorithm traverses j=1, 2,..., N attribute sets to generate a union of N attribute sets. set.

Loosely coupled transaction circle 21: In the blockchain infrastructure cloud 1, a transaction circle temporarily composed of transaction parties. The transaction party arbitrarily selects a temporary trading circle formed by other transaction parties according to business needs. In order to achieve a transaction, a local consensus agreement is executed. The transaction data is only stored in the node where the transaction party is located, and does not spread to the entire network like a traditional blockchain network. .

Accounting node/attribute authorization center 22: Responsible for providing security authentication of blockchain network blockchain consensus accounting nodes, and providing global parameters GP for transaction information. Execute the GlobalSetup(), CreateUser(), CreateAuthority() algorithms, respectively indicating initialization, user creation, and attribute authorization center operations:

Global Setup() algorithm: used to generate the public key and key of the central CA. Let e: G ₁ ×G ₁ →G _T be a bijective relation, G ₁ represents the additive group of order n, and G _T represents the multiplicative group of order n. Let g∈G be the generator of G, randomly select two elements P, Q∈G of the G group, and the public key of the certification center CA is expressed as M _CA ={G,G _T ,e,g,P,e(g, Q)}, the key is denoted as S _CA =Q.

密钥表示为

CreateUser(): Used to create a public key and a secret key for the participant user u. Let mk _u ∈ Z _p be an element of the additive group Z _p , the public key of the participant user u

The key is represented as

CreateAuthority(): It is used to provide a standard random hash function H _x :{0,1} ^* →Z _p for the attribute authority, and the returned value x _a is used as the key S _a :=x _a of the attribute authority

Transaction participant 23: The transaction participant who executes the blockchain consensus transaction. The participant accesses the loosely coupled transaction circle through the blockchain consensus accounting node/attribute authorization center 22 to execute transactions, encrypt, authorize transaction information and other processing.

The application of the present invention is described below. FIG. 4 shows the access authorization method of the blockchain in the embodiment of the present invention, as shown in FIG. 4 , including:

S11: The consensus accounting node receives a transaction information access request; the transaction information access request includes attribute information of the access node;

S12: The consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information to generate transaction information ciphertext; wherein the access node generates an attribute key based on its own attribute information the attribute key;

S13: Broadcast the ciphertext of the transaction information, so that the access node decrypts the ciphertext of the transaction information by using the attribute key of the access node to obtain the transaction information; wherein the attribute key of the access node is generated The method is the same as the method of generating the attribute key of the consensus accounting node.

The access authorization method of the blockchain proposed by the present invention generates an attribute key according to the attribute information after obtaining the attribute information of the access node by using the consensus accounting node, and the access node requesting access can also generate the same attribute information according to its own attribute information. Then, by decrypting the transaction information encrypted by the consensus accounting node with the attribute key generated by itself, the security problem of limited sharing of transaction information by the data owner can be effectively solved. The present invention uses the data provider as the CA certificate provider. At the same time, as an authorized subject, design a ciphertext strategy, that is, by providing an attribute strategy based on the ciphertext strategy for attribute encryption, information access users apply for access rights through the blockchain network. This method gets rid of the bottleneck of relying on the certification center CA and improves the It improves the reliability and efficiency of privacy protection of transaction data.

It can be understood that the transaction information access request in the present invention includes the identifier of the transaction information, such as the address of the transaction information, that is, the transaction information on the corresponding block can be retrieved by reading the transaction information access request.

In a preferred embodiment, the transaction information access request further includes security authentication information;

Before generating the attribute key according to the attribute information, the access authorization method further includes:

The security authentication information in the transaction information access request is verified, and if the verification is passed, an attribute key is generated according to the attribute information.

In a preferred embodiment, it also includes:

Establish multiple loosely coupled trading circles, and uniquely identify each loosely coupled trading circle with a version number.

In a preferred embodiment, each loosely coupled trading circle is established, and the corresponding loosely coupled trading circle is uniquely identified with a version number, including:

Broadcasting a loosely coupled transaction request, so that each transaction node determines whether it is a node in the loosely coupled transaction circle according to the received loosely coupled transaction request; the loosely coupled transaction request includes a unique version number;

Together with other nodes that determine that they belong to the loosely coupled trading circle, receive a notification response message of loose coupling sent by non-self-trading nodes;

Together with other nodes that determine that they belong to the loosely coupled trading circle, send the version number application success confirmation message and broadcast the version number to inform non-self nodes in the loosely coupled trading circle.

In a preferred embodiment, the loosely coupled transaction request further includes transaction node address information; each transaction node determines whether it is a node in the loosely coupled transaction circle according to the received loosely coupled transaction request, including:

Each transaction node determines whether its own address information is included in the address information in the loosely coupled transaction request, and if so, determines that it is a node in the loosely coupled transaction circle.

In a preferred embodiment, each consensus accounting node corresponds to a unique node identifier; the generating an attribute key according to the attribute information includes:

The attribute key is generated according to the attribute information, the corresponding unique identifier of the node, and the security authentication information.

In the present invention, FIG. 3 shows a schematic diagram of a request message format.

Another aspect of the present invention provides a block chain access authorization method, including:

The access node sends a transaction information access request to the consensus accounting node in the blockchain; the transaction information access request includes attribute information of the access node;

Receive the transaction information ciphertext sent by the consensus accounting node; wherein the transaction information ciphertext is the transaction information that the consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to access the transaction information encrypted;

Decrypt the ciphertext of the transaction information by using the attribute key of the access node, and then obtain the transaction information; wherein the generation method of the attribute key of the access node is the same as the generation method of the attribute key of the consensus accounting node.

Another aspect of the present invention provides a method for an authorized access system for a blockchain, including:

The consensus accounting node records the transaction information generated by the transaction node;

The access node sends a transaction information access request to the consensus accounting node; the transaction information access request includes attribute information of the access node;

The consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information, generates a transaction information ciphertext, and broadcasts the transaction information ciphertext;

The access node receives the ciphertext of the transaction information sent by the consensus accounting node, and uses its own attribute key to decrypt the ciphertext of the transaction information, and then obtains the transaction information; wherein the attribute key of the access node is generated The method is the same as the method of generating the attribute key of the consensus accounting node.

Another aspect of the present invention provides a consensus accounting node of a blockchain, including:

an access request receiving module, the consensus accounting node receives a transaction information access request; the transaction information access request includes attribute information of the access node;

an attribute key generation module, wherein the consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information to generate transaction information ciphertext; wherein the access node is based on its own to generate the attribute key from the attribute information;

The transaction information ciphertext broadcasting module broadcasts the transaction information ciphertext, so that the access node decrypts the transaction information ciphertext by using the attribute key of the access node, and then obtains the transaction information; wherein the access node The generation method of the attribute key is the same as the generation method of the attribute key of the consensus accounting node.

Another aspect of the present invention provides a block chain access node, including:

an access request sending module, where the access node sends a transaction information access request to the consensus accounting node in the blockchain; the transaction information access request includes attribute information of the access node;

The transaction information ciphertext receiving module receives the transaction information ciphertext sent by the consensus accounting node; wherein the transaction information ciphertext is that the consensus accounting node generates an attribute key according to the attribute information, and uses the attribute The key pair is obtained by encrypting the accessed transaction information;

A decryption module, which uses the attribute key of the access node to decrypt the ciphertext of the transaction information, and then obtains the transaction information; wherein the attribute key generation method of the access node and the attribute key generation method of the consensus accounting node the same way.

Another aspect of the present invention provides an authorized access system for a blockchain, including: a transaction node, a consensus accounting node, and an access node;

The consensus accounting node records the transaction information generated by the transaction node;

The access node sends a transaction information access request to the consensus accounting node; the transaction information access request includes attribute information of the access node;

The consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information, generates a transaction information ciphertext, and broadcasts the transaction information ciphertext;

The access node receives the ciphertext of the transaction information sent by the consensus accounting node, and uses its own attribute key to decrypt the ciphertext of the transaction information, and then obtains the transaction information; wherein the attribute key of the access node is generated The method is the same as the method of generating the attribute key of the consensus accounting node.

The present invention will be described in detail below with reference to specific scenarios.

Form a loosely coupled trading circle

A flow chart of blockchain multi-center transaction privacy protection based on loose consensus includes the following steps:

的生成元g₁。同是，引入标准的随机哈希函数H:{0,1}^*→G，实现从全局唯一标识GID到G的影射。形式上有：Step S40: The attribute authorization center starts the initialization procedure GlobalSetup(), and let G represent a bijective group of rank N, N=p ₁ p ₂ p ₃ , where p ₁ , p ₂ , and p ₃ are three prime numbers. The global parameter GP represents N and

The generator g ₁ of . At the same time, the standard random hash function H:{0,1} ^* →G is introduced to realize the mapping from the global unique identifier GID to G. In the form of:

GlobalSetup(λ)→GP

Among them, λ represents the security parameter. GP is shared with other accounting nodes through the blockchain network.

Step S41: The transaction data owner node applies to become an attribute authorization center, executes the CreateAuthority() algorithm, and is formally expressed as:

CreateAuthority(GID,GP)→PK _GID ,SK _GID

The formula inputs the global attribute GP, and outputs the public and private key pair (PK _GID , SK _GID ) of the attribute authority center. For each attribute i belonging to the authorization center, randomly select two numbers α _i , β _i ∈ Z as exponents, and express the public key PK as follows:

The private key SK is represented as follows:

Step S42: the user u applies to the attribute authorization center a for the key K _i,GID , executes the CreateUser() algorithm, accepts the input (GID, GP, i, SK), and generates the user u's key K _i,GID about the attribute i, The GID is the global ID of the accounting node to which the user belongs. Formally expressed as:

CreateUser(GID,GP,i,SK)→K _i,GID

The attribute authorization center creates a key for the attribute i of the GID, which is expressed in the form:

Step S43: The attribute authorization center provides attribute authority verification, data encryption and decryption services to user u: (1) Attribute authority verification. The transaction information access user _ug submits an information access request to the attribute authorization center, and the attribute authorization center executes the RequestAttribute() algorithm to verify whether the transaction information requester has access rights. Returns false if the detection fails. Otherwise, return the attribute key S _u to the transaction information requester, which is formally expressed as:

(2) Data encryption. The attribute authorization center executes Encrypt(T,Γ,GP,PK1 _,GID ,PK2 _,GID ,...,Mn _,GID ) to encrypt the attributes of the transaction information T. The resulting ciphertext T _c is formally expressed as follows:

(3) Data decryption. The attribute authorization center executes the Decrypt() decryption algorithm, receives the global parameter GP, the ciphertext T _C , and the attribute key cluster {K _i,GID }(1≤i≤N), and the global identifier GID, when the attribute cluster satisfies the attribute policy, Output plaintext T, otherwise decryption fails.

Decrypt(T _c ,GP,{K _i,GID })→T

The specific steps of the decryption flow chart of a loosely coupled blockchain multi-party transaction system are as follows:

Step S50: The transaction information access user u submits an application for accessing the transaction information T to the blockchain node b to which he belongs (which is also the attribute authorization center of u), and b sends the access request to the attribute authorization center a where the transaction information T is located, and at the same time u The attribute information (u ₁ , u ₂ , ..., u _n ) is sent to the attribute authorization center a together.

Step S51: The attribute authorization center a executes the RequestAttribute() algorithm to verify whether the transaction information requester has the access authority (using the AccessTree() access tree algorithm, which is not described in the present invention). Returns false if the detection fails. Otherwise, the attribute key SK(a) of u is generated, and SK(a) is formally expressed as:

If S _u (a) contains N attribute values, it is expressed as SK _u (a)=(SK _u1 , SK _u2 , ..., SK _un ), and the returned result is returned to the blockchain node through the blockchain network b.

Step S52: The blockchain node b (which is also the attribute authorization center of _ug ) executes the decryption algorithm Decrypt(), and the input parameters are as follows: Decrypt(PK _A , T _C , Γ, SK _u (a)), where T _C represents Ciphertext, Su (a) is the attribute key of _{u, in the form of SK u (} a)=(SK _u1 , SK _u2 , ..., SK _un ), which satisfies the AccessTree() access tree algorithm (not in the present invention) illustrate). Then the plaintext T can be expressed as the following formula:

R_j∈Z_p为每个属性策略群组的随机常数。in,

R _j ∈ Z _p is a random constant for each attribute policy group.

A transaction information protection flow chart of a blockchain multi-center transaction privacy protection system based on loose consensus, the specific steps are as follows (assuming that the blockchain network contains 4 transaction parties: A, B, C, D, D does not participate in loosely coupled transactions ):

Step S600: obtain the latest version number v of the entire network;

Step S601: Transaction party A sends a partial consensus request to transaction parties B and C through the verification node where it is located. Since transaction party D is not loosely coupled to the transaction circle, the verification node where transaction party A is located will no longer send loose coupling requests to transaction party D; request The broadcast message contains the address information of the target transaction party, and the transaction parties in this example include transaction parties B and C. Let P _T denote the loosely coupled transaction message of transaction T, in the form:

P _T =(v,n,(ρ ₁ ,ρ ₂ ,...,ρ _n ),...,chksum)

Among them, v is the version number, n is the number of transaction parties, ρ ₁ , ρ ₂ ,...,ρ _n represents the id numbers and IP addresses of 1 to n transaction parties, and chksum is the check digit.

The format of the loosely coupled transaction message is shown in the following figure.

Step S602: the verification node where the transaction party A is located listens to and receives the loosely coupled message request from the transaction party A, and performs message security verification;

Step S603: The verification node where the transaction party A is located parses and extracts the message request message of the local consensus transaction, and obtains the transaction parties in the loosely coupled transaction circle, which are A, B, and C in this example; using the PBFT (Byzantine Fault Tolerance) algorithm, in A , B, and C are located in the verification node for transaction consensus.

Step S604: The verification node where the transaction party B is located listens to and receives the loosely coupled message request from the transaction party A, and performs message security verification;

Step S605: The verification node where the transaction party B is located parses and extracts the message request message of the local consensus transaction, and obtains the transaction parties in the loosely coupled transaction circle, which are A, B, and C in this example; using the PBFT (Byzantine Fault Tolerance) algorithm, in A , B, and C are located in the verification node for transaction consensus.

Step S606: the verification node where the transaction party C is located listens to and receives the loosely coupled message request from the transaction party A, and performs message security verification;

Step S607: The verification node where the transaction party C is located parses and extracts the message request message of the local consensus transaction, and obtains the transaction parties in the loosely coupled transaction circle, which are A, B, and C in this example; using the PBFT (Byzantine Fault Tolerance) algorithm, in A , B, and C are located in the verification node for transaction consensus.

Step S608: At the verification node where the transaction party A is located, the transaction information from other nodes is received, and the existing transaction is verified according to the version number v. In order to verify the correctness of the transaction, the following relationship must be satisfied:

H _v =TRIE(L _S (Π(σ,β)))

Let T _p represent the application-level smart contract transaction, and T _s represent the system-level smart contract transaction, and the following formula can be obtained by extension:

σ _t+1 =Π(σ _t ,B)

in,

B=(...,(T _p,1 ,T _s,1 ),(T _p,0 ,T _s,0 ),...)

∏(σ,B)≡Ω(B,γ(γ(σ,(T _p,0 ,T _s,0 )),(T _p,1 ,T _s,1 ))...)

Ω represents the final state, B represents the transaction sequence, T _p,0 , T _p,1 represent the 0th and 1st application-level smart contract transaction sequence respectively, T _s,0 ,T _s,1 represent the 0th and 1st system respectively level smart contract transaction sequence, (T _p,0 ,T _s,0 ) represents a combination of application-level and system-level smart contract transactions.

Step S609: If the smart contract authentication is successful, send a notification broadcast.

Step S610: At the verification node where the transaction party B is located, the transaction information from other nodes is received, and the existing transaction is verified according to the version number V. For details, refer to step S708.

Step S611: If the smart contract authentication is successful, send a notification broadcast.

Step S612: At the verification node where the transaction party B is located, the transaction information from other nodes is received, and the existing transaction is verified according to the version number V. For details, refer to step S708.

Step S613: If the smart contract authentication is successful, send a notification broadcast.

Step S614: Execute the GlobalSetup() smart contract, generate the global parameter GP, and form a Hash with the public key provided by the user, the previous block Hash, and the current transaction Hash, and at the same time, check the local consensus message and store the transaction information locally. Formally expressed as:

H _V =kec(PH _V ,TH _V ,O _u )

Among them, H _V represents the Hash value of the current transaction, kec represents the Hash function calculated by the keccak-256 algorithm, PH _V represents the previous block Hash, TH _V represents the current transaction group Hash, and O _u represents the user’s public key (u= B1).

Step S615: Execute the GlobalSetup() smart contract, generate a global parameter GP, and form a Hash with the public key provided by the user, the previous block Hash, and the current transaction Hash, and at the same time, check the local consensus message and store the transaction information locally. For details, refer to step S614.

Step S616: Execute the GlobalSetup() smart contract, generate a global parameter GP, form a Hash with the public key provided by the user, the previous block Hash, and the current transaction Hash, and at the same time, check the local consensus message and store the transaction information locally. For details, refer to step S614.

Step S617: The node where the participant is located, that is, the attribute authorization center, is responsible for encrypting the transaction information of the participant. Specifically, Encrypt(T,Γ,GP,PK _1,GID ,PK _2,GID ,...,Mn _,GID ) is executed to encrypt the attributes of the transaction information T. The resulting ciphertext T _c is formally expressed as follows:

Store GP and transaction information locally.

Step S618: The node where the participant is located, that is, the attribute authorization center, is responsible for encrypting the transaction information of the participant. Specifically, Encrypt(T,Γ,GP,PK _1,GID ,PK _2,GID ,...,Mn _,GID ) is executed to encrypt the attributes of the transaction information T. The resulting ciphertext T _c is formally expressed as follows:

Store GP and transaction information locally.

Step S619: The node where the participant is located, that is, the attribute authorization center, is responsible for encrypting the transaction information of the participant. Specifically, Encrypt(T,Γ,GP,PK _1,GID ,PK _2,GID ,...,Mn _,GID ) is executed to encrypt the attributes of the transaction information T. The resulting ciphertext T _c is formally expressed as follows:

Store GP and transaction information locally.

In some embodiments, a loose consensus-based information access authorization method for a blockchain multi-center transaction privacy protection system is responsible for providing access users with decryption transaction information services.

Specific steps are as follows:

Step S700: The visiting user submits a transaction information access application to the affiliated blockchain node.

Step S701: The attribute authorization center executes the algorithm RequestAttribute() to check the authority of the access user. Verify that the transaction information requester has access.

Step S702: Judging the execution of the algorithm RequestAttribute(), and returning a Null value if the detection fails. Otherwise, return the attribute key SK _u to the transaction information requester, which is expressed as

Step S703: If the algorithm RequestAttribute() returns false, it means that the accessing user does not have the transaction information access authority, and the process ends.

Step S704: If the algorithm _{RequestAttribute} () returns the attribute key Su, the attribute authorization center further applies to the accounting node to which the transaction information belongs to access the transaction information.

Step S705: The accounting node returns the transaction information in ciphertext format to the attribute authorization center.

Step S706: The attribute authorization center receives the transaction information in ciphertext format, executes the decryption algorithm Decrypt(), and generates plaintext T. The input parameters are as follows: Decrypt(PK _A ,T _C ,Γ,SK _u (a)), where T _C represents the ciphertext, _Su (a) is the attribute key of u, in the form of SK _u (a)=( SK _u1 , SK _u2 , ..., SK _un ), which satisfy the AccessTree() access tree algorithm (not described in the present invention). Then the plaintext T can be expressed as the following formula:

R_j∈Z_p为每个属性策略群组的随机常数。in,

R _j ∈ Z _p is a random constant for each attribute policy group.

Step S707: The visiting user receives the plaintext information T.

As can be seen from the above scenario description, the present invention supports the nodes belonging to the transaction party to authenticate multiple transactions generated by multiple loosely coupled transaction circles by enhancing the loosely coupled Hash index in the block, thereby promoting the security and efficiency of transactions. The present invention has the following advantages:

1. Through the interaction of system-level smart contracts and application-level smart contracts, the transaction parties can independently anchor any number of transaction parties in the process of executing blockchain-based transaction consensus, forming a loosely coupled transaction circle and improving the autonomy of transaction parties. The autonomy to enter and exit transactions;

2. By introducing the public attribute parameters GP and GID, the centralized authentication of the de-blockchain certification center CA is realized, and the single-level security authentication structure of the attribute authorization center is realized to ensure that each participant in the loosely coupled transaction circle physically stores transaction information. Get rid of the dependence on the certification center CA, and improve the efficiency of flexible sharing of transaction information while providing higher privacy protection capabilities;

3. Provides ciphertext policy privacy protection based on loosely coupled trading circles, allowing loosely coupled trading parties to customize access strategies according to their own, and promote transaction information to be shared outside the trading circle. At the same time, by providing transaction groups based on version numbers, the blockchain transaction network can form multiple concurrently executed transaction circles, which improves system flexibility and concurrent execution efficiency, and is conducive to the development of an efficient alliance ecosystem;

4. Due to the physical isolation of transaction groups based on version numbers, transaction privacy and information leakage are effectively prevented, and it has high security.

Based on the same inventive concept, another aspect of the present invention provides a block chain access authorization method, including:

The access node sends a transaction information access request to the consensus accounting node in the blockchain; the transaction information access request includes attribute information of the access node;

Receive the transaction information ciphertext sent by the consensus accounting node; wherein the transaction information ciphertext is the transaction information that the consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to access the transaction information encrypted;

Decrypt the ciphertext of the transaction information by using the attribute key of the access node, and then obtain the transaction information; wherein the generation method of the attribute key of the access node is the same as the generation method of the attribute key of the consensus accounting node.

Another aspect of the present invention provides a method for an authorized access system for a blockchain, including:

The consensus accounting node records the transaction information generated by the transaction node;

The access node sends a transaction information access request to the consensus accounting node; the transaction information access request includes attribute information of the access node;

The consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information, generates a transaction information ciphertext, and broadcasts the transaction information ciphertext;

The access node receives the ciphertext of the transaction information sent by the consensus accounting node, and uses its own attribute key to decrypt the ciphertext of the transaction information, and then obtains the transaction information; wherein the attribute key of the access node is generated The method is the same as the method of generating the attribute key of the consensus accounting node.

Another aspect of the present invention provides a consensus accounting node of a blockchain, as shown in FIG. 5 , including:

The access request receiving module 11, the consensus accounting node receives the transaction information access request; the transaction information access request includes the attribute information of the access node;

Attribute key generation module 12, the consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information to generate a transaction information ciphertext; wherein the access node is based on own attribute information to generate the attribute key;

The transaction information ciphertext broadcasting module 13 broadcasts the transaction information ciphertext, so that the access node decrypts the transaction information ciphertext by using the attribute key of the access node, and then obtains the transaction information; wherein the access node The method of generating the attribute key of the node is the same as the method of generating the attribute key of the consensus accounting node.

Another aspect of the present invention provides a block chain access node, including:

an access request sending module, where the access node sends a transaction information access request to the consensus accounting node in the blockchain; the transaction information access request includes attribute information of the access node;

The transaction information ciphertext receiving module receives the transaction information ciphertext sent by the consensus accounting node; wherein the transaction information ciphertext is that the consensus accounting node generates an attribute key according to the attribute information, and uses the attribute The key pair is obtained by encrypting the accessed transaction information;

A decryption module, which uses the attribute key of the access node to decrypt the ciphertext of the transaction information, and then obtains the transaction information; wherein the attribute key generation method of the access node and the attribute key generation method of the consensus accounting node the same way.

Another aspect of the present invention provides an authorized access system for a blockchain, including: a transaction node, a consensus accounting node, and an access node;

The consensus accounting node records the transaction information generated by the transaction node;

The access node sends a transaction information access request to the consensus accounting node; the transaction information access request includes attribute information of the access node;

The consensus accounting node generates an attribute key according to the attribute information, and uses the attribute key to encrypt the accessed transaction information, generates a transaction information ciphertext, and broadcasts the transaction information ciphertext;

The access node receives the ciphertext of the transaction information sent by the consensus accounting node, and uses its own attribute key to decrypt the ciphertext of the transaction information, and then obtains the transaction information; wherein the attribute key of the access node is generated The method is the same as the method of generating the attribute key of the consensus accounting node.

The access authorization method and node of the blockchain proposed by the present invention generate an attribute key according to the attribute information after obtaining the attribute information of the access node by using the consensus accounting node, and the access node requesting access can also be based on its own attribute information The same attribute key is generated, and then the transaction information encrypted by the consensus accounting node is decrypted with the attribute key generated by itself, which can effectively solve the security problem of the limited sharing of transaction information by the data owner. The present invention uses the data provider as the CA certificate. At the same time, it designs ciphertext strategy as an authorized subject, that is, by providing attribute strategy based on ciphertext strategy for attribute encryption, information access users apply for access rights through the blockchain network, this method gets rid of the bottleneck of relying on the certification center CA , which improves the reliability and efficiency of privacy protection of transaction data.

From a hardware perspective, in order to solve the problem of consistency of cached data between contract containers, the present invention provides an embodiment of an electronic device for implementing all or part of the content in the blockchain transaction processing method. The equipment specifically includes the following:

A processor, a memory, a Communications Interface and a bus; wherein, the processor, the memory, and the communication interface communicate with each other through the bus; the communication interface is used to implement a server, Information transmission between devices, distributed message middleware cluster devices, various databases, user terminals and other related devices; the electronic device may be a desktop computer, a tablet computer, a mobile terminal, etc., and this embodiment is not limited thereto. In this embodiment, the electronic device can be implemented with reference to the embodiment of the blockchain transaction processing method and the embodiment of the blockchain transaction processing apparatus, the contents of which are incorporated herein, and the repetition is not repeated. Repeat.

FIG. 6 is a schematic block diagram of a system configuration of an electronic device 9600 according to an embodiment of the present invention. As shown in FIG. 6 , the electronic device 9600 may include a central processing unit 9100 and a memory 9140 ; the memory 9140 is coupled to the central processing unit 9100 . Notably, this FIG. 6 is exemplary; other types of structures may be used in addition to or in place of this structure to implement telecommunication functions or other functions.

In one embodiment, the blockchain transaction processing functionality may be integrated into the central processing unit 9100. For example, the central processing unit 9100 may be configured to control the following:

S1: Obtain the latest version number corresponding to the current transaction request message, each version number corresponds one-to-one with a loosely coupled transaction circle, the loosely coupled transaction circle includes a plurality of transaction nodes, each transaction An application-level smart contract and a loosely coupled consensus smart contract are deployed in the container corresponding to the node, and the loosely coupled consensus smart contract is used to determine the loosely coupled trading circle through consensus;

S2: If it belongs to the node in the loosely coupled trading circle corresponding to the latest version number, execute consensus on the current transaction with other trading nodes in the loosely coupled trading circle;

S3: If the consensus is passed, call the application-level smart contract to execute the current transaction; and write the transaction data into the transaction data set of the corresponding block, the block further includes: a hash index set and a transaction hash set, the The hash index set includes the transaction group hash value corresponding to each version number in the previous block, and the transaction hash set includes the transaction group hash value corresponding to each version number in the current block;

S4: According to the hash value of the current transaction and the hash value of the transaction group corresponding to the latest version of the previous block in the hash index set, calculate the hash value of the transaction group corresponding to the latest version number in the transaction hash set of the current block.

It can be seen from the above description that the electronic device provided by the embodiment of the present invention supports the transaction party to anchor any number of participants autonomously in the transaction process, forming a loosely coupled transaction circle, and through the loosely coupled smart contract and the application-level smart contract. Interactions ensure that transaction consensus limits are enforced within the confines of loosely coupled transaction circles. This method improves the autonomy and consensus efficiency of the transaction party, and supports the nodes belonging to the transaction party to authenticate multiple transactions generated by multiple loosely coupled transaction circles by enhancing the loosely coupled Hash index in the block, thereby promoting transaction security. and efficiency improvements.

In another embodiment, the blockchain transaction processing device can be configured separately from the central processing unit 9100. For example, the blockchain transaction processing device can be configured as a chip connected to the central processing unit 9100, and the region can be realized through the control of the central processing unit. Blockchain transaction processing capabilities.

As shown in FIG. 6 , the electronic device 9600 may further include: a communication module 9110 , an input unit 9120 , an audio processor 9130 , a display 9160 , and a power supply 9170 . It is worth noting that the electronic device 9600 does not necessarily include all the components shown in FIG. 6 ; in addition, the electronic device 9600 may also include components not shown in FIG. 6 , and reference may be made to the prior art.

As shown in FIG. 6, the central processing unit 9100, also sometimes referred to as a controller or operational control, may include a microprocessor or other processor device and/or logic device, the central processing unit 9100 receives input and controls various aspects of the electronic device 9600 component operation.

The memory 9140, for example, may be one or more of a cache, a flash memory, a hard drive, a removable medium, a volatile memory, a non-volatile memory or other suitable devices. The above-mentioned information related to the failure can be stored, and a program executing the related information can also be stored. And the central processing unit 9100 can execute the program stored in the memory 9140 to realize information storage or processing.

The input unit 9120 provides input to the central processing unit 9100 . The input unit 9120 is, for example, a key or a touch input device. The power supply 9170 is used to provide power to the electronic device 9600 . The display 9160 is used for displaying display objects such as images and characters. The display can be, for example, but not limited to, an LCD display.

The memory 9140 may be solid state memory such as read only memory (ROM), random access memory (RAM), SIM card, and the like. There may also be memories that retain information even when powered off, selectively erased and provided with more data, examples of which are sometimes referred to as EPROMs or the like. Memory 9140 may also be some other type of device. Memory 9140 includes buffer memory 9141 (sometimes referred to as a buffer). The memory 9140 may include an application/function storage part 9142 for storing application programs and function programs or for performing operations of the electronic device 9600 through the central processing unit 9100 .

The memory 9140 may also include data storage 9143 for storing data such as contacts, digital data, pictures, sounds and/or any other data used by the electronic device. The driver storage section 9144 of the memory 9140 may include various drivers of the electronic device for communication functions and/or for executing other functions of the electronic device (eg, a messaging application, a contact book application, etc.).

The communication module 9110 is the transmitter/receiver 9110 that transmits and receives signals via the antenna 9111 . A communication module (transmitter/receiver) 9110 is coupled to the central processing unit 9100 to provide input signals and receive output signals, as may be the case with conventional mobile communication terminals.

Based on different communication technologies, multiple communication modules 9110 may be provided in the same electronic device, such as a cellular network module, a Bluetooth module, and/or a wireless local area network module. The communication module (transmitter/receiver) 9110 is also coupled to the speaker 9131 and the microphone 9132 via the audio processor 9130 to provide audio output via the speaker 9131 and to receive audio input from the microphone 9132 for general telecommunication functions. Audio processor 9130 may include any suitable buffers, decoders, amplifiers, and the like. In addition, the audio processor 9130 is also coupled to the central processing unit 9100, thereby enabling recording on the local unit through the microphone 9132, and enabling playback of the sound stored on the local unit through the speaker 9131.

Embodiments of the present invention also provide a computer-readable storage medium capable of implementing all the steps in the blockchain transaction processing method in the above-mentioned embodiments, where a computer program is stored on the computer-readable storage medium, and the computer program is processed When the server is executed, all steps of the blockchain transaction processing method in the above embodiment are implemented.

It can be seen from the above description that the computer-readable storage medium provided by the embodiments of the present invention supports the transaction party to independently anchor any number of participants in the transaction process, so as to form a loosely coupled transaction circle, and through loosely coupled smart contracts and application-level The interaction of smart contracts ensures that transaction consensus is restricted to execute within the confines of loosely coupled transaction circles. This method improves the autonomy and consensus efficiency of the transaction party, and supports the nodes belonging to the transaction party to authenticate multiple transactions generated by multiple loosely coupled transaction circles by enhancing the loosely coupled Hash index in the block, thereby promoting transaction security. and efficiency improvements.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, apparatus, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (apparatus), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block in the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in a flow or flow of a flowchart and/or a block or blocks of a block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory result in an article of manufacture comprising instruction means, the instructions The apparatus implements the functions specified in the flow or flow of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in the flow or blocks of the flowcharts and/or the block or blocks of the block diagrams.

In the present invention, the principles and implementations of the present invention are described by using specific embodiments, and the descriptions of the above embodiments are only used to help understand the method and the core idea of the present invention; The idea of the invention will have changes in the specific implementation and application scope. To sum up, the content of this specification should not be construed as a limitation to the present invention.

Claims (13)

1. A method for access authorization of a blockchain, comprising:

the consensus accounting node receives a transaction information access request; the transaction information access request comprises attribute information of an access node;

the consensus accounting node generates an attribute key according to the attribute information, encrypts accessed transaction information by using the attribute key and generates a transaction information ciphertext; wherein the access node generates the attribute key based on its own attribute information;

broadcasting the transaction information ciphertext to enable the access node to decrypt the transaction information ciphertext by using the attribute key of the access node, so as to obtain the transaction information; and generating the attribute key of the access node in the same way as the attribute key of the consensus accounting node.

2. The access authorization method according to claim 1, characterized in that the transaction information access request further comprises security authentication information;

before generating an attribute key according to the attribute information, the access authorization method further includes:

and verifying the security authentication information in the transaction information access request, and if the transaction information access request passes the verification, generating an attribute key according to the attribute information.

3. The access authorization method according to claim 1, further comprising:

a plurality of loosely coupled trading circles are established and each loosely coupled trading circle is uniquely identified with a version number.

4. The access authorization method according to claim 3, characterized in that establishing a loosely coupled transaction circle and uniquely identifying the corresponding loosely coupled transaction circle with a version number comprises:

broadcasting the loosely coupled transaction request so that each transaction node judges whether the transaction node is a node in a loosely coupled transaction circle according to the received loosely coupled transaction request; the loosely coupled transaction request includes a unique version number;

receiving a notification response message which is sent by a non-self transaction node and achieves loose coupling together with other nodes which judge that the self belongs to the loose coupling transaction circle;

and sending version number application success confirmation information and broadcasting the version number together with other nodes which judge that the nodes belong to the loose coupling trading circle so as to inform non-self nodes in the loose coupling trading circle.

5. The access authorization method according to claim 4, characterized in that the loosely coupled transaction request further comprises transaction node address information; each transaction node judges whether the transaction node is a node in a loose coupling transaction circle according to the received loose coupling transaction request, and the method comprises the following steps:

each transaction node judges whether the address information of the transaction node is included in the address information in the loosely coupled transaction request, and if the address information is included in the address information, the transaction node is determined to be a node in a loosely coupled transaction circle.

6. The access authorization method according to claim 2, characterized in that each consensus node corresponds to a node unique identifier; the generating an attribute key according to the attribute information includes:

and generating the attribute key according to the attribute information, the corresponding node unique identifier and the safety authentication information.

7. A method for access authorization of a blockchain, comprising:

the access node sends a transaction information access request to a consensus accounting node in the block chain; the transaction information access request comprises attribute information of an access node;

receiving a transaction information ciphertext sent by the consensus accounting node; the transaction information ciphertext is obtained by the consensus accounting node generating an attribute key according to the attribute information and encrypting accessed transaction information by using the attribute key;

decrypting the transaction information ciphertext by using the attribute key of the access node to obtain the transaction information; and generating the attribute key of the access node in the same way as the attribute key of the consensus accounting node.

8. A method for granting access to a blockchain, comprising:

the access node sends a transaction information access request to the consensus accounting node; the transaction information access request comprises attribute information of an access node;

the consensus accounting node generates an attribute key according to the attribute information, encrypts accessed transaction information by using the attribute key to generate a transaction information ciphertext and broadcasts the transaction information ciphertext;

the access node receives the transaction information ciphertext sent by the consensus accounting node, decrypts the transaction information ciphertext by using the attribute key of the access node, and further obtains the transaction information; and generating the attribute key of the access node in the same way as the attribute key of the consensus accounting node.

9. A block chain common-identity accounting node, comprising:

the access request receiving module is used for receiving the transaction information access request by the consensus accounting node; the transaction information access request comprises attribute information of an access node;

the attribute key generation module is used for generating an attribute key by the consensus accounting node according to the attribute information, encrypting the accessed transaction information by using the attribute key and generating a transaction information ciphertext; wherein the access node generates the attribute key based on its own attribute information;

the transaction information ciphertext broadcasting module is used for broadcasting the transaction information ciphertext to enable the access node to decrypt the transaction information ciphertext by using the attribute key of the access node so as to obtain the transaction information; and generating the attribute key of the access node in the same way as the attribute key of the consensus accounting node.

10. An access node of a blockchain, comprising:

the access request sending module is used for sending a transaction information access request to the consensus accounting node in the block chain by the access node; the transaction information access request comprises attribute information of an access node;

the transaction information ciphertext receiving module is used for receiving the transaction information ciphertext transmitted by the consensus accounting node; the transaction information ciphertext is obtained by the consensus accounting node generating an attribute key according to the attribute information and encrypting accessed transaction information by using the attribute key;

the decryption module is used for decrypting the transaction information ciphertext by using the attribute key of the access node so as to obtain the transaction information; and generating the attribute key of the access node in the same way as the attribute key of the consensus accounting node.

11. A system for granting access to a blockchain, comprising: the method comprises the steps of identifying a bookkeeping node and an access node;

the access node sends a transaction information access request to the consensus accounting node; the transaction information access request comprises attribute information of an access node;

the consensus accounting node generates an attribute key according to the attribute information, encrypts accessed transaction information by using the attribute key to generate a transaction information ciphertext and broadcasts the transaction information ciphertext;

the access node receives the transaction information ciphertext sent by the consensus accounting node, decrypts the transaction information ciphertext by using the attribute key of the access node, and further obtains the transaction information; and generating the attribute key of the access node in the same way as the attribute key of the consensus accounting node.

12. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the method for access authorization of a block chain according to any of claims 1 to 8 when executing the program.

13. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out a method for access authorization of a block chain according to any one of claims 1 to 8.

Images