Traceability Method, Device and Equipment Based on Blockchain in an Isolated Network

Abstract

The present invention relates to the technical field of data security, and discloses a traceability method based on blockchain in an isolated network, which includes the following steps: obtaining first data, where the first data is data on a first blockchain in a first network; transmitting the first data to a second blockchain for reference by a third blockchain, where the second blockchain and the third blockchain are located in a second network, and the second blockchain is a copy of the first blockchain; and realizing data traceability between and within isolated networks based on inter-chain data reference. By combining the business separation in the physical isolated network application scenario with blockchain technology, the present invention can trace the changes of individual business data through data being uploaded to the chain, ensure that data will not be tampered with at each isolated network level through multi-chain copies, ensure that the inter-chain data reference has at least the security level protection of the corresponding blockchain, can ensure the access security of data in the case of network isolation, and realize the traceability of multi-chain services.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a blockchain-based tracing method, device and equipment in an isolated network. Background Art

[0002] Network isolation refers to two or more computers or networks that are not connected, interoperable, or disconnected from each other. Network isolation is currently the best network security technology, eliminating network-based and protocol-based security threats.

[0003] Protecting important assets through a closed network that cannot access the Internet, that is, an isolated network, means that attackers cannot directly contact the isolated network through the network, and traditional attack penetration methods will fail. However, an isolated network does not mean absolute security. Although network access is isolated, due to network maintenance, data interaction and other reasons, physical media data transmission and physical device access cannot be blocked, such as mobile data carriers such as CDs and USB flash drives, hardware devices such as keyboards and mice, mobile notebooks, temporary hotspots, etc. that are not connected according to regulations. These behaviors are very likely to become a bridge to break through the isolated network. How to ensure data access security under network isolation needs to be solved urgently.

[0004] The above contents are only used to assist in understanding the technical solution of the present invention and do not constitute an admission that the above contents are prior art. Summary of the invention

[0005] The main purpose of the present invention is to provide a blockchain-based traceability method, device and equipment in an isolated network, aiming to solve the technical problem that the existing technology cannot ensure the access security of data in the case of network isolation.

[0006] To achieve the above object, the present invention provides a blockchain-based traceability method in an isolated network, and the blockchain-based traceability method in an isolated network comprises the following steps:

[0007] Acquire first data, where the first data is data on a first blockchain in a first network;

[0008] The first data is transmitted to a second blockchain for reference by a third blockchain, wherein the second blockchain and the third blockchain are located in a second network, and the second blockchain is a copy of the first blockchain;

[0009] Based on inter-chain data references, data traceability between isolated networks and within isolated networks is achieved.

[0010] Optionally, the first data is obtained by serializing the original data stored in the database and writing the data into the first blockchain.

[0011] Optionally, the step of transmitting the first data to the second blockchain for reference by the third blockchain includes:

[0012] Checking whether the first data is complete;

[0013] When the first data is complete, transmitting the first data to the second blockchain for reference by the third blockchain;

[0014] Deserializing the data on the second blockchain and storing the deserialized data in the database.

[0015] Optionally, the process by which the third blockchain references the data on the second blockchain includes:

[0016] Checking whether the data stored in the database is consistent with the data on the second blockchain;

[0017] When the data stored in the database is consistent with the data on the second blockchain, invoking the data stored in the database for business operations;

[0018] The third blockchain references the corresponding data on the second blockchain, and the corresponding data is the block data corresponding to the data stored in the database invoked during business operations.

[0019] Optionally, before the third blockchain references the corresponding data on the second blockchain, it further includes:

[0020] Determining whether the block data invoked during the business operation has been tampered with;

[0021] When the block data invoked during the business operation has not been tampered with, writing the operation process, result of the business, and the address or index of the second blockchain data invoked during the business operation into the third blockchain.

[0022] Optionally, after transmitting the first data to the second blockchain for reference by the third blockchain, it further includes:

[0023] Tracing the change records of single data on the chain according to the traceability information.

[0024] Optionally, after transmitting the first data to the second blockchain for reference by the third blockchain, it further includes:

[0025] Implementing traceability of data between the first blockchain and the third blockchain through the second blockchain.

[0026] In addition, to achieve the above object, the present invention also proposes a traceability device based on blockchain under an isolated network, and the traceability device based on blockchain under the isolated network includes:

[0027] An acquisition module, configured to acquire first data, where the first data is data on a first blockchain in a first network;

[0028] A reference module, configured to transmit the first data to a second blockchain for reference by a third blockchain. The second blockchain and the third blockchain are located in a second network, and the second blockchain is a copy of the first blockchain;

[0029] A traceability module, configured to implement data traceability between and within isolated networks based on inter-chain data reference.

[0030] In addition, to achieve the above object, the present invention further provides a traceability device based on a blockchain under an isolated network. The traceability device based on a blockchain under an isolated network includes: a memory, a processor, and a traceability program based on a blockchain under an isolated network stored on the memory and executable on the processor. The traceability program based on a blockchain under an isolated network is configured to implement the traceability method based on a blockchain under an isolated network as described above.

[0031] In addition, to achieve the above object, the present invention further provides a storage medium. A traceability program based on a blockchain under an isolated network is stored on the storage medium. When the traceability program based on a blockchain under an isolated network is executed by a processor, the traceability method based on a blockchain under an isolated network as described above is implemented.

[0032] The traceability method based on a blockchain under an isolated network proposed by the present invention acquires first data, transmits the first data to a second blockchain for reference by a third blockchain. The first data is data on a first blockchain in a first network, the second blockchain and the third blockchain are located in a second network, the second blockchain is a copy of the first blockchain, and the first network and the second network are isolated from each other. By combining the business separation in the physical isolation network application scenario with blockchain technology, the present invention ensures that data will not be tampered with at each isolated network level through multi-chain copies, guarantees that the inter-chain data reference has at least the security level protection of the corresponding blockchain, can ensure the access security of data in the case of network isolation, and realizes the traceability of multi-chain services through data reference serving the traceability between multiple blockchains under an isolated network. Description of the Drawings

[0033] Figure 1 is a schematic structural diagram of a traceability device based on a blockchain under an isolated network in the hardware operating environment involved in the embodiment solution of the present invention;

[0034] Figure 2 is a schematic flowchart of the first embodiment of the traceability method based on a blockchain under an isolated network of the present invention;

[0035] Figure 3It is a data transmission flow chart under the isolated network of the present invention;

[0036] Figure 4 It is a data transmission flow chart under multiple isolated networks of the present invention;

[0037] Figure 5 It is a schematic diagram of the reference method between multiple chains of the present invention;

[0038] Figure 6 It is another schematic diagram of the reference method between multiple chains of the present invention;

[0039] Figure 7 It is a schematic flow chart of the second embodiment of the traceability method based on blockchain under the isolated network of the present invention;

[0040] Figure 8 It is a schematic diagram of the interaction between the isolated network data and the blockchain of the present invention;

[0041] Figure 9 It is a schematic flow chart of the third embodiment of the traceability method based on blockchain under the isolated network of the present invention;

[0042] Figure 10 It is a schematic diagram of the single-chain change traceability of the present invention;

[0043] Figure 11 It is a schematic diagram of the functional modules of the first embodiment of the traceability device based on blockchain under the isolated network of the present invention.

[0044] The realization, functional characteristics and advantages of the object of the present invention will be further described with reference to the embodiments and the accompanying drawings. Detailed implementation manners

[0045] It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0046] Refer to Figure 1 , Figure 1 It is a schematic diagram of the structure of the traceability device based on blockchain under the base isolated network, which is the hardware operating environment involved in the solution of the embodiment of the present invention.

[0047] As Figure 1As shown in the figure, the blockchain-based traceability device under the isolation network may include: a processor 1001, such as a Central Processing Unit (CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. Among them, the communication bus 1002 is used to realize the connection and communication between these components. The user interface 1003 may include a display screen and an input unit such as a keyboard. Optionally, the user interface 1003 may further include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a Wireless-Fidelity (Wi-Fi) interface). The memory 1005 may be a high-speed Random Access Memory (RAM) or a stable Non-Volatile Memory (NVM), such as a disk memory. Optionally, the memory 1005 may also be a storage device independent of the aforementioned processor 1001.

[0048] Those skilled in the art can understand that Figure 1 the structure shown in the figure does not constitute a limitation on the blockchain-based traceability device under the isolation network, and may include more or fewer components than shown in the figure, or combine some components, or have a different component layout.

[0049] As Figure 1 shown, the memory 1005, as a storage medium, may include an operating system, a network communication module, a user interface module, and a blockchain-based traceability program under the isolation network.

[0050] In Figure 1 the blockchain-based traceability device under the isolation network shown in the figure, the network interface 1004 is mainly used for data communication with the data reference device; the user interface 1003 is mainly used for data interaction with the user; the processor 1001 and the memory 1005 in the blockchain-based traceability device under the isolation network of the present invention may be provided in the blockchain-based traceability device under the isolation network. The blockchain-based traceability device under the isolation network calls the blockchain-based traceability program stored in the memory 1005 through the processor 1001 and executes the blockchain-based traceability method provided by the embodiments of the present invention.

[0051] Based on the above hardware structure, an embodiment of the blockchain-based traceability method under the isolation network of the present invention is proposed.

[0052] Referring to Figure 2 , Figure 2Schematic flowchart of the first embodiment of the traceability method based on blockchain under an isolated network according to the present invention.

[0053] In the first embodiment, the traceability method based on blockchain under the isolated network is used to realize data reference between different isolated networks, including the following steps:

[0054] Step S10: Obtain first data, where the first data is data on the first blockchain in the first network.

[0055] It should be noted that the execution subject of this embodiment is the traceability based on blockchain under the isolated network, and it can also be other devices that can achieve the same or similar functions. This embodiment does not limit this.

[0056] Step S20: Transmit the first data to the second blockchain for reference by the third blockchain to achieve blockchain traceability. The second blockchain and the third blockchain are located in the second network, and the second blockchain is a copy of the first blockchain.

[0057] It can be understood that the blockchain in this embodiment includes but is not limited to a serialized blockchain, a blockchain with a DAG structure, etc.

[0058] It should be understood that the first network and the second network in this embodiment are isolated networks. An isolated network means that data communication between isolated networks cannot be carried out through the network. Data synchronization can be achieved by communicating with the isolated networks respectively through external devices. The external device is connected to the first network, and the data in the first blockchain in the first network is synchronized to the external device. After the external device disconnects from the first network, it is connected to the second network to transmit the data to the second blockchain in the second network. As Figure 3 shown, when the set isolated network includes a first network and a second network, a first external device is provided for communicating with the first network and the second network respectively; in the first network, after writing the original data into the first blockchain A, the data is synchronized to the second blockchain A' in the second network through the first external device for data synchronization. Another blockchain in the second network, that is, the third blockchain B, is responsible for other business logics, such as approval data, etc., and references the data on the second blockchain A'.

[0059] As Figure 4As shown in the figure, the present invention can also be implemented by setting multiple isolated networks, which requires multiple chain copy references. For example, when the set isolated networks include multiple different networks such as the first network, the second network, and the third network, a first external device and a second external device are set. The first external device is used to communicate with the first network and the second network respectively, and the second external device is used to communicate with the second network and the third network respectively. In the first network, after writing the original data into the first blockchain A, the data is synchronized to the second blockchain A' in the second network through the first external device for data synchronization. Another blockchain in the second network, i.e., the third blockchain B, is responsible for other business logics such as approval data, etc., and references the data on the second blockchain A'. The data of the second blockchain A' and the third blockchain B in the second network is synchronized to the copy of the second blockchain A' in the third network, i.e., the fourth blockchain A", and the copy of the third blockchain B, i.e., the fifth blockchain B', through the second external device, as Figure 5 shown, the sixth blockchain in the third network references the data on the fifth blockchain B', and the fifth blockchain B' references the data on the fourth blockchain A"; as Figure 6 shown, the data reference method between multiple chains can also be that the sixth blockchain C in the third network references the data on the fourth blockchain A", and the fifth blockchain B' references the data on the fourth blockchain A".

[0060] Step S30: Based on the data reference between chains, realize data traceability between isolated networks and within isolated networks.

[0061] It should be noted that in this embodiment, the data reference serves the traceability between multiple chains under the isolated network. Multi-chain traceability can be realized within the isolated network. The blockchains not maintained by this isolated network are only referenced, which is an indirect traceability; the blockchains maintained by the same isolated network can be directly traced; each chain can be traced individually. Thus, multi-chain traceability under the isolated network is realized, ensuring that it is difficult to be tampered with between and within isolated networks, ensuring auditability, anti-tampering, and security.

[0062] Further, the first data is obtained by serializing the original data stored in the database and then uploading it to the first blockchain.

[0063] It should be noted that the original data stored in the database in this embodiment is structured data, that is, data logically expressed and implemented by a two-dimensional table structure.

[0064] It can be understood that data serialization is the process of converting a data structure or object into a binary string. When transferring and saving an object, to ensure the integrity and transferability of the object, the object is converted into an ordered byte stream for transmission over the network or storage in a local file.

[0065] In this embodiment, the data in the first network environment is written into the first blockchain after serialization operations, and the data is synchronized to the second blockchain in the second network through an external device. The business blockchain in the second network, i.e., the third blockchain, references the corresponding data of the second blockchain, realizing a traceability method based on blockchain in an isolated network. The present invention combines business separation in the physical isolation network application scenario with blockchain. By means of multi-chain replicas, it is ensured that data will not be tampered with at each isolated network level, and it can be guaranteed that the inter-chain data reference has at least the security level protection of the corresponding blockchain, and it can also ensure the access security of data in the case of network isolation, and can also ensure business isolation and realize the traceability of multi-chain services.

[0066] In one embodiment, as Figure 7 shown, based on the first embodiment, a second embodiment of the traceability method based on blockchain in an isolated network according to the present invention is proposed. The step S20 includes:

[0067] Step S201: Check whether the first data is complete.

[0068] It should be noted that when the second blockchain in the second network receives the data transmitted by the external device, it first verifies the data to check whether the data to be received currently has been tampered with or lost. If the data has been tampered with or lost, the reception is refused; if the data is correct, the data synchronization starts.

[0069] It should be noted that after the data of the first blockchain in the first network is synchronized to the second network, because it will carry the verification data by itself, if the nodes in the second network check and find that the data does not match the verification data, that is, the data has been lost or tampered with, the nodes in the second network do not recognize the data and need to resynchronize.

[0070] It should be understood that the method for verifying the data transmitted by the external device in this embodiment can adopt additional check codes or hashes and other data. After the first data is transmitted to the second network, check whether the data is consistent with the check code or hash and other data after calculation to determine whether the data is complete.

[0071] Step S202: When the first data is complete, transmit the first data to the second blockchain for reference by the third blockchain.

[0072] Step S203: Deserialize the data on the second blockchain to obtain deserialized data and store it in the database.

[0073] It should be understood that data deserialization refers to the process of converting the binary string generated during serialization into a data structure or object. According to the object state and description information saved in the byte stream, the object is reconstructed through deserialization. In this embodiment, the structured data obtained by deserializing the data is stored in the database.

[0074] It should be noted that, as Figure 8 shown, in this embodiment, the data in the first network environment is serialized and then written into the first blockchain. After the data on the first blockchain is transmitted to the second blockchain in the second network environment, the data on the second blockchain is deserialized, and the structured data obtained from the deserialization operation is stored in the database for the business system to call, ensuring the integrity and transferability of the data object.

[0075] Further, in step S202, the process in which the third blockchain references the data on the second blockchain includes:

[0076] Step S2021: Check whether the data stored in the database is consistent with the data on the second blockchain.

[0077] It should be noted that before the business system calls the data in the database to perform corresponding business operations in this embodiment, data verification is required to check whether the data is correct and complete, so as to check whether the data in the database is consistent with the data on the second blockchain. If they are consistent, the operation of step S2022 is executed; otherwise, the data on the second blockchain is deserialized and stored in the database.

[0078] It should be noted that in this embodiment, when the business system needs to operate on corresponding data, the data is first verified. The verification method can be to deserialize the data once to check whether it is the same or to check the checksum, etc., to ensure the strong consistency of the data.

[0079] Step S2022: When the data stored in the database is consistent with the data on the second blockchain, call the data stored in the database to perform business operations;

[0080] It should be noted that the business operations in this embodiment include but are not limited to pre-trial, acceptance, transfer of acceptance, approval, etc.

[0081] Step S2023: The third blockchain references the corresponding data on the second blockchain, and the corresponding data is the block data corresponding to the data stored in the database called during the business operation.

[0082] It should be noted that in this embodiment, the third blockchain, i.e., the business chain, references the block data corresponding to the data called during the business operation, forming a state of multi-chain reference and data association. The business chain makes a one-way reference to the data chain, i.e., the data on the second blockchain, and the data of the business system can also be checked accordingly to ensure the reliability of the data.

[0083] Further, before step S2023, it also includes:

[0084] Step S2024: Determine whether the block data called during the business operation has been tampered with.

[0085] It should be noted that after the business operation in this embodiment is completed, the data called during the business operation is verified to determine whether the block on the second blockchain corresponding to the called data has been tampered with. If it has been tampered with, the business system will re-execute the corresponding business operation. If it has not been tampered with, the following step S2025 will be executed.

[0086] Step S2025: When the block data called during the business operation has not been tampered with, write the operation process, result of the business, and the address or index of the second blockchain data called during the business operation into the third blockchain.

[0087] It should be noted that different businesses can also be further divided, and multiple chains can reference and trace each other to further reduce the data coupling degree.

[0088] In one embodiment, as Figure 9 shown, based on the first embodiment, the third embodiment of the traceability method based on blockchain under the isolated network of the present invention is proposed. The step S30 includes:

[0089] Step S31: Trace the change record of a single piece of data on the chain according to the traceability information.

[0090] It should be noted that the traceability of a single chain in this embodiment refers to the traceability of the change record of a single piece of data. The database stores certain verification and traceability information for a certain product or data. If the information on a record is changed after it is uploaded to the chain, a new block will be generated. The old record will not be deleted, but the data will be based on the latest one. See the schematic diagram of single-chain change traceability. Figure 10 。

[0091] Step S32: Realize the traceability of data between the first blockchain and the third blockchain through the second blockchain.

[0092] It should be noted that the business blockchain, that is, the third blockchain, references the second blockchain data. Different businesses anchor the data used, and the traceability of the business process can be realized through the reference of the current block. The structure of multiple chains and multiple copies ensures the security during data transmission. The result information viewer can trace back to the data provider, and traceability can be carried out from any link.

[0093] It should be noted that this architecture not only supports single-chain traceability. Similarly, because there is a copy chain of blockchain data that references data in each network, the B chain in the second network can verify the blockchain data of the A chain, ensuring data security while separating businesses, and preventing the data from being tampered with and unable to be traced because it has been off-chain.

[0094] It should be noted that the blockchain has a partial order property, and the data uploaded to the chain cannot be changed, which can well perform the inspection and traceability of single-chain data; there is a reference between the data chain and the business chain, which can ensure the upward traceability inspection of data between multiple chains. In this embodiment, the data serialization operation of the first network environment is written into the first blockchain, and the data is synchronized to the second blockchain in the second network through an external device. The business blockchain in the second network references the data on the corresponding second blockchain. Through the data on the chain, the change of a single business data can be traced and the security of the data can be guaranteed, that is, the isolation of the business is realized, the system coupling degree is reduced, and the traceability of multi-chain services is realized, ensuring the auditability of the data.

[0095] In addition, an embodiment of the present invention also proposes a storage medium, on which a traceability program based on the blockchain under an isolated network is stored. When the traceability program based on the blockchain under the isolated network is executed by a processor, the steps of the traceability method based on the blockchain under the isolated network as described above are realized.

[0096] Since this storage medium adopts all the technical solutions of the above-mentioned all embodiments, it has at least all the beneficial effects brought by the technical solutions of the above-mentioned embodiments, which will not be elaborated here one by one.

[0097] In addition, with reference to Figure 11 , an embodiment of the present invention also proposes a traceability device based on the blockchain under an isolated network. The traceability device based on the blockchain under the isolated network includes:

[0098] An acquisition module 10, configured to acquire first data, where the first data is data on a first blockchain in a first network.

[0099] It should be noted that the execution subject of this embodiment is the traceability based on the blockchain under the isolated network, and it can also be other devices that can implement the same or similar functions. This embodiment does not limit this.

[0100] A reference module 20, configured to transmit the first data to a second blockchain for reference by a third blockchain. The second blockchain and the third blockchain are located in a second network, and the second blockchain is a copy of the first blockchain.

[0101] It can be understood that the blockchain in this embodiment includes but is not limited to a serialized blockchain, a blockchain with a DAG structure, etc.

[0102] It should be understood that the first network and the second network in this embodiment are isolated from each other. An isolated network means that data communication between isolated networks cannot be carried out through the network. Data synchronization can be achieved by connecting external devices to the isolated networks respectively for communication. The external device is connected to the first network, and the data in the first blockchain in the first network is synchronized to the external device. After the external device disconnects from the first network, it connects to the second network and transfers the data to the second blockchain in the second network.

[0103] The traceability module 30 is used to realize data traceability between isolated networks and within isolated networks based on inter-chain data reference.

[0104] It should be noted that in this embodiment, the data in the first network environment is serialized and then written into the first blockchain. The data is synchronized to the second blockchain in the second network through an external device. The business blockchain in the second network references the data on the corresponding second blockchain. Through the data on the chain, the change of a single business data can be traced and the security of the data can be guaranteed. That is, the isolation of the business is realized, the system coupling degree is reduced, and the traceability of multi-chain business is realized, ensuring the auditability of the data.

[0105] Further, the first data is obtained by serializing the original data stored in the database and then uploading it to the first blockchain.

[0106] It should be noted that the original data stored in the database in this embodiment is structured data, that is, data logically expressed and implemented by a two-dimensional table structure.

[0107] It can be understood that data serialization is the process of converting a data structure or object into a binary string. When transferring and saving an object, to ensure the integrity and transferability of the object, the object is converted into an ordered byte stream for transmission over the network or storage in a local file.

[0108] Further, the traceability module 30 includes:

[0109] The single-chain change traceability unit 31 is used to trace the change record of a single piece of data on the chain according to the traceability information.

[0110] It should be noted that the traceability of a single chain in this embodiment refers to the traceability of the change record of a single piece of data. The database stores certain verification and traceability information for a certain product or data. If the information on a record is changed after it is uploaded to the chain, a new block will be generated. The old record will not be deleted, but the data will be the latest. See the single-chain change traceability schematic diagram. Figure 9 .

[0111] Multi-chain business process traceability 32 is used to realize the traceability of data between the first blockchain and the third blockchain through the second blockchain, and realize the traceability of business processes.

[0112] It should be noted that the business blockchain, i.e., the third blockchain, references the data of the second blockchain. Different businesses anchor the data used, and the traceability of business processes can be realized through the reference of the current block. The multi-chain and multi-copy structure ensures the security in data transmission. The result information viewer can trace back to the data provider, and traceability can be carried out from any link.

[0113] It should be noted that the blockchain has partial order, and the data uploaded to the chain cannot be changed, which can well carry out the inspection and traceability of single-chain data; there is a reference between the data chain and the business chain, which can ensure the upward traceability inspection of data between multiple chains. In this embodiment, the data in the first network environment is written into the first blockchain after serialization operation, and the data is synchronized to the second blockchain in the second network through an external device. The business blockchain in the second network, i.e., the third blockchain, references the corresponding data of the second blockchain, so as to realize the traceability method based on the blockchain under the isolated network. The present invention combines the business separation in the application scenario of the physical isolation network with the blockchain. Through multi-chain copies, it is ensured that the data will not be tampered with at each isolated network level, and it can be ensured that the inter-chain data reference has at least the security level protection of the corresponding blockchain, and it can ensure the access security of the data under the network isolation situation, and it can also ensure the isolation of the business and realize the traceability of multi-chain business.

[0114] It should be noted that the above-described work process is only illustrative and does not limit the protection scope of the present invention. In actual applications, those skilled in the art can select some or all of them according to actual needs to achieve the purpose of the solution of this embodiment, and no limitation is made here.

[0115] In addition, for the technical details not described in detail in this embodiment, reference can be made to the traceability method based on the blockchain under the isolated network provided by any embodiment of the present invention, which will not be elaborated here.

[0116] In addition, it should be noted that in this article, the term "including", "comprising" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements not only includes those elements, but also includes other elements not expressly listed, or also includes elements inherent to such process, method, article or system. Without further limitation, an element defined by the statement "including one..." does not exclude the existence of another identical element in the process, method, article or system including that element.

[0117] The serial numbers of the embodiments of the present invention above are only for description and do not represent the superiority or inferiority of the embodiments.

[0118] Through the description of the above embodiments, those skilled in the art can clearly understand that the above embodiment methods can be implemented by means of software plus a necessary general hardware platform. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as Read Only Memory (ROM) / RAM, magnetic disk, optical disk), and includes several instructions for causing a terminal device (which can be a mobile phone, computer, node packaging device, or network device, etc.) to execute the methods described in various embodiments of the present invention.

[0119] The above are only the preferred embodiments of the present invention, and do not limit the patent scope of the present invention accordingly. Any equivalent structure or equivalent process transformation made by using the specification and drawings of the present invention, or directly or indirectly applied in other related technical fields, shall be equally included in the patent protection scope of the present invention.

Claims

1. A traceability method based on blockchain under an isolated network, characterized in that, the traceability method based on blockchain under the isolated network includes the following steps: obtaining first data, where the first data is data on a first blockchain in a first network; transmitting the first data to a second blockchain for reference by a third blockchain to achieve blockchain traceability, where the second blockchain and the third blockchain are in a second network, and the second blockchain is a copy of the first blockchain; realizing data traceability between and within isolated networks based on inter-chain data reference; the first data is obtained by serializing the original data stored in a database and then writing it into the first blockchain; the transmitting the first data to the second blockchain for reference by the third blockchain includes: checking whether the first data is complete; when the first data is complete, transmitting the first data to the second blockchain for reference by the third blockchain; deserializing the data on the second blockchain to obtain deserialized data and storing it in the database; the process of the third blockchain referring to the data on the second blockchain includes: checking whether the data stored in the database is consistent with the data on the second blockchain; when the data stored in the database is consistent with the data on the second blockchain, calling the data stored in the database for business operations; the third blockchain refers to the corresponding data on the second blockchain, and the corresponding data is the block data corresponding to the data stored in the database called during business operations.

2. The traceability method based on blockchain under an isolated network according to claim 1, characterized in that, before the third blockchain refers to the corresponding data on the second blockchain, it further includes: judging whether the block data called during the business operation is tampered with; when the block data called during the business operation is not tampered with, writing the operation process, result of the business, and the address or index of the second blockchain data called during the business operation into the third blockchain.

3. The traceability method based on blockchain under an isolated network according to claim 1, characterized in that, after transmitting the first data to the second blockchain for reference by the third blockchain, it further includes: tracing the change record of a single piece of data on the chain according to the traceability information.

4. The traceability method based on blockchain under an isolated network according to claim 1, characterized in that, after transmitting the first data to the second blockchain for reference by the third blockchain, it further includes: realizing data traceability between the first blockchain and the third blockchain through the second blockchain.

5. A traceability device based on blockchain under an isolated network for implementing the traceability method based on blockchain under an isolated network according to any one of claims 1-4, characterized in that, the traceability device based on blockchain under the isolated network includes: an acquisition module for acquiring first data, where the first data is data on a first blockchain in a first network; A reference module that transmits the first data to a second blockchain for reference by a third blockchain, where the second blockchain and the third blockchain are located in a second network, and the second blockchain is a copy of the first blockchain; A traceability module for realizing data traceability between and within isolated networks based on inter-chain data reference.

6. A traceability device based on blockchain under an isolated network, characterized in that, the traceability device based on blockchain under the isolated network includes: a memory, a processor, and a traceability program based on blockchain under the isolated network stored on the memory and executable on the processor, and the traceability program based on blockchain under the isolated network is configured to implement the traceability method based on blockchain under the isolated network as described in any one of claims 1 to 4.

7. A storage medium, characterized in that, the storage medium stores a traceability program based on blockchain under the isolated network, and when the traceability program based on blockchain under the isolated network is executed by a processor, it implements the traceability method based on blockchain under the isolated network as described in any one of claims 1 to 4.

Images