Proxy firewall protection method and system for smart contract

Abstract

The invention discloses a proxy firewall protection method and system for a smart contract, and the method comprises the steps that a proxy contract in a proxy firewall is called after a user publishes a transaction, and the proxy firewall carries out the safety check of the parameter content of the transaction according to a safety strategy; after the security check is passed, the proxy firewallchanges the source address of the transaction into the address of the proxy contract, and issues the transaction to the target smart contract, so that the proxy firewall calls the target smart contract; after the calling of the target intelligent contract is completed, the proxy firewall updates the transaction execution result to the transaction content and returns the transaction execution result to the proxy contract; and the updated transaction is issued to the user address through the proxy contract, so that the proxy firewall transmits a transaction execution result to the user, and calling of the proxy contract is completed. A calling interface is provided between the user and the target contract through the proxy firewall, safe calling of the intelligent contract is achieved, and the transaction safety of a contract publisher and a caller is improved.

Description

technical field [0001] The invention relates to the field of electronics and computer information technology, in particular to a proxy firewall protection method and system for smart contracts. Background technique [0002] Blockchain is a form of distributed ledger technology, and since the introduction of digital currency, blockchain has received a lot of attention and application. Blockchain was originally introduced for peer-to-peer payments, but has recently been extended to allow programmable transactions in the form of smart contracts. Smart contracts are programs that can be collectively executed by a network of mutually distrusting nodes that implement a consensus protocol (such as proof-of-work or proof-of-stake) and are digitally enforced. [0003] Since smart contracts are entrusted by users to process and transfer assets of considerable value, they are subject to intensive hacking activity. This kind of hacking is more dangerous than traditional network system...

AI Technical Summary

Problems solved by technology

[0005] However, during the research and practice of the existing technology, the inventors of the present invention found that the existing smart contract security technology has the following defects: the mutual calling of smart contracts leads to unknown code execution space, and it is impossible to ensure sufficient Testability; first, unknown external functions can be called in smart contracts

For example, if a smart contract uses the call function to perform a transfer operation, the transfer operation will call the fallback function of the transferred address by default, and it is impossible to know whether there is an unsafe code similar to a circular call in the fallback function of the other party before the smart contract is chained; Secondly, the smart contract firewall needs to insert code into the protected smart contract before going to the chain. Smart contract developers need to introduce a library file provided by the existing smart contract firewall when writing a smart contract to realize the security management of the contract ; and the protection scheme of the smart contract cannot be changed after it is on the chain, and the unprotected smart contract that has been on the chain cannot be protected

Images