CN112565303B - Method and device for performing authentication connection between block chain nodes and related product - Google Patents

Abstract

The method, device, and related products for authentication connection between blockchain nodes provided in the embodiments of the present application monitor whether communication is performed between two blockchain nodes in the blockchain system; if monitored, the two The authentication system on the peer blockchain node in the blockchain node performs an integrity check on the authentication system on the blockchain node at the other end; if the authentication system on the blockchain node at the other end is complete, the two districts The block chain node establishes the authentication connection, thereby performing authentication based on the authentication connection during authentication, which simplifies the authentication process of the block chain node and improves the authentication efficiency of the block chain node.

Description

Method, device and related products for authenticated connection between blockchain nodes

technical field

The present application relates to the technical field of block chains, in particular to a method, device and related products for authentication connection between block chain nodes.

Background technique

The blockchain system (essentially a big data system) is an integrated application model of distributed data storage system, point-to-point transmission, consensus mechanism, encryption algorithm and other technologies, which can realize trust and value transfer that cannot be realized on the traditional Internet on the Internet. The blockchain system includes several blockchain nodes. Since the blockchain system is a decentralized system, if the normal and safe operation of the blockchain system is guaranteed, the blockchain nodes (essentially the blockchain Nodes) for authentication, only when the state of the blockchain nodes is certified, these blockchain nodes can participate in the operation. However, in the prior art, there is no logical relationship between the authentication between the blockchain nodes, which leads to the authentication in units of a single blockchain node, which makes the authentication process more complicated and results in lower authentication efficiency. It has greatly affected the operation of the blockchain system.

Contents of the invention

Based on the above problems, the embodiments of the present application provide a method, device and related products for authenticated connection between blockchain nodes.

In the first aspect, the embodiment of the present application provides a method for authenticated connection between blockchain nodes, including:

Monitor whether there is communication between two blockchain nodes in the blockchain system;

If it is monitored, the authentication system on the peer blockchain node in the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end;

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

Optionally, in a specific implementation manner, the network traffic generated between two blockchain nodes in the blockchain system is monitored to monitor whether the two blockchain nodes in the blockchain system to communicate.

Optionally, in a specific implementation manner, the network traffic generated between two blockchain nodes in the blockchain system is monitored by way of traffic interception.

In the second aspect, the embodiment of the present application provides a device for authenticating connections between blockchain nodes, including:

A monitoring unit, configured to monitor whether communication is performed between two blockchain nodes in the blockchain system;

The integrity detection unit is used to make the authentication system on the peer blockchain node of the two blockchain nodes check the authentication system on the blockchain node at the other end when the communication between the two blockchain nodes is monitored. Integrity testing of the certification system;

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

Optionally, in a specific implementation manner, the monitoring unit is further used to monitor network traffic generated between two blockchain nodes in the blockchain system, so as to monitor two blocks in the blockchain system Whether to communicate between chain nodes.

Optionally, in a specific implementation manner, the monitoring unit is further configured to monitor network traffic generated between two blockchain nodes in the blockchain system by way of traffic interception.

Optionally, in a specific implementation manner, the communication between two blockchain nodes is initiated between upper-layer service components.

In the third aspect, the embodiment of the present application provides a blockchain system, including: a plurality of blockchain nodes, and each blockchain node is provided with an authentication connection device between blockchain nodes, which includes:

A monitoring unit, configured to monitor whether communication is performed between two blockchain nodes in the blockchain system;

The integrity detection unit is used to make the authentication system on the peer blockchain node of the two blockchain nodes check the authentication system on the blockchain node at the other end when the communication between the two blockchain nodes is monitored. Integrity testing of the certification system;

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

In a fourth aspect, the embodiment of the present application provides an electronic device, including: a memory and a processor, where computer-executable instructions are stored in the memory, and the processor is used to execute the computer-executable instructions to perform the following steps:

Monitor whether there is communication between two blockchain nodes in the blockchain system;

If it is monitored, the authentication system on the peer blockchain node in the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end;

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

In the fifth aspect, the embodiment of the present application provides a computer storage medium, on which computer executable instructions are stored, and the following steps are implemented when the computer executable instructions are executed:

Monitor whether there is communication between two blockchain nodes in the blockchain system;

If it is monitored, the authentication system on the peer blockchain node in the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end;

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

In the technical solution of the embodiment of the present application, by monitoring whether communication is performed between two blockchain nodes in the blockchain system; if monitored, the peer blockchain node in the two blockchain nodes The authentication system checks the integrity of the authentication system on the blockchain node at the other end; if the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection, so that authentication is based on the authentication connection The authentication process simplifies the authentication process of blockchain nodes and improves the authentication efficiency of blockchain nodes.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present application. Those skilled in the art can also obtain other drawings based on these drawings without any creative effort.

FIG. 1 is a flow chart of a method for authenticating connections between Internet nodes provided by an embodiment of the present application;

FIG. 2 is a schematic diagram of a device for authenticating connections between Internet nodes provided by an embodiment of the present application;

FIG. 3 is a schematic diagram of a block chain system provided by an embodiment of the present application;

FIG. 4 is a schematic diagram of an electronic device provided in an embodiment of the present application;

FIG. 5 is a schematic structural diagram of an electronic device provided in an embodiment of the present application;

FIG. 6 is a schematic diagram of a computer storage medium provided by an embodiment of the present application.

Detailed ways

Implementing any technical solution of the embodiments of the present application does not necessarily need to achieve all the above advantages at the same time.

In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

Embodiment one,

Please refer to Figure 1, the embodiment of this application provides a method for authentication connection between blockchain nodes, including:

S101: Monitor whether communication is performed between two blockchain nodes in the blockchain system;

Optionally, in this embodiment, multiple blockchain nodes can form a blockchain system, such as a consortium chain, a private chain, or a public chain; optionally, in this embodiment, the district The block chain nodes include block chain nodes, and the block chain nodes may be block chain light nodes and block chain full nodes. A blockchain full node is a node that owns all the transaction data of the entire network, and a blockchain light node is a node that only owns transaction data related to itself.

In this embodiment, it should be noted that when multiple blockchain nodes form a blockchain system, the above-mentioned authentication system can be deployed only on some blockchain nodes, or the above-mentioned authentication system can be deployed on all blockchain nodes. system. For example, for a private chain, since the number of blockchain nodes is relatively small, in order to ensure the safe operation of the blockchain system, the above authentication system can be deployed on all blockchain nodes. For another example, for the consortium chain, the above authentication system can be deployed on all blockchain nodes with reference to the private chain. For example, for a private chain, since the number of blockchain nodes is relatively large, in order to ensure the safe operation of the blockchain system, the above-mentioned authentication system can be deployed on some blockchain nodes, for example, in all Deploy the above authentication system on all blockchain nodes, and deploy the above authentication system on some blockchain light nodes; or, deploy the above authentication system on a small number of blockchain full nodes, and deploy the above authentication system on all blockchain light nodes Deploy the authentication system above.

Optionally, in a specific implementation manner, the network traffic generated between two blockchain nodes in the blockchain system is monitored to monitor whether the two blockchain nodes in the blockchain system to communicate.

Optionally, in this embodiment, by monitoring network traffic, it is possible to quickly monitor whether there is communication between two blockchain nodes, that is, whether data interaction between two blockchain nodes is about to occur or is in progress Data interaction.

Optionally, in a specific implementation manner, the network traffic generated between two blockchain nodes in the blockchain system is monitored by way of traffic interception.

Optionally, in this embodiment, by intercepting network traffic, it is possible to quickly monitor whether there is communication between two blockchain nodes, that is, whether data interaction between two blockchain nodes is about to occur or is in progress Data interaction.

Optionally, in a specific implementation manner, the communication between two blockchain nodes is initiated between upper-layer service components.

Optionally, in this embodiment, the monitored communication is the communication between two blockchain nodes based on the last communication between service components, thereby ensuring the accuracy of the authentication for the object, and further ensuring that the authentication Availability and reference of results.

S102: If monitored, the authentication system on the peer blockchain node of the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end;

Optionally, in a specific implementation manner, the authentication system on the peer blockchain node of the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end, including: Judging whether there is a trust evaluation kernel matrix stored in the authentication system, and whether the trust evaluation kernel matrix needs to be updated, if it exists and needs to be updated, it is determined that the authentication system on the blockchain node at the other end is complete.

Optionally, in a specific implementation manner, judging whether a trust evaluation kernel matrix is stored in the authentication system includes: judging whether there is an authentication kernel in the authentication system, and whether the trust evaluation kernel matrix is stored in the authentication kernel;

Judging whether the trust evaluation kernel matrix needs to be updated includes: judging whether to update the trust evaluation kernel matrix in the authentication kernel through the kernel maintenance module.

In this embodiment, the trust evaluation kernel matrix is used to record the trust authentication data of the blockchain node to the blockchain node. Here, it should be noted that the blockchain nodes in the blockchain system can be grouped, and each The group blockchain node records the trust authentication data between all blockchain nodes within the group; and between groups, a blockchain node can be selected from a group of blockchain nodes as the external contact node. The external contact node belongs to another group of blockchain nodes at the same time, that is, the two groups of blockchain nodes have a common blockchain node, and the number of the common blockchain nodes can be one, or it can be multiple. The specific number can be flexibly configured according to the requirements of the application scenario. For example, if the blockchain system is a public chain, due to its higher visibility on the Internet, it is more likely to be a security risk due to network attacks. Therefore, the two groups of blockchain nodes have a common number of blockchain nodes for multiple. For private chains and consortium chains, due to their visibility on the Internet, they are less likely to have security risks due to network attacks. Therefore, the two sets of blockchain nodes have a common number of blockchain nodes. .

As mentioned above, the reason for the certification in this application is to ensure that when the blockchain nodes participate in the system operation as an integral part of the Internet system, how to ensure the safe operation of the entire system based on the security of the blockchain nodes themselves, For this reason, only when there is data interaction between two blockchain nodes, this security issue needs to be considered. For this reason, in this embodiment, a monitoring unit is configured to monitor whether the communication between the blockchain nodes, if there is communication, it indicates that data interaction between two blockchain nodes is about to occur or data interaction is in progress, for this reason, the authentication system of the opposite end of the two blockchain nodes in the authentication kernel is triggered to perform authentication to obtain the trust Evaluate the kernel matrix, otherwise, it is not necessary to trigger the authentication system of the authentication kernel at the opposite end of the two blockchain nodes to perform authentication to obtain the trust evaluation kernel matrix.

Optionally, in a specific implementation manner, judging whether to update the trust evaluation kernel matrix in the authentication kernel through the kernel maintenance module includes: judging whether the kernel maintenance module is updating the trust evaluation kernel matrix by way of exchange.

Optionally, in this embodiment, when the kernel maintenance module exchanges the trust kernel matrix to the peer blockchain node, it preferably switches to its neighbor blockchain node, that is, other blockchain nodes are neighbors Blockchain nodes, the neighboring blockchain nodes can be directly adjacent or indirectly adjacent. When indirectly adjacent, the number of neighbors can be controlled by setting the neighbor step or neighbor distance.

Further, when in the block chain system, if all the block chain nodes are divided into several groups, the kernel maintenance module judges that the pair Whether the end block chain node and the other end block chain node are in the same group.

Further, as mentioned above, when the adjacent two groups of blockchain nodes have a common blockchain node, the trust kernel can be performed between the adjacent two groups of blockchain nodes through the common blockchain node. matrix exchange.

Optionally, in a specific implementation manner, when updating the trust kernel matrix, it is implemented by means of a decentralized authentication framework.

Optionally, in this embodiment, the decentralization of authentication can be realized through the decentralized authentication framework, so that fast authentication can be performed between two blockchain nodes without any third party, thereby ensuring the integrity of the trust kernel matrix. Update Speed.

Optionally, in a specific implementation manner, the method for authenticating connection between blockchain nodes further includes: deriving a trust kernel matrix, so that the kernel maintenance module performs trust kernel matrix between two blockchain nodes update.

Optionally, in this embodiment, the trust kernel matrix can be derived through a virtual trusted management module (VTPMS, virtual trusted-platforms), so that the kernel maintenance module can update the trust kernel matrix between two blockchain nodes , the virtualized trusted management module can ensure that two blockchain nodes perform the exchange of the trust kernel matrix quickly, thus ensuring that the trust kernel matrix on any blockchain node will be Real-time update ensures the real-time and fast exchange.

Optionally, in a specific implementation manner, an authentication system set on a block chain node serves as a neuron.

Optionally, in a specific implementation manner, the kernel maintenance module is also used to enable multiple blockchain nodes that communicate frequently to form a neuron authentication network, and all neurons in the neuron authentication network share upper-layer service components.

Optionally, in this embodiment, by making multiple blockchain nodes with frequent communication form a neuron authentication network and all neurons in the neuron authentication network share the upper-layer service components, it is possible to focus on determining the authentication for Therefore, it is preferable to only authenticate those blockchain nodes that communicate frequently, compared to authenticating all blockchain nodes that only need to communicate in the blockchain system, thereby ensuring the implementation efficiency of authentication.

Optionally, in this embodiment, since the communication behavior between blockchain nodes changes in real time, the communication frequency is also constantly changing, so the composition of the neuron authentication network is also dynamically changing.

Optionally, in a specific implementation manner, the neuron authentication network has a unified interface for providing proof of interaction services hosted between neurons in the neuron authentication network.

Optionally, in this embodiment, the unified interface can be configured on a blockchain node with higher authority or higher security in the neuron authentication network.

S103: If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

Embodiment two,

Please refer to Figure 2, the embodiment of the present application provides a device 20 for authenticating connections between blockchain nodes, including:

A monitoring unit 201, configured to monitor whether communication is performed between two blockchain nodes in the blockchain system;

Integrity detection unit 202, configured to enable the authentication system on the peer blockchain node in the two blockchain nodes to check the blockchain node at the other end when monitoring the communication between the two blockchain nodes. Integrity testing of the authentication system on the Internet;

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

The specific instructions are as follows:

A monitoring unit 201, configured to monitor whether communication is performed between two blockchain nodes in the blockchain system;

Optionally, in this embodiment, multiple blockchain nodes can form a blockchain system, such as a consortium chain, a private chain, or a public chain; optionally, in this embodiment, the district The block chain nodes include block chain nodes, and the block chain nodes may be block chain light nodes and block chain full nodes. A blockchain full node is a node that owns all the transaction data of the entire network, and a blockchain light node is a node that only owns transaction data related to itself.

In this embodiment, it should be noted that when multiple blockchain nodes form a blockchain system, the above-mentioned authentication system can be deployed only on some blockchain nodes, or the above-mentioned authentication system can be deployed on all blockchain nodes. system. For example, for a private chain, since the number of blockchain nodes is relatively small, in order to ensure the safe operation of the blockchain system, the above authentication system can be deployed on all blockchain nodes. For another example, for the consortium chain, the above authentication system can be deployed on all blockchain nodes with reference to the private chain. For example, for a private chain, since the number of blockchain nodes is relatively large, in order to ensure the safe operation of the blockchain system, the above-mentioned authentication system can be deployed on some blockchain nodes, for example, in all Deploy the above authentication system on all blockchain nodes, and deploy the above authentication system on some blockchain light nodes; or, deploy the above authentication system on a small number of blockchain full nodes, and deploy the above authentication system on all blockchain light nodes Deploy the authentication system above.

Optionally, in a specific implementation manner, the monitoring unit 201 is further used to monitor the network traffic generated between two blockchain nodes in the blockchain system, so as to monitor the two areas in the blockchain system Whether to communicate between blockchain nodes.

Optionally, in this embodiment, by monitoring network traffic, the monitoring unit 201 can quickly monitor whether there is communication between two blockchain nodes, that is, whether data interaction between two blockchain nodes is about to occur Or data interaction is in progress.

Optionally, in a specific implementation manner, the monitoring unit 201 is further configured to monitor network traffic generated between two blockchain nodes in the blockchain system by way of traffic interception.

Optionally, in this embodiment, the monitoring unit 201 can quickly monitor whether there is communication between two blockchain nodes by intercepting network traffic, that is, whether data interaction between two blockchain nodes is about to occur Or data interaction is in progress.

Optionally, in a specific implementation manner, the communication between two blockchain nodes is initiated between upper-layer service components.

Optionally, in this embodiment, the communication monitored by the monitoring unit 201 is the communication between two blockchain nodes based on the last service component, thereby ensuring the accuracy of the authentication object, and further performing the authentication , ensuring the availability and reference of the certification results.

Integrity detection unit 202, configured to enable the authentication system on the peer blockchain node in the two blockchain nodes to check the blockchain node at the other end when monitoring the communication between the two blockchain nodes. Integrity testing of the authentication system on the Internet;

Optionally, in a specific implementation manner, the integrity detection unit 202 is further used to determine whether a trust evaluation kernel matrix is stored in the authentication system, and whether the trust evaluation kernel matrix needs to be updated, and if it exists and needs to be updated, then determine The authentication system on the blockchain node at the other end is complete.

Optionally, in a specific implementation manner, the integrity detection unit 202 is further used to determine whether there is an authentication kernel in the authentication system, and whether the trust evaluation kernel matrix is stored in the authentication kernel;

The integrity detection unit 202 is further used to judge whether to update the trust evaluation kernel matrix in the authentication kernel through the kernel maintenance module.

In this embodiment, the trust evaluation kernel matrix is used to record the trust authentication data of the blockchain node to the blockchain node. Here, it should be noted that the integrity detection unit 202 can also be used to check the blockchain system. Blockchain nodes are grouped, and each group of blockchain nodes records the trust authentication data among all blockchain nodes within the group; and between groups, a block can be selected from a group of blockchain nodes. The block chain node is used as an external contact node, and the external contact node belongs to another group of block chain nodes at the same time, that is, the two sets of block chain nodes have a common block chain node, and the number of the common block chain nodes can be one, Or there may be more than one, and the specific number is flexibly configured according to the requirements of the application scenario. For example, if the blockchain system is a public chain, due to its higher visibility on the Internet, it is more likely to be a security risk due to network attacks. Therefore, the two groups of blockchain nodes have a common number of blockchain nodes for multiple. For private chains and consortium chains, due to their visibility on the Internet, they are less likely to have security risks due to network attacks. Therefore, the two sets of blockchain nodes have a common number of blockchain nodes. .

As mentioned above, the reason for the certification in this application is to ensure that when the blockchain nodes participate in the system operation as an integral part of the Internet system, how to ensure the safe operation of the entire system based on the security of the blockchain nodes themselves, For this reason, only when two blockchain nodes have data interaction, this security issue needs to be considered. For this reason, in this embodiment, the monitoring unit 201 is configured to monitor whether the communication between the blockchain nodes, if If there is communication, it indicates that data interaction between the two blockchain nodes is about to occur or is in progress. For this reason, trigger the authentication system of the peer authentication system of the two blockchain nodes in the authentication kernel to perform authentication to obtain the Trust evaluation kernel matrix, otherwise, it is not necessary to trigger the authentication kernel at the peer authentication system of the two blockchain nodes to perform authentication to obtain the trust evaluation kernel matrix.

Optionally, in a specific implementation manner, the integrity detection unit 202 is further configured to determine whether the kernel maintenance module is updating the trust evaluation kernel matrix by means of exchange.

Optionally, in this embodiment, when the kernel maintenance module exchanges the trust kernel matrix to the peer blockchain node, it preferably switches to its neighbor blockchain node, that is, other blockchain nodes are neighbors Blockchain nodes, the neighboring blockchain nodes can be directly adjacent or indirectly adjacent. When indirectly adjacent, the number of neighbors can be controlled by setting the neighbor step or neighbor distance.

Further, when in the block chain system, if all the block chain nodes are divided into several groups, the kernel maintenance module judges that the pair Whether the end block chain node and the other end block chain node are in the same group.

Further, as mentioned above, when the adjacent two groups of blockchain nodes have a common blockchain node, the trust kernel can be performed between the adjacent two groups of blockchain nodes through the common blockchain node. matrix exchange.

Optionally, in a specific implementation manner, when the integrity detection unit 202 is further used to update the trust kernel matrix, it is implemented by means of a decentralized authentication framework.

Optionally, in this embodiment, the decentralization of authentication can be realized through the decentralized authentication framework, so that fast authentication can be performed between two blockchain nodes without any third party, thereby ensuring the integrity of the trust kernel matrix. Update Speed.

Optionally, in a specific implementation manner, the device 20 for authenticating connections between blockchain nodes further includes: a virtualized trusted management module, which is used to derive a trust kernel matrix, so that the kernel maintenance module is in two The trust kernel matrix is updated between blockchain nodes.

Optionally, in this embodiment, the virtualized trusted management module (VTPMS, virtual trusted-platforms) can ensure that the two blockchain nodes perform the exchange of the trust core matrix quickly, thereby ensuring that any The trust kernel matrix on each blockchain node will be updated in real time, ensuring real-time and rapid exchange.

Optionally, in a specific implementation manner, an authentication system set on a block chain node serves as a neuron.

Optionally, in a specific implementation manner, the kernel maintenance module is also used to enable multiple blockchain nodes that communicate frequently to form a neuron authentication network, and all neurons in the neuron authentication network share upper-layer service components.

Optionally, in this embodiment, by making multiple blockchain nodes with frequent communication form a neuron authentication network and all neurons in the neuron authentication network share the upper-layer service components, it is possible to focus on determining the authentication for Therefore, it is preferable to only authenticate those blockchain nodes that communicate frequently, compared to authenticating all blockchain nodes that only need to communicate in the blockchain system, thereby ensuring the implementation efficiency of authentication.

Optionally, in this embodiment, since the communication behavior between blockchain nodes changes in real time, the communication frequency is also constantly changing, so the composition of the neuron authentication network is also dynamically changing.

Optionally, in a specific implementation manner, the neuron authentication network has a unified interface for providing proof of interaction services hosted between neurons in the neuron authentication network.

Optionally, in this embodiment, the unified interface can be configured on a blockchain node with higher authority or higher security in the neuron authentication network.

Embodiment three,

Please refer to FIG. 3 , the embodiment of the present application provides a block chain system, including: a plurality of block chain nodes 301, each block chain node is provided with a device 20 for authentication connection between block chain nodes, It includes:

A monitoring unit 201, configured to monitor whether communication is performed between two blockchain nodes in the blockchain system;

Integrity detection unit 202, configured to enable the authentication system on the peer blockchain node in the two blockchain nodes to check the blockchain node at the other end when monitoring the communication between the two blockchain nodes. Integrity testing of the authentication system on the Internet;

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

The specific instructions are as follows:

A monitoring unit 201, configured to monitor whether communication is performed between two blockchain nodes in the blockchain system;

Optionally, in this embodiment, multiple blockchain nodes can form a blockchain system, such as a consortium chain, a private chain, or a public chain; optionally, in this embodiment, the district The block chain nodes include block chain nodes, and the block chain nodes may be block chain light nodes and block chain full nodes. A blockchain full node is a node that owns all the transaction data of the entire network, and a blockchain light node is a node that only owns transaction data related to itself.

In this embodiment, it should be noted that when multiple blockchain nodes form a blockchain system, the above-mentioned authentication system can be deployed only on some blockchain nodes, or the above-mentioned authentication system can be deployed on all blockchain nodes. system. For example, for a private chain, since the number of blockchain nodes is relatively small, in order to ensure the safe operation of the blockchain system, the above authentication system can be deployed on all blockchain nodes. For another example, for the consortium chain, the above authentication system can be deployed on all blockchain nodes with reference to the private chain. For example, for a private chain, since the number of blockchain nodes is relatively large, in order to ensure the safe operation of the blockchain system, the above-mentioned authentication system can be deployed on some blockchain nodes, for example, in all Deploy the above authentication system on all blockchain nodes, and deploy the above authentication system on some blockchain light nodes; or, deploy the above authentication system on a small number of blockchain full nodes, and deploy the above authentication system on all blockchain light nodes Deploy the authentication system above.

Optionally, in a specific implementation manner, the monitoring unit 201 is further used to monitor the network traffic generated between two blockchain nodes in the blockchain system, so as to monitor the two areas in the blockchain system Whether to communicate between blockchain nodes.

Optionally, in this embodiment, by monitoring network traffic, the monitoring unit 201 can quickly monitor whether there is communication between two blockchain nodes, that is, whether data interaction between two blockchain nodes is about to occur Or data interaction is in progress.

Optionally, in a specific implementation manner, the monitoring unit 201 is further configured to monitor network traffic generated between two blockchain nodes in the blockchain system by way of traffic interception.

Optionally, in this embodiment, the monitoring unit 201 can quickly monitor whether there is communication between two blockchain nodes by intercepting network traffic, that is, whether data interaction between two blockchain nodes is about to occur Or data interaction is in progress.

Optionally, in a specific implementation manner, the communication between two blockchain nodes is initiated between upper-layer service components.

Optionally, in this embodiment, the communication monitored by the monitoring unit 201 is the communication between two blockchain nodes based on the last service component, thereby ensuring the accuracy of the authentication object, and further performing the authentication , ensuring the availability and reference of the certification results.

Integrity detection unit 202, configured to enable the authentication system on the peer blockchain node in the two blockchain nodes to check the blockchain node at the other end when monitoring the communication between the two blockchain nodes. Integrity testing of the authentication system on the Internet;

Optionally, in a specific implementation manner, the integrity detection unit 202 is further used to determine whether a trust evaluation kernel matrix is stored in the authentication system, and whether the trust evaluation kernel matrix needs to be updated, and if it exists and needs to be updated, then determine The authentication system on the blockchain node at the other end is complete.

Optionally, in a specific implementation manner, the integrity detection unit 202 is further used to determine whether there is an authentication kernel in the authentication system, and whether the trust evaluation kernel matrix is stored in the authentication kernel;

The integrity detection unit 202 is further used to judge whether to update the trust evaluation kernel matrix in the authentication kernel through the kernel maintenance module.

In this embodiment, the trust evaluation kernel matrix is used to record the trust authentication data of the blockchain node to the blockchain node. Here, it should be noted that the integrity detection unit 202 can also be used to check the blockchain system. Blockchain nodes are grouped, and each group of blockchain nodes records the trust authentication data among all blockchain nodes within the group; and between groups, a block can be selected from a group of blockchain nodes. The block chain node is used as an external contact node, and the external contact node belongs to another group of block chain nodes at the same time, that is, the two sets of block chain nodes have a common block chain node, and the number of the common block chain nodes can be one, Or there may be more than one, and the specific number is flexibly configured according to the requirements of the application scenario. For example, if the blockchain system is a public chain, due to its higher visibility on the Internet, it is more likely to be a security risk due to network attacks. Therefore, the two groups of blockchain nodes have a common number of blockchain nodes for multiple. For private chains and consortium chains, due to their visibility on the Internet, they are less likely to have security risks due to network attacks. Therefore, the two sets of blockchain nodes have a common number of blockchain nodes. .

As mentioned above, the reason for the certification in this application is to ensure that when the blockchain nodes participate in the system operation as an integral part of the Internet system, how to ensure the safe operation of the entire system based on the security of the blockchain nodes themselves, For this reason, only when two blockchain nodes have data interaction, this security issue needs to be considered. For this reason, in this embodiment, the monitoring unit 201 is configured to monitor whether the communication between the blockchain nodes, if If there is communication, it indicates that data interaction between the two blockchain nodes is about to occur or is in progress. For this reason, trigger the authentication system of the peer authentication system of the two blockchain nodes in the authentication kernel to perform authentication to obtain the Trust evaluation kernel matrix, otherwise, it is not necessary to trigger the authentication kernel at the peer authentication system of the two blockchain nodes to perform authentication to obtain the trust evaluation kernel matrix.

Optionally, in a specific implementation manner, the integrity detection unit 202 is further configured to determine whether the kernel maintenance module is updating the trust evaluation kernel matrix by means of exchange.

Optionally, in this embodiment, when the kernel maintenance module exchanges the trust kernel matrix to the peer blockchain node, it preferably switches to its neighbor blockchain node, that is, other blockchain nodes are neighbors Blockchain nodes, the neighboring blockchain nodes can be directly adjacent or indirectly adjacent. When indirectly adjacent, the number of neighbors can be controlled by setting the neighbor step or neighbor distance.

Further, when in the block chain system, if all the block chain nodes are divided into several groups, the kernel maintenance module judges that the pair Whether the end block chain node and the other end block chain node are in the same group.

Further, as mentioned above, when the adjacent two groups of blockchain nodes have a common blockchain node, the trust kernel can be performed between the adjacent two groups of blockchain nodes through the common blockchain node. matrix exchange.

Optionally, in a specific implementation manner, when the integrity detection unit 202 is further used to update the trust kernel matrix, it is implemented by means of a decentralized authentication framework.

Optionally, in this embodiment, the decentralization of authentication can be realized through the decentralized authentication framework, so that fast authentication can be performed between two blockchain nodes without any third party, thereby ensuring the integrity of the trust kernel matrix. Update Speed.

Optionally, in a specific implementation manner, the device 20 for authenticating connections between blockchain nodes further includes: a virtualized trusted management module, which is used to derive a trust kernel matrix, so that the kernel maintenance module is in two The trust kernel matrix is updated between blockchain nodes.

Optionally, in this embodiment, the virtualized trusted management module (VTPMS, virtual trusted-platforms) can ensure that the two blockchain nodes perform the exchange of the trust core matrix quickly, thereby ensuring that any The trust kernel matrix on each blockchain node will be updated in real time, ensuring real-time and rapid exchange.

Optionally, in a specific implementation manner, an authentication system set on a block chain node serves as a neuron.

Optionally, in a specific implementation manner, the kernel maintenance module is also used to enable multiple blockchain nodes that communicate frequently to form a neuron authentication network, and all neurons in the neuron authentication network share upper-layer service components.

Optionally, in this embodiment, by making multiple blockchain nodes with frequent communication form a neuron authentication network and all neurons in the neuron authentication network share the upper-layer service components, it is possible to focus on determining the authentication for Therefore, it is preferable to only authenticate those blockchain nodes that communicate frequently, compared to authenticating all blockchain nodes that only need to communicate in the blockchain system, thereby ensuring the implementation efficiency of authentication.

Optionally, in this embodiment, since the communication behavior between blockchain nodes changes in real time, the communication frequency is also constantly changing, so the composition of the neuron authentication network is also dynamically changing.

Optionally, in a specific implementation manner, the neuron authentication network has a unified interface for providing proof of interaction services hosted between neurons in the neuron authentication network.

Optionally, in this embodiment, the unified interface can be configured on a blockchain node with higher authority or higher security in the neuron authentication network.

Embodiment four,

Referring to FIG. 4 , an embodiment of the present application provides an electronic device 40, including: a memory 401 and a processor 402, the memory 401 stores computer-executable instructions, and the processor 402 is used to execute the computer-executable instructions to perform the following steps :

Monitor whether there is communication between two blockchain nodes in the blockchain system;

If it is monitored, the authentication system on the peer blockchain node in the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end;

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

The specific instructions are as follows:

Monitor whether there is communication between two blockchain nodes in the blockchain system;

Optionally, in this embodiment, multiple blockchain nodes can form a blockchain system, such as a consortium chain, a private chain, or a public chain; optionally, in this embodiment, the district The block chain nodes include block chain nodes, and the block chain nodes may be block chain light nodes and block chain full nodes. A blockchain full node is a node that owns all the transaction data of the entire network, and a blockchain light node is a node that only owns transaction data related to itself.

In this embodiment, it should be noted that when multiple blockchain nodes form a blockchain system, the above-mentioned authentication system can be deployed only on some blockchain nodes, or the above-mentioned authentication system can be deployed on all blockchain nodes. system. For example, for a private chain, since the number of blockchain nodes is relatively small, in order to ensure the safe operation of the blockchain system, the above authentication system can be deployed on all blockchain nodes. For another example, for the consortium chain, the above authentication system can be deployed on all blockchain nodes with reference to the private chain. For example, for a private chain, since the number of blockchain nodes is relatively large, in order to ensure the safe operation of the blockchain system, the above-mentioned authentication system can be deployed on some blockchain nodes, for example, in all Deploy the above authentication system on all blockchain nodes, and deploy the above authentication system on some blockchain light nodes; or, deploy the above authentication system on a small number of blockchain full nodes, and deploy the above authentication system on all blockchain light nodes Deploy the authentication system above.

Optionally, in a specific implementation manner, the network traffic generated between two blockchain nodes in the blockchain system is monitored to monitor whether the two blockchain nodes in the blockchain system to communicate.

Optionally, in this embodiment, by monitoring network traffic, it is possible to quickly monitor whether there is communication between two blockchain nodes, that is, whether data interaction between two blockchain nodes is about to occur or is in progress Data interaction.

Optionally, in a specific implementation manner, the network traffic generated between two blockchain nodes in the blockchain system is monitored by way of traffic interception.

Optionally, in this embodiment, by intercepting network traffic, it is possible to quickly monitor whether there is communication between two blockchain nodes, that is, whether data interaction between two blockchain nodes is about to occur or is in progress Data interaction.

Optionally, in a specific implementation manner, the communication between two blockchain nodes is initiated between upper-layer service components.

Optionally, in this embodiment, the monitored communication is the communication between two blockchain nodes based on the last communication between service components, thereby ensuring the accuracy of the authentication for the object, and further ensuring that the authentication Availability and reference of results.

If it is monitored, the authentication system on the peer blockchain node in the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end;

Optionally, in a specific implementation manner, the authentication system on the peer blockchain node of the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end, including: Judging whether there is a trust evaluation kernel matrix stored in the authentication system, and whether the trust evaluation kernel matrix needs to be updated, if it exists and needs to be updated, it is determined that the authentication system on the blockchain node at the other end is complete.

Optionally, in a specific implementation manner, judging whether a trust evaluation kernel matrix is stored in the authentication system includes: judging whether there is an authentication kernel in the authentication system, and whether the trust evaluation kernel matrix is stored in the authentication kernel;

Judging whether the trust evaluation kernel matrix needs to be updated includes: judging whether to update the trust evaluation kernel matrix in the authentication kernel through the kernel maintenance module.

In this embodiment, the trust evaluation kernel matrix is used to record the trust authentication data of the blockchain node to the blockchain node. Here, it should be noted that the blockchain nodes in the blockchain system can be grouped, and each The group blockchain node records the trust authentication data between all blockchain nodes within the group; and between groups, a blockchain node can be selected from a group of blockchain nodes as the external contact node. The external contact node belongs to another group of blockchain nodes at the same time, that is, the two groups of blockchain nodes have a common blockchain node, and the number of the common blockchain nodes can be one, or it can be multiple. The specific number can be flexibly configured according to the requirements of the application scenario. For example, if the blockchain system is a public chain, due to its higher visibility on the Internet, it is more likely to be a security risk due to network attacks. Therefore, the two groups of blockchain nodes have a common number of blockchain nodes for multiple. For private chains and consortium chains, due to their visibility on the Internet, they are less likely to have security risks due to network attacks. Therefore, the two sets of blockchain nodes have a common number of blockchain nodes. .

As mentioned above, the reason for the certification in this application is to ensure that when the blockchain nodes participate in the system operation as an integral part of the Internet system, how to ensure the safe operation of the entire system based on the security of the blockchain nodes themselves, For this reason, only when there is data interaction between two blockchain nodes, this security issue needs to be considered. For this reason, in this embodiment, a monitoring unit is configured to monitor whether the communication between the blockchain nodes, if there is communication, it indicates that data interaction between two blockchain nodes is about to occur or data interaction is in progress, for this reason, the authentication system of the opposite end of the two blockchain nodes in the authentication kernel is triggered to perform authentication to obtain the trust Evaluate the kernel matrix, otherwise, it is not necessary to trigger the authentication system of the authentication kernel at the opposite end of the two blockchain nodes to perform authentication to obtain the trust evaluation kernel matrix.

Optionally, in a specific implementation manner, judging whether to update the trust evaluation kernel matrix in the authentication kernel through the kernel maintenance module includes: judging whether the kernel maintenance module is updating the trust evaluation kernel matrix by way of exchange.

Optionally, in this embodiment, when the kernel maintenance module exchanges the trust kernel matrix to the peer blockchain node, it preferably switches to its neighbor blockchain node, that is, other blockchain nodes are neighbors Blockchain nodes, the neighboring blockchain nodes can be directly adjacent or indirectly adjacent. When indirectly adjacent, the number of neighbors can be controlled by setting the neighbor step or neighbor distance.

Further, when in the block chain system, if all the block chain nodes are divided into several groups, the kernel maintenance module judges that the pair Whether the end block chain node and the other end block chain node are in the same group.

Further, as mentioned above, when the adjacent two groups of blockchain nodes have a common blockchain node, the trust kernel can be performed between the adjacent two groups of blockchain nodes through the common blockchain node. matrix exchange.

Optionally, in a specific implementation manner, when updating the trust kernel matrix, it is implemented by means of a decentralized authentication framework.

Optionally, in this embodiment, the decentralization of authentication can be realized through the decentralized authentication framework, so that fast authentication can be performed between two blockchain nodes without any third party, thereby ensuring the integrity of the trust kernel matrix. Update Speed.

Optionally, in a specific implementation manner, the method for authenticating connection between blockchain nodes further includes: deriving a trust kernel matrix, so that the kernel maintenance module performs trust kernel matrix between two blockchain nodes update.

Optionally, in this embodiment, the trust kernel matrix can be derived through a virtual trusted management module (VTPMS, virtual trusted-platforms), so that the kernel maintenance module can update the trust kernel matrix between two blockchain nodes , the virtualized trusted management module can ensure that two blockchain nodes perform the exchange of the trust kernel matrix quickly, thus ensuring that the trust kernel matrix on any blockchain node will be Real-time update ensures the real-time and fast exchange.

Optionally, in a specific implementation manner, an authentication system set on a block chain node serves as a neuron.

Optionally, in a specific implementation manner, the kernel maintenance module is also used to enable multiple blockchain nodes that communicate frequently to form a neuron authentication network, and all neurons in the neuron authentication network share upper-layer service components.

Optionally, in this embodiment, by making multiple blockchain nodes with frequent communication form a neuron authentication network and all neurons in the neuron authentication network share the upper-layer service components, it is possible to focus on determining the authentication for Therefore, it is preferable to only authenticate those blockchain nodes that communicate frequently, compared to authenticating all blockchain nodes that only need to communicate in the blockchain system, thereby ensuring the implementation efficiency of authentication.

Optionally, in this embodiment, since the communication behavior between blockchain nodes changes in real time, the communication frequency is also constantly changing, so the composition of the neuron authentication network is also dynamically changing.

Optionally, in a specific implementation manner, the neuron authentication network has a unified interface for providing proof of interaction services hosted between neurons in the neuron authentication network.

Optionally, in this embodiment, the unified interface can be configured on a blockchain node with higher authority or higher security in the neuron authentication network.

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

Please refer to FIG. 5. FIG. 5 is a schematic structural diagram of an electronic device according to an embodiment of the present application; as shown in FIG. 5, the hardware structure of the electronic device may include: a processor 501, a communication interface 502, a memory 503 and a communication bus 504;

Wherein, the processor 501, the communication interface 502, and the memory 503 complete mutual communication through the communication bus 504;

Optionally, the communication interface 502 may be an interface of a communication module, such as an interface of a GSM module;

Wherein, the processor 501 may be specifically configured to run an executable program stored on the memory 503, so as to execute all or part of the processing steps in any one of the above method embodiments.

The processor 501 can be a general-purpose processor, including a central processing unit (Central Processing Unit, referred to as CPU), a network processor (Network Processor, referred to as NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC) ), off-the-shelf programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. Various methods, steps, and logic block diagrams disclosed in the embodiments of the present application may be implemented or executed. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.

The electronic equipment of the embodiment of the present application exists in various forms, including but not limited to:

(1) Mobile communication equipment: This type of equipment is characterized by mobile communication functions, and its main goal is to provide voice and data communication. Such terminals include: smart phones (such as iPhone), multimedia phones, feature phones, and low-end phones.

(2) Ultra-mobile personal computer equipment: This type of equipment belongs to the category of personal computers, has computing and processing functions, and generally has the characteristics of mobile Internet access. Such terminals include: PDA, MID and UMPC equipment, such as iPad.

(3) Portable entertainment equipment: This type of equipment can display and play multimedia content. Such devices include: audio and video players (such as iPod), handheld game consoles, e-books, as well as smart toys and portable car navigation devices.

(4) Server: a device that provides computing services. The composition of the server includes a processor 710, hard disk, memory, system bus, etc. The server is similar to a general-purpose computer architecture, but due to the need to provide highly reliable services, it needs to be processed in terms of processing power and stability. It has high requirements in terms of performance, reliability, security, scalability, and manageability.

(5) Other electronic devices with data interaction function.

In the embodiment of the present application, the processor 501 may take, for example, a microprocessor or a computer-readable medium storing computer-readable program code (such as software or firmware) executable by the (micro)processor, logic gates, switches, dedicated integrated Circuits (Application Specific Integrated Circuit, ASIC), programmable logic processors and embedded microprocessors, examples of processors include but are not limited to the following microprocessors: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20 and Silicone Labs C8051F320, memory The processor can also be implemented as part of the control logic of the memory. Those skilled in the art also know that, in addition to implementing the processor in pure computer-readable program code, it is entirely possible to make the processor use logic gates, switches, application-specific integrated circuits, programmable logic processors, and embedded The same function can be realized in the form of a microprocessor or the like. Therefore, such a processor can be regarded as a hardware component, and the devices included in it for realizing various functions can also be regarded as structures within the hardware component. Or even, means for realizing various functions can be regarded as a structure within both a software module realizing a method and a hardware component.

Embodiment five,

Please refer to FIG. 6, the embodiment of the present application provides a computer storage medium, on which computer executable instructions are stored, and the following steps are implemented when the computer executable instructions are executed:

Monitor whether there is communication between two blockchain nodes in the blockchain system;

If it is monitored, the authentication system on the peer blockchain node in the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end;

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

The specific instructions are as follows:

Monitor whether there is communication between two blockchain nodes in the blockchain system;

Optionally, in this embodiment, multiple blockchain nodes can form a blockchain system, such as a consortium chain, a private chain, or a public chain; optionally, in this embodiment, the district The block chain nodes include block chain nodes, and the block chain nodes may be block chain light nodes and block chain full nodes. A blockchain full node is a node that owns all the transaction data of the entire network, and a blockchain light node is a node that only owns transaction data related to itself.

In this embodiment, it should be noted that when multiple blockchain nodes form a blockchain system, the above-mentioned authentication system can be deployed only on some blockchain nodes, or the above-mentioned authentication system can be deployed on all blockchain nodes. system. For example, for a private chain, since the number of blockchain nodes is relatively small, in order to ensure the safe operation of the blockchain system, the above authentication system can be deployed on all blockchain nodes. For another example, for the consortium chain, the above authentication system can be deployed on all blockchain nodes with reference to the private chain. For example, for a private chain, since the number of blockchain nodes is relatively large, in order to ensure the safe operation of the blockchain system, the above-mentioned authentication system can be deployed on some blockchain nodes, for example, in all Deploy the above authentication system on all blockchain nodes, and deploy the above authentication system on some blockchain light nodes; or, deploy the above authentication system on a small number of blockchain full nodes, and deploy the above authentication system on all blockchain light nodes Deploy the authentication system above.

Optionally, in a specific implementation manner, the network traffic generated between two blockchain nodes in the blockchain system is monitored to monitor whether the two blockchain nodes in the blockchain system to communicate.

Optionally, in this embodiment, by monitoring network traffic, it is possible to quickly monitor whether there is communication between two blockchain nodes, that is, whether data interaction between two blockchain nodes is about to occur or is in progress Data interaction.

Optionally, in a specific implementation manner, the network traffic generated between two blockchain nodes in the blockchain system is monitored by way of traffic interception.

Optionally, in this embodiment, by intercepting network traffic, it is possible to quickly monitor whether there is communication between two blockchain nodes, that is, whether data interaction between two blockchain nodes is about to occur or is in progress Data interaction.

Optionally, in a specific implementation manner, the communication between two blockchain nodes is initiated between upper-layer service components.

Optionally, in this embodiment, the monitored communication is the communication between two blockchain nodes based on the last communication between service components, thereby ensuring the accuracy of the authentication for the object, and further ensuring that the authentication Availability and reference of results.

If it is monitored, the authentication system on the peer blockchain node in the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end;

Optionally, in a specific implementation manner, the authentication system on the peer blockchain node of the two blockchain nodes performs an integrity check on the authentication system on the blockchain node at the other end, including: Judging whether there is a trust evaluation kernel matrix stored in the authentication system, and whether the trust evaluation kernel matrix needs to be updated, if it exists and needs to be updated, it is determined that the authentication system on the blockchain node at the other end is complete.

Optionally, in a specific implementation manner, judging whether a trust evaluation kernel matrix is stored in the authentication system includes: judging whether there is an authentication kernel in the authentication system, and whether the trust evaluation kernel matrix is stored in the authentication kernel;

Judging whether the trust evaluation kernel matrix needs to be updated includes: judging whether to update the trust evaluation kernel matrix in the authentication kernel through the kernel maintenance module.

In this embodiment, the trust evaluation kernel matrix is used to record the trust authentication data of the blockchain node to the blockchain node. Here, it should be noted that the blockchain nodes in the blockchain system can be grouped, and each The group blockchain node records the trust authentication data between all blockchain nodes within the group; and between groups, a blockchain node can be selected from a group of blockchain nodes as the external contact node. The external contact node belongs to another group of blockchain nodes at the same time, that is, the two groups of blockchain nodes have a common blockchain node, and the number of the common blockchain nodes can be one, or it can be multiple. The specific number can be flexibly configured according to the requirements of the application scenario. For example, if the blockchain system is a public chain, due to its higher visibility on the Internet, it is more likely to be a security risk due to network attacks. Therefore, the two groups of blockchain nodes have a common number of blockchain nodes for multiple. For private chains and consortium chains, due to their visibility on the Internet, they are less likely to have security risks due to network attacks. Therefore, the two sets of blockchain nodes have a common number of blockchain nodes. .

As mentioned above, the reason for the certification in this application is to ensure that when the blockchain nodes participate in the system operation as an integral part of the Internet system, how to ensure the safe operation of the entire system based on the security of the blockchain nodes themselves, For this reason, only when there is data interaction between two blockchain nodes, this security issue needs to be considered. For this reason, in this embodiment, a monitoring unit is configured to monitor whether the communication between the blockchain nodes, if there is communication, it indicates that data interaction between two blockchain nodes is about to occur or data interaction is in progress, for this reason, the authentication system of the opposite end of the two blockchain nodes in the authentication kernel is triggered to perform authentication to obtain the trust Evaluate the kernel matrix, otherwise, it is not necessary to trigger the authentication system of the authentication kernel at the opposite end of the two blockchain nodes to perform authentication to obtain the trust evaluation kernel matrix.

Optionally, in a specific implementation manner, judging whether to update the trust evaluation kernel matrix in the authentication kernel through the kernel maintenance module includes: judging whether the kernel maintenance module is updating the trust evaluation kernel matrix by way of exchange.

Optionally, in this embodiment, when the kernel maintenance module exchanges the trust kernel matrix to the peer blockchain node, it preferably switches to its neighbor blockchain node, that is, other blockchain nodes are neighbors Blockchain nodes, the neighboring blockchain nodes can be directly adjacent or indirectly adjacent. When indirectly adjacent, the number of neighbors can be controlled by setting the neighbor step or neighbor distance.

Further, when in the block chain system, if all the block chain nodes are divided into several groups, the kernel maintenance module judges that the pair Whether the end block chain node and the other end block chain node are in the same group.

Further, as mentioned above, when the adjacent two groups of blockchain nodes have a common blockchain node, the trust kernel can be performed between the adjacent two groups of blockchain nodes through the common blockchain node. matrix exchange.

Optionally, in a specific implementation manner, when updating the trust kernel matrix, it is implemented by means of a decentralized authentication framework.

Optionally, in this embodiment, the decentralization of authentication can be realized through the decentralized authentication framework, so that fast authentication can be performed between two blockchain nodes without any third party, thereby ensuring the integrity of the trust kernel matrix. Update Speed.

Optionally, in a specific implementation manner, the method for authenticating connection between blockchain nodes further includes: deriving a trust kernel matrix, so that the kernel maintenance module performs trust kernel matrix between two blockchain nodes update.

Optionally, in this embodiment, the trust kernel matrix can be derived through a virtual trusted management module (VTPMS, virtual trusted-platforms), so that the kernel maintenance module can update the trust kernel matrix between two blockchain nodes , the virtualized trusted management module can ensure that two blockchain nodes perform the exchange of the trust kernel matrix quickly, thus ensuring that the trust kernel matrix on any blockchain node will be Real-time update ensures the real-time and fast exchange.

Optionally, in a specific implementation manner, an authentication system set on a block chain node serves as a neuron.

Optionally, in a specific implementation manner, the kernel maintenance module is also used to enable multiple blockchain nodes that communicate frequently to form a neuron authentication network, and all neurons in the neuron authentication network share upper-layer service components.

Optionally, in this embodiment, by making multiple blockchain nodes with frequent communication form a neuron authentication network and all neurons in the neuron authentication network share the upper-layer service components, it is possible to focus on determining the authentication for Therefore, it is preferable to only authenticate those blockchain nodes that communicate frequently, compared to authenticating all blockchain nodes that only need to communicate in the blockchain system, thereby ensuring the implementation efficiency of authentication.

Optionally, in this embodiment, since the communication behavior between blockchain nodes changes in real time, the communication frequency is also constantly changing, so the composition of the neuron authentication network is also dynamically changing.

Optionally, in a specific implementation manner, the neuron authentication network has a unified interface for providing proof of interaction services hosted between neurons in the neuron authentication network.

Optionally, in this embodiment, the unified interface can be configured on a blockchain node with higher authority or higher security in the neuron authentication network.

If the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection.

In the technical solution of the embodiment of the present application, by monitoring whether communication is performed between two blockchain nodes in the blockchain system; if monitored, the peer blockchain node in the two blockchain nodes The authentication system checks the integrity of the authentication system on the blockchain node at the other end; if the authentication system on the blockchain node at the other end is complete, the two blockchain nodes establish an authentication connection, so that authentication is based on the authentication connection The authentication process simplifies the authentication process of blockchain nodes and improves the authentication efficiency of blockchain nodes.

In addition, computer storage media, including permanent and non-permanent, removable and non-removable media, may be implemented by any method or technology for information storage. Information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read only memory (ROM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Flash memory or other memory technology, Compact Disc Read-Only Memory (CD-ROM), Digital Versatile Disc (DVD) or other optical storage, Magnetic tape cartridge, tape magnetic disk storage or other magnetic storage device or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, computer storage media does not include transitory media, such as modulated data signals and carrier waves.

It should also be noted that the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes Other elements not expressly listed, or elements inherent in the process, method, commodity, or apparatus are also included. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

This application may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular transactions or implement particular abstract data types. The application may also be practiced in distributed computing environments where transactions are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including storage devices.

It should be noted that each embodiment in this specification is described in a progressive manner, the same and similar parts of each embodiment can be referred to each other, and each embodiment focuses on the differences from other embodiments. place. In particular, for the device and system embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and for relevant parts, please refer to part of the description of the method embodiments. The device and system embodiments described above are only illustrative, and the modules described as separate components may or may not be physically separated, and the components indicated as modules may or may not be physical modules, that is, they may be located in One place, or it can be distributed to multiple network modules. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. It can be understood and implemented by those skilled in the art without creative effort.

The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person familiar with the technical field can easily think of changes or Replacement should be covered within the protection scope of this application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims (10)

1. A method of authenticated connection between block link points, comprising:

monitoring whether communication is carried out between two blockchain nodes in a blockchain system;

if so, the authentication system on the block chain link point at the opposite end of the two block chain nodes carries out integrity detection on the authentication system on the block chain link point at the other end;

the authentication system on the opposite end block chain link point in the two block chain nodes carries out integrity detection on the authentication system on the other end block chain link point, and the method comprises the following steps: judging whether a trust evaluation core matrix is stored in the authentication system or not, judging whether the trust evaluation core matrix needs to be updated or not, and if the trust evaluation core matrix exists and needs to be updated, judging that the authentication system on the block chain link point at the other end is complete; judging whether a trust evaluation kernel matrix is stored in the authentication system or not, wherein the judging comprises the following steps: judging whether an authentication kernel exists in the authentication system or not, and judging whether the trust evaluation kernel matrix is stored in the authentication kernel or not; judging whether the trust evaluation core matrix needs to be updated or not, wherein the judging comprises the following steps: judging whether a trust evaluation kernel matrix in the authentication kernel is updated through a kernel maintenance module;

and if the authentication system on the block link point at the other end is complete, establishing authentication connection between the two block link points.

2. A method for authenticated connection between blockchain nodes according to claim 1, wherein network traffic generated between the two blockchain nodes in the blockchain system is monitored to monitor whether communication is performed between the two blockchain nodes in the blockchain system.

3. A method for authenticated connection between blockchain nodes according to claim 2, wherein network traffic generated between the two blockchain nodes in the blockchain system is monitored by means of traffic interception.

4. An apparatus for authenticated connection between block link points, comprising:

the monitoring unit is used for monitoring whether communication is carried out between two block chain nodes in the block chain system;

the integrity detection unit is used for enabling the authentication system on the opposite-end block chain link point in the two block chain nodes to carry out integrity detection on the authentication system on the other-end block chain link point when the communication between the two block chain nodes is monitored; the authentication system on the block chain link point at the opposite end of the two block chain nodes carries out integrity detection on the authentication system on the block chain link point at the other end, and the integrity detection comprises the following steps: judging whether a trust evaluation core matrix is stored in the authentication system or not, judging whether the trust evaluation core matrix needs to be updated or not, and if the trust evaluation core matrix exists and needs to be updated, judging that the authentication system on the block chain link point at the other end is complete; judging whether a trust evaluation core matrix is stored in the authentication system or not, comprising the following steps: judging whether an authentication kernel exists in the authentication system or not, and judging whether a trust evaluation kernel matrix is stored in the authentication kernel or not; judging whether the trust evaluation core matrix needs to be updated or not, comprising the following steps: judging whether a trust evaluation kernel matrix in the authentication kernel is updated through a kernel maintenance module;

and if the authentication system on the block link point at the other end is complete, establishing authentication connection between the two block link points.

5. An apparatus for performing an authenticated connection between blockchain nodes according to claim 4, wherein the monitoring unit is further configured to monitor network traffic generated between the two blockchain nodes in the blockchain system to monitor whether communication is performed between the two blockchain nodes in the blockchain system.

6. The apparatus according to claim 5, wherein the monitoring unit is further configured to monitor network traffic generated between the two blockchain nodes in the blockchain system by means of traffic interception.

7. An arrangement for authenticated connection between blockchain nodes according to any of claims 4-6, characterised in that communication between the two blockchain nodes is initiated based on an upper layer service component.

8. A blockchain system, comprising: a plurality of block chain nodes are provided with the device that carries out the authentication between the block chain node on every block chain node, and it includes:

the monitoring unit is used for monitoring whether communication is carried out between two block chain nodes in the block chain system;

the integrity detection unit is used for enabling the authentication system on the block chain link point at the opposite end of the two block chain nodes to carry out integrity detection on the authentication system on the block chain link point at the other end when the communication between the two block chain nodes is monitored; the authentication system on the opposite end block chain link point in the two block chain nodes carries out integrity detection on the authentication system on the other end block chain link point, and the method comprises the following steps: judging whether a trust evaluation core matrix is stored in the authentication system or not, judging whether the trust evaluation core matrix needs to be updated or not, and if the trust evaluation core matrix exists and needs to be updated, judging that the authentication system on the block chain link point at the other end is complete; judging whether a trust evaluation core matrix is stored in the authentication system or not, comprising the following steps: judging whether an authentication kernel exists in the authentication system or not, and judging whether the trust evaluation kernel matrix is stored in the authentication kernel or not; judging whether the trust evaluation core matrix needs to be updated or not, comprising the following steps: judging whether a trust evaluation kernel matrix in the authentication kernel is updated through a kernel maintenance module;

and if the authentication system on the block link point at the other end is complete, establishing authentication connection between the two block link points.

9. An electronic device, comprising: a memory having computer-executable instructions stored thereon and a processor for executing the computer-executable instructions to perform the steps of:

monitoring whether communication is carried out between two blockchain nodes in a blockchain system;

if so, the authentication system on the opposite-end block chain link point in the two block chain nodes carries out integrity detection on the authentication system on the other-end block chain link point; the authentication system on the block chain link point at the opposite end of the two block chain nodes carries out integrity detection on the authentication system on the block chain link point at the other end, and the integrity detection comprises the following steps: judging whether a trust evaluation core matrix is stored in the authentication system or not, judging whether the trust evaluation core matrix needs to be updated or not, and if the trust evaluation core matrix exists and needs to be updated, judging that the authentication system on the block chain link point at the other end is complete; judging whether a trust evaluation core matrix is stored in the authentication system or not, comprising the following steps: judging whether an authentication kernel exists in the authentication system or not, and judging whether the trust evaluation kernel matrix is stored in the authentication kernel or not; judging whether the trust evaluation core matrix needs to be updated or not, comprising the following steps: judging whether a trust evaluation kernel matrix in the authentication kernel is updated through a kernel maintenance module;

and if the authentication system on the block link point at the other end is complete, establishing authentication connection between the two block link points.

10. A computer storage medium having computer-executable instructions stored thereon that, when executed, perform the steps of:

monitoring whether communication is carried out between two block chain nodes in a block chain system;

if so, the authentication system on the block chain link point at the opposite end of the two block chain nodes carries out integrity detection on the authentication system on the block chain link point at the other end; the authentication system on the block chain link point at the opposite end of the two block chain nodes carries out integrity detection on the authentication system on the block chain link point at the other end, and the integrity detection comprises the following steps: judging whether a trust evaluation core matrix is stored in the authentication system or not, judging whether the trust evaluation core matrix needs to be updated or not, and if the trust evaluation core matrix exists and needs to be updated, judging that the authentication system on the block chain link point at the other end is complete; judging whether a trust evaluation core matrix is stored in the authentication system or not, comprising the following steps: judging whether an authentication kernel exists in the authentication system or not, and judging whether a trust evaluation kernel matrix is stored in the authentication kernel or not; judging whether the trust evaluation core matrix needs to be updated or not, comprising the following steps: judging whether a trust evaluation kernel matrix in the authentication kernel is updated through a kernel maintenance module;

and if the authentication system on the block link point at the other end is complete, establishing authentication connection between the two block link points.

Images