Cross-chain Resource Transfer Method, Device, Medium and Electronic Device

By registering a hierarchical certificate in the alliance chain and using the transaction notarization relay chain for multi-level verification, the problem of unreliable node identity verification in blockchain cross-chain transactions is solved, and the security and reliability of cross-chain transactions are improved.

CN115115360BActive Publication Date: 2025-07-29TENCENT TECHNOLOGY (SHENZHEN) CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202110287461.1
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2021-03-17
Publication Date
2025-07-29
Estimated Expiration
2041-03-17

AI Technical Summary

Technical Problem

In blockchain cross-chain transactions, the existing technology cannot effectively ensure the reliability of node identity verification, resulting in insufficient security of data synchronization and processing, especially the risk of identity forgery among different blockchains.

Method used

By pre-registering hierarchical certificates in the alliance chain and using the transaction notarization relay chain to perform multi-level verification of institutional certificates and node certificates in resource cross-chain information, including institutional identity verification and node identity verification, ensuring the authenticity of signature information.

Benefits of technology

Improve the security and reliability of cross-chain transactions, ensuring the trusted transmission and processing of data between different blockchains.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN115115360B_ABST
    Figure CN115115360B_ABST
Patent Text Reader

Abstract

Embodiments of the present application provide a cross-chain resource transfer method, apparatus, computer-readable medium, and electronic device. By means of a transaction notarization relay chain, resource cross-chain information triggered by nodes on a resource transfer request sub-chain is obtained, and institutional identity verification is performed on the institutional certificate in the resource cross-chain information based on a pre-stored root certificate. Node identity verification is performed on the node certificate based on the institutional certificate. If the node identity verification passes, the signature information is verified based on the node certificate; if the signature information verification passes, the resource data in the resource cross-chain information is synchronized to a resource transfer processing target chain. In this embodiment, by pre-registering hierarchical certificates in a consortium chain and based on the characteristics of the consortium chain certificates, institutional certificates, node certificates, and node identities in the resource transfer request sub-chain are sequentially verified through a transaction notarization relay chain, improving the security and reliability of cross-chain transactions based on multiple blockchains.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of computer technologies, and in particular, to a cross-chain resource transfer method, apparatus, computer-readable medium, and electronic device. Background Art

[0002] In many application scenarios of blockchain, real-time data sharing is required. Therefore, to ensure data security, in related technologies, when a node acquires data, the identity of the node is first verified, and after the identity verification is passed, the data required by the node is sent to the node. This method of identity verification is single and cannot ensure data security. Especially when cross-chain data synchronization and data processing are required, there may be a risk of identity forgery for nodes on different blockchains, and reliable guarantee for node identity verification cannot be obtained in different blockchains. Furthermore, the reliability of node identity verification cannot be ensured, reducing the security of blockchain data synchronization and processing. Summary of the Invention

[0003] Embodiments of this application provide a cross-chain resource transfer method, apparatus, computer-readable medium, and electronic device, which can at least to some extent improve the security and reliability of cross-chain transactions based on multiple blockchains.

[0004] Other features and advantages of this application will become apparent through the following detailed description, or be learned partially through the practice of this application.

[0005] According to one aspect of the embodiments of this application, a cross-chain resource transfer method is provided. The method in this embodiment can be applied to a consortium blockchain, where the consortium blockchain includes a resource transfer request sub-chain, a transaction notarization relay chain, and a resource transfer processing target chain, and includes: acquiring cross-chain resource information triggered by a node on the resource transfer request sub-chain, where the cross-chain resource information includes signature information obtained by signing a resource transfer request, resource data to be transferred, an institutional certificate corresponding to the resource transfer request sub-chain, and a resource transfer request sub-chain node certificate; performing institutional identity verification on the institutional certificate in the cross-chain resource information based on a pre-stored root certificate, and performing node identity verification on the resource transfer request sub-chain node certificate based on the institutional certificate when the institutional identity verification is passed; performing signature verification processing on the signature information based on the resource transfer request sub-chain node certificate when the node identity verification is passed; and if the signature information is verified to be passed, synchronizing the resource data in the cross-chain resource information to the resource transfer processing target chain.

[0006] According to one aspect of the embodiments of the present application, a cross-chain resource transfer method is provided. The method in this embodiment can be applied to a consortium blockchain, which includes a resource transfer request sub-chain, a transaction notarization relay chain, and a resource transfer processing target chain. The method includes: obtaining a resource transfer request; signing the resource transfer request based on the private key of a node on the resource transfer request sub-chain to obtain signature information; taking the signature information, the resource data to be transferred, the institutional certificate corresponding to the resource transfer request sub-chain, and the resource transfer request sub-chain node certificate as cross-chain resource information, and uploading the cross-chain resource information to the transaction notarization relay chain to perform institutional identity verification on the institutional certificate in the cross-chain resource information based on a pre-stored root certificate on the transaction notarization relay chain; in the case where the institutional identity verification is passed, performing node identity verification on the resource transfer request sub-chain node certificate based on the institutional certificate, and in the case where the node identity verification is passed, performing signature verification processing on the signature information based on the resource transfer request sub-chain node certificate, and synchronizing the resource data to the resource transfer processing target chain after the verification is passed; obtaining a resource transfer status from the transaction notarization relay chain, where the resource transfer status is generated when the resource transfer processing target chain performs resource transfer on the resource data and is synchronized to the transaction notarization relay chain.

[0007] According to one aspect of the embodiments of the present application, a cross-chain resource transfer device is provided. The method in this embodiment can be applied to a consortium blockchain, which includes a resource transfer request sub-chain, a transaction notarization relay chain, and a resource transfer processing target chain. The device includes: a first obtaining unit, configured to obtain cross-chain resource information triggered by a node on the resource transfer request sub-chain, where the cross-chain resource information includes signature information obtained by signing a resource transfer request, resource data to be transferred, the institutional certificate corresponding to the resource transfer request sub-chain, and the resource transfer request sub-chain node certificate; a first verification unit, configured to perform institutional identity verification on the institutional certificate in the cross-chain resource information based on a pre-stored root certificate; a second verification unit, configured to perform node identity verification on the resource transfer request sub-chain node certificate based on the institutional certificate in the case where the institutional identity verification is passed; a third verification unit, configured to perform signature verification processing on the signature information based on the resource transfer request sub-chain node certificate in the case where the node identity verification is passed; a first synchronization unit, configured to synchronize the resource data in the cross-chain resource information to the resource transfer processing target chain if the signature information is verified.

[0008] In some embodiments of the present application, based on the foregoing solution, the first acquisition unit includes: an acquisition unit for acquiring resource transfer events on a resource transfer request sub-chain in the alliance chain; the alliance chain includes a resource transfer request sub-chain, a transaction notarization relay chain, and a resource transfer processing target chain; an analysis unit for analyzing the target resource transfer event when the cross-chain target resource transfer event is acquired to determine the resource cross-chain information in the target resource transfer event.

[0009] In some embodiments of the present application, based on the foregoing solution, the cross-chain resource transfer device further includes: an extraction unit for extracting a resource transfer address from the resource cross-chain information; a retrieval unit for traversing and retrieving in a preset cross-chain contract address based on the resource transfer address to determine whether there is a corresponding address of the resource transfer processing target chain in the cross-chain contract address for the resource transfer address; a determination unit for determining that the target resource transfer event is a cross-chain target resource transfer event if there is a corresponding address of the resource transfer processing target chain in the cross-chain contract address for the resource transfer address.

[0010] In some embodiments of the present application, based on the foregoing solution, the first synchronization unit is used to determine, based on the resource transfer address, the resource transfer processing target chain corresponding to the resource transfer address in the resource transfer request sub-chain; acquire and verify the identity information of the nodes in the resource transfer processing target chain; if the identity information of the nodes in the resource transfer processing target chain passes the verification, synchronize the resource data to the nodes on the resource transfer processing target chain based on the resource transfer address.

[0011] In some embodiments of the present application, based on the foregoing solution, the analysis unit is used to analyze the target resource transfer event based on the smart contract pre-signed by each resource transfer request sub-chain when the cross-chain target resource transfer event is acquired to determine the signature information, the resource data, the institutional certificate, and the node certificate in the target resource transfer event.

[0012] In some embodiments of the present application, based on the foregoing solution, the cross-chain resource transfer device is further used to: acquire the resource transfer status generated by the resource transfer processing target chain based on the resource data; record the resource transfer status.

[0013] In some embodiments of the present application, based on the foregoing solution, the cross-chain resource transfer device is further used to: if the resource transfer status is a successful transfer status, synchronize the resource transfer status to the nodes in the resource transfer request sub-chain so that the nodes in the resource transfer request sub-chain perform on-chain storage of this resource transfer based on the resource transfer status.

[0014] According to one aspect of the embodiments of the present application, a cross-chain resource transfer device is provided. The cross-chain resource transfer device in this embodiment can be applied to a consortium blockchain. The consortium blockchain includes a resource transfer request sub-chain, a transaction notarization relay chain, and a resource transfer processing target chain, and includes: a second acquisition unit, configured to acquire a resource transfer request; a signature unit, configured to sign the resource transfer request based on the private key of a node on the resource transfer request sub-chain to obtain signature information; a second synchronization unit, configured to use the signature information, the resource data to be transferred, the institutional certificate corresponding to the resource transfer request sub-chain, and the resource transfer request sub-chain node certificate as cross-chain resource information, and upload the cross-chain resource information to the transaction notarization relay chain to perform institutional identity verification on the institutional certificate in the cross-chain resource information based on a pre-stored root certificate on the transaction notarization relay chain; in the case where the institutional identity verification is passed, perform node identity verification on the resource transfer request sub-chain node certificate based on the institutional certificate, in the case where the node identity verification is passed, perform signature verification processing on the signature information based on the resource transfer request sub-chain node certificate, and synchronize the resource data to the resource transfer processing target chain after the verification is passed; a third acquisition unit, configured to acquire a resource transfer status from the transaction notarization relay chain, where the resource transfer status is generated when the resource transfer processing target chain performs resource transfer on the resource data and synchronizes the resource transfer status to the transaction notarization relay chain.

[0015] In some embodiments of the present application, based on the foregoing solution, the third acquisition unit is configured to determine a target digest operation corresponding to the node certificate based on a preset association relationship between the certificate and the digest operation; perform digest processing on the resource transfer request based on the target digest operation to determine a transaction digest corresponding to the resource transfer request; and acquire the resource transfer status corresponding to the current resource transfer from the transaction notarization relay chain based on the transaction digest.

[0016] In some embodiments of the present application, based on the foregoing solution, the cross-chain resource transfer device is further configured to: generate an institutional certificate request file based on an institutional private key; submit the institutional certificate request file to the consortium blockchain so that the consortium blockchain verifies the institutional certificate request file based on the root certificate to generate an institutional certificate; the consortium blockchain includes a resource transfer request sub-chain, a transaction notarization relay chain, and a resource transfer processing target chain; and acquire the institutional certificate from the consortium blockchain.

[0017] In some embodiments of the present application, based on the foregoing solution, the cross-chain resource transfer device is further configured to: generate a node certificate request file based on the node private key; send the node certificate request file to the institutional node, so that the institutional node signs the node certificate request file through a pre-acquired institutional certificate to generate a node certificate; and obtain the node certificate sent by the institutional node.

[0018] According to one aspect of the embodiments of the present application, there is provided a computer-readable medium, on which a computer program is stored, and when the computer program is executed by a processor, it implements the cross-chain resource transfer method as described in the above embodiments.

[0019] According to one aspect of the embodiments of the present application, there is provided an electronic device, including: one or more processors; a storage device for storing one or more programs, and when the one or more programs are executed by the one or more processors, the one or more processors are caused to implement the cross-chain resource transfer method as described in the above embodiments.

[0020] According to one aspect of the embodiments of the present application, there is provided a computer program product or a computer program, the computer program product or the computer program includes computer instructions, and the computer instructions are stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the cross-chain resource transfer method provided in the above various optional implementation manners.

[0021] In the technical solution provided in some embodiments of the present application, the cross-chain resource information triggered by the nodes on the resource transfer request sub-chain is obtained through the transaction notarization relay chain in the consortium chain, and the institutional identity verification of the institutional certificate in the cross-chain resource information is performed based on the pre-stored root certificate. After the institutional identity verification is passed, the node identity verification of the node certificate is performed based on the institutional certificate. If the node identity verification is passed, the signature information is verified based on the node certificate of the resource transfer request sub-chain; if the signature information verification is passed, the resource data in the cross-chain resource information is synchronized to the resource transfer processing target chain in the consortium chain. In this embodiment, by pre-registering hierarchical certificates in the consortium chain and based on the characteristics of the consortium chain certificates, the institutional certificate, node certificate, and node identity in the resource transfer request sub-chain are sequentially verified through the transaction notarization relay chain in the consortium chain, improving the security and reliability of cross-chain transactions based on multiple blockchains.

[0022] It should be understood that the above general description and the following detailed description are only exemplary and explanatory, and cannot limit the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] The accompanying drawings herein are incorporated into the specification and constitute a part of this specification, showing embodiments consistent with the present application, and are used together with the specification to explain the principles of the present application. Obviously, the accompanying drawings in the following description are only some embodiments of the present application, and those of ordinary skill in the art can obtain other drawings based on these drawings without creative efforts.

[0024] Figure 1 A schematic diagram showing an exemplary system architecture to which the technical solution of the embodiment of the present application can be applied;

[0025] Figure 2 Schematically shows a data sharing system according to an embodiment of the present application;

[0026] Figure 3 Schematically shows a schematic diagram of the block composition of a blockchain according to an embodiment of the present application;

[0027] Figure 4 Schematically shows a flowchart of a cross-chain resource transfer method according to an embodiment of the present application;

[0028] Figure 5a Schematically shows a timing diagram of cross-chain verification according to an embodiment of the present application;

[0029] Figure 5b Schematically shows a flowchart of cross-chain verification according to an embodiment of the present application;

[0030] Figure 6 Schematically shows a composition architecture diagram of a consortium blockchain according to an embodiment of the present application;

[0031] Figure 7 Schematically shows a flowchart of a cross-chain resource transfer method according to an embodiment of the present application;

[0032] Figure 8 Schematically shows a schematic diagram of generating an institutional certificate according to an embodiment of the present application;

[0033] Figure 9 Schematically shows a timing diagram of generating an institutional certificate according to an embodiment of the present application;

[0034] Figure 10 Schematically shows a schematic diagram of generating a node certificate according to an embodiment of the present application;

[0035] Figure 11 Schematically shows a timing diagram of generating a node certificate according to an embodiment of the present application;

[0036] Figure 12A block diagram of a cross-chain resource transfer device according to an embodiment of the present application is schematically shown;

[0037] Figure 13 A block diagram of a cross-chain resource transfer device according to an embodiment of the present application is schematically shown;

[0038] Figure 14 A schematic structural diagram of a computer system of an electronic device suitable for implementing the embodiments of the present application is shown. Detailed implementation manners

[0039] Example embodiments will now be described more fully with reference to the accompanying drawings. However, the example embodiments can be implemented in various forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this application will be more complete and comprehensive, and will fully convey the concept of the example embodiments to those skilled in the art.

[0040] In addition, the described features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided to give a thorough understanding of the embodiments of the present application. However, those skilled in the art will realize that the technical solutions of the present application can be practiced without one or more of the specific details, or other methods, components, devices, steps, etc. can be adopted. In other cases, well-known methods, devices, implementations, or operations are not shown or described in detail to avoid obscuring aspects of the present application.

[0041] The block diagrams shown in the drawings are only functional entities and do not necessarily correspond to physically independent entities. That is, these functional entities can be implemented in software form, or in one or more hardware modules or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0042] The flowcharts shown in the drawings are only illustrative and not necessarily include all the contents and operations / steps, nor are they necessarily executed in the described order. For example, some operations / steps can be decomposed, while some operations / steps can be combined or partially combined, so the actual execution order may change according to the actual situation.

[0043] Refer to Figure 1 The data sharing system based on the consortium chain shown. In the embodiments of the present application, the consortium chain includes a resource transfer request sub-chain for requesting resource transfer, that is, the resource transfer request sub-chain, a transaction notarization relay chain for transaction notarization, that is, the transaction notarization relay chain, and a resource transfer processing target chain for processing transferred resources, that is, the resource transfer processing target chain.

[0044] In an embodiment of the present application, a service connection through a relay is established between the resource transfer request sub-chain and the transaction notarization relay chain, and between the transaction notarization relay chain and the resource transfer processing target chain. In this embodiment, a service through a relay is used to provide a data transfer function between the resource transfer request sub-chain and the transaction notarization relay chain, and between the transaction notarization relay chain and the resource transfer processing target chain, so as to ensure the efficiency and security of cross-chain data processing.

[0045] In an embodiment of the present application, when the resource transfer request sub-chain needs to perform data synchronization, the resource transfer request is signed based on the private key of the node on the resource transfer request sub-chain to obtain signature information; the signature information, the resource data to be transferred, the institutional certificate corresponding to the resource transfer request sub-chain, and the node certificate of the node on the resource transfer request sub-chain are used as cross-chain resource information, and the cross-chain resource information is uploaded to the transaction notarization relay chain in the consortium chain to perform institutional identity verification on the institutional certificate in the cross-chain resource information based on the pre-stored root certificate; in the case where the institutional identity verification is passed, the node certificate of the resource transfer request sub-chain is used to perform node identity verification, and in the case where the node identity verification is passed, the signature information is verified based on the node certificate of the resource transfer request sub-chain, and after the verification is passed, the resource data is synchronized to the resource transfer processing target chain in the consortium chain; the resource transfer status is obtained from the transaction notarization relay chain, where the resource transfer status is generated when the resource transfer processing target chain performs resource transfer on the resource data and the resource transfer status is synchronized to the transaction notarization relay chain.

[0046] In an embodiment of the present application, the cross-chain resource information triggered by a node on the resource transfer request sub-chain is obtained through the transaction notarization relay chain, where the cross-chain resource information includes the signature information obtained by signing the resource transfer request, the resource data to be transferred, the institutional certificate corresponding to the resource transfer request sub-chain, and the node certificate of the node on the resource transfer request sub-chain; institutional identity verification is performed on the institutional certificate in the cross-chain resource information based on the pre-stored root certificate, and after the institutional identity verification is passed, node identity verification is performed on the node certificate based on the institutional certificate. If the node identity verification is passed, the signature information is verified based on the node certificate; if the signature information is verified to be passed, the resource data in the cross-chain resource information is synchronized to the resource transfer processing target chain in the consortium chain.

[0047] In the above solution, the cross-chain information of resources triggered by nodes on the resource transfer request sub-chain is obtained through the transaction notarization relay chain in the consortium chain, and the institutional identity verification of the institutional certificates in the cross-chain information of resources is performed based on the pre-stored root certificate. After the institutional identity verification is passed, the node identity verification of the node certificate is performed based on the institutional certificate. If the node identity verification is passed, the signature information is verified based on the node certificate. If the signature information is verified, the resource data in the cross-chain information of resources is synchronized to the resource transfer processing target chain in the consortium chain. In this embodiment, by pre-registering hierarchical certificates in the consortium chain and based on the characteristics of the consortium chain certificates, the institutional certificates, node certificates, and node identities in the resource transfer request sub-chain are verified in sequence through the transaction notarization relay chain in the consortium chain, improving the security and reliability of cross-chain transactions based on multiple blockchains.

[0048] See Figure 2 the data sharing system shown, which can be applied to Figure 1 the resource transfer processing target chain, the transaction notarization relay chain, or the resource transfer request sub-chain in, for realizing data sharing among various chains.

[0049] In an embodiment of the present application, the data sharing system 100 refers to a system for sharing data between nodes. The data sharing system may include multiple nodes 101, and the multiple nodes 101 may refer to each client in the data sharing system. Each node 101 can receive input information during normal operation and maintain the shared data in the data sharing system based on the received input information. To ensure information interconnection within the data sharing system, there may be information connections between each node in the data sharing system, and information can be transmitted between nodes through the above information connections. For example, when any node in the data sharing system receives input information, other nodes in the data sharing system obtain the input information according to the consensus algorithm and store the input information as data in the shared data, so that the data stored on all nodes in the data sharing system is consistent.

[0050] For each node in the data sharing system, it has a corresponding node identifier, and each node in the data sharing system can store the node identifiers of other nodes in the data sharing system, so as to broadcast the generated block to other nodes in the data sharing system according to the node identifiers of other nodes later. Each node can maintain a node identifier list as shown in the following table, and store the node name and node identifier corresponding to each other in the node identifier list. Among them, the node identifier can be an IP (Internet Protocol) address and any other information that can be used to identify the node. Only the IP address is taken as an example in Table 1 for illustration.

[0051] Node Name Node ID Node 1 117.114.151.174 Node 2 117.116.189.145 … … Node N 119.123.789.258

[0052] Each node in the data sharing system stores an identical blockchain. The blockchain consists of multiple blocks. See Figure 3 , the blockchain consists of multiple blocks. The genesis block includes a block header and a block body. The block header stores the input information feature value, version number, timestamp, and difficulty value. The block body stores the input information; the next block of the genesis block uses the genesis block as the parent block. The next block also includes a block header and a block body. The block header stores the input information feature value of the current block, the block header feature value of the parent block, version number, timestamp, and difficulty value, and so on, so that the block data stored in each block in the blockchain is associated with the block data stored in the parent block, ensuring the security of the input information in the block.

[0053] When generating each block in the blockchain, see Figure 3 , when the node where the blockchain is located receives the input information, it verifies the input information. After the verification is completed, it stores the input information in the memory pool and updates the hash tree used to record the input information; then, it updates the timestamp to the time when the input information is received and tries different random numbers, and performs eigenvalue calculations multiple times so that the calculated eigenvalue can satisfy the following formula:

[0054] SHA256(SHA256(version + prev_hash + merkle_root + ntime + nbits + x)) < TARGET

[0055] where SHA256 is the eigenvalue algorithm used to calculate the eigenvalue; version (version number) is the version information of the relevant block protocol in the blockchain; prev_hash is the block header feature value of the parent block of the current block; merkle_root is the eigenvalue of the input information; ntime is the update time of the updated timestamp; nbits is the current difficulty, which is a fixed value within a period of time and is determined again after exceeding the fixed time period; x is a random number; TARGET is the eigenvalue threshold, and this eigenvalue threshold can be determined according to nbits.

[0056] In this way, when a random number that satisfies the above formula is calculated, the information can be stored correspondingly, generating a block header and a block body to obtain the current block. Subsequently, the node where the blockchain is located sends the newly generated block to other nodes in the data sharing system according to the node identifiers of other nodes in the data sharing system. Other nodes verify the newly generated block and add the newly generated block to the blockchain they store after the verification is completed.

[0057] The implementation details of the technical solution of the embodiment of the present application are elaborated in detail as follows:

[0058] Figure 4 FIG. 4 shows a flowchart of a cross-chain resource transfer method according to an embodiment of the present application. The cross-chain resource transfer method can be executed by other computer devices such as a server on a transaction notarization relay chain. Refer to Figure 4 As shown, the cross-chain resource transfer method at least includes steps S410 to S450, which are introduced in detail as follows:

[0059] In step S410, resource cross-chain information triggered by a node on the resource transfer request sub-chain is obtained, where the resource cross-chain information includes signature information obtained by signing the resource transfer request, resource data to be transferred, an institutional certificate corresponding to the resource transfer request sub-chain, and a node certificate of the node on the resource transfer request sub-chain.

[0060] As Figure 5a shown, in this embodiment, when performing cross-chain services, a user of the business platform corresponding to the resource transfer request sub-chain A initiates a cross-chain transaction. The cross-chain transaction information is recorded on the resource transfer request sub-chain. Subsequently, a relayer (relayer A) will obtain the cross-chain transaction in the resource transfer request sub-chain, extract the cross-chain transaction information, and then provide it to the transaction notarization relay chain M. The transaction notarization relay chain M needs to verify this transaction information and, after the verification passes, synchronize the transaction data to the resource transfer processing target chain B through the relayer (relayer B) service.

[0061] As Figure 6 shown, in this embodiment, the certificate structure includes at least four roles, namely, the root certificate corresponding to the consortium chain committee, the institutional certificate corresponding to the consortium chain member institutions, the node certificate corresponding to the consortium chain participants (nodes and SDKs), etc. Specifically, in this embodiment, the root certificate rootCA, that is, the ca.crt file, is the root of data and identity trust. The root certificate is synchronized by multi-signature of consensus members. The root certificate is the certificate held by the committee in the consortium blockchain. It will issue the institutional certificate agency.crt to the blockchain management nodes corresponding to each subordinate institution based on the signature information agency.key of the institutional nodes. The institutional management node will issue the node certificate node.crt to each node under the institution based on the signature information node.key of each node.

[0062] In an embodiment of the present application, obtaining the resource cross-chain information triggered by a node on the resource transfer request sub-chain in step S410 includes steps S411 to S412:

[0063] Step S411: Obtain the resource transfer events on the resource transfer request sub-chain in the consortium blockchain; the consortium blockchain includes a resource transfer request sub-chain, a transaction notarization relay chain, and a resource transfer processing target chain.

[0064] Step S412: When obtaining the target resource transfer event across chains, parse the target resource transfer event to determine the resource cross-chain information in the target resource transfer event.

[0065] Specifically, as Figure 5a shown, the relay corresponding to the transaction notarization relay chain M in the consortium blockchain in this embodiment first obtains the resource transfer events on the resource transfer request sub-chain A in the consortium blockchain, so as to parse the target resource transfer event when obtaining the target resource transfer event across chains, thereby determining the resource cross-chain information in the target resource transfer event.

[0066] Optionally, in this embodiment, when obtaining the resource transfer events on the resource transfer request sub-chain, it can be performed by means of listening based on the network address.

[0067] In an embodiment of the present application, in step S412, when obtaining the target resource transfer event across chains, parse the target resource transfer event to determine the resource cross-chain information in the target resource transfer event, including: when obtaining the target resource transfer event across chains, based on the smart contracts pre-signed by each resource transfer request sub-chain, parse the target resource transfer event to determine the signature information, resource data, institutional certificate, and node certificate in the target resource transfer event.

[0068] In an embodiment of the present application, the user initiates a cross-chain transaction request based on the resource transfer request sub-chain, for example, to send data to the resource transfer processing target chain. The resource transfer request sub-chain A obtains the cross-chain transaction through the acquisition method and uploads the obtained transaction information to the chain. Among them, the resource transfer request sub-chain will provide the certificates ca.crt, agency.crt, node.crt, and node.key required to connect to the resource transfer request sub-chain node node to the relay (relayer A). After the relay obtains the target resource transfer event across chains through the acquisition method, it parses the target resource event based on the smart contracts pre-signed by each resource transfer request sub-chain in the consortium blockchain to determine various data therein, such as signature information, resource data, institutional certificate, and node certificate. After that, the relay can link to the node to initiate blockchain-related transactions only after performing SSL mutual authentication with the node based on the certificates.

[0069] In an embodiment of the present application, before parsing the target resource transfer event and determining the resource cross-chain information in the target resource transfer event when the target resource transfer event across chains is obtained in step S412, the cross-chain resource transfer method further includes steps S4121 to S4122:

[0070] Step S4121, extract the resource transfer address from the resource cross-chain information.

[0071] Specifically, in this embodiment, after obtaining the resource cross-chain information, the resource cross-chain information can be parsed based on a preset sequence composition method of the resource cross-chain information to determine the text composition information therein. Then, locate the position of the resource transfer address in the sequence from the resource cross-chain information, and then extract the resource transfer address.

[0072] In addition, the corresponding address information can also be extracted from the resource cross-chain information by means of character recognition based on the preset literal form and numerical size of the resource transfer address, and this address information is used as the resource transfer address.

[0073] Optionally, the resource transfer address in this embodiment may include the identifier or address of the target chain for resource transfer processing, the identifier or address of the target node in the target chain for resource transfer processing, etc. In addition, it may also be the name of the institution corresponding to the target chain for resource transfer processing, etc.

[0074] Step S4122, based on the resource transfer address, traverse and retrieve in the preset cross-chain contract addresses to determine whether there is an address of the target chain for resource transfer processing corresponding to the resource transfer address in the cross-chain contract addresses; if there is an address of the target chain for resource transfer processing corresponding to the resource transfer address in the cross-chain contract addresses, it is determined that the target resource transfer event is the target resource transfer event across chains.

[0075] In an embodiment of the present application, after extracting the resource transfer address from the resource cross-chain information, traverse and retrieve in the preset cross-chain contract addresses based on the resource transfer address to determine whether there is an address of the target chain for resource transfer processing corresponding to the resource transfer address in the cross-chain contract addresses; if there is an address of the target chain for resource transfer processing corresponding to the resource transfer address in the cross-chain contract addresses, it indicates that the blockchain corresponding to the current resource transfer address belongs to the cross-chain transaction chain, that is, the target chain for resource transfer processing. It is determined that the current target resource transfer event is the target resource transfer event across chains. At the same time, the resource transfer address extracted from the resource cross-chain information is the address corresponding to the target chain for resource transfer processing.

[0076] In steps S420 to S440, in this embodiment, the institutional identity verification of the institutional certificate in the resource cross-chain information is performed based on the pre-stored root certificate. After the institutional identity verification is passed, the node identity verification of the node certificate is performed based on the institutional certificate. If the node identity verification is passed, the signature information is verified based on the node certificate.

[0077] In an embodiment of the present application, in the specific verification process, in this embodiment, the legality of the certificate is specifically verified to trust the relayer and the information sent by it. For example, there are three levels of certificates: root certificate (rootCA), institutional certificate (AgencyCA), and node certificate (nodeCA). Then when registering a consortium chain to the transaction notarization relay chain platform, the rootCA is stored on the cross-chain. The relayer holds the nodeCA and signs the cross-chain information with its own private key, and sends the signature, cross-chain information, AgencyCA, and nodeCA to the transaction notarization relay chain; after receiving them, the transaction notarization relay chain verifies the AgencyCA with the rootCA to verify whether the institutional certificate is issued by the root certificate ca.crt; then verifies the nodeCA through the AgencyCA to verify whether the node certificate is issued by the institutional certificate agency.crt; finally, verifies the nodeKey signature with the nodeCA. If all the above verifications are successful, it means that the data sent by the relayer to the transaction notarization relay chain is true, valid, and existent. The cross-chain information can be trusted, and then the cross-chain process is executed.

[0078] In step S450, if the signature information verification is passed, the resource data in the resource cross-chain information is synchronized to the resource transfer processing target chain in the consortium chain.

[0079] In an embodiment of the present application, after the signature information verification is passed, the resource data in the resource cross-chain information is synchronized to the resource transfer processing target chain in the consortium chain to implement a cross-chain transaction based on cross-chain identity verification, so as to ensure the cross-chain transaction process through the above solution.

[0080] In an embodiment of the present application, in step S450, the process of synchronizing the resource data in the resource cross-chain information to the resource transfer processing target chain in the consortium chain specifically includes: determining the resource transfer processing target chain corresponding to the resource transfer address in the resource transfer request sub-chain of the consortium chain based on the resource transfer address; obtaining and verifying the identity information of the nodes in the resource transfer processing target chain; if the identity information verification of the nodes in the resource transfer processing target chain is passed, synchronize the resource data to the nodes on the resource transfer processing target chain based on the resource transfer address.

[0081] In an embodiment of the present application, when synchronizing the resource data in the resource cross-chain information to the resource transfer processing target chain in the consortium chain, a transaction notarization relay chain cross-chain transaction event is obtained through a relay (relayer B) service; specifically, the transactions that need to cross the resource transfer processing target chain are filtered according to the transaction information in the transaction notarization relay chain. Specifically, it can be judged according to the to address in the information, and the to address represents the address corresponding to the cross-chain contract. At the same time, in this embodiment, the identity information of the nodes in the obtained resource transfer processing target chain is verified. After the identity information verification passes, it can be judged whether there is a cross-chain transaction initiated according to this address, and the resource data is synchronized to the nodes on the resource transfer processing target chain.

[0082] Specifically, when the transaction notarization relay chain transports the information spit out by the management contract on the resource transfer request sub-chain to the transaction notarization relay chain, first, the transaction notarization relay chain signs the digest of the cross-chain information with its own node certificate, and the digest type can be determined according to the certificate; then it calls the cross-chain SDK interface to sign the institutional certificate and its own node certificate, and sends the cross-chain information to the cross-chain transaction. Finally, the transaction status is obtained according to the transaction digest. If it fails, it needs to be handled according to the situation.

[0083] In an embodiment of the present application, after synchronizing the resource data in the resource cross-chain information to the resource transfer processing target chain in the consortium chain, the cross-chain resource transfer method further includes: obtaining the resource transfer status generated by the resource transfer processing target chain based on the resource data; recording the resource transfer status.

[0084] In this embodiment, after synchronizing the resource data to the resource transfer processing target chain, a resource transfer status is generated in the resource transfer processing target chain. And by obtaining the resource transfer status from the resource transfer processing target chain, the resource transfer status is stored on the chain in the transaction notarization relay chain, or the resource transfer status is synchronized to the resource transfer request sub-chain.

[0085] Furthermore, if the resource transfer status is a successful transfer status, the resource transfer status is synchronized to the nodes in the resource transfer request sub-chain, so that the nodes in the resource transfer request sub-chain perform on-chain evidence storage for this resource transfer based on the resource transfer status, which is convenient for later tracing. If the resource transfer status is a failure status, the resource transfer request sub-chain can be synchronized to ensure the consistency of the data status, or data synchronization can not be performed in the resource transfer request sub-chain, so as to indicate the resource transfer request sub-chain to continue the resource transfer operation in this way.

[0086] The process of the entire cross-chain resource transfer method is as Figure 5bAs shown, in this embodiment, in step S510, the relay service corresponding to the resource transfer request sub-chain listens for cross-chain transaction events on the resource transfer request sub-chain; in step S520, cross-chain transaction information is constructed based on the listened cross-chain transaction events, and then in step S530, the cross-chain transaction information is signed based on the identity information of the transaction notarization relay chain to generate signed cross-chain transaction information; in step S540, the signed cross-chain transaction information is forwarded to the transaction notarization relay chain; for the institutional certificate in the resource cross-chain information to perform institutional identity verification based on the pre-stored root certificate in the relay chain. After the institutional identity verification passes, the node certificate is used to perform node identity verification. If the node identity verification passes, the signature information is verified based on the node certificate; if the signature information verification passes, the resource data in the resource cross-chain information is synchronized to the resource transfer processing target chain in the consortium chain; in step S550, the target chain listens for transactions on the relay chain through the relay chain service and constructs cross-chain transaction information based on the listened information; in step S560, the cross-chain transaction information is forwarded to the resource transfer processing target chain, and the transaction status is returned to the transaction notarization relay chain. In this embodiment, by pre-registering hierarchical certificates in the consortium chain and based on the characteristics of the consortium chain certificates, the institutional certificate, node certificate, and node identity in the resource transfer request sub-chain are sequentially verified through the transaction notarization relay chain in the consortium chain, improving the security and reliability of cross-chain transactions based on multiple blockchains.

[0087] Figure 7 The flowchart of a cross-chain resource transfer method according to an embodiment of the present application is shown. This cross-chain resource transfer method can be executed by other computer devices such as a server on the resource transfer request sub-chain. Refer to Figure 7 As shown, this cross-chain resource transfer method at least includes steps S710 to S740, which are introduced in detail as follows:

[0088] Step S710, obtain a resource transfer request.

[0089] In an embodiment of the present application, a resource transfer request triggered by a user is obtained through the resource transfer request sub-chain. The resource transfer request in this embodiment can be a request for data synchronization or data update between institutions.

[0090] Exemplarily, in actual applications, for the authorization of user B's rights and interests by institution A, institution C needs to retrieve the corresponding user data based on the identity information of user B and synchronize the user data to institution A. In this case, the node corresponding to user B needs to initiate a data request, that is, a resource transfer request, to the node on the resource transfer request sub-chain corresponding to institution A, so that the node on the resource transfer request sub-chain corresponding to institution A can request data authorization from the resource transfer processing target chain corresponding to institution C based on the obtained resource transfer request.

[0091] Step S720: Sign the resource transfer request based on the private key of the node on the resource transfer request sub-chain to obtain signature information.

[0092] In an embodiment of the present application, after obtaining the resource transfer request, cross-chain transaction information rawInfo is constructed; then, the resource transfer request is signed based on the private key (node.key) of the node on the resource transfer request sub-chain in the consortium chain to obtain signature information sign.

[0093] In this embodiment, by signing the resource transfer request based on the private key of the node in the resource transfer request sub-chain, the privacy of the resource transfer request is guaranteed. At the same time, by adding a signature to the resource transfer request, the identity information of the resource transfer request sub-chain is added, improving the recognition and security of the resource transfer request.

[0094] Step S730: Use the signature information, the resource data to be transferred, the institutional certificate corresponding to the resource transfer request sub-chain, and the node certificate of the node on the resource transfer request sub-chain as resource cross-chain information, and upload the resource cross-chain information to the transaction notarization relay chain in the consortium chain to perform institutional identity verification on the institutional certificate in the resource cross-chain information based on the pre-stored root certificate; in the case where the institutional identity verification is passed, perform node identity verification on the node certificate of the resource transfer request sub-chain based on the institutional certificate, and in the case where the node identity verification is passed, perform signature verification processing on the signature information based on the node certificate of the resource transfer request sub-chain, and after the verification is passed, synchronize the resource data to the resource transfer processing target chain in the consortium chain;

[0095] In an embodiment of the present application, after obtaining the signature information, the obtained transaction information and signature information (sign), the resource data to be transferred, that is, the transaction data rawInfo, the node certificate, and the institutional certificate are sent to the transaction notarization relay chain platform.

[0096] Furthermore, in this embodiment, the signature information, the resource data to be transferred, the institutional certificate corresponding to the resource transfer request sub-chain, and the node certificate of the node on the resource transfer request sub-chain can be compressed based on a set data compression method to obtain the corresponding resource cross-chain information, so as to ensure the conciseness of the resource cross-chain information.

[0097] As Figure 8 and Figure 9 shown, in an embodiment of the present application, the cross-chain resource transfer method further includes: generating an institutional certificate request file based on the institutional private key; submitting the institutional certificate request file to the consortium chain so that the consortium chain verifies the institutional certificate request file based on the root certificate to generate an institutional certificate; obtaining the institutional certificate from the consortium chain.

[0098] Specifically, in this embodiment, the consortium chain member institution generates the institutional private key agency.key locally; then generates the certificate request file agency.csr from agency.key; and submits the generated certificate request file agency.csr to the consortium committee. The consortium chain committee uses ca.key to sign the certificate request file agency.csr to obtain the consortium chain member institution certificate agency.crt, and sends the consortium chain member institution certificate agency.crt to the corresponding member institution through the consortium chain committee. In the above solution, by verifying based on the institutional private key in the consortium committee, the fairness and security of the institutional certificate are ensured, and thus the security of data is ensured during the subsequent resource synchronization process.

[0099] Furthermore, the cross-chain resource transfer method in this embodiment further includes: generating a node certificate request file based on the node private key; sending the node certificate request file to the institutional node so that the institutional node signs the node certificate request file with the institutional certificate to generate a node certificate; and obtaining the node certificate sent by the institutional node.

[0100] Specifically, as Figure 10 and Figure 11 shown, when generating the node certificate, first the node generates the node private key node.key locally, then generates the node certificate request file node.csr based on node.key, and submits the certificate request file node.csr to the consortium member institution. The consortium member institution uses the institutional private key agency.key to sign the certificate request file node.csr to obtain the node / SDK certificate node.crt, and finally the consortium chain member institution sends the node certificate node.crt to the corresponding entity institution. By the above method of issuing the node certificate, the authority of the node certificate is improved, and based on the subordinate relationship of the consortium member institution, it is convenient to verify the identities of the nodes in each resource transfer request sub-chain based on the node certificate during subsequent cross-chain transactions, improving the security and reliability of identity verification.

[0101] Step S740, obtaining the resource transfer status from the transaction notarization relay chain, where the resource transfer status is generated when the resource transfer processing target chain performs resource transfer on the resource data and synchronizes the resource transfer status to the transaction notarization relay chain.

[0102] In an embodiment of the present application, the cross-chain information of resources is uploaded to the transaction notarization relay chain in the consortium chain to perform institutional identity verification on the institutional certificate in the cross-chain information of resources based on the pre-stored root certificate on the transaction notarization relay chain; in the case where the institutional identity verification is passed, perform node identity verification on the sub-chain node certificate of the resource transfer request based on the institutional certificate, and in the case where the node identity verification is passed, perform signature verification processing on the signature information based on the sub-chain node certificate of the resource transfer request, and synchronize the resource data to the target chain for resource transfer processing in the consortium chain after the verification is passed. Obtain the resource transfer status from the transaction notarization relay chain to upload the resource transfer status, which is convenient for subsequent data traceability.

[0103] The process of obtaining the resource transfer status from the transaction notarization relay chain in step S740 includes: determining the target digest operation corresponding to the node certificate based on the preset association relationship between the certificate and the digest operation; performing digest processing on the resource transfer request based on the target digest operation to determine the transaction digest corresponding to the resource transfer request; and obtaining the resource transfer status corresponding to the current resource transfer from the transaction notarization relay chain based on the transaction digest.

[0104] Furthermore, in this embodiment, an association relationship between the certificate and the digest operation is preset in advance to determine the target digest operation corresponding to the node certificate through this association relationship. And perform digest processing on the resource transfer request based on the target digest operation to determine the transaction digest corresponding to the resource transfer request; finally, obtain the resource transfer status corresponding to the current resource transfer from the transaction notarization relay chain based on the transaction digest. By the above method of determining the digest operation and obtaining the status based on the transaction digest corresponding to the resource transfer request, the risk of other non-secure devices monitoring the transaction status is avoided, and the security of the transaction status is improved.

[0105] The following introduces the device embodiment of the present application, which can be used to execute the cross-chain resource transfer method in the above embodiments of the present application. It can be understood that the device can be a computer program (including program code) running in a computer device, for example, the device is an application software; the device can be used to execute the corresponding steps in the method provided by the embodiments of the present application. For the details not disclosed in the device embodiment of the present application, please refer to the embodiment of the cross-chain resource transfer method above of the present application.

[0106] Figure 12 The block diagram of the cross-chain resource transfer device according to an embodiment of the present application is shown.

[0107] Refer to Figure 12As shown, the cross-chain resource transfer device 1200 according to an embodiment of the present application includes: a first acquisition unit 1210, configured to acquire cross-chain resource information triggered by a node on a resource transfer request sub-chain, where the cross-chain resource information includes signature information obtained by signing a resource transfer request, resource data to be transferred, an institutional certificate corresponding to the resource transfer request sub-chain, and a resource transfer request sub-chain node certificate;

[0108] a first verification unit 1220, configured to perform institutional identity verification on the institutional certificate in the cross-chain resource information based on a pre-stored root certificate;

[0109] a second verification unit 1230, configured to perform node identity verification on the resource transfer request sub-chain node certificate based on the institutional certificate when the institutional identity verification is passed;

[0110] a third verification unit 1240, configured to perform signature verification processing on the signature information based on the resource transfer request sub-chain node certificate when the node identity verification is passed;

[0111] a first synchronization unit 1250, configured to synchronize the resource data in the cross-chain resource information to a resource transfer processing target chain if the signature information verification is passed.

[0112] In some embodiments of the present application, based on the foregoing solution, the first acquisition unit 1210 includes: an acquisition unit, configured to acquire a resource transfer event on a resource transfer request sub-chain in a consortium chain; an analysis unit, configured to analyze the target resource transfer event when the cross-chain target resource transfer event is acquired, and determine the cross-chain resource information in the target resource transfer event.

[0113] In some embodiments of the present application, based on the foregoing solution, the cross-chain resource transfer device 1200 further includes: an extraction unit, configured to extract a resource transfer address from the cross-chain resource information; a retrieval unit, configured to perform a traversal retrieval in a preset cross-chain contract address based on the resource transfer address, and determine whether there is an address of a resource transfer processing target chain corresponding to the resource transfer address in the cross-chain contract address; a determination unit, configured to determine that the target resource transfer event is a cross-chain target resource transfer event if there is an address of a resource transfer processing target chain corresponding to the resource transfer address in the cross-chain contract address.

[0114] In some embodiments of the present application, based on the foregoing solution, the first synchronization unit 1250 is configured to determine, based on the resource transfer address, a resource transfer processing target chain corresponding to the resource transfer address in the resource transfer request sub-chain; obtain and verify the identity information of the nodes in the resource transfer processing target chain; if the identity information of the nodes in the resource transfer processing target chain passes the verification, synchronize the resource data to the nodes on the resource transfer processing target chain based on the resource transfer address.

[0115] In some embodiments of the present application, based on the foregoing solution, it further includes, when obtaining a cross-chain target resource transfer event, parsing the target resource transfer event based on the smart contracts pre-signed by each of the resource transfer request sub-chains to determine the signature information, the resource data, the institutional certificate, and the node certificate in the target resource transfer event.

[0116] In some embodiments of the present application, based on the foregoing solution, the cross-chain resource transfer device 1200 is further configured to: obtain the resource transfer status generated by the resource transfer processing target chain based on the resource data; record the resource transfer status.

[0117] In some embodiments of the present application, based on the foregoing solution, the cross-chain resource transfer device 1200 is further configured to: if the resource transfer status is a successful transfer status, synchronize the resource transfer status to the nodes in the resource transfer request sub-chain, so that the nodes in the resource transfer request sub-chain perform on-chain storage and proof of the current resource transfer based on the resource transfer status.

[0118] In the above solution, the cross-chain resource information triggered by the nodes on the resource transfer request sub-chain is obtained through the transaction notarization relay chain in the consortium chain, and the institutional identity verification of the institutional certificate in the cross-chain resource information is performed based on the pre-stored root certificate. After the institutional identity verification passes, the node identity verification of the node certificate is performed based on the institutional certificate. If the node identity verification passes, the signature information is verified based on the node certificate; if the signature information verification passes, the resource data in the cross-chain resource information is synchronized to the resource transfer processing target chain in the consortium chain. In this embodiment, by pre-registering a hierarchical certificate in the consortium chain and based on the characteristics of the consortium chain certificate, the institutional certificate, node certificate, and node identity in the resource transfer request sub-chain are sequentially verified through the transaction notarization relay chain in the consortium chain, improving the security and reliability of cross-chain transactions based on multiple blockchains.

[0119] Figure 13 The block diagram of a cross-chain resource transfer device according to an embodiment of the present application is shown.

[0120] Refer to Figure 13As shown, the cross-chain resource transfer device 1300 according to an embodiment of the present application includes: a second acquisition unit 1310, configured to acquire a resource transfer request; a signature unit, configured to sign the resource transfer request based on the private key of a node on the sub-chain of the resource transfer request to obtain signature information; a second synchronization unit 1320, configured to use the signature information, the resource data to be transferred, the institutional certificate corresponding to the sub-chain of the resource transfer request, and the node certificate of the sub-chain of the resource transfer request as cross-chain information of the resource, and upload the cross-chain information of the resource to a transaction notarization relay chain to perform institutional identity verification on the institutional certificate in the cross-chain information of the resource based on a pre-stored root certificate on the transaction notarization relay chain; in the case where the institutional identity verification is passed, perform node identity verification on the node certificate of the sub-chain of the resource transfer request based on the institutional certificate, and in the case where the node identity verification is passed, perform signature verification processing on the signature information based on the node certificate of the sub-chain of the resource transfer request, and synchronize the resource data to the resource transfer processing target chain after the verification is passed; a third acquisition unit 1330, configured to acquire a resource transfer status from the transaction notarization relay chain, where the resource transfer status is generated when the resource transfer processing target chain performs resource transfer on the resource data and synchronizes the resource transfer status to the transaction notarization relay chain.

[0121] In some embodiments of the present application, based on the foregoing solution, the third acquisition unit 1330 is configured to determine a target digest operation corresponding to the node certificate based on a preset association relationship between a certificate and a digest operation; perform digest processing on the resource transfer request based on the target digest operation to determine a transaction digest corresponding to the resource transfer request; and acquire a resource transfer status corresponding to the current resource transfer from the transaction notarization relay chain based on the transaction digest.

[0122] In some embodiments of the present application, based on the foregoing solution, the cross-chain resource transfer device 1300 is further configured to: generate an institutional certificate request file based on an institutional private key; submit the institutional certificate request file to a consortium chain, so that the consortium chain verifies the institutional certificate request file based on the root certificate to generate an institutional certificate; the consortium chain includes a sub-chain of the resource transfer request, a transaction notarization relay chain, and a resource transfer processing target chain; and acquire the institutional certificate from the consortium chain.

[0123] In some embodiments of the present application, based on the foregoing solution, the cross-chain resource transfer device 1300 is further configured to: generate a node certificate request file based on a node private key; send the node certificate request file to an institutional node, so that the institutional node signs and issues the node certificate request file through a pre-acquired institutional certificate to generate a node certificate; and acquire the node certificate sent by the institutional node.

[0124] Figure 14 The figure shows a schematic structural diagram of a computer system of an electronic device suitable for implementing the embodiments of the present application.

[0125] It should be noted that Figure 14 The computer system 1400 of the shown electronic device is only an example and should not impose any limitations on the functions and usage scope of the embodiments of the present application.

[0126] As Figure 14 shown, the computer system 1400 includes a central processing unit (CPU) 1401, which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM) 1402 or the program loaded from the storage section 1408 into the random access memory (RAM) 1403, such as executing the method described in the above embodiments. In the RAM 1403, various programs and data required for system operation are also stored. The CPU 1401, ROM 1402, and RAM 1403 are connected to each other via a bus 1404. The input / output (I / O) interface 1405 is also connected to the bus 1404.

[0127] The following components are connected to the I / O interface 1405: an input section 1406 including a keyboard, a mouse, etc.; an output section 1407 including, for example, a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 1408 including a hard disk, etc.; and a communication section 1409 including a network interface card such as a LAN (Local Area Network) card, a modem, etc. The communication section 1409 performs communication processing via a network such as the Internet. A drive 1410 is also connected to the I / O interface 1405 as needed. A removable medium 1411, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 1410 as needed so that the computer program read from it can be installed into the storage section 1408 as needed.

[0128] In particular, according to an embodiment of the present application, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, an embodiment of the present application includes a computer program product that includes a computer program carried on a computer-readable medium, and the computer program contains a computer program for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through the communication section 1409 and / or installed from the removable medium 1411. When the computer program is executed by the central processing unit (CPU) 1401, various functions defined in the system of the present application are executed.

[0129] It should be noted that the computer-readable medium shown in the embodiments of the present application can be a computer-readable signal medium, a computer-readable storage medium, or any combination of the two. The computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the above. More specific examples of the computer-readable storage medium can include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a flash memory, an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, the computer-readable storage medium can be any tangible medium that contains or stores a program, and the program can be used by or in conjunction with an instruction execution system, apparatus, or device. In the present application, the computer-readable signal medium can include a data signal propagated in a baseband or as part of a carrier wave, in which a computer-readable computer program is carried. Such a propagated data signal can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. The computer-readable signal medium can also be any computer-readable medium other than the computer-readable storage medium, and the computer-readable medium can send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device. The computer program contained on the computer-readable medium can be transmitted by any suitable medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0130] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architectures, functions, and operations of systems, methods, and computer program products according to various embodiments of the present application. Among them, each block in the flowchart or block diagram may represent a module, a program segment, or a part of code, and the above-mentioned module, program segment, or part of code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order than that marked in the accompanying drawings. For example, two consecutive blocks shown may actually be executed substantially in parallel, and they may sometimes be executed in the reverse order, depending on the functions involved. It should also be noted that each block in the block diagram or flowchart, as well as the combination of blocks in the block diagram or flowchart, can be implemented by a dedicated hardware-based system for performing the specified functions or operations, or can be implemented by a combination of dedicated hardware and computer instructions.

[0131] The units involved in the embodiments described in the present application can be implemented in software or in hardware, and the described units can also be provided in a processor. Among them, the names of these units do not, in some cases, constitute a limitation on the unit itself.

[0132] According to one aspect of the present application, there is provided a computer program product or a computer program, which includes computer instructions stored in a computer-readable storage medium. The processor of the computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the methods provided in the above various alternative implementation manners.

[0133] As another aspect, the present application also provides a computer-readable medium, which may be included in the electronic device described in the above embodiments; or may exist separately without being assembled into the electronic device. The above computer-readable medium carries one or more programs, and when the above one or more programs are executed by an electronic device, the electronic device implements the methods described in the above embodiments.

[0134] It should be noted that although several modules or units of the devices for performing actions are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present application, the features and functions of the two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.

[0135] From the description of the above embodiments, those skilled in the art can easily understand that the example embodiments described herein can be implemented by software or by a combination of software and necessary hardware. Therefore, the technical solutions according to the embodiments of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (such as a personal computer, a server, a touch terminal, or a network device, etc.) to execute the method according to the embodiments of the present application.

[0136] After considering the specification and practicing the embodiments disclosed herein, those skilled in the art will readily conceive of other embodiments of the present application. The present application is intended to cover any variations, uses, or adaptations of the present application, which follow the general principles of the present application and include common general knowledge or conventional technical means in the technical field not disclosed in the present application.

[0137] It should be understood that the present application is not limited to the exact structures described above and shown in the drawings, and various modifications and changes can be made without departing from its scope. The scope of the present application is only limited by the appended claims.

Claims

1. A cross-chain resource transfer method, characterized in that, The method is executed by a transaction notarization relay chain, and the method includes: Obtaining cross-chain resource information triggered by a node on a resource transfer request sub-chain, where the cross-chain resource information includes signature information obtained by signing a resource transfer request, resource data to be transferred, an institutional certificate corresponding to the resource transfer request sub-chain, and a node certificate of the resource transfer request sub-chain node; Performing institutional identity verification on the institutional certificate in the cross-chain resource information based on a pre-stored root certificate, where the holder of the root certificate is responsible for issuing institutional certificates, and the holder of the institutional certificate is responsible for issuing node certificates; When the institutional identity verification is passed, performing node identity verification on the node certificate of the resource transfer request sub-chain based on the institutional certificate; When the node identity verification is passed, performing signature verification processing on the signature information based on the node certificate of the resource transfer request sub-chain; If the signature information verification is passed, synchronizing the resource data in the cross-chain resource information to a resource transfer processing target chain.

2. The method according to claim 1, wherein Obtaining cross-chain resource information triggered by a node on a resource transfer request sub-chain includes: Obtaining a resource transfer event on a resource transfer request sub-chain in a consortium chain; the consortium chain includes a resource transfer request sub-chain, a transaction notarization relay chain, and a resource transfer processing target chain; When a cross-chain target resource transfer event is obtained, parsing the target resource transfer event to determine the cross-chain resource information in the target resource transfer event.

3. The method according to claim 2, wherein Before parsing the target resource transfer event to determine the cross-chain resource information in the target resource transfer event when a cross-chain target resource transfer event is obtained, the method further includes: Extracting a resource transfer address from the cross-chain resource information; Based on the resource transfer address, traversing and retrieving in a preset cross-chain contract address to determine whether there is an address of a resource transfer processing target chain corresponding to the resource transfer address in the cross-chain contract address; If there is an address of a resource transfer processing target chain corresponding to the resource transfer address in the cross-chain contract address, determining that the target resource transfer event is a cross-chain target resource transfer event.

4. The method according to claim 3, wherein Synchronizing the resource data in the cross-chain resource information to a resource transfer processing target chain includes: Based on the resource transfer address, determining a resource transfer processing target chain corresponding to the resource transfer address in the resource transfer request sub-chain; Obtaining and verifying the identity information of a node in the resource transfer processing target chain; If the identity information verification of the node in the resource transfer processing target chain is passed, synchronizing the resource data to the node on the resource transfer processing target chain based on the resource transfer address.

5. The method according to claim 2, wherein When a cross-chain target resource transfer event is obtained, parsing the target resource transfer event to determine the cross-chain resource information in the target resource transfer event includes: When obtaining a cross-chain target resource transfer event, based on the smart contracts pre-signed by each of the resource transfer request sub-chains, parse the target resource transfer event to determine the signature information, the resource data, the institutional certificate, and the node certificate in the target resource transfer event.

6. The method according to claim 1, characterized in that, After synchronizing the resource data in the resource cross-chain information to the resource transfer processing target chain, the method further includes: Obtain the resource transfer status generated by the resource transfer processing target chain based on the resource data; Record the resource transfer status.

7. The method according to claim 6, characterized in that, After obtaining the resource transfer status generated by the resource transfer processing target chain based on the resource data, the method further includes: If the resource transfer status is a successful transfer status, synchronize the resource transfer status to the nodes in the resource transfer request sub-chain, so that the nodes in the resource transfer request sub-chain perform on-chain storage and verification of this resource transfer based on the resource transfer status.

8. A cross-chain resource transfer method, characterized in that, The method includes: Obtain a resource transfer request; Sign the resource transfer request based on the private key of the node on the resource transfer request sub-chain to obtain signature information; Use the signature information, the resource data to be transferred, the institutional certificate corresponding to the resource transfer request sub-chain, and the resource transfer request sub-chain node certificate as resource cross-chain information, and upload the resource cross-chain information to the transaction notarization relay chain to perform institutional identity verification on the institutional certificate in the resource cross-chain information based on the pre-stored root certificate on the transaction notarization relay chain, where the holder of the root certificate is responsible for issuing the institutional certificate, and the holder of the institutional certificate is responsible for issuing the node certificate; in the case where the institutional identity verification passes, perform node identity verification on the resource transfer request sub-chain node certificate based on the institutional certificate, in the case where the node identity verification passes, perform signature verification processing on the signature information based on the resource transfer request sub-chain node certificate, and synchronize the resource data to the resource transfer processing target chain after the verification passes; Obtain the resource transfer status from the transaction notarization relay chain, where the resource transfer status is generated when the resource transfer processing target chain performs resource transfer on the resource data and synchronizes the resource transfer status to the transaction notarization relay chain.

9. The method according to claim 8, wherein Obtaining the resource transfer status from the transaction notarization relay chain includes: Determine the target digest operation corresponding to the node certificate based on the preset association relationship between the certificate and the digest operation; Perform digest processing on the resource transfer request based on the target digest operation to determine the transaction digest corresponding to the resource transfer request; Based on the transaction digest, obtain the resource transfer status corresponding to this resource transfer from the transaction notarization relay chain.

10. The method according to claim 9, wherein The method further includes: Generate an institutional certificate request file based on the institutional private key; Submit the institutional certificate request file to the consortium chain, so that the consortium chain verifies the institutional certificate request file based on the root certificate to generate an institutional certificate; the consortium chain includes a resource transfer request sub-chain, a transaction notarization relay chain, and a resource transfer processing target chain; Obtain the institutional certificate from the consortium chain.

11. The method according to claim 9, wherein The method further includes: generating a node certificate request file based on the node private key; sending the node certificate request file to an institutional node, so that the institutional node issues the node certificate request file through a pre-obtained institutional certificate to generate a node certificate; obtaining the node certificate sent by the institutional node.

12. A cross-chain resource transfer device, characterized in that, The cross-chain resource transfer device is applied to a transaction notarization relay chain, and the cross-chain resource transfer device includes: a first acquisition unit, configured to acquire resource cross-chain information triggered by a node on a resource transfer request sub-chain, where the resource cross-chain information includes signature information obtained by signing a resource transfer request, resource data to be transferred, an institutional certificate corresponding to the resource transfer request sub-chain, and a resource transfer request sub-chain node certificate; a first verification unit, configured to perform institutional identity verification on the institutional certificate in the resource cross-chain information based on a pre-stored root certificate, where the holder of the root certificate is responsible for issuing the institutional certificate, and the holder of the institutional certificate is responsible for issuing the node certificate; a second verification unit, configured to perform node identity verification on the resource transfer request sub-chain node certificate based on the institutional certificate when the institutional identity verification is passed; a third verification unit, configured to perform signature verification processing on the signature information based on the resource transfer request sub-chain node certificate when the node identity verification is passed; a first synchronization unit, configured to synchronize the resource data in the resource cross-chain information to a resource transfer processing target chain if the signature information verification is passed.

13. A cross-chain resource transfer device, characterized in that, The cross-chain resource transfer device includes: a second acquisition unit, configured to acquire a resource transfer request; a signature unit, configured to sign the resource transfer request based on the private key of a node on the resource transfer request sub-chain to obtain signature information; a second synchronization unit, configured to use the signature information, the resource data to be transferred, the institutional certificate corresponding to the resource transfer request sub-chain, and the resource transfer request sub-chain node certificate as resource cross-chain information, and upload the resource cross-chain information to the transaction notarization relay chain, so as to perform institutional identity verification on the institutional certificate in the resource cross-chain information based on a pre-stored root certificate on the transaction notarization relay chain, where the holder of the root certificate is responsible for issuing the institutional certificate, and the holder of the institutional certificate is responsible for issuing the node certificate; perform node identity verification on the resource transfer request sub-chain node certificate based on the institutional certificate when the institutional identity verification is passed, perform signature verification processing on the signature information based on the resource transfer request sub-chain node certificate when the node identity verification is passed, and synchronize the resource data to the resource transfer processing target chain after the verification is passed; a third acquisition unit, configured to acquire a resource transfer status from the transaction notarization relay chain, where the resource transfer status is generated when the resource transfer processing target chain performs resource transfer on the resource data and synchronizes the resource transfer status to the transaction notarization relay chain.

14. A computer-readable medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the cross-chain resource transfer method according to any one of claims 1 to 11.

15. An electronic device, characterized in that, including: one or more processors; A storage device for storing one or more programs, which, when executed by the one or more processors, cause the one or more processors to implement the cross-chain resource transfer method according to any one of claims 1 to 11.

16. A computer program product, characterized in that, The computer program product includes computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, causing the computer device to execute the cross-chain resource transfer method according to any one of claims 1 to 11.

Citation Information

Patent Citations

  • Authentication method and device based on blockchain network

    CN110569674A

  • Identity authentication method and device in cross-chain mode

    CN111262860A