CN111832069B - Multi-block chain on-chain data storage system and method based on cloud computing - Google Patents

Abstract

The invention relates to a cloud computing-based on-chain data storage system and a cloud computing-based on-chain data storage method for a multi-block chain, wherein one or more cloud storages are arranged in the technical scheme of the invention, and the on-chain data of a plurality of block chains are stored through the cloud storages; packaging and storing original block data and an original digital certificate of a block chain; the encryption interaction between the blockchain client and cloud storage is completed through the encryption engine module; establishing a key value database record for the user digital certificate and the block data through the key value database; providing at least editing function of the blockchain for the blockchain client through the API interface, and managing and maintaining data and user digital certificates on the chain; and carrying out docking communication with the API interface of the cloud storage through the cloud storage interface of the blockchain client. The beneficial effects of the invention are as follows: a user is provided with a custom storage mode of data on the blockchain, and the data on the blockchains are stored in a centralized mode.

Description

On-chain data storage system and method of multiple blockchains based on cloud computing

technical field

The present invention relates to the fields of cloud computing and block chains, in particular to an on-chain data storage system and method of multi-block chains based on cloud computing.

Background technique

In the blockchain network, many computing nodes form a peer-to-peer network to jointly maintain the data on the chain (or called block, block). The system and the key-value database are stored in the local storage space of the computing node. In the Ethereum (Ethereum) blockchain network environment, computing nodes store complete on-chain data locally, that is, all blocks, and build index databases and world state databases of all blocks locally. Block data is important for the network Compute nodes in are fully visible. In the Hyperledger blockchain network environment, computing nodes locally store the on-chain data of participating consortium chains or private chains, and establish key-value databases. Since Hyperledger's computing nodes do not store all the on-chain data, the data scale is relatively small compared to Ethereum.

Cloud storage evolved from cloud computing and provides a transparent, on-demand, and elastically scalable storage resource service. The storage capacity can exceed the storage authority of a single computing node, which is an expansion of the local storage capacity of the computing node.

It is a common application scenario for a computing node to participate in multiple blockchain networks. In this application scenario, the computing node needs to store on-chain data of multiple blockchains. Even in the Hyperledger blockchain application network, if a computing node participates in multiple consortium chains or private chains, the amount of data stored on the chain will increase sharply, and as the application time increases, the amount of data stored on the chain will inevitably increase. Large, even exceeding the storage limit of a single computing node.

Contents of the invention

The purpose of the present invention is to at least solve one of the technical problems existing in the prior art, and provide a multi-block chain data storage system based on cloud computing. The system includes multiple block chain networks, multiple block chains Block chain client and cloud storage, one or more of the block chain clients constitute the computing node of the block chain; the cloud storage includes a block data module, a user digital certificate module, a cryptographic engine module, a key value Database and API interface; The block chain client is provided with one or more cloud storages, and the block chain client is used to pass the block data module, the block data to the chain data of multiple block chains The user digital certificate module, the cipher engine module, the key-value database and the API interface are stored centrally in the cloud storage; the block chain client is provided with a cloud storage interface, and the cloud storage interface is connected to the API interface for communication.

According to the cloud computing-based multi-block chain data storage system, when the block data module is used to generate the original block data for the block chain client, the original block data and the corresponding The number, start address, length and user digital signature of the block are combined into the block data.

According to the multi-block chain data storage system based on cloud computing, the user digital certificate module is used to encapsulate the original digital certificate, and the encapsulated user digital certificate includes at least the original digital certificate, the issuing authority, Issue time, validity period, user digital signature and validity status.

According to the cloud computing-based multi-blockchain data storage system on the chain, where the user's digital signature is configured to pass the digital certificate through the cloud storage, the original digital certificate, the issuing authority, the issuing time, and the validity period are verified by its own private key The Hash value is digitally signed.

According to the multi-block chain data storage system based on cloud computing, the cryptographic engine module includes an asymmetric cipher, a random number generator, and a digital digest calculator, which are used to link the block chain client with the The interaction of the cloud storage is encrypted and verified, and the random number generator generates a one-time random number and a unique identification number; the asymmetric cipher is used to verify the digital signature; the digital digest calculator is used to calculate the Hash value.

According to the cloud computing-based multi-block chain data storage system on the chain, wherein the key-value database is used to establish key-value database records for the data on the chain of multiple block chains, for users of multiple block chains Digital certificates establish key-value database records, in which data on chains of multiple blockchains share a database engine.

According to the cloud computing-based multi-block chain data storage system on the chain, the API interface is used to provide the block chain client with data on the chain, user digital certificate access, management and maintenance functions, wherein the maintenance The function includes at least one of block initialization, logout, update, write block, retrieval and synchronization.

According to the on-chain data storage system of multiple blockchains based on cloud computing, the API interface completes block initialization, logout, update, block writing, retrieval and synchronization through corresponding communication protocols.

According to the multi-block chain data storage system based on cloud computing, the system further includes a user client, and the user client is used to deploy the same, part of the same, The different blockchain clients access the on-chain data stored in the cloud through the blockchain clients.

The technical solution of the present invention also includes a cloud computing-based multi-block chain data storage method, according to any of the above cloud computing-based multi-block chain data storage systems, characterized in that: Set up one or more cloud storages, and store the chain data of multiple blockchains through the cloud storages; encapsulate the original block data and original digital certificates of the blockchains and store them in the corresponding cloud storages space; complete the encrypted interaction between the block chain client and cloud storage through the cryptographic engine module; establish key-value database records for user digital certificates and block data in the key-value database; The blockchain client at least provides blockchain initialization, update, block writing, retrieval, synchronization, and logout functions, as well as management and maintenance of data on the chain and user digital certificates; and, through the blockchain client The cloud storage interface on the terminal communicates with the API interface of the cloud storage.

The invention has the beneficial effects of: providing users with a custom storage method for data on the block chain, and centrally storing data on the chain of multiple block chains.

Description of drawings

Below in conjunction with accompanying drawing and embodiment the present invention is further described;

Fig. 1 is a schematic diagram of multi-blockchain cloud storage for a single user according to an embodiment of the present invention.

Fig. 2 is a structural diagram of multi-blockchain cloud storage according to an embodiment of the present invention.

FIG. 3 is a structural diagram of a cloud storage block according to an embodiment of the present invention.

Fig. 4 is a structural diagram of a digital certificate of a single-user cloud storage system according to an embodiment of the present invention.

Fig. 5 is a flowchart of multi-blockchain cloud storage initialization according to an embodiment of the present invention.

Fig. 6 is a flow chart of updating a user's digital certificate according to an embodiment of the present invention.

Fig. 7 is a flow chart of storing data on the chain according to an embodiment of the present invention.

Fig. 8 is a flow chart of on-chain data synchronization according to an embodiment of the present invention.

FIG. 9 is a flow chart of releasing block data and cloud storage space according to an embodiment of the present invention.

Figure 10 is an embodiment of a multi-block chain cloud storage system according to an embodiment of the present invention

Detailed ways

This part will describe the specific embodiment of the present invention in detail, and the preferred embodiment of the present invention is shown in the accompanying drawings. Each technical feature and overall technical solution of the invention, but it should not be understood as a limitation on the protection scope of the present invention.

In the description of the present invention, several means one or more, and multiple means more than two. Greater than, less than, exceeding, etc. are understood as not including the original number, and above, below, within, etc. are understood as including the original number.

As shown in Figure 1, the chain data cloud storage method that supports multiple blockchains maps the operations of the blockchain client to read and write data on the chain to the cloud storage system. The cloud storage system is independently deployed on the cloud, such as IDC; computing nodes can be desktop or mobile PCs, mobile electronic devices (such as smart phones), etc. Users can use multiple computing nodes (PCs, smart phones, etc.) The blockchain client accesses the on-chain data stored in the cloud. One cloud storage system is exclusively used by one user, and one user can exclusively use multiple cloud storage systems.

Multi-blockchain cloud storage consists of block data, key-value database, user digital certificate, cryptographic engine and API interface, as shown in Figure 2.

The block data module stores on-chain data of multiple blockchains. Data on the chain is stored in the form of a file system, and different blockchains use independent file system storage areas. The first block of each blockchain is the Genesis block, and the others are normal blocks. The block structure includes number, starting address, length, user digital signature and original block data, as shown in Figure 3. in,

The original block data refers to the block data generated by the blockchain client;

The number is a unique identifier within the scope of a single cloud storage system, which is generated by the API interface module;

The starting address refers to the storage address of the block in the file system of the blockchain to which it belongs. The default starting address of the genesis block is 0, which is generated by the API interface module;

User digital signature means that the user uses his own private key to digitally sign the block;

The length refers to the number of bytes including the number, starting address, length, user digital signature, and original block, and is calculated and generated by the API interface module.

The user digital certificate module stores the user's digital certificates on multiple blockchains, including the currently used digital certificates and invalid historical digital certificates. The digital certificates belonging to the same block chain form a list, with the genesis block number and the user digital certificate serial number as the index key. Each digital certificate includes the original digital certificate, issuing authority, issuing time, validity period, user digital signature, valid state, as shown in Figure 4, where,

The original digital certificate is the digital certificate issued to the user by the blockchain network, such as the digital certificate issued to the user by Hyperledger's CAServer;

The issuing organization is the issuing organization of the original digital certificate, which can provide the validity verification of the digital certificate;

Issuing time is the date and time when the original digital certificate was issued;

The validity period is the length of time for valid use of the original digital certificate;

User digital signature means that when the user transfers the digital certificate to the cloud storage, he uses his private key to digitally sign the hash value of the original digital certificate, issuing authority, issuing time, and validity period;

The valid state is the effective use state of the original digital certificate. The user has at most one valid digital certificate on each blockchain, and the others are invalid digital certificates.

Cryptographic engine modules, including asymmetric ciphers, random number generators, and digital digest calculators. The random number generator generates a one-time random number and unique identification number; the asymmetric cipher is used to verify the digital signature; the digital digest calculator is used to calculate the information hash value, that is, the Hash value.

The key-value database module establishes key-value database records for the on-chain data of multiple blockchains, and establishes key-value database records for the user digital certificates of multiple blockchains. The on-chain data of multiple blockchains share one database engine.

The API interface module provides access, management and maintenance functions of on-chain data and user digital certificates to the blockchain client, including at least initialization, logout, update, block writing, retrieval, and synchronization function modules, as shown in Figure 2. in,

Initialize the function module and provide the function of applying for the allocation of cloud storage space. The cloud storage system allocates the necessary storage space from the cloud storage resource pool, initializes the block data file system and user digital certificate storage area, deploys the configuration of the password engine and the key-value database engine, and deploys the API interface module, as shown in Figure 5 .

The update function module provides the function of updating user digital certificates. There are two update interfaces. The first one is for a new user to upload the first user digital certificate to the cloud storage. The update process is shown in Figure 6.

Communication Protocol 1: Digital Certificate Update 1

Steps: (1) The blockchain client submits the user's digital certificate and its private key signature, and the structure of the user's digital certificate is shown in Figure 4;

(2) update the functional module with the public key verification signature in the digital certificate, if successful then turn to (3), otherwise turn to (5);

(3) Update the functional module to verify the validity of the digital certificate in the issuing authority, if successful, then go to (4), otherwise go to (5);

(4) Call the random number generator of the cryptographic engine to generate a unique creation block number, create a new list of user digital certificates, write the user digital certificates into the list, and transfer to (5);

(5) If successful, return the genesis block number, otherwise return failure and end.

The second is to update the old digital certificate with the new digital certificate, which is used when the old digital certificate is about to expire or has expired. The update process is shown in Figure 6.

Communication Protocol 2: Digital Certificate Update 2

Steps: (1) The blockchain client submits the new user's digital certificate, the genesis block number and the old private key signature, where the old private key signature refers to using the private key in the old digital certificate to authenticate the new user's digital certificate and the genesis block Hash value signature of the world block number;

(2) Update the functional module to find the valid digital certificate of the specified blockchain with the genesis block number, take out the public key from it to verify the validity of the old private key signature, if successful, go to (3), otherwise go to (6) ;

(3) verify the signature in the new user's digital certificate with the public key in the new user's digital certificate, if successful then turn to (4), otherwise turn to (6);

(4) Check the valid date of the new user's digital certificate, if it is valid, turn to (5), otherwise turn to (6);

(5) invalidate the valid digital certificate corresponding to the genesis block number, store the digital certificate of the new user and make it valid, and transfer to (6);

(6) Return the result and end.

The block writing function module provides the block chain client with the function of writing data on the chain, that is, the block is stored in the file system corresponding to the block data, and the key-value database is updated at the same time. The process is shown in Figure 7.

Communication protocol 3: write data on the chain

Steps: (1) The blockchain client submits the genesis block number, new original block and digital signature. The new original block and digital signature refer to the original block data and user digital signature in Figure 3 respectively;

(2) The cloud storage system obtains the public key of the user's digital certificate according to the genesis block number, and verifies the digital signature. If it succeeds, go to (3), otherwise go to (5);

(3) Calculate the number, length and starting address of the new block. The block numbering rule is: Genesis block number + incremental positive integer number, and the starting address is the storage offset of the block in the blockchain file system Amount, the length is the number of bytes of the entire new block;

(4) Fill in the new block according to the format in Figure 3, write it into the file system corresponding to the blockchain, and update the records in the key-value database;

(5) Return the result and end.

The retrieval function module provides the blockchain client with the function of retrieving data on the chain. The blockchain client provides the genesis block number and search keywords, and the search function module searches for the corresponding block in the designated blockchain storage area and returns the search results. The search key can be block number, block Hash, transaction Hash, etc.

The synchronization function module is used in the scenario where a single user exclusively uses multiple cloud storage systems, and synchronizes the on-chain data of the specified blockchain and the user's digital certificate in the blockchain between multiple cloud storage systems, among which the synchronized The cloud storage system is marked with a master mark, and the cloud storage system to be synchronized is marked with a slave mark, as shown in FIG. 8 .

Communication Protocol 4: Synchronization

Steps: (1) The blockchain client initiates a request to Cloud Storage 2, passing the address of Cloud Storage 1, the genesis block number, and the slave ID;

(2) Cloud Storage 2 is ready for response;

(3) The blockchain client initiates a request to Cloud Storage 1, passing the address of Cloud Storage 2, the genesis block number, and the main identifier;

(4) Cloud storage 1 is ready for response;

(5) Cloud Storage 1 establishes a connection to Cloud Storage 2, and Cloud Storage 2 responds to the connection;

(6) Cloud storage 1 sends the list of user digital certificates of the specified blockchain to cloud storage 2;

(7) Cloud Storage 2 receives and updates the list of user digital certificates, and responds;

(8) Cloud storage 1 sends all blocks of the specified blockchain to cloud storage 2;

(9) Cloud storage 2 receives and updates the local block and database, and responds;

(10) Cloud storage 1 sends a synchronization confirmation to the blockchain client;

(11) Cloud storage 2 sends a synchronization confirmation to the blockchain client;

(12) END.

The logout function module provides the function of deleting the on-chain data of the specified blockchain. If the on-chain data of the last blockchain is deleted, the cloud storage space will be released, as shown in Figure 9.

Communication Protocol 5: Logout

Steps: (1) The blockchain client sends the genesis block number;

(2) The logout function module calls the random number generator to generate a random number, encrypts it with the public key of the valid digital certificate corresponding to the block chain according to the genesis block number, and sends the ciphertext;

(3) The blockchain client decrypts the random number with the private key, and sends back the random number;

(4) The logout function module compares the two random numbers before and after, if they are consistent, then transfer to (5), otherwise forward (8);

(5) Clear the block data and database records of the block chain specified by the genesis block number, and clear the corresponding user digital certificate;

(6) Check whether the block data of cloud storage is empty, if so, transfer to (7), otherwise transfer to (8);

(7) Release the cloud storage space and return it to the storage resource pool;

(8) Return the result and end.

The on-chain data of the Ethereum blockchain network and the Hyperledger blockchain network are stored in the local storage space of the blockchain client by default, and the block data is stored in one or more files in the file system . The Hyperledger client is Fabric, and the Hyperledger block chain network is taken as an example to illustrate the specific implementation of the present invention.

By default, Fabric stores the data on the chain in the local file system. First, modify the local storage interface of the Fabric read-write block file system, and add a module interface of the cloud storage system, which is the cloud storage interface shown in Figure 10. Each functional module of the API interface shown in 2 implements the interface between the blockchain client and the cloud storage system, and the interface communication is implemented in WebService, gRPC or other forms.

In the Hyperledger blockchain network, Docker containers are used to implement a single-user multi-blockchain cloud storage system. One Docker container instance corresponds to one cloud storage system, and a single user can exclusively use multiple Docker containers. The cloud storage system can also be implemented by using VMware, VirtualBox or KVM virtual machine, and one virtual machine instance corresponds to one cloud storage system. In the cloud storage system, use Web Service, gPRC or other forms to implement interface communication, which is consistent with the communication method of Fabric.

In the cloud storage system, the file system is used to store the chain data of multiple blockchains, that is, all blocks. The on-chain data of each blockchain is stored in one or more files, and the sequence of multiple files is specified. The starting addresses shown in FIG. 3 are implemented as storage offsets of blocks in multiple files, and the storage positions of adjacent blocks in the files are adjacent. The files of different blockchains are isolated from each other, and are classified and stored in the form of folders. They can also be stored in different file system partitions, or stored in RAID disk arrays.

In the cloud storage system, the file system is used to store all user digital certificates, and each user digital certificate corresponds to 2 files. One of the files is the original file of the user's digital certificate, and its content is the original digital certificate shown in Figure 4. The other file records other information corresponding to the original digital certificate. The file names of the two files are the same, and they are distinguished by extensions. User digital certificates of different blockchains can be classified and stored in the form of folders. User digital certificates can also be stored in a relational database, and user digital certificates are represented by tables and records.

In the cloud storage system, the key-value database is implemented using LevelDB, CouchDB or other suitable database engines, and mainly stores the block data shown in Figure 3, that is, the on-chain data of the blockchain. Key words such as block number, original block Hash, and transaction Hash are used as the key (Key), and the starting address of the block is used as the value (Value). The key-value database can provide basic block retrieval and positioning functions based on the block number, original block Hash, and transaction Hash, and can also expand the retrieval and query of other keywords according to actual needs.

In the cloud storage system, the cryptographic engine at least provides a random number generator, an asymmetric cipher, and a Hash calculator. The cryptographic engine can be implemented by hardware, such as a TPM chip or a TCM chip, or can be implemented by program codes to perform functions of pseudo-random number, asymmetric cryptographic calculation and Hash calculation. According to actual needs, the encryption engine can expand other calculation functions, such as symmetric encryption calculator, etc.

In the cloud storage system, the API interface is an interface that provides cloud storage services externally, and at least includes functional modules such as initialization, update, block writing, retrieval, synchronization, and logout. Each cloud storage system includes an independent API interface, and Assign 1 IP address and separate port. According to actual needs, the API interface can expand other management and business function modules.

In the Ethereum blockchain network, the blockchain client Geth has some characteristics similar to Fabric in terms of reading and writing data on the chain, and a similar implementation method can be adopted, that is, adding a cloud storage interface inside Geth, and according to this The invented communication protocol implements the interface function.

The embodiments of the present invention have been described in detail above in conjunction with the accompanying drawings, but the present invention is not limited to the above embodiments, and various Variety.

Claims (10)

1. A data storage system on the chain of multiple blockchains based on cloud computing, the system includes multiple blockchain networks, multiple blockchain clients and cloud storage, one or more of the blockchain clients The terminal constitutes the computing node of the blockchain; The cloud storage includes a block data module, a user digital certificate module, a cryptographic engine module, a key-value database and an API interface; The block chain client is provided with one or more cloud storages, and the block chain client is used to pass the block data module, the user digital certificate module, The cryptographic engine module, the key-value database and the API interface are centrally stored in the cloud storage; The block chain client is provided with a cloud storage interface, and the cloud storage interface communicates with the API interface; Wherein, the block data module is used to store chain data of multiple blockchains; the user digital certificate module is used to store digital certificates of users on multiple blockchains; the cryptographic engine module includes an asymmetric A cipher, a random number generator, and a digital digest calculator; the key-value database is used to establish key-value database records for data on the chain of multiple blockchains, and to establish keys for user digital certificates of multiple blockchains - Value database records, the data on the chain of multiple blockchains share a database engine; the API interface is used to provide blockchain clients with access, management and maintenance functions for data on the chain and user digital certificates, and the API The interface includes an initialization function module, a logout function module, an update function module, a write block function module, a retrieval function module and a synchronization function module; Wherein, the initialization function module is used to provide the function of applying for the allocation of cloud storage space; the cancellation function module is used to provide the function of deleting the data on the chain of the specified block chain, if the data on the chain of the last block chain is deleted, Then release the cloud storage space; the update function module is used to provide the function of updating the user's digital certificate; the write block function module is used to provide the block chain client with the function of writing data on the chain; the retrieval function module It is used to provide the block chain client with the function of retrieving data on the chain; the synchronization function module is used in the scenario where a single user exclusively uses multiple cloud storage systems, and synchronizes the chain of the specified block chain between multiple cloud storage systems The above data and the user's digital certificate in the blockchain, the synchronized cloud storage system is marked with the master logo, and the synchronized cloud storage system is marked with the slave logo. 2. The chain data storage system of multi-block chains based on cloud computing according to claim 1, wherein the block data module is used to generate the original block data for the block chain client , combining the original block data and the corresponding number, start address, length and user digital signature into the block data. 3. The cloud computing-based multi-block chain data storage system according to claim 1, wherein the user digital certificate module is used to encapsulate the original digital certificate, and the user digital certificate after encapsulation The certificate at least includes the original digital certificate, issuing authority, issuing time, valid period, user digital signature and valid status. 4. The on-chain data storage system of multi-block chains based on cloud computing according to claim 3, characterized in that, when the user digital signature is configured to pass the digital certificate through the cloud storage, the original The hash value of the digital certificate, issuing authority, issuing time, and valid period is digitally signed. 5. The on-chain data storage system of multi-block chains based on cloud computing according to claim 1, wherein the cryptographic engine module includes an asymmetric cipher, a random number generator, and a digital digest calculator, and uses In order to encrypt and verify the interaction between the blockchain client and the cloud storage, the random number generator generates a one-time random number and a unique identification number; the asymmetric cipher is used to verify the digital signature; The digital digest calculator described above is used to calculate the Hash value. 6. The on-chain data storage system of multi-block chains based on cloud computing according to claim 1, wherein the key-value database is used to establish a key-value database for data on the chain of multiple block chains Record, establish key-value database records for user digital certificates of multiple blockchains, in which the chain data of multiple blockchains share a database engine. 7. The chain data storage system based on cloud computing of multiple blockchains according to claim 1, wherein the API interface is used to provide chain data and user digital certificates to the blockchain client Access, management and maintenance functions, wherein the maintenance function includes at least one of block initialization, logout, update, block writing, retrieval and synchronization. 8. The on-chain data storage system of multiple blockchains based on cloud computing according to claim 7, wherein the API interface completes block initialization, cancellation, update, and block writing through a corresponding communication protocol , retrieval and synchronization. 9. The chain data storage system of multi-block chain based on cloud computing according to claim 1, characterized in that the system also includes a user client, and the user client is used to pass one or more of the The computing nodes deploy the same, partially the same, or different blockchain clients, and access the on-chain data stored in the cloud through the blockchain clients. 10. A cloud computing-based multi-block chain data storage method, according to any one of claims 1-9, a cloud computing-based multi-block chain data storage system, characterized in that: Set up one or more cloud storages, and store the chain data of multiple blockchains through the cloud storages; Encapsulate and store the original block data and original digital certificate of the blockchain in the corresponding space of the cloud storage; Complete the encrypted interaction between the block chain client and cloud storage through the cryptographic engine module; Establish key-value database records for user digital certificates and block data in the key-value database; Through the API interface, the blockchain client at least provides blockchain initialization, update, block writing, retrieval, synchronization, and logout functions, as well as management and maintenance of data on the chain and user digital certificates; And, connect and communicate with the API interface of the cloud storage through the cloud storage interface of the block chain client.