An adapter signature-based cross-chain asset atomic exchange method

Abstract

The application discloses an adapter signature-based cross-chain asset atomic exchange method. The method comprises the following steps: an initiator and a transaction party establish their own key pairs and difficulty relations, and send their own public keys and difficulty relations to each other; the initiator creates a first pre-signature according to the difficulty relations of the initiator and the transaction party, and sends the first pre-signature to the transaction party; the transaction party creates a second pre-signature according to the difficulty relation of the initiator, and sends the second pre-signature to the initiator; the initiator creates a first formal signature by adapting the second pre-signature, and publishes a transaction to a chain according to the first formal signature; and the transaction party extracts a secret value corresponding to the difficulty relation according to the first formal signature and the second pre-signature published by the initiator, adapts the first pre-signature to create a second formal signature, and publishes a transaction to another chain according to the second formal signature. The adapter signature technology is used, so that the cross-chain transaction speed is improved, the transaction security is enhanced, and the management and maintenance cost of the cross-chain transaction is reduced.

Description

Technical Field

[0001] This invention relates to the field of data processing technology, specifically a cross-chain asset atomic swap method based on adapter signatures. Background Technology

[0002] With the rapid development of blockchain projects, a large number of different heterogeneous blockchains have emerged. A related question is: how to achieve atomic transactions of assets between chains? An atomic transaction of blockchain assets means that both parties complete the transaction simultaneously or fail simultaneously; the two are indivisible. That is, both parties either succeed simultaneously or fail simultaneously; there is no situation where one party completes the transaction while the other fails. Based on this, blockchain "cross-chain technology" with atomic swaps has emerged. Mainstream cross-chain technologies include hash time-locked loop (HTL) technology, third-party technologies, sidechains, and relay chain technologies.

[0003] Hash time-locking technology uses hash locks and time locks to freeze and lock the assets in a transaction for a period of time to complete the transaction between the two parties, which limits the transaction throughput and transaction speed. Third-party technology completes the transaction between the two parties by having a notified third party forward and verify cross-chain transaction information, which poses a risk of centralization. Sidechain and relay chain technology completes the transaction between the two parties by adding a parallel sidechain or relay chain on the main chain, which increases the management and maintenance costs of cross-chain transactions. Summary of the Invention

[0004] In view of the problems in the prior art, the present invention provides a cross-chain asset atomic swap method based on adapter signature. By utilizing the new adapter signature technology, the cross-chain transaction throughput and transaction speed are improved, transaction security is enhanced, and the management and maintenance costs of cross-chain transactions are reduced.

[0005] To achieve the above objectives, the present invention provides the following technical solution:

[0006] S1. The initiator and the transacting party establish their respective key pairs (private key, public key) and hard key relationships, and send their respective public keys and hard key relationships to each other;

[0007] S2. The initiator creates the first presignature based on its own hardness relationship and the hardness relationship of the transacting party and sends the first presignature to the transacting party;

[0008] S3. The transacting party first verifies the first pre-signature received. If the verification passes, a second pre-signature is created based on the initiator's difficulty relationship and sent to the initiator; otherwise, the transaction fails.

[0009] S4. The initiator first verifies the received second pre-signature. If the verification passes, the initiator adapts the second pre-signature to create the first official signature and publishes a transaction to L based on the first official signature. B On-chain; otherwise, verification fails.

[0010] S5. The transacting party verifies the first official signature. If the verification passes, the secret value corresponding to the hard relation is extracted based on the first official signature and the second pre-signature issued by the initiator. The first pre-signature is then adapted to create the second official signature, and a transaction is published to L based on the second official signature. A On-chain; otherwise, the verification fails.

[0011] S1 specifically includes the following steps:

[0012] S11. The initiator randomly selects a prime number q; two hash functions H1 are set: {0, 1} * →G1 and H2: {0, 1} * →G1; Randomly select a pairwise mapping e: G1×G1→G2, where G1 represents the elliptic curve additive group of order q, G2 represents the elliptic curve multiplicative group of order q, and g is a generator of G1. The initiator starts from Z. q * Randomly select a non-zero integer t A Used as the private key, and used to calculate the public key. Among them, Z q * Let Z represent the set of integers from 1 to q-1. The initiator starts from Z. q * Randomly select a non-zero integer S A As for one's own difficult relationship The secret value. The initiator will use the parameters (q, H1, H2, e, G1, G2, g, Z) q * ) and (P A S A Send to the transacting party;

[0013] S12, the transacting party from Z q * Randomly select a non-zero integer t B Used as the private key, and used to calculate the public key. Then the transacting party from Z q * Randomly select a non-zero integer s B As for one's own difficult relationship The secret value. The transacting parties will (P) B S B Send to the initiator.

[0014] S2 specifically includes the following steps:

[0015] S21, the initiator is from Z q * Randomly select a non-zero integer r A And calculate Where M AB This is the transaction data given by the initiator to the transacting party. The initiator will create the first pre-signature σ. AB =(r A V A M AB (Sent to the trading party.)

[0016] S3 specifically includes the following steps:

[0017] S31. The transacting party verifies the first pre-signature. If the condition is not met, the process fails; if it is met, proceed to the next step.

[0018] S32, the transacting party from Z q * Randomly select a non-zero integer r B And calculate Where M BA This is the asset transaction data provided by the transacting party to the initiating party. The transacting party will create a second pre-signature σ. BA =(r B V B M BA Send to the initiator.

[0019] S4 specifically includes the following steps:

[0020] S41. The initiator verifies the second pre-signature. If the condition is not met, the process fails; if it is met, proceed to the next step.

[0021] S42. The initiator creates the first official signature based on the second pre-signature adapter. in

[0022] S43. The initiator verifies the first official signature and checks the equation. If the condition is not met, the process fails; if it is met, proceed to the next step.

[0023] S44. The initiator publishes a transaction (i.e., the transaction party transfers assets to the initiator) on the blockchain, and LB will be the first to officially sign it. As a condition for unlocking this transaction.

[0024] S5 specifically includes the following steps:

[0025] S51, The transacting party verifies the first official signature. If the condition is not met, the process fails; if it is met, proceed to the next step.

[0026] S52, The transacting parties are based on the first officially issued signature. and the second pre-signature σ BA Extract the secret value from the initiator.

[0027] S53, the transacting parties according to s A The first pre-signature will be adapted to create the second official signature. in

[0028] S54. The transacting parties verify the second official signature and check the equation. If the condition is not met, the process fails; if it is met, proceed to the next step.

[0029] S55. A transacting party publishes a transaction (an asset transaction between the initiator and the transacting party) and records it on the LA blockchain, which will then send the second official signature. As a condition for unlocking this transaction.

[0030] As can be seen from the above technical solution, this invention discloses a cross-chain asset atomic swap method based on adapter signatures. Compared with the prior art, its beneficial effects and advantages are as follows:

[0031] Before the initiator and the transacting party conduct an asset transaction on the two chains, the initiator first creates a first pre-signature by embedding its own hard problem relation and the transacting party's hard problem relation, and sends it to the transacting party. Then, the transacting party creates a second pre-signature using the initiator's hard problem relation and sends it to the initiator. Because the initiator knows the secret value of its hard problem, it can use the secret value to adapt the second pre-signature into the first official signature, and publish the transaction to chain L using this first official signature. B Completed on chain L B Unlock the assets of the transacting parties on the blockchain. And as long as the initiator is on the blockchain... B Once the assets of the transacting parties are unlocked, they can then access the blockchain. B The transaction information and the secret value of the initiator's hard relation extracted from the first pre-signature are used to adapt the second formal signature, and the transaction is published to Chain L using this second formal signature. A Completed on chain L A Unlock the initiator's assets on the blockchain. However, if the initiator is not on the blockchain... BIf the initiator's assets are unlocked on-chain, then the initiator cannot extract the secret value of the hard relation to adapt to the second formal signature, and thus cannot unlock the initiator's assets, thereby achieving atomic transactions of cross-chain assets. Both the initiator's and the transacting party's operations are completed off-chain. The initiator and transacting party only need to publish their created first and second formal signatures as conditions for unlocking the transacting party's assets onto the chain, respectively. This eliminates the need for hash time locks, avoiding waiting time and improving cross-chain transaction throughput and speed. Furthermore, it eliminates the need for sidechains, relay chains, or third-party auxiliary technologies, reducing the management and maintenance costs of cross-chain transactions.

[0032] In addition, chain L B The first formal signature unlocking the assets of the transacting parties requires the secret value of the initiator's difficult relationship to create. And Chain L... A The second formal signature for unlocking the initiator's assets requires the secret values ​​of both the initiator's hard relation and the transacting party's hard relation. This ensures that only the transacting party and the initiator can create the first and second formal signatures, thus enhancing the security of cross-chain transactions. Attached Figure Description

[0033] Figure 1 This is a block diagram of a cross-chain asset atomic swap method based on adapter signature according to the present invention.

[0034] Figure 2 This is a flowchart of a cross-chain asset atomic swap method based on adapter signature according to the present invention. Detailed Implementation

[0035] The following is in conjunction with the appendix Figure 1 and Figure 2 The following describes specific embodiments of the present invention.

[0036] This invention discloses an embodiment of a cross-chain asset atomic swap method based on adapter signatures (assuming the initiator uses Chain L). A Asset Z on A Exchange chain L with the trading party B Asset Z on B Specifically, it includes the following steps:

[0037] S1. The initiator and the transacting party establish their respective key pairs (private key, public key) and hard key relationships, and send their respective public keys and hard key relationships to each other. The specific steps are as follows:

[0038] S11. The initiator randomly selects a prime number q; two hash functions H1 are set: {0, 1} * →G1 and H2: {0, 1} *→G1; Randomly select a pairwise mapping e: G1×G1→G2, where G1 represents the elliptic curve additive group of order q, G2 represents the elliptic curve multiplicative group of order q, and g is a generator of G1. The initiator starts from Z. q * Randomly select a non-zero integer t A Used as the private key, and used to calculate the public key. Among them, Z q * Let Z represent the set of integers from 1 to q-1. The initiator starts from Z. q * Randomly select a non-zero integer S A As for one's own difficult relationship The secret value. The initiator will use the parameters (q, H1, H2, e, G1, G2, g, Z) q * ) and (P A S A Send to the transacting party;

[0039] S12, the transacting party from Z q * Randomly select a non-zero integer t B Used as the private key, and used to calculate the public key. Then the transacting party from Z q * Randomly select a non-zero integer s B As for one's own difficult relationship The secret value. The transacting parties will (P) B S B Send to the initiator;

[0040] S2, The initiator, based on its own difficulties, S A Difficult relationship with the trading parties B The steps to create and send the first presignature to the transacting parties are as follows:

[0041] S21, the initiator is from Z q * Randomly select a non-zero integer r A And calculate Where M AB The initiator wants to link the chain L A Asset Z on A The transaction data provided to the transacting parties. The initiator will create the first pre-signed σ. AB =(r A V A M AB Send to the transacting party;

[0042] S3. The transacting parties first verify the first pre-signature σ received. AB If the verification passes, a second presignature is created based on the initiator's hardness relation and sent to the initiator; otherwise, the verification fails. The specific steps are as follows:

[0043] S31, The transacting party verifies the first pre-signature σ AB Verify the equation If the condition is not met, the process fails; if it is met, proceed to the next step.

[0044] S32, the transacting party from Z q * Randomly select a non-zero integer r B And calculate Where M BA The transacting party needs to link the chain L B Asset Z on B The transaction data is given to the initiator. The transacting parties will create a second pre-signature σ. BA =(r B V B M BA Send to the initiator;

[0045] S4. The initiator first verifies the received second presignature σ. BA If the verification passes, the initiator adapts the second pre-signature to create the first official signature, and publishes a transaction to L based on the first official signature. B On-chain; otherwise, verification fails. Specific steps are as follows:

[0046] S41, The initiator verifies the second pre-signature σ BA Verify the equation If the condition is not met, the process fails; if it is met, proceed to the next step.

[0047] S42, The initiator, based on the second pre-signature σ BA Adaptation to create the first official signature in

[0048] S43. The initiator verifies the first official signature and checks the equation. If the condition is not met, the process fails; if it is met, proceed to the next step.

[0049] S44, The initiator publishes a transaction (i.e., the transacting party sends a chain L). B Asset Z on B (Transactions initiated by the party) are recorded on the blockchain. B And the first official signature As a condition for unlocking this transaction;

[0050] S5. The transacting party verifies the first official signature. If the verification passes, the secret value corresponding to the hard relation is extracted based on the first official signature and the second pre-signature issued by the initiator. The first pre-signature is then adapted to create the second official signature, and a transaction is published to L based on the second official signature. A On-chain; otherwise, verification fails; specifically including:

[0051] S51, the transacting party from chain L B Obtained the first official signature Verify the equation If the condition is not met, the process fails; if it is met, proceed to the next step.

[0052] S52, The transacting parties are based on the first officially issued signature. and the second pre-signature σ BA Extract the secret value from the initiator.

[0053] S53, the transacting parties according to s A The first presigned σ AB Adapt to create a second official signature in

[0054] S54. The transacting parties verify the second official signature and check the equation. If the condition is not met, the process fails; if it is met, proceed to the next step.

[0055] S55, The transacting party publishes a transaction (i.e., the initiator sends a chain L). A Asset Z on A On-chain L (transactions to the transacting parties) A and the second official signature As a condition for unlocking this transaction.

[0056] Although the present invention has been described in detail through the preferred embodiments above, it should be understood that the above description should not be considered as a limitation of the present invention. Various modifications and substitutions to the present invention will be apparent to those skilled in the art after reading the above description. Therefore, the scope of protection of the present invention should be defined by the appended claims.

Claims

1. An adapter signature-based cross-chain asset atomic exchange method, characterized in that, The method is applied to asset transaction between an initiator and a transaction party, and the method comprises: S1, the initiator and the transaction party establish respective key pairs, the key pair comprising a private key and a public key, and a difficult relationship is established at the same time, and the respective public key and the difficult relationship are sent to the other party; S2, the initiator creates a first pre-signature according to the own difficult relationship and the difficult relationship of the transaction party and sends the first pre-signature to the transaction party; S3, the transaction party first verifies the received first pre-signature, if the verification is passed, a second pre-signature is created according to the difficult relationship of the initiator and sent to the initiator, otherwise, it fails; S4, the initiator first verifies the received second pre-signature, if the verification is passed, the initiator adapts the second pre-signature to create the first official signature, and publishes a transaction to L B chain; otherwise, the verification is failed. S5, the transaction party verifies the first formal signature, if the verification is passed, the secret value corresponding to the difficult relationship is extracted according to the first formal signature and the second pre-signature issued by the initiator, and the second formal signature is created by adapting the first pre-signature, and a transaction is issued according to the second formal signature to the L A on-chain; otherwise, the verification is not passed, and the failure.

2. The cross-chain asset atomic swap method based on adapter signature according to claim 1, wherein, In the S1, comprising: S11. The initiator randomly selects a prime number q; sets two hash functions H1: {0, 1} * → G1 and H2: {0, 1} * →G1; Randomly select a pairwise mapping e:G 1× G1→G2, where G1 denotes the elliptic curve additive group of order q, G2 denotes the elliptic curve multiplicative group of order q, g is a generator of G1, and the initiator starts from Z. q * Randomly select a non-zero integer t A Used as the private key, and used to calculate the public key. Among them, Z q * Let Z represent the set of integers from 1 to q-1, with the initiator starting from Z. q * Randomly select a non-zero integer s A As for one's own difficult relationship The secret value, the initiator will send the parameters (q, H1, H2, e, G1, G2, g, Z) to the initiator. q * ) and (P A S A Send to the transacting party; S12, the transacting party from Z q * Randomly select a non-zero integer t B Used as the private key, and used to calculate the public key. Then the transacting party from Z q * Randomly select a non-zero integer s B As for one's own difficult relationship The secret value, the transacting party will (P) B S B Send to the initiator.

3. The cross-chain asset atomic swap method based on adapter signature according to claim 2, wherein, In the S2, comprising: S21, the initiator sends to the responder q * randomly select a non-zero integer r A and compute where M AB is the transaction data from the initiator to the responder, g rA is the r A th power of g, the initiator sends the first pre-signature σ AB = (r A , V A , M AB ) to the responder.

4. The cross-chain asset atomic swap method based on adapter signature of claim 3, wherein, In the S3, comprising: S31, the transaction party verifies the first pre-signature, verifies whether it is established, if not, then fail; if established, then go to the next step; S32, the transacting party from Z q * Randomly select a non-zero integer r B And calculate Where M BA It is the asset transaction data given by the transacting party to the initiating party, g rB It is the r of g B The exponentiation operation will create a second pre-signature σ by the transacting parties. BA =(r B V B M BA Send to the initiator.

5. The cross-chain asset atomic swap method based on adapter signature according to claim 4, wherein, In the S4, comprising: S41, the initiator verifies the second pre-signature, verifies whether it is true or not, if not, then fail, if true, then go to the next step; S42, the initiator creates a first official signature according to the second pre-signature adaptation wherein S43, the initiator verifies the first formal signature, judges whether the equation is established, if not, then fail; if established, then enter the next step, wherein, is the g power operation; S44, the initiator publishes a transaction on chain L B that transfers the asset on chain L B to the initiator. The first formal signature is used as a condition to unlock the transaction.

6. The cross-chain asset atomic swap method based on adapter signature of claim 5, wherein, In the S5, comprising: S51, the transaction party verifies the first formal signature, verifies whether it is established, if not, then fail; if established, then go to the next step; S52, the transaction party according to the published first formal signature and the second pre-signature σ BA extracting the secret value of the initiator S53, the transacting parties according to s A The first pre-signature will be adapted to create the second official signature. in S54, the transaction party verifies the second formal signature, judges whether the equation is established, if not, then fail; if yes, then enter the next step; wherein, is the g power operation; S55, the transaction party issues a transaction that is the initiator of the transaction on-chain L A A the second formal signature as a condition for unlocking the transaction.​​

Images