A method, system, and storage medium for providing blockchain services

Abstract

The application discloses a kind of methods for providing blockchain service, system and storage medium, in BaaS platform, comprising: according to the requirement of the manager of BaaS platform, maintain BaaS root, the digital identity, certificate and state management of partner;According to the requirement of the manager of partner, the digital identity, certificate and state of the internal organization of partner are managed;According to the requirement of the manager of partner, establish at least one blockchain, each blockchain supports a kind of business, according to business, organization is associated with blockchain;Wherein: partner is constituted by the organization with same business requirement.It is with the present application, reduce the overhead of BaaS platform administrator, avoid BaaS platform administrator directly contact user, the on-chain data of organization, improve the ability of confederacy business secret data protection, guarantee the privacy of on-chain data.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of blockchains, and in particular to a method and system for providing blockchain services and a storage medium. BACKGROUND

[0002] Blockchain is a new information processing and storage technology, which adopts a decentralized networking structure to perform distributed ledger management and maintenance, uses a consensus mechanism to ensure ledger data fairness and tamper resistance, and supports neutral contract execution (code recognized by multiple parties) to solve problems such as insufficient trust, opaque information, and poor collaboration among partners. Computer and communication networks provide information representation, transmission, and processing capabilities, changing the way people communicate in their daily lives and work; blockchain technology enables value representation and transfer mechanisms, becoming a new means of enhancing trust and collaboration in social production and life, and is expected to optimize social resource collaboration patterns and improve production relations. As a major breakthrough technology that may completely change the way businesses and even institutions operate.

[0003] Compared with traditional database systems, blockchain technology is more complex, blockchain applications involve more related parties, and the developer community is smaller. Therefore, application development costs are high, deployment and maintenance are difficult, and there is a shortage of professionals.

[0004] As a modern information processing technology, BaaS (Backend as a Service) refers to embedding a blockchain framework into a cloud computing platform, using the deployment and management advantages of cloud service infrastructure to provide a convenient and high-performance blockchain ecosystem and supporting services for developers, and supporting a blockchain open platform for business expansion and operational support of developers.

[0005] BaaS is a space carved out by Microsoft, IBM, Oracle, Baidu, Alibaba, and Huawei from their own cloud service networks to run a certain blockchain node. Compared with ordinary nodes and exchange nodes, the main purpose of BaaS nodes is to quickly establish the development environment required by themselves, provide a series of operation services such as search query, transaction submission, and data analysis based on blockchain, which can be centralized or decentralized, to help developers quickly verify their concepts and models. The service nature of BaaS nodes is that they are more tool-based and facilitate the creation, deployment, operation, and monitoring of blockchains.

[0006] In a more popular explanation, BaaS provides supporting services and can provide incubators for blockchain developers and entrepreneurs.

[0007] The deficiency of the prior art is that the BaaS platform has a large workload. SUMMARY

[0008] The application provides a method, a system and a storage medium for providing a blockchain service to solve the problem of heavy workload of a BaaS platform.

[0009] The application provides the following technical solutions:

[0010] A method for providing a blockchain service in a BaaS platform, comprising:

[0011] Maintaining a BaaS root according to the requirements of a manager of the BaaS platform, and managing digital identities, certificates and states of partners;

[0012] Managing digital identities, certificates and states of internal organizations of the partners according to the requirements of managers of the partners;

[0013] Establishing at least one blockchain according to the requirements of managers of the partners, each blockchain supporting a business, and associating organizations with the blockchain according to the business;

[0014] The partners are composed of organizations having the same business requirements.

[0015] In implementation, the organizations, the partners or the blockchains are identified by FQDN.

[0016] In implementation, the organizations are identified by FQDN after successful registration; or, are identified by FQDN when joining the partners and being bound to the blockchain.

[0017] In implementation, when an organization belongs to multiple partners, the organization uses one FQDN in each partner; and / or,

[0018] When an organization participates in multiple blockchains, the organization uses one FQDN on each blockchain.

[0019] In implementation, further comprising:

[0020] Providing an interface for the managers of the partners to configure nodes for the organizations according to the business.

[0021] In implementation, further comprising:

[0022] Setting a consensus node in the partner, which is responsible for consensus and block output on all blockchains in the partner.

[0023] In implementation, the partners are composed of organizations having the same business requirements, comprising:

[0024] Selecting an organization as a representative of the partner to initiate partner registration to the BaaS platform;

[0025] After the cooperation body is registered successfully, the representative becomes the cooperation body administrator, initiates an invitation to other organizations to join the cooperation body, or publishes the information of the cooperation body for other organizations to join;

[0026] The invited organization becomes a cooperation body member after accepting the invitation.

[0027] In implementation, further comprising:

[0028] The BaaS platform generates an identity FQDN of the cooperation body after the identity of the cooperation body is confirmed;

[0029] The BaaS platform returns the cooperation body creation result and the FQDN to the representative of the cooperation body;

[0030] The BaaS platform creates a public-private key pair for the FQDN and saves the private key;

[0031] The BaaS platform initiates a public key endorsement to the identity server;

[0032] After the identity server verifies that the identity of the cooperation body is valid, the endorsement and publication of the public key are completed.

[0033] In implementation, further comprising:

[0034] According to needs, a consensus node is set up on the blockchain, which is responsible for one or a combination of the following functions on the blockchain: transaction ordering, block generation, consensus reaching.

[0035] In implementation, further comprising:

[0036] The identity service of the BaaS platform provides identity authentication and / or authorization-related control functions for organizations or partners.

[0037] A system for providing a blockchain service, in a BaaS platform, comprising:

[0038] A processor for reading a program in a memory and executing the following processes:

[0039] According to the requirements of the manager of the BaaS platform, maintain the BaaS root, and manage the digital identity, certificate and state of the cooperation body;

[0040] According to the requirements of the manager of the cooperation body, manage the digital identity, certificate and state of the internal organizations of the cooperation body;

[0041] According to the requirements of the manager of the cooperation body, establish at least one blockchain, each blockchain supports a business, and associate organizations with the blockchain according to the business;

[0042] Wherein: the cooperation body is composed of organizations with the same business needs;

[0043] a transceiver for receiving and transmitting data under control of the processor.

[0044] In an implementation, the organization, the consortium, or the blockchain is identified by a FQDN.

[0045] In an implementation, the organization is identified by a FQDN after successful registration; or, is identified by a FQDN when joining the consortium and binding to the blockchain.

[0046] In an implementation, when an organization belongs to multiple consortia, the organization uses a FQDN in each consortium; and / or,

[0047] When an organization participates in multiple blockchains, the organization uses a FQDN on each blockchain.

[0048] In an implementation, further comprising:

[0049] providing an interface for a manager of the consortium to configure nodes for the organizations according to the business.

[0050] In an implementation, further comprising:

[0051] setting a consensus node in the consortium, responsible for consensus and block generation on all blockchains in the consortium.

[0052] In an implementation, the consortium is composed of organizations with the same business needs, including:

[0053] selecting an organization as a representative of the consortium to initiate consortium registration with the BaaS platform;

[0054] After successful consortium registration, the representative becomes the consortium administrator, invites other organizations to join the consortium, or publishes information of the consortium for other organizations to join;

[0055] The invited organization becomes a member of the consortium after accepting the invitation.

[0056] In an implementation, further comprising:

[0057] The BaaS platform generates an identity FQDN for the consortium after identity confirmation of the consortium;

[0058] The BaaS platform returns the consortium creation result and the FQDN to the representative of the consortium;

[0059] The BaaS platform creates a public-private key pair for the FQDN and saves the private key;

[0060] The BaaS platform initiates public key endorsement to the identity server;

[0061] After the identity server verifies the partner identity to be valid, the endorsement and publication of the public key are completed.

[0062] In an implementation, further comprising:

[0063] According to the need, a consensus node is set up on the blockchain, which is responsible for one or a combination of the following functions on the blockchain: transaction ordering, block generation, consensus.

[0064] In an implementation, further comprising:

[0065] The identity service of the BaaS platform provides identity authentication and / or authorization-related control functions for organizations or partners.

[0066] A system for providing a blockchain service in a BaaS platform, comprising:

[0067] A platform management module for maintaining a BaaS root according to the requirements of the manager of the BaaS platform, managing the digital identity, certificate and status of partners;

[0068] A partner management module for managing the digital identity, certificate and status of internal organizations of partners according to the requirements of the manager of the partners; establishing at least one blockchain according to the requirements of the manager of the partners, each blockchain supporting a business, and associating organizations with blockchains according to the business;

[0069] Wherein: the partners are composed of organizations with the same business needs.

[0070] In an implementation, the organizations, partners, or blockchains are identified by FQDN.

[0071] In an implementation, the platform management module is further used to identify the organizations by FQDN after successful registration; or, identify the organizations by FQDN when joining the partners and binding to the blockchains.

[0072] In an implementation, when an organization belongs to multiple partners, the organization uses one FQDN identification in each partner; and / or,

[0073] When an organization participates in multiple blockchains, the organization uses one FQDN identification on each blockchain.

[0074] In an implementation, the partner management module is further used to provide an interface for the manager of the partners to configure nodes for organizations according to the business.

[0075] In an implementation, the partner management module is further used to set a consensus node within the partner, which is responsible for consensus and block generation on all blockchains within the partner.

[0076] In implementation, the cooperation body management module is further configured to include the following when creating the cooperation body:

[0077] An organization is selected as a representative of the cooperation body to initiate cooperation body registration to the BaaS platform;

[0078] After the cooperation body registration is successful, the representative becomes a cooperation body administrator to initiate an invitation to other organizations to join the cooperation body, or to publish information of the cooperation body for other organizations to join;

[0079] The invited organization becomes a cooperation body member after accepting the invitation.

[0080] In implementation, the platform management module is further configured to include the following when creating the cooperation body:

[0081] The BaaS platform generates an identity FQDN of the cooperation body after confirming the cooperation body identity;

[0082] The BaaS platform returns the cooperation body creation result and the FQDN to the representative of the cooperation body;

[0083] The BaaS platform creates a public-private key pair for the FQDN and saves the private key;

[0084] The BaaS platform initiates public key endorsement to the identity server;

[0085] After the identity server verifies that the cooperation body identity is valid, the endorsement and publication of the public key are completed.

[0086] In implementation, the cooperation body management module is further configured to set up a consensus node on the blockchain according to needs, which is responsible for one or a combination of the following functions on the blockchain: transaction ordering, block generation, and consensus reaching.

[0087] In implementation, the platform management module is further configured to provide identity authentication and / or authorization-related control functions of the organization or the cooperation body through the identity service of the BaaS platform.

[0088] A computer readable storage medium storing a computer program for executing the above method for providing a blockchain service.

[0089] The present application has the following advantages:

[0090] In the technical scheme provided in the embodiment of the application, a "cooperation body" mode is proposed to construct a blockchain service capability, and the "cooperation body" represents a group of organizations that need to use a BaaS service to construct a blockchain application, wherein the BaaS platform maintains a BaaS root, and manages the digital identity, certificate and state of the cooperation body; the cooperation body manages the digital identity, certificate and state of the internal organizations of the cooperation body; at least one blockchain is established, each blockchain supports one business, and the organizations are associated with the blockchains according to the business; that is, a two-level identity and management system is established. Since the logical entity of the cooperation body is introduced in the BaaS platform, the management responsibilities of the application and the chain are separated from the management responsibilities of the BaaS platform itself, the responsibilities are classified, on the one hand, the overhead of the BaaS platform administrator is reduced, and on the other hand, the BaaS platform administrator directly contacts the user and the on-chain data of the organization, and the protection capability of the confidential data of the joint body business is improved, so that the platform provider is simple and pure, and does not contact the business private data, and the "cooperation body" is provided with flexible management and operation and maintenance capabilities.

[0091] Further, the cooperation body manager is responsible for associating the organizations with specific chains, multiple organizations in one cooperation body can join one chain, and one organization can join multiple chains. The cooperation body administrator is responsible for managing the identity and access strategy of the chain node; through multi-chain isolation, the privacy of the on-chain data is ensured. BRIEF DESCRIPTION OF DRAWINGS

[0092] The accompanying drawings, which are included to provide a further understanding of the application, form a part of the application and help to explain the application together with the specification. The illustrative embodiments of the application and their description serve to explain the application without imposing any undue limitations on the application. In the drawings:

[0093] Figure 1 The method for providing a blockchain service in the embodiment of the application is shown in the flowchart;

[0094] Figure 2 The logical relationship between the objects and roles in the BaaS platform in the embodiment of the application is shown in the schematic diagram;

[0095] Figure 3 The logical relationship of the BaaS platform architecture involved in the embodiment of the application is shown in the schematic diagram;

[0096] Figure 4 The hierarchical identity management system in the embodiment of the application is shown in the schematic diagram;

[0097] Figure 5 The cooperation body creation process in the embodiment of the application is shown in the flowchart;

[0098] Figure 6 The organization joining the cooperation body implementation process in the embodiment of the application is shown in the flowchart;

[0099] Figure 7 A system structure schematic diagram for providing a blockchain service in an embodiment of the present application. DETAILED DESCRIPTION

[0100] The inventors noticed during the invention process that:

[0101] Currently, the deployment modes of BaaS generally include two types:

[0102] Cloud deployment: This type of deployment is generally adopted by service providers providing public cloud infrastructure service, and generally only encapsulates and deploys an open source blockchain engine, and simply interfaces with the resource management and operation management system; typical examples are Huawei BCS, Baidu BaaS, etc.

[0103] Private deployment: In order to support the needs of enterprise or organization internal blockchain development, testing and application, a blockchain engine is deployed on its data center, server cluster.

[0104] As a decentralized system, both cloud deployment and private deployment face great challenges. The capabilities provided by the BaaS platform are realistic and direct, and the management and operation system design is not targeted at the construction of a blockchain application by multiple organizations, which may cause two problems:

[0105] Mode 1: The chain and user management capabilities are completely provided by the BaaS platform, which leads to the fact that the BaaS platform administrator must closely interact with the organizations using the BaaS service, which is a huge workload, the division of labor interface is not clear, it is not convenient for auditing and management, and the responsibilities cannot be separated;

[0106] Mode 2: In order to avoid the problems of mode 1, the BaaS is excessively encapsulated, and the chain and user management capabilities are insufficiently open, which leads to the fact that the organizations using the BaaS service are difficult to manage, maintain and use the service, and cannot meet the needs of business development and operation of the organization.

[0107] At the same time, in the existing implementation, excessive reliance on the mechanisms provided by a specific blockchain engine for organization management and data privacy control brings two problems:

[0108] 1. Fundamentally speaking, once the chain is created, privacy management and control need to be implemented in business logic implementation, management and operation means, which increases the development difficulty and maintenance complexity, directly leading to cost increase;

[0109] 2. Excessive reliance on the privacy feature implementation of a specific engine brings additional trouble to subsequent replacement of engine providers and replacement of engines.

[0110] Based on this, an embodiment of the present application provides a scheme for providing a blockchain service, which will be described below in conjunction with the accompanying drawings.

[0111] Figure 1 To provide a method for implementing a flowchart of a blockchain service, in a BaaS platform, as shown in the figure, can include:

[0112] Step 101, according to the requirements of the manager of the BaaS platform, maintain the BaaS root, manage the digital identity, certificate and state of the partners;

[0113] Step 102, according to the requirements of the manager of the partners, manage the digital identity, certificate and state of the internal organization of the partners;

[0114] Step 103, according to the requirements of the manager of the partners, establish at least one blockchain, each blockchain supports a business, and associate the organization with the blockchain according to the business;

[0115] Wherein: the partners are composed of organizations with the same business needs.

[0116] It should be noted that there is no time sequence relationship between steps 101, 102 and 103, they can be executed simultaneously or separately.

[0117] Specifically, in the scheme, a "partnership" way to build a blockchain service capability is proposed, which represents a group of organizations that need to use BaaS services to build a blockchain application. The blockchain service system is based on the partnership for access management, chain creation and maintenance, billing and operation;

[0118] A two-level identity and management system is established, which ensures the simplicity and purity of the platform provider and does not touch the business private data, and provides flexible management and operation capabilities for the "partnership".

[0119] Figure 2 For the logical relationship between objects and roles in the BaaS platform, the blockchain service system based on the concept of partnership to build a permissioned blockchain (also known as a consortium chain) is shown in the figure, wherein the constituent units are as follows: Figure 2

[0120] In the BaaS platform, there are multiple organizations (organizations 1-5 are shown in the figure), and multiple organizations can build a partnership for the same business needs, and the partnership can establish and maintain a specific blockchain.

[0121] The relationship between the organization, the partnership, and the chain is described as follows:

[0122] In the implementation, the organization, the partnership, or the blockchain is identified by FQDN.

[0123] ​That is, the organization can be identified by FQDN (Fully Qualified Domain Name) after successful registration, the partner can be identified by FQDN, and each chain can be identified by FQDN.

[0124] The following will mainly take FQDN identification as an example for description, but other identification methods are not excluded.

[0125] 1) Organization:

[0126] Refers to an entity such as an enterprise, government agency, or group that uses blockchain services. For example, it can be a user registered in BaaS as a legal entity.

[0127] Organization status and identification:

[0128] In implementation, the organization is identified by FQDN after successful registration; or, is identified by FQDN when joining a partner and binding to a blockchain.

[0129] Free state: can be identified by FQDN after successful registration (e.g., org01.cmbaas.cmcc);

[0130] Binding state: when joining a specific partner and binding to a blockchain, the corresponding FQDN identification (e.g., org01.chain01.union01.cmbaas.cmcc) is obtained, which is used for certificate identification;

[0131] An organization can have multiple nodes (peers) configured by the partner administrator according to specific business needs, that is, in implementation, the administrator of the partner can be provided with an interface for configuring nodes for the organization according to business needs.

[0132] 2) Partner (union):

[0133] Refers to a loose business unit composed of multiple organizations for a specific purpose;

[0134] Identified by FQDN (e.g., union01.cmbaas.cmcc);

[0135] Consensus nodes (e.g., Orderer Peer in Fabric) can be set at the partner level, responsible for consensus and block generation on all chains within the partner. Consensus nodes can be designed for high availability, and the management and operation of consensus nodes are the responsibility of the partner administrator, that is, in implementation, consensus nodes can be set within the partner to be responsible for consensus and block generation on all blockchains within the partner.

[0136] 3) Relationship between partner and organization:

[0137] In implementation, the cooperation body is composed of organizations with the same business needs, including:

[0138] An organization is selected as the representative of the cooperation body to initiate the cooperation body registration to the BaaS platform;

[0139] After the cooperation body registration is successful, the representative becomes the cooperation body administrator to initiate the invitation to other organizations to join the cooperation body, or publish the information of the cooperation body for other organizations to join;

[0140] The invited organization becomes a member of the cooperation body after accepting the invitation.

[0141] Specifically, an organization can be selected by the cooperation body offline as the representative of the cooperation body to initiate the cooperation body registration to the BaaS platform; during the cooperation body registration process, the BaaS platform administrator performs necessary audit confirmation (such as checking the organization blacklist, filtering sensitive words, confirming the legality of the representative identity, etc.);

[0142] After the cooperation body registration is successful, the representative automatically becomes the cooperation body administrator, which can initiate the invitation to the organization to join the cooperation body (under the control of the identity management and authorization system, the cooperation body administrator permission can be transferred, and multiple administrators can be added); the FQDN information of the alliance can also be published in the form of URL (Uniform Resource Locator) for legal organizations to actively join;

[0143] The invited organization becomes a member of the cooperation body after accepting the invitation (before becoming a member of the cooperation body, the organization needs to be registered first, and the organization is joined after the cooperation body; for an unregistered invitation, the process of accepting the invitation will first guide the organization to complete the registration).

[0144] 4) chain:

[0145] The cooperation body administrator can initiate the creation of one or more chains and is responsible for the management of the chain. Each chain supports a business transaction;

[0146] Each chain can be identified by FQDN (such as: chain01.union01.cmbaas.cmcc);

[0147] If there is a special security or performance requirement, a consensus node can be set up on a specific chain to be responsible for transaction ordering, block generation and consensus on the chain; that is, it can further include: setting up a consensus node on the block chain according to the need, for being responsible for one or a combination of the following functions on the block chain: transaction ordering, block generation, consensus.

[0148] The cooperation body manager is responsible for associating the organization with a specific chain, multiple organizations in a cooperation body can join one chain, and one organization can join multiple chains. The cooperation body administrator is responsible for managing the identity and access strategy of the chain node; through multi-chain isolation, the privacy of the data on the chain is ensured.

[0149] Figure 3 For the logical relationship of the BaaS platform architecture involved, as shown in the figure, at least one implementable system architecture can be as follows:

[0150] The infrastructure refers to the environment required for the operation of the blockchain, including computing, storage, network and many other resources;

[0151] The BaaS platform (business part) includes:

[0152] The infrastructure adaptation and interface submodule is responsible for the unified adaptation and shielding of various running environment infrastructures;

[0153] The blockchain engine: a component that implements the core functions of the blockchain, such as Hyperledger Fabric, EOS (a commercial distributed application design blockchain operating system, Enterprise Operation System), etc.

[0154] The blockchain engine adaptation submodule: provides functional abstraction and necessary adaptation of the blockchain engine;

[0155] The blockchain service capability interface submodule: responsible for exposing the adapted interface to the upper layer application with a unified API (Application Programming Interface, Application Programming Interface), shielding the underlying technology of the blockchain, and improving the application development efficiency;

[0156] Identity service: provides identity and authorization related control functions in the system; that is, in the implementation, it can further include: providing identity authentication of organizations or partners and / or authorization related control functions through the identity service of the BaaS platform.

[0157] The BaaS platform (management part) includes: organization management, cooperation body management, resource management, software warehouse, portal, operation management and other modules;

[0158] Blockchain application: a specific application developed for organizations, cooperation bodies and other entities, which is not within the scope of the BaaS platform.

[0159] The implementation of the cooperation body management, identity management and authorization system of the identity service is described below.

[0160] The BaaS platform separates the management responsibilities of the application and the chain from the management responsibilities of the BaaS platform itself by introducing the logical entity of the partner, thereby realizing responsibility classification, reducing the overhead of the BaaS platform administrator on the one hand, and avoiding the BaaS platform administrator from directly accessing the on-chain data of the user and the organization, thereby improving the protection capability of the business confidential data of the consortium.

[0161] Figure 4 For a layered identity management system, a two-level management system is provided by the layered identity management system, as shown in the figure, which can be as follows:

[0162] In implementation, when an organization belongs to multiple partners, the organization uses an FQDN identifier in each partner; and / or,

[0163] When an organization participates in multiple blockchains, the organization uses an FQDN identifier on each blockchain.

[0164] Specifically, according to the organization identifier mode and the chain identifier mode, an organization can join multiple partners and use a unique FQDN identifier and digital certificate in each partner; an organization can participate in multiple chains and use a unique FQDN identifier and digital certificate on each chain; through the above-mentioned modes, the administrator of the partner can simply adjust the digital certificate status and the authorized list to complete the identity management and authorization system within the partner, including inviting an organization to join the partner or participate in a chain of the partner.

[0165] The creation process of the partner is described below.

[0166] In implementation, it can further include:

[0167] After the BaaS platform confirms the identity of the partner, the BaaS platform generates an identity identifier FQDN of the partner;

[0168] The BaaS platform returns the creation result of the partner and the FQDN to the representative of the partner;

[0169] The BaaS platform creates a public-private key pair for the FQDN and saves the private key;

[0170] The BaaS platform initiates a public key endorsement to the identity server;

[0171] After the identity server verifies that the identity of the partner is valid, the endorsement and publication of the public key are completed.

[0172] The following is described by taking an example.

[0173] Figure 5 For a creation process of a partner, as shown in the figure, when the partner is created, an organization representative is selected by multiple organizations to initiate, including:

[0174] Step 501, the organization representative submits the application materials of the cooperative body to initiate registration;

[0175] Step 502, the cooperative body management module checks the registration information to ensure the legality of the initiating organization and the legality of the cooperative body information and nature;

[0176] Step 503, the cooperative body management module generates the identity FQDN of the cooperative body (such as union01.cmbaas.cmcc);

[0177] Step 504, registration is successful, and the FQDN is replied;

[0178] The cooperative body management module returns the creation result and FQDN to the cooperative body representative;

[0179] Step 505, generate a public-private key pair;

[0180] The cooperative body administrator creates a public-private key pair for the secondary FQDN (assuming that the primary FQDN, i.e. the identity of the BaaS platform, is cmbaas.cmcc), and properly saves the private key;

[0181] Step 506, the cooperative body administrator initiates a public key endorsement to the identity service;

[0182] Step 507, the identity service verifies the validity of the cooperative body identity as a prerequisite to complete the endorsement and publication of the public key;

[0183] Step 508, return the response to the cooperative body administrator, and the endorsement is successful.

[0184] At this point, the administrator of the cooperative body representative organization has the identity and private key of the cooperative body, and can use the private key to create an identity and certificate system within the cooperative body in subsequent node joining; similarly, the private key can be used to allocate and maintain digital certificates for participating organizations and nodes.

[0185] The implementation of the organization joining the cooperative body is described below.

[0186] Figure 6 The implementation flowchart for the organization joining the cooperative body is shown in the figure, taking invitation to join as an example, assuming that the invited organization b has not created an identity on the blockchain platform initially, which can include:

[0187] Step 601. The organization representative a provides the cooperative body identity, invited organization identity or contact information to the cooperative body management module;

[0188] Step 602. The cooperative body management module checks the information to confirm the legality of the invited organization;

[0189] Step 603. The cooperative body management module initiates a request to the invited organization b;

[0190] Step 604. The invited organization b initiates identity registration to the identity service;

[0191] Step 605. The invited organization b responds to the partner management module;

[0192] Step 606. The partner management module adds the invited organization b to the chain;

[0193] Step 607. The partner management module informs the organization representative a of the successful invitation.

[0194] Based on the same inventive concept, the embodiments of the present application also provide a system for providing a blockchain service and a computer readable storage medium. Since the principles of the devices for solving problems are similar to the method for providing a blockchain service, the implementation of the devices can be referred to the implementation of the method, and the repeated parts will not be described here.

[0195] In the implementation of the technical solutions provided by the embodiments of the present application, the following implementation modes can be used.

[0196] Figure 7 The system structure diagram for providing a blockchain service is shown in the figure. In the BaaS platform, the system includes:

[0197] The processor 700 is used to read the program in the memory 720 and execute the following processes:

[0198] According to the requirements of the manager of the BaaS platform, the BaaS root is maintained, and the digital identity, certificate and state of the partners are managed;

[0199] According to the requirements of the manager of the partners, the digital identity, certificate and state of the internal organizations of the partners are managed;

[0200] According to the requirements of the manager of the partners, at least one blockchain is established, each blockchain supports a business, and the organizations are associated with the blockchains according to the business;

[0201] Among them, the partners are composed of organizations with the same business requirements;

[0202] The transceiver 710 is used to receive and send data under the control of the processor 700.

[0203] In the implementation, the organizations, partners or blockchains are identified by FQDN.

[0204] In the implementation, the organizations are identified by FQDN after successful registration; or, are identified by FQDN when joining the partners and binding to the blockchains.

[0205] In an implementation, when an organization belongs to multiple cooperatives, the organization uses one FQDN to identify in each cooperative; and / or,

[0206] When an organization participates in multiple blockchains, the organization uses one FQDN to identify on each blockchain.

[0207] In an implementation, further comprising:

[0208] Providing an interface for the manager of the cooperative to configure nodes for the organization according to the business.

[0209] In an implementation, further comprising:

[0210] Setting a consensus node in the cooperative, which is responsible for consensus and block generation on all blockchains in the cooperative.

[0211] In an implementation, the cooperative is composed of organizations with the same business needs, including:

[0212] Selecting an organization as a representative of the cooperative to initiate the cooperative registration with the BaaS platform;

[0213] After the cooperative registration is successful, the representative becomes the cooperative administrator, initiates an invitation to other organizations to join the cooperative, or publishes the information of the cooperative for other organizations to join;

[0214] The invited organization becomes a member of the cooperative after accepting the invitation.

[0215] In an implementation, further comprising:

[0216] The BaaS platform generates an identity FQDN for the cooperative after confirming the identity of the cooperative;

[0217] The BaaS platform returns the cooperative creation result and FQDN to the representative of the cooperative;

[0218] The BaaS platform creates a public-private key pair for the FQDN and saves the private key;

[0219] The BaaS platform initiates a public key endorsement to the identity server;

[0220] After the identity server verifies that the cooperative identity is valid, the endorsement and publication of the public key are completed.

[0221] In an implementation, further comprising:

[0222] According to the needs, setting a consensus node on the blockchain, which is responsible for one or a combination of the following functions on the blockchain: transaction ordering, block generation, consensus.

[0223] In an implementation, further comprising:

[0224] Identity services provided by the BaaS platform provide identity authentication of an organization or a partner and / or authorization-related control functions.

[0225] In the above, Figure 7 The bus architecture can include any number of interconnected buses and bridges, specifically the various circuitry linking the one or more processors represented by the processor 700 and the memory represented by the memory 720. The bus architecture can also link various other circuitry, such as peripheral devices, voltage regulators, and power management circuitry, which are well known in the art and thus will not be further described herein. The bus interface provides an interface. The transceiver 710 can be a plurality of elements, i.e., including a transmitter and a receiver, providing a means for communicating with various other apparatuses over a transmission medium. The processor 700 is responsible for managing the bus architecture and general processing, and the memory 720 can store data used by the processor 700 in performing operations.

[0226] The embodiment of the present application also provides a system for providing a blockchain service, in a BaaS platform, comprising:

[0227] A platform management module, configured to maintain a BaaS root according to a requirement of a manager of the BaaS platform, and manage digital identities, certificates, and states of partners;

[0228] A partner management module, configured to manage digital identities, certificates, and states of internal organizations of the partners according to a requirement of a manager of the partners, establish at least one blockchain according to the requirement of the manager of the partners, each blockchain supporting a business, and associate the organizations with the blockchain according to the business;

[0229] The partners are composed of organizations having the same business requirements.

[0230] In the implementation, the organization, the partner, or the blockchain is identified by an FQDN.

[0231] In the implementation, the platform management module is further configured to identify the organization by the FQDN after successful registration; or identify the organization by the FQDN when the organization joins the partner and is bound to the blockchain.

[0232] In the implementation, when an organization belongs to multiple partners, the organization uses one FQDN to identify in each partner; and / or,

[0233] When an organization participates in multiple blockchains, the organization uses one FQDN to identify in each blockchain.

[0234] In the implementation, the partner management module is further configured to provide an interface for the manager of the partner to configure a node for the organization according to the business.

[0235] In an implementation, the consortium management module is further configured to set consensus nodes in the consortium, which are responsible for consensus and block generation on all blockchains in the consortium.

[0236] In an implementation, the consortium management module is further configured to, when creating a consortium, include:

[0237] select an organization as a representative of the consortium to initiate consortium registration with the BaaS platform;

[0238] After the consortium registration is successful, the representative becomes a consortium administrator to invite other organizations to join the consortium or publish information of the consortium for other organizations to join;

[0239] The invited organizations become consortium members after accepting the invitation.

[0240] In an implementation, the platform management module is further configured to, when creating a consortium, include:

[0241] The BaaS platform generates an identity FQDN of the consortium after confirming the identity of the consortium;

[0242] The BaaS platform returns the consortium creation result and the FQDN to the representative of the consortium;

[0243] The BaaS platform creates a public-private key pair for the FQDN and saves the private key;

[0244] The BaaS platform initiates endorsement of the public key to the identity server;

[0245] After the identity server verifies that the identity of the consortium is valid, the endorsement and publication of the public key are completed.

[0246] In an implementation, the consortium management module is further configured to set consensus nodes on a blockchain as needed, which are responsible for one or a combination of the following functions on the blockchain: transaction ordering, block generation, and consensus.

[0247] In an implementation, the platform management module is further configured to provide identity authentication and / or authorization-related control functions of organizations or partners through the identity service of the BaaS platform.

[0248] For the sake of description, the parts of the apparatus are described as various modules or units in function. Of course, the functions of the modules or units can be implemented in one or more software or hardware in implementing the present application.

[0249] The present application also provides a computer readable storage medium storing a computer program for executing the method for providing a blockchain service.

[0250] The implementation can refer to the implementation of the method for providing the blockchain service.

[0251] In summary, the technical solution provided by the embodiment of the application is a blockchain service system supporting multi-engine adaptation, coexistence and unified management, and has the characteristics of supporting multiple engines and shielding the underlying blockchain differences for developers and users.

[0252] Multiple organizations can create and maintain multiple chains in the blockchain service system in the form of a consortium, and different levels of privacy data can be transmitted on different chains according to business needs.

[0253] The blockchain service providing and chain management mode based on the consortium realizes two-level management and responsibility separation of the blockchain service platform and the consortium, provides a higher level of data security for users, and reduces the management overhead of the blockchain service platform.

[0254] Avoids single-engine binding: multi-engine adaptation, coexistence and unified management, and provides developer support through similar general service interfaces, which provides better choices for organizations and customers while avoiding manufacturer binding, engine or software binding.

[0255] Better developer and user support: developers do not need to understand the details of the underlying blockchain technology and programming interfaces, and only need to use general interfaces (such as RESTful API) for on-chain operations and contract calls; customers do not need to deploy and maintain complex underlying technical details.

[0256] Better privacy protection: multiple chains can be divided according to privacy levels and access organization roles within the consortium, and data is isolated between different chains; the responsibilities of the service platform administrator and the consortium administrator are separated, and the service platform administrator does not need to directly participate in the management of organizations and chains, further reducing the risk of privacy leakage and audit difficulty.

[0257] Clearer management responsibility interface: the two-level identity service system liberates the platform administrator from the heavy customized customer management needs; and the consortium administrator has better flexibility and autonomy.

[0258] Those skilled in the art will appreciate that embodiments of the application can be provided as methods, systems, or computer program products. Therefore, the application can take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the application can take the form of a computer program product implemented on one or more computer usable storage media (including but not limited to magnetic disk storage and optical storage, etc.) containing computer usable program code.

[0259] The present application is described in reference to the accompanying drawings, which use flow diagrams and / or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the application. It will be understood that each block of the flow diagrams and / or block diagrams, and combinations of blocks in the flow diagrams and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 one or more flow or flow diagrams and / or block or blocks. Figure 1 one or more flow or flow diagrams and / or block or blocks.

[0260] These computer program instructions can also be stored in a computer- readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instructions which implement the function specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 one or more flow or flow diagrams and / or block or blocks. Figure 1 one or more flow or flow diagrams and / or block or blocks.

[0261] The computer program instructions can also be loaded into a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 one or more flow or flow diagrams and / or block or blocks. Figure 1 one or more flow or flow diagrams and / or block or blocks.

[0262] Obviously, numerous modifications and variations of the present application are possible in light of the above teachings. It is therefore to be understood that within the scope of the appended claims and their legal equivalents, the application can be practiced otherwise than as specifically described.

Claims

1. A method of providing a blockchain service, the method comprising: In a blockchain as a service (BaaS) platform, comprising: maintaining a BaaS root according to a requirement of a manager of the BaaS platform, and managing digital identities, certificates and states of partners; managing digital identities, certificates and states of organizations within a partner according to a requirement of a manager of the partner; establishing at least one blockchain according to a requirement of a manager of the partner, each blockchain supporting a business, and associating organizations with the blockchain according to the business; wherein the partner is composed of organizations having the same business requirement; the partner is composed of organizations having the same business requirement, comprising: selecting an organization as a representative of the partner to initiate a registration of the partner to the BaaS platform; after the registration of the partner is successful, the representative becomes a manager of the partner to initiate an invitation to other organizations to join the partner, or to publish information of the partner for joining by other organizations; an organization invited and accepting the invitation, or an organization whose joining request is approved by the manager of the partner, becomes a member of the partner.

2. The method of claim 1, wherein, The organization, the partner, or the blockchain is identified by a fully qualified domain name (FQDN).

3. The method of claim 2, wherein, The organization is identified by the FQDN after the registration is successful; or is identified by the FQDN when joining the partner and being bound to the blockchain.

4. The method of claim 2, wherein, When an organization belongs to multiple partners, the organization uses one FQDN in each partner; and / or, When an organization participates in multiple blockchains, the organization uses one FQDN on each blockchain.

5. The method of claim 1, wherein, Further comprising: providing an interface for the manager of the partner to configure nodes for the organizations according to the business.

6. The method of claim 1, wherein, Further comprising: setting a consensus node in the partner to be responsible for consensus and block generation on all blockchains in the partner.

7. The method of claim 1, wherein, Further comprising: generating an identity of the partner by the BaaS platform after the identity of the partner is confirmed; returning the creation result of the partner and the FQDN to the representative of the partner by the BaaS platform; creating a public-private key pair for the FQDN by the BaaS platform, and saving the private key; initiating endorsement of the public key to an identity server by the BaaS platform; completing the endorsement and publishing of the public key after the identity server verifies that the identity of the partner is valid.

8. The method of claim 1, wherein, Further comprising: setting a consensus node on the blockchain as needed to be responsible for one or a combination of the following functions on the blockchain: transaction ordering, block generation, consensus.

9. The method of claim 1, wherein, Further comprising: providing identity authentication and / or authorization-related control functions of the organizations or partners by an identity service of the BaaS platform. 10.A system for providing a blockchain service, the system comprising: In the BaaS platform, comprising: a processor for reading a program in a memory and executing the following processes: maintaining a BaaS root according to a requirement of a manager of the BaaS platform, and managing digital identities, certificates and states of partners; managing digital identities, certificates and states of organizations within a partner according to a requirement of a manager of the partner; establishing at least one blockchain according to a requirement of a manager of the partner, each blockchain supporting a business, and associating organizations with the blockchain according to the business; wherein the partner is composed of organizations having the same business requirement; a transceiver for receiving and sending data under control of the processor; The cooperation body is composed of organizations with the same business needs, including: An organization is selected as a representative of the cooperation body to initiate cooperation body registration to the BaaS platform; After the cooperation body registration is successful, the representative becomes the cooperation body administrator to invite other organizations to join the cooperation body or publish the information of the cooperation body for other organizations to join; The invited and accepted organizations or the organizations whose joining requests are approved by the cooperation body administrator become the members of the cooperation body. 11.A system for providing a blockchain service, the system comprising: In the BaaS platform, including: The platform management module is used to maintain the BaaS root according to the requirements of the administrator of the BaaS platform, manage the digital identity, certificate and state of the cooperation body; The cooperation body management module is used to manage the digital identity, certificate and state of the internal organizations of the cooperation body according to the requirements of the administrator of the cooperation body; at least one block chain is established according to the requirements of the administrator of the cooperation body, each block chain supports one business, and the organizations are associated with the block chain according to the business; The cooperation body is composed of organizations with the same business needs; The cooperation body is composed of organizations with the same business needs, including: An organization is selected as a representative of the cooperation body to initiate cooperation body registration to the BaaS platform; After the cooperation body registration is successful, the representative becomes the cooperation body administrator to invite other organizations to join the cooperation body or publish the information of the cooperation body for other organizations to join; The invited and accepted organizations or the organizations whose joining requests are approved by the cooperation body administrator become the members of the cooperation body.

12. A computer-readable storage medium, characterized in that, The computer readable storage medium stores the computer program for executing the method of any one of claims 1 to 9.

Images