[go: up one dir, main page]

WO2018032378A1 - Système de stockage de fichiers chiffrés commandé par programme pour chaîne de blocs, et procédé associé - Google Patents

Système de stockage de fichiers chiffrés commandé par programme pour chaîne de blocs, et procédé associé Download PDF

Info

Publication number
WO2018032378A1
WO2018032378A1 PCT/CN2016/095582 CN2016095582W WO2018032378A1 WO 2018032378 A1 WO2018032378 A1 WO 2018032378A1 CN 2016095582 W CN2016095582 W CN 2016095582W WO 2018032378 A1 WO2018032378 A1 WO 2018032378A1
Authority
WO
WIPO (PCT)
Prior art keywords
storage system
program
file storage
encrypted file
transaction
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/095582
Other languages
English (en)
Chinese (zh)
Inventor
张丛
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen Fanxi Eelectronics Co Ltd
Original Assignee
Shenzhen Fanxi Eelectronics Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shenzhen Fanxi Eelectronics Co Ltd filed Critical Shenzhen Fanxi Eelectronics Co Ltd
Publication of WO2018032378A1 publication Critical patent/WO2018032378A1/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/602—Providing cryptographic facilities or services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601—Interfaces specially adapted for storage systems
    • G06F3/0602—Interfaces specially adapted for storage systems specifically adapted to achieve a particular effect
    • G06F3/062—Securing storage systems
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601—Interfaces specially adapted for storage systems
    • G06F3/0628—Interfaces specially adapted for storage systems making use of a particular technique
    • G06F3/0638—Organizing or formatting or addressing of data
    • G06F3/0643—Management of files
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash

Definitions

  • the invention relates to a transaction data security problem of a blockchain, in particular to a program chain encrypted file storage system of a blockchain and a method thereof.
  • blockchain is a secure account book database, composed of data blocks, users can constantly update and upgrade here.
  • the platform looks for data.
  • the blockchain can speed up transaction processing, reduce costs, reduce middlemen, improve market insight, and increase business transparency.
  • Computing and storage are the two basic tasks of computer systems. With the explosive growth of information, storage components will experience direct storage based on single-server, to cluster-based grid storage based on LAN, and finally to WAN-based data grids.
  • Blockchain technology is the most extreme development at present. The intrinsic characteristics of this data storage medium include intelligent storage. The quality of storage service can guarantee service differentiation and performance guarantee for user applications.
  • Storage is object-oriented mass storage, and Network storage must be confidential and complete.
  • the existing Internet does not have a good or convenient way to ensure the confidentiality, integrity, availability, and data of the data stored in the blockchain and the data stored on the storage device. Non-repudiation and the reliability of the entire network storage system, especially the generation of trusted computing technology in blockchain in recent years, puts higher demands on network storage security.
  • the object of the present invention is to provide a blockchain program-controlled encrypted file storage system, comprising: (1) a client, all files are encrypted and placed in a client; (2) a mount point in a Unix and Linux system. Using the mount point to mask the specific operational details of the transaction file, so that the transaction file to be overwritten is the same as other transaction files; (3) the key distribution module, so that a single user can assign a physical address for each transaction file. a key; (4) an encryption module for the program-controlled encrypted file storage system to mount a virtual transaction file system to a standard Unix and Linux file system; (5) a daemon process that loads the client to the client Onboard, used to convert standard program-controlled encrypted file storage system calls into special program-controlled encrypted file storage system calls.
  • the daemon sends a polar routing link request to the server.
  • the cryptographic file is stored on the server side, and there is no mechanism after the server is compromised to prevent the attacker from rejecting the request of the non-legitimate user.
  • the file storage system is designed for local use of blockchains, not for distributed networks, and a single user is forced to assign a key to each transaction file physical address.
  • all polar routing link requests issued from the client are generated on a privileged port, and any attempt to bypass the daemon to send a polar routing link request directly to the server is rejected.
  • the program chain encrypted file storage system of the blockchain does not provide direct integrity measures.
  • the program-controlled encrypted file storage system is available to various well-known application systems in the case where the key is correctly distributed.
  • the blockchain program-controlled encrypted file storage system uses a standard program-controlled encrypted file storage system to process multiple times faster than a conventional encrypted file storage system when reading and writing large files and creating small files.
  • FIG. 1 is a schematic structural diagram of a program-controlled encrypted file storage system of a blockchain according to an embodiment of the present invention.
  • the essence of a transaction is a relational data structure that contains information about the value transfer of the trading participants. These transaction information is called the accounting ledger.
  • the transaction needs to go through three creation, verification, and writing blockchains. The transaction must be digitally signed to ensure the legality of the transaction.
  • Block All transaction information is stored in the block, and a transaction information is a record, which is stored as a separate record in the blockchain.
  • the block consists of a block header and a data part.
  • the block header field contains various characteristics of the block itself, such as the previous block information, the merkle value, and the timestamp.
  • the block header hash value and block height are the two most important indicators for identifying the block.
  • the block primary identifier is its cryptographic hash value, a digital fingerprint obtained by performing a second hash calculation on the block header by the SHA algorithm.
  • the resulting 32-byte hash value is called the block hash value, or the block header hash value, and only the block header is used for calculation.
  • the block hash value can uniquely and unambiguously identify a block, and any node can independently obtain the block hash value by simply hashing the block header.
  • Blockchain A data structure in which blocks are chained in an orderly fashion.
  • a blockchain is like a vertical stack, with the first block being the first block at the bottom of the stack, and each block is then placed on top of the other blocks.
  • a block When a block is written to a blockchain, it will never change and is backed up to another blockchain server.
  • the program-controlled encrypted file storage system is designed for local use of blockchains, not for distributed networks, so a single user must assign a key to each transaction file physical address.
  • a use Programmable encrypted file storage system for blockchain including: client, all files are encrypted and placed in the client; also included in Unix and Linix system mount points, use this mount point to mask transaction files The specific operation details make the transaction file plus the other transaction files the same; the key distribution module enables a single user to assign a key to each transaction file physical address; the encryption module, the program-controlled encrypted file storage system puts a
  • the virtual transaction file system is mounted on a standard Unix and Linux file system; it also includes a daemon that is loaded onto the client to convert standard programmatic encrypted file storage system calls into special programmatic encrypted file storage system calls.
  • the daemon process server After the user establishes a correct link with the transaction file server, the daemon process server issues a polar route link request, so all the polar route link requests sent from the client are generated on a privileged port, so any attempt to bypass the daemon Sending a polar routing link request directly to the server will be rejected . This prevents any malicious user from changing files and protecting the integrity of the data.
  • the system does not provide direct integrity measures.
  • the program-controlled encrypted file storage system is available to various well-known systems.
  • the standard program-controlled encrypted file storage system is more than three times faster than the ordinary encrypted file storage system, and the speed of creating small files is more than double.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Human Computer Interaction (AREA)
  • Storage Device Security (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

Un système de stockage de fichiers chiffrés commandé par programme pour une chaîne de blocs, comprenant : (1) un client dans lequel tous les fichiers sont stockés après avoir été chiffrés ; (2) des points de montage dans des systèmes Unix et Linux, utilisés pour masquer des détails d'opération réelle de fichiers de transaction ; (3) un module de distribution de clé secrète, utilisé pour permettre à un seul utilisateur de distribuer une clé secrète à une adresse physique de chaque fichier de transaction ; (4) un module de chiffrement, utilisé pour permettre au système de stockage de fichiers chiffrés commandé par programme de monter un système de fichier de transaction virtuelle sur un système de fichier Unix standard et un système de fichier Linux standard ; et (5) un programme démon, chargé sur le client et utilisé pour convertir un appel de système de stockage de fichiers chiffrés commandé par programme standard en un appel de système de stockage de fichiers chiffrés commandé par programme spécial. Au moyen du système de stockage de fichiers chiffrés commandé par programme pour une chaîne de blocs et son procédé, les vitesses de traitement de lecture et d'écriture de grands fichiers et la création de petits fichiers sont plusieurs fois supérieures à celles d'un système de stockage de fichiers chiffrés normal.
PCT/CN2016/095582 2016-08-13 2016-08-16 Système de stockage de fichiers chiffrés commandé par programme pour chaîne de blocs, et procédé associé Ceased WO2018032378A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610669794.XA CN106326752B (zh) 2016-08-13 2016-08-13 一种用于区块链的程控加密文件存储系统及其方法
CN201610669794.X 2016-08-13

Publications (1)

Publication Number Publication Date
WO2018032378A1 true WO2018032378A1 (fr) 2018-02-22

Family

ID=57740855

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/095582 Ceased WO2018032378A1 (fr) 2016-08-13 2016-08-16 Système de stockage de fichiers chiffrés commandé par programme pour chaîne de blocs, et procédé associé

Country Status (2)

Country Link
CN (1) CN106326752B (fr)
WO (1) WO2018032378A1 (fr)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110351285B (zh) * 2017-02-08 2020-07-24 腾讯科技（深圳）有限公司 一种数据处理方法、应用客户端及系统
CN107943833B (zh) * 2017-10-25 2021-11-19 华南农业大学 一种基于区块链的无中心分布式文件存储及检索方法
CN108846297B (zh) * 2018-07-16 2019-11-01 广州追溯信息科技有限公司 一种在具有对等节点的区块链网络上分发和检索数据的方法
CN110933042B (zh) * 2019-11-06 2021-09-14 福建福链科技有限公司 一种适用于联盟链的数据安全信使方法及系统

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101901313A (zh) * 2010-06-10 2010-12-01 中科方德软件有限公司 一种Linux文件保护系统及方法
US20110276806A1 (en) * 2010-05-09 2011-11-10 Ryan Matthew Casper Creation and Delivery of Encrypted Virtual Disks
CN103065102A (zh) * 2012-12-26 2013-04-24 中国人民解放军国防科学技术大学 基于虚拟磁盘的数据加密移动存储管理方法
CN104636685A (zh) * 2015-02-25 2015-05-20 山东超越数控电子有限公司 一种龙芯硬件平台上的linux操作系统保护方法

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110276806A1 (en) * 2010-05-09 2011-11-10 Ryan Matthew Casper Creation and Delivery of Encrypted Virtual Disks
CN101901313A (zh) * 2010-06-10 2010-12-01 中科方德软件有限公司 一种Linux文件保护系统及方法
CN103065102A (zh) * 2012-12-26 2013-04-24 中国人民解放军国防科学技术大学 基于虚拟磁盘的数据加密移动存储管理方法
CN104636685A (zh) * 2015-02-25 2015-05-20 山东超越数控电子有限公司 一种龙芯硬件平台上的linux操作系统保护方法

Also Published As

Publication number Publication date
CN106326752B (zh) 2019-05-14
CN106326752A (zh) 2017-01-11

Similar Documents

Publication Publication Date Title
CN112988764B (zh) 数据存储方法、装置、设备和存储介质
WO2018032377A1 (fr) Système de stockage de fichiers de sécurité en lecture seule pour chaîne de blocs, et procédé associé
US11127097B2 (en) Method, apparatus, and system for copyright rights defense detection
CN111951004B (zh) 用于世界状态完整性验证的方法和系统
CN111222157B (zh) 区块链隐私数据的查询方法及装置
US10992649B2 (en) Systems and methods for privacy in distributed ledger transactions
CN102170440B (zh) 适用于存储云间数据安全迁移的方法
WO2023024742A1 (fr) Procédé et appareil de traitement de données, dispositif informatique et support de stockage
US11121876B2 (en) Distributed access control
WO2018032379A1 (fr) Système de stockage sécurisé de fichiers de transactions à distance non sécurisé pour chaîne de blocs
CN110580414A (zh) 基于区块链账户的隐私数据查询方法及装置
CN111881130B (zh) 区块链存储结构的冲突解决方案
CN110580418A (zh) 基于区块链账户的隐私数据查询方法及装置
CN115552441A (zh) 低信任特权访问管理
CN110597832A (zh) 基于区块链网络的政务信息处理方法、装置、电子设备及存储介质
US11689616B2 (en) Optimization of delivery of blocks
WO2018032374A1 (fr) Système de mémorisation chiffrée pour chaîne de blocs, et procédé utilisant ce système
WO2018032373A1 (fr) Dispositif de fixation de réseau de sécurité et procédé de chaîne de blocs
CN112084186B (zh) 拆分和合并存储
US12242624B2 (en) Blockchain managed access system
US11068606B2 (en) Secured encrypted shared cloud storage
WO2020042798A1 (fr) Procédé de création de clé de travail et de fonctionnement cryptographique et plateforme ainsi que dispositif de service cryptographique
CN111698198B (zh) 秘密生成和份额分发
US11418342B2 (en) System and methods for data exchange using a distributed ledger
CN110580411A (zh) 基于智能合约的权限查询配置方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16913138

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16913138

Country of ref document: EP

Kind code of ref document: A1