A highly automated smart contract formal verification system and method

Abstract

The invention discloses a highly automated intelligent contract formal verification system and method. The method includes the following steps: step 001, converting an intelligent contract function requirement description document into an intelligent contract function requirement specification document described in a non-natural language, wherein the content of intelligent contract function requirement specification document includes target contract function specification description and security attribute description; step 002, creating a formal validation rule model library; step 003, automatically modeling the contract source code and / or bytecode by an automated modeling tool; step 004, parsing the abstract syntax tree generated in step 003, and allocating memory addresses for constantsand variables in the code; step 005, performing formal proof. The invention is adapted to program codes written in a plurality of high-level programming languages and also adapted to a plurality of formal languages, and simultaneously provides two automatic modeling modes of source code modeling and bytecode modeling, so that modeling can be carried out according to different modeling requirements of users, and the verification efficiency is further improved.

Description

technical field [0001] The invention relates to the security field of blockchain smart contracts and a formal verification method, in particular to a highly automated smart contract formal verification system and method. Background technique [0002] Blockchain is a new application model of computer technologies such as distributed data storage, point-to-point transmission, consensus mechanism, and encryption algorithm. The technology of using a decentralized consensus mechanism to maintain a complete, distributed, and non-tamperable ledger database enables participants in the blockchain to implement a unified ledger system without establishing a trust relationship. A smart contract is a set of promises defined in digital form, including the agreement on which the parties to the contract can implement these promises. In the context of blockchain technology, smart contracts refer to program codes that run on the blockchain and can perform certain functions. The smart contra...

AI Technical Summary

Problems solved by technology

[0005] 2. The existing technology mainly relies on manual verification, with heavy workload and low degree of automation. Therefore, the time cost is too high, and the correctness of the established model cannot be guaranteed. Once the requirements change, the previous work must be restarted, and the model is correct. depends on the programmer's modeling experience and technical level

[0006] 3. Poor readability, which is not conducive to the docking work between programmers

There is no unified standard for the models established by common formal verification methods, which are only related to the habits and qualities of programmers, and it is not convenient for code docking

[0007] 4. At present, most of the common verification methods are to verify reasonable input to obtain reasonable results, and often ignore the results of unreasonable input. This approach has great security risks

If unreasonable input can still get the result that conforms to the function specification, it means that there is a loophole in the smart contract code

Images