Blockchain-based method, device and equipment for institution to enter network and storage medium

Abstract

The application belongs to the technical field of blockchains, solves the problem of how to improve the efficiency and data security of network initialization of an institution in a blockchain network in the prior art, and provides an institution network access method, device, equipment and storage medium based on a blockchain. The method comprises installing a management platform on the institution side, and an institution technician can directly input institution information and specify institution attributes in a machine room, and the management platform generates configuration files and networking files required for the institution to perform blockchain networking based on the institution information and the institution attributes; a deployment personnel downloads the files for deploying the blockchain from the management platform of the institution, and performs blockchain deployment, thereby reducing the participation of the deployment personnel in the network initialization process of the institution joining the blockchain, the deployment personnel cannot access sensitive data of the institution, and the data security and network initialization efficiency of the blockchain are improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of blockchains, and in particular to a blockchain-based network entry method, device, equipment and storage medium. BACKGROUND

[0002] The blockchain technology is built on a transmission network (also referred to as a blockchain network), and a distributed node device (hereinafter referred to as a node) in the transmission network generates block data by running a blockchain program according to a preset consensus strategy, and verifies and stores the block data by using a chain data structure, thereby realizing a data tamper-proof mechanism and providing a safe and reliable new technical idea for business development.

[0003] Currently, the alliance chain in the blockchain needs to deploy personnel to configure a large amount of complex data in the network initialization process. Moreover, the deployment of the blockchain may occur in different institutional machine rooms in actual business scenarios. The deployment personnel needs to copy data from different institutional machine rooms to form a network during the deployment process, which results in a high error rate in the network initialization process and a large amount of work. At the same time, since the deployment personnel manually initializes, the secret data such as the secret key of the blockchain network may be leaked by human, which is contrary to the tenet of the blockchain technology. Therefore, how to efficiently and safely complete the network initialization of each institution or node in the alliance chain is a problem to be solved. SUMMARY

[0004] Therefore, the embodiments of the present application provide a blockchain-based network entry method, device, equipment and storage medium to solve the problem of how to improve the efficiency and data security of network initialization of institutions in the blockchain network.

[0005] The technical solution adopted by the present application is:

[0006] On the one hand, the present application provides a blockchain-based network entry method, which deploys a management platform on a target institution side, the management platform is built-in with an application program for generating files required for blockchain deployment, and the method comprises:

[0007] Obtaining institution information and institution attributes of the target institution, wherein the institution attributes include single-institution networking and multi-institution networking;

[0008] Generating a node configuration file and a networking file for blockchain deployment on the target institution side according to the institution information and the institution attributes;

[0009] Deploying a blockchain on the target institution according to the configuration file and the networking file;

[0010] The networking file includes an identity information file and a genesis file.

[0011] Preferably, if the target organization is a multi-organization network, the generating, according to the organization information and the organization attribute, of the node configuration file and the networking file of the blockchain deployment on the target organization side comprises:

[0012] Obtaining the identity information of the target organization;

[0013] If the identity information indicates that the target organization is a member organization, generating the node configuration file and the identity information file of the target organization according to the organization information;

[0014] If the identity information indicates that the target organization is a networking organization, generating the node configuration file and the genesis file of the target organization according to the organization information.

[0015] Preferably, if the target organization is a single-organization network of a new blockchain network, the generating, according to the organization information and the organization attribute, of the node configuration file and the networking file of the blockchain deployment on the target organization side comprises:

[0016] Obtaining a first node quantity corresponding to a minimum node quantity required for creating a blockchain;

[0017] Generating the genesis file and N node configuration files according to the organization information and the first node quantity;

[0018] Wherein, N≥the first node quantity, and N is a positive integer.

[0019] Preferably, the data of the node configuration file is desensitized to obtain the identity information file.

[0020] Preferably, if the target organization is a single-organization network of a specified blockchain, the deploying, according to the configuration file and the networking file, of the blockchain on the target organization comprises:

[0021] Generating the identity information file and M node configuration files according to the organization information;

[0022] Running M node configuration files to deploy M blockchain nodes on the target organization side;

[0023] Running the identity information file on the networking organization side to load the identity information of the target organization to the blockchain;

[0024] Wherein, M≥1, and M is a positive integer.

[0025] Preferably, the running, on the networking organization side, of the identity information file to load the identity information of the target organization to the blockchain comprises:

[0026] obtaining invitation information of the target organization to join the blockchain, wherein the invitation information comprises a URL link required for the organization to join the blockchain based on the blockchain;

[0027] sending the identity information file to the networking organization through the URL link of the invitation information;

[0028] writing the identity information file into the blockchain at the networking organization according to the identity information file.

[0029] Preferably, obtaining the URL link comprises:

[0030] sending a networking request of the target organization to a first management platform;

[0031] constructing a URL link according to the networking request and sending it to a second management platform;

[0032] sending the identity information file to the networking organization according to the URL link;

[0033] The first management platform is deployed in a trusted third-party organization and is used to maintain a management platform of basic information of organizations in a blockchain network, and the second management platform is deployed in a management platform of the target organization.

[0034] In another aspect, the present application also provides a device for the organization to join the blockchain based on the blockchain, which deploys a management platform at a target organization side, the management platform is internally provided with an application program for generating files required for deploying the blockchain, and comprises:

[0035] a parameter obtaining module for obtaining organization information and organization attributes of the target organization, wherein the organization attributes comprise single-organization networking and multi-organization networking;

[0036] a parameter processing module for generating a node configuration file and a networking file for deploying the blockchain at the target organization side according to the organization information and the organization attributes;

[0037] a blockchain deployment module for deploying the blockchain for the target organization according to the configuration file and the networking file;

[0038] The networking file comprises an identity information file and a genesis file.

[0039] In another aspect, the present application also provides an electronic device, which comprises at least one processor, at least one memory, and computer program instructions stored in the memory, and when the computer program instructions are executed by the processor, the above-mentioned method is realized.

[0040] In another aspect, the present application also provides a medium having computer program instructions stored thereon, which, when executed by a processor, implement the method of any one of the above.

[0041] In summary, the beneficial effects of the present application are as follows:

[0042] The method, device and equipment for the institution to access the network based on the blockchain and the storage medium provided by the present application include installing a management platform on the institution side, and the technical personnel of the institution can directly input the institution information and the specified institution attribute in the machine room, and the management platform generates the configuration file and the networking file required for the institution to access the network based on the blockchain based on the institution information and the institution attribute; the deployment personnel download the file for deploying the blockchain from the management platform of the institution, and deploy the blockchain, which reduces the participation of the deployment personnel in the network initialization process of the institution to access the network based on the blockchain, and the deployment personnel cannot access the sensitive data of the institution, thereby improving the data security and the network initialization efficiency of the blockchain. BRIEF DESCRIPTION OF DRAWINGS

[0043] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed to be used in the embodiments of the present application will be briefly introduced as follows, and for those skilled in the art, other drawings can also be obtained without creative labor on the premise of these drawings, and these are within the protection scope of the present application.

[0044] Figure 1 It is a schematic diagram of the connection relationship of each block in the blockchain;

[0045] Figure 2 It is a flowchart of the process of obtaining the network initialization of the blockchain institution in Embodiment 1 of the present application;

[0046] Figure 3 It is a flowchart of the process of obtaining the method for the institution to access the network based on the blockchain in Embodiment 1 of the present application;

[0047] Figure 4 It is a flowchart of the process of obtaining the institution attribute of the target institution in Embodiment 1 of the present application;

[0048] Figure 5 It is a flowchart of the process of obtaining the configuration file of the N nodes in Embodiment 1 of the present application;

[0049] Figure 6 It is a flowchart of the process of obtaining the configuration file of the M nodes in Embodiment 1 of the present application;

[0050] Figure 7 It is a flowchart of the process of obtaining the construction of the blockchain in Embodiment 1 of the present application;

[0051] Figure 8This is a schematic diagram of the process of obtaining the target organization's access to the blockchain in Example 1 of the present invention;

[0052] Figure 9 This is a schematic diagram of the structure of the blockchain-based organization network access device in Example 2 of the present invention;

[0053] Figure 10 Schematic diagram of the structure of the electronic device in Example 3 of the present invention. DETAILED DESCRIPTION

[0054] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. It should be noted that, in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. In the description of the present invention, it should be understood that the orientation or position relationship indicated by the terms "center", "upper", "lower", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside" and the like is based on the orientation or position relationship shown in the drawings, and is only for the convenience of describing the present application and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operate in a specific orientation, and therefore cannot be understood as limiting the present invention. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further limitations, elements defined by the phrase "comprising..." do not preclude the presence of other identical elements in the process, method, article, or apparatus comprising the elements. The various features of the present invention and its embodiments may be combined with each other if there is no conflict, and all are within the scope of protection of the present invention.

[0055] Blockchain is a new application model for computer technologies, including distributed data storage, peer-to-peer transmission, consensus mechanisms, and encryption algorithms. Essentially, a blockchain is a decentralized database consisting of a series of data blocks (or blocks) linked together using cryptographic methods. Each block contains information about a batch of online transactions, used to verify the validity of that information (to prevent counterfeiting) and generate the next block. Blockchain can include the underlying blockchain platform, the platform product and service layer, and the application service layer.

[0056] A blockchain network can include multiple nodes, which can be the individual clients that form the blockchain network. Each node can receive input information during normal operation and, based on this input information, maintain shared data within the blockchain network. To ensure information interoperability within the blockchain network, information connections can exist between each node in the blockchain network, allowing nodes to transmit information through these connections. For example, when any node in the blockchain network receives input information, the other nodes in the blockchain network then obtain this input information based on a consensus algorithm and store it as shared data, ensuring that the data stored on all nodes in the blockchain network is consistent.

[0057] Each node in the blockchain network stores the same blockchain. The blockchain consists of multiple blocks, see Figure 1 As shown in the figure, the blockchain consists of multiple blocks. The genesis block includes a block header and a block body. The block header stores the input information feature value, version number, timestamp and difficulty value, etc., and the block body stores the input information; the next block of the genesis block uses the genesis block as the parent block, and the next block also includes a block header and a block body. The block header stores the input information feature value of the current block, the block header feature value, version number, timestamp and difficulty value of the parent block, etc., and so on. Therefore, the block data stored in each block in the blockchain is associated with the block data stored in the parent block, ensuring the security of the input information in the block.

[0058] Each node in the blockchain network can be a server or a terminal device. The server can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. The terminal device can be a smartphone, tablet computer, laptop computer, desktop computer, smart speaker, smart watch, etc., but is not limited to these. The nodes can be directly or indirectly connected through wired or wireless communication, which is not limited in this application.

[0059] Example 1

[0060] See Figure 2 , Figure 2 In the first embodiment of the present invention, the method for accessing a network based on a blockchain for an institution is described. The method includes:

[0061] S1: in response to the agency information input by the target agency, obtaining the agency attribute of the target agency, wherein the agency attribute includes newly built blockchain and joining specified blockchain;

[0062] Specifically, when an agency needs to deploy a blockchain, it enters its agency information into the management platform, and the management platform generates the configuration file required for deploying the blockchain. The agency attribute includes networking category and networking method: the networking category includes newly built blockchain and joining blockchain, and the networking method includes single-agency networking and multi-agency networking; that is, single-agency newly built blockchain, multi-agency newly built blockchain, single-agency joining blockchain, and multi-agency joining blockchain. Among them, multi-agency joining blockchain specifically refers to the joining of a blockchain by other agencies that are not deploying the genesis block when a multi-agency newly built blockchain is established, such as agencies A, B, C, and D. According to business needs, blockchain M is established, and agencies A, B, C, and D agree that agency A will deploy the genesis block as the networking agency, and agencies B, C, and D will deploy their own nodes synchronously. Different agency attributes correspond to different blockchain deployment procedures executed by the management platform to generate corresponding configuration files.

[0063] For ease of understanding, the target agency of a newly built blockchain is referred to as the first agency, and the target agency of a joining blockchain is referred to as a non-first agency, that is, the networking agency of a blockchain is referred to as the first agency, and other agencies are referred to as non-first agencies. For example, agency A is the first agency, and agencies B, C, and D are non-first agencies. If the target agency is the first agency of a blockchain, that is, the target agency creates the blockchain, then the number of nodes of the target agency cannot be less than the minimum number of nodes required for creating the blockchain. If the target agency is a non-first agency of a blockchain, then there is no limit on the number of nodes, and the number of nodes is set according to business agreement or authority.

[0064] S2: generating the configuration file of the target agency on the target agency side according to the agency information and the agency attribute, wherein the number of configuration files corresponding to the target agency corresponds to the agency attribute;

[0065] Specifically, the configuration files include a node configuration file and a networking file, and the networking file is divided into a genesis file corresponding to a newly created blockchain and an identity information file corresponding to joining a specified blockchain; if the target institution belongs to a networking institution of single-institution networking or multi-institution networking (the above-mentioned institution A is a networking institution), the generated configuration files include the node configuration file and the genesis file; if the target institution is a member institution of single-institution networking (the above-mentioned institutions B, C and D are member institutions), the generated configuration files include the node configuration file and the identity information file, and the node configuration file is directly run after being downloaded on the member institution side, thereby completing the node deployment on the member institution side; the identity information file is directly or indirectly sent to the networking institution through a URL link, and the identity information file is run on the networking institution side to complete the loading of the blockchain information of the target institution.

[0066] S3: According to the configuration files, a blockchain network is deployed on the target institution side.

[0067] Specifically, the configuration files are generated on the edge side of the target institution, the deployment personnel directly downloads the configuration files required for network initialization on the target institution side, and the blockchain of the target institution is deployed, which can avoid the deployment personnel from contacting the secret key and the institution information of the target institution, reduce the human participation in the network initialization process, avoid the leakage of the institution information and the generated configuration file information, and improve the security of the institution data.

[0068] Among them, generating the configuration files required for blockchain deployment on the edge side of the target institution includes: the management platform is directly deployed on the edge side of the target institution, and / or the management platform is arranged in a third-party institution, and the target institution can directly access the management platform through a provided port.

[0069] In a specific embodiment, referring to Figure 3 , the management platform is deployed on the target institution side, and the method includes:

[0070] S01: Obtain the institution information and the institution attribute of the target institution, wherein the institution attribute includes single-institution networking and multi-institution networking;

[0071] S02: According to the institution information and the institution attribute, generate a node configuration file and a networking file for blockchain deployment on the target institution side;

[0072] S03: According to the configuration file and the networking file, deploy a blockchain for the target institution;

[0073] Among them, the networking file includes an identity information file and a genesis file.

[0074] Specifically, the institution information and institution attribute of the target institution input management platform are analyzed, and the networking mode of the target institution is determined, i.e. single-institution networking or multi-institution networking. After determining the networking mode of the target institution, the corresponding node configuration file and networking file are generated. The networking file includes the genesis file of the networking institution and the identity information file of the member institution, so that the target institution can create a blockchain or join a specified blockchain.

[0075] Further, if it is single-institution networking, the networking category of the target institution is confirmed. If the target institution is to create a blockchain, the blockchain creation program is entered, the node configuration file and the genesis file are generated for the target institution, the deployment personnel download the node configuration file and the genesis file, and run the configuration file to complete the blockchain node configuration, and run the genesis file to complete the genesis block generation. If the target node is to join a specified blockchain, the node joining program is performed, the node configuration file and the identity information file are generated for the target institution, the deployment personnel download the node configuration file, deploy the blockchain node for the target institution, and send the identity information file to the networking institution. The networking institution stores the identity information of the target institution in the blockchain.

[0076] If it is multi-institution networking, the identity information of the target institution is confirmed to determine whether the target institution is a networking institution or a member institution. If it is a networking institution, the blockchain creation program is entered, and the genesis file and the node configuration file are generated for the target node. If it is a member institution, the blockchain joining program is entered, and the node configuration file and the identity information file are generated for the target institution. The network initialization process is consistent with the single-institution network initialization process, which will not be repeated here. Because each member institution and networking institution in multi-institution networking can simultaneously deploy a blockchain, the blockchain that the member institution needs to join can not exist in advance, so the identity information of the target institution needs to be confirmed. If it is a member institution, only the blockchain node needs to be deployed, and if it is a networking institution, both the blockchain node and the genesis block need to be generated. If other institutions need to join the blockchain of the prior multi-institution networking in the future, the node joining method is the same as the program of joining the blockchain constructed by the single-institution networking, which will not be repeated here.

[0077] In an embodiment, referring to Figure 4 , the S1 comprises:

[0078] S11: inputting the institution information into the management platform;

[0079] S12: according to the institution information, calling the pre-stored institution attribute corresponding to the target institution in the management platform.

[0080] Specifically, in order to improve the network initialization efficiency and security setting management platform when the target institution creates a blockchain or joins a certain blockchain, the target institution needs to enter the institution information of the target institution into the management platform when the target institution sets up a blockchain network or joins a certain designated blockchain network, the institution information includes basic information and node information, the basic information includes: institution name, unique code and the maximum number of nodes to be managed on the blockchain, etc., the node information includes: node link address, port and consensus port, etc.; after receiving the institution information of the target institution's blockchain deployment request, the institution attribute selected by the target institution when logging in or the institution attribute preset by the management platform is called.

[0081] In an embodiment, the management platform is deployed at the edge side of each target institution.

[0082] Specifically, the management platform is used to assist the institution to initialize the network when the institution sets up or joins the blockchain, the management platform does not belong to the blockchain, that is, the management platform does not run any node of the blockchain; the functions of the management platform include: storing the address information of each institution of the blockchain, generating URL link, generating genesis file, node configuration file and identity information file; the management platform is set at the edge side of the blockchain institution, the configuration files required for network initialization are generated by running the built-in program of the management platform, and the deployment personnel only need to download the files required for network initialization from the management platform at the institution side of the blockchain to be deployed to complete the deployment of the blockchain, reducing the human participation of the deployment personnel in the files required for network initialization, for example: the secret key pair required for the institution to join the blockchain is directly generated and saved at the institution side by the management platform, completely isolating the data leakage direction caused by the deployment personnel obtaining the secret key, and improving the data security.

[0083] Among them, the genesis file is used for the target institution to deploy the blockchain as a newly created blockchain, and the target institution runs the genesis file to generate the genesis block of the blockchain; the identity configuration parameter is used for the target institution to deploy the blockchain as joining a designated blockchain, and the target institution sends the identity configuration parameter to the networking institution for identity authentication and storage, so that the target institution can transact through the blockchain (that is, after the target institution passes the identity verification and stores the identity configuration parameter on the blockchain, the target institution determines to successfully join the blockchain); the node configuration file is used for the institution to create a blockchain node; the node configuration parameter includes: identity secret key, identity certificate, secret key type, data storage path, genesis block path, log path, service port, node name, institution ID, node type, encryption secret, link address, TLS private key, TLS certificate, identity address, identity node address, seed node address; the identity configuration parameter includes: identity certificate, secret key type, node name, institution ID, node type, link address, TLS certificate, identity address, identity node address, seed node address.

[0084] In an embodiment, the management platform can also be deployed on the side of the trusted third-party institution.

[0085] Specifically, the management platform can also be deployed on the edge side of the trusted third-party institution, including a first deployment mode and a second deployment mode. The first deployment mode is to deploy the management platform only in the third-party institution, and the second deployment mode is to deploy the management platform in all institutions of the blockchain as well as in the third-party institution. If the first deployment mode is adopted, the deployment personnel enters the institution information into the management platform through remote login, thereby obtaining the files required for network initialization. Meanwhile, the address information of each institution is stored by the third party, which can avoid exposure of the addresses of the networking institutions or the invited institutions. For example, organization A invites organization B to join the blockchain. If organization A directly sends the URL of organization A to organization B, organization B can know the exact location of organization A. If organization A does not send the corresponding URL in the invitation information to organization B, but organization B applies to join the blockchain and sends an application to the management platform of the third party, the management platform verifies the application information. If the verification is passed, the URL link is sent to organization B. The URL link can be the location link of organization A or the location link of other institutions already existing on the blockchain. The address hiding of the invited institutions or the networking institutions is realized, thereby avoiding the data security problem caused by the fact that the transaction data of the blockchain institutions is back-pushed by other institutions during transaction.

[0086] In an embodiment, please refer to Figure 5 If the target institution is a newly created blockchain, the S2 includes:

[0087] S21: Obtain the first node quantity corresponding to the minimum node required for creating a blockchain;

[0088] S22: Generate N configuration files according to the institution information and the first node quantity;

[0089] Wherein, N is greater than or equal to the first node quantity, and N is a positive integer.

[0090] Specifically, when the institution information of the target institution is input into the management platform, the institution attribute of the target institution is confirmed, it is judged whether the target institution is the first institution of the blockchain, if it is the first institution, the process of creating the blockchain is entered, first, the node quantity information in the institution information is judged, if the node quantity configured by the institution is less than the minimum node quantity required for creating the blockchain, the management platform outputs a configuration file of the first node quantity for the target institution, and the node quantity configured is the first node quantity; if the node quantity N configured by the institution is greater than or equal to the first node quantity, the management platform outputs N configuration files, so that N nodes are configured in the target institution.

[0091] The way of confirming whether the target institution is the first institution of the blockchain includes: setting an institution attribute option on the login page of the management platform, deploying personnel deploy the management platform to the machine room of the target institution, and the technical personnel of the target institution input the institution information into the management platform and select the institution attribute; the management platform is divided into a first type of platform for creating a blockchain and a second type of platform for joining a blockchain according to the institution attribute; the deployment personnel directly deploy the corresponding management platform to the machine room of the target institution according to the institution attribute of the target institution, and then the technical personnel of the target institution input the institution information of the target institution.

[0092] In an embodiment, please refer to Figure 6 If the target institution joins a specified blockchain, the S2 includes:

[0093] S23: Obtain the second node quantity corresponding to the permission information of the target institution;

[0094] S24: Generate M configuration files according to the institution information and the second node quantity;

[0095] Wherein, M is equal to the second node quantity, and M is a positive integer greater than or equal to 1.

[0096] Specifically, if the blockchain that needs to be deployed by the target institution is an existing blockchain, then according to the institution information of the target institution and the permission information of the target institution, the node quantity M that the target institution is allowed to manage is determined, and then M configuration files are generated based on the management platform.

[0097] In an embodiment, please refer to Figure 7 If the target institution is a new blockchain, the S3 includes:

[0098] S31: Generate a genesis block on the target institution side according to the institution attribute and the institution information;

[0099] S32: Generate N configuration files according to the institution information;

[0100] S33: establishing a blockchain based on the target organization according to the genesis block and the N configuration files;

[0101] Wherein, N≥ the minimum number of nodes required for establishing a blockchain, and N is a positive integer.

[0102] Specifically, if the blockchain deployed by the target organization is a newly established blockchain, the blockchain deployment of the target organization includes node deployment and genesis block establishment; that is, the management platform outputs a genesis file and a node configuration file based on the organization information entered by the target organization, and the deployment personnel downloads the node configuration file and the genesis file and then completes the establishment of the newly established blockchain in the computer room of the target organization.

[0103] In an embodiment, the S31 comprises:

[0104] S311: retrieving a creation strategy of the genesis block according to the organization attribute;

[0105] S312: generating a genesis file according to the creation strategy and the organization information;

[0106] S313: downloading and running the genesis file to generate the genesis block on the target organization side.

[0107] Specifically, when the target organization is the first organization, the creation strategy of the legacy file configuration is selected, the preset program corresponding to the creation strategy is run, and the management platform generates the TLS root certificate, the CV certificate, and the credential root certificate of the target organization according to the organization information, and then generates the genesis file (the configuration file of the genesis block). The deployment personnel downloads and runs the genesis file to complete the establishment of the genesis block of the blockchain deployment; it should be noted that downloading the genesis file is for the deployment personnel to download from the management platform deployed in the target organization, realizing the edge manufacturing and application of the blockchain genesis file.

[0108] In an embodiment, the S32 comprises:

[0109] S321: obtaining a third node number corresponding to the organization information and a first node number corresponding to the minimum number of nodes required for establishing a blockchain;

[0110] S322: generating N configuration files according to the organization information based on the comparison result of the first node number and the third node number;

[0111] Wherein, if the first node number is greater than the third node number, N is equal to the first node number, otherwise, N is equal to the third node number.

[0112] Specifically, when configuring the node configuration file for the target organization, the management platform compares the third node quantity requested in the entered organization information with the first node quantity, if the third node quantity is less than the first node quantity, the first node quantity of node configuration files is generated, if the third node quantity is greater than the first node quantity, the third node quantity of node configuration files is generated, the node quantity configured by the first node quantity is a fixed value, that is, under the same blockchain creation strategy, the first node quantity is a fixed value, such as 3 nodes, 4 nodes; the node quantity configured by the third node quantity is adapted to the authority of the target organization, that is, within the range of the maximum node quantity allowed by the organization under the blockchain creation strategy, the organization can configure any number of nodes according to its own needs.

[0113] In an embodiment, referring to Figure 8 , if the target organization is to join a specified blockchain, the S3 comprises:

[0114] S34: generating M configuration files according to the organization information;

[0115] S35: running M configuration files to deploy M blockchain nodes on the target organization side;

[0116] S36: running the identity information file to load the identity information of the target organization to the blockchain on the networking organization side;

[0117] Wherein, M is a positive integer greater than or equal to 1.

[0118] Specifically, when the organization attribute of the target organization is not the first organization, the target organization is added to the corresponding blockchain, M configuration files corresponding to the node quantity are generated according to the entered organization information, the node information of the target organization is added to the blockchain by the networking organization according to the configuration file, the deployment personnel run M configuration files to deploy M nodes on the target organization, and the blockchain deployment of the target organization is completed.

[0119] In an embodiment, the S35 comprises:

[0120] S351: generating M node configuration files for the target organization to deploy blockchain nodes according to the organization information;

[0121] S352: downloading the node configuration file on the target organization side to complete the deployment of the blockchain node on the target organization side.

[0122] In an embodiment, the S36 comprises:

[0123] S361: desensitizing the sensitive data of the node configuration file to generate an identity information file requested by the target organization for networking;

[0124] S362: send the identity configuration information to the networking mechanism, complete the blockchain network deployment of the target mechanism.

[0125] Specifically, the management platform generates M node configuration files according to the entered mechanism information, and generates corresponding identity information files after desensitizing the sensitive data in the node configuration files. The identity information files are transmitted to the networking mechanism. Meanwhile, the deployment personnel download the node configuration files from the management platform for node deployment. After receiving the identity configuration information, the networking mechanism enters it into the blockchain, thereby completing the blockchain deployment of the target mechanism.

[0126] In an embodiment, the S362 comprises:

[0127] S3621: obtain invitation information of the target mechanism joining the blockchain, wherein the invitation information comprises a URL link required for the blockchain-based mechanism network entry;

[0128] S3622: send the identity information file to the networking mechanism through the URL link of the invitation information;

[0129] S3623: according to the identity information file, write the identity information file into the blockchain in the networking mechanism.

[0130] Specifically, the target mechanism needs to be invited by an existing mechanism to join the blockchain, which improves the security of the blockchain network and reduces the malicious attacks on the blockchain. The invitation information contains a URL link for the target mechanism to send the identity configuration information to the networking mechanism.

[0131] In an embodiment, if the target mechanism is a subordinate mechanism of an existing blockchain mechanism, sending the identity information file to the networking mechanism comprises:

[0132] According to the pre-stored address information of the superior mechanism of the target mechanism, construct a URL link of the target mechanism and the superior mechanism;

[0133] According to the constructed URL link, send the identity information file to the networking mechanism through the superior mechanism.

[0134] Specifically, the URL link in the invitation information can be a determined network link, or address information for creating the URL link by the target organization; for example, if the target organization to be added in the blockchain already has a superior organization of the target organization, then the URL link of the target organization and the superior organization is directly created, and then the identity information file is sent to the superior organization, and the superior organization sends the identity information file to the networking organization of the blockchain. Through this way, the network address of the invitation organization can be prevented from being leaked, and the data processing amount of the blockchain can be reduced; if the superior organization of the target organization exists in the blockchain, the superior organization is preferably selected as the invitation organization of the target organization.

[0135] In an embodiment, if the target organization is not a subordinate organization of an existing organization in the blockchain, sending the identity information file to the networking organization comprises:

[0136] sending a networking request of the target organization to a first management platform;

[0137] constructing a URL link according to the networking request and sending the URL link to a second management platform;

[0138] sending the identity information file to the networking organization according to the URL link;

[0139] The first management platform is arranged on a trusted third-party organization side, and is used for maintaining a management platform of basic information of organizations in a blockchain network. The second management platform is a management platform of the target organization.

[0140] Specifically, if the target organization is not a subordinate organization of any organization in the blockchain, the URL link contained in the invitation information is a network link created by the second management platform for receiving the identity information file of the target organization. When the target organization needs to join the blockchain, the invitation organization sends a networking request of a new organization to the first management platform, or the management platform of the target organization sends a networking request of the target organization to the first management platform. The first management platform calls stored address information of an existing organization, establishes a URL link for receiving the identity information file of the networking request organization, and the receiving organization corresponding to the URL link can be the invitation organization or other organizations. Preferably, other organizations are used as receiving organizations, so that the address of the invitation organization is prevented from being exposed, and the data security of the invitation organization in the blockchain transaction is improved.

[0141] If the inviting organization sends a networking request of a new organization to the first management platform, the URL link created by the first management platform is added to the invitation information and sent to the target organization; if the management platform of the target organization sends a networking request of the target organization to the first management platform, the established URL link is directly returned to the management platform of the target organization; by creating the URL link by the first management platform, the address information exposure risk of the inviting organization can be reduced, and the security of the blockchain transaction can be improved.

[0142] The method for the organization to access the network based on the blockchain provided by the application comprises inputting organization information of a target organization and generating a configuration file required for deploying a blockchain on the target organization side, the configuration file being generated by a management platform for network initialization of the blockchain deployed by the organization, the management platform being deployed on the target organization side, or the computer of the target organization being capable of remotely logging in the management platform through a specified interface, downloading the configuration file from the management platform, and running the configuration file to complete the deployment of the blockchain; the application can ensure that the configuration file required for the deployment of the blockchain is automatically completed by a software program on the target organization side, without the involvement of operation and maintenance personnel in the production of the configuration file or data migration, thereby improving the efficiency and accuracy of the network initialization of the blockchain, and preventing the data leakage problem of the target organization caused by human beings.

[0143] Embodiment 2

[0144] See Figure 9 The application based on the method for the organization to access the network based on the blockchain in embodiment 1 further provides a device for the organization to access the network based on the blockchain, which comprises:

[0145] A parameter acquisition module is configured to acquire the organization attribute of the target organization in response to the organization information input by the target organization, wherein the organization attribute is whether the target organization is the first organization of the blockchain.

[0146] A parameter processing module is configured to generate the configuration file of the target organization on the target organization side according to the organization information and the organization attribute, wherein the number of the configuration file corresponding to the target organization corresponds to the organization attribute.

[0147] A blockchain deployment module is configured to deploy the blockchain network for the target organization on the target organization side according to each configuration file.

[0148] The blockchain-based organization network access method provided by the present invention includes inputting the organization information of the target organization on the target organization side, and directly generating a configuration file required for deploying the blockchain on the target structure side. The configuration file can be a corresponding management platform deployed on the computer of the target organization, and an application for generating the configuration file is installed in the management platform, or a port for communicating with the management platform is provided on the computer of the target organization. The management platform remotely generates the configuration file required for the target organization to deploy the blockchain, downloads the configuration file from the management platform on the computer of the target organization, and then runs the configuration file to complete the blockchain deployment. In this way, it can be ensured that the generation of the configuration file is completed by the machine without the participation of operation and maintenance personnel, thereby improving the efficiency and accuracy of the blockchain network initialization and preventing the problem of data leakage of the target organization caused by human factors.

[0149] In one embodiment, a management platform is set up for each organization to deploy blockchain. The management platform is used for the organization to initialize the network. The parameter acquisition module includes:

[0150] Information input unit: inputs the organization information into the management platform;

[0151] Information analysis unit: according to the organization information, retrieves the organization attributes corresponding to the target organization pre-stored in the management platform.

[0152] In one embodiment, the first program deployment unit is used to deploy the management platform at the edge side where each of the target organizations is located.

[0153] In one embodiment, the second program deployment unit is used for deploying the management platform on a trusted third-party organization side.

[0154] In one embodiment, if the target organization is a newly established blockchain, the parameter processing module includes:

[0155] First parameter unit: obtain the first node number corresponding to the minimum number of nodes required to create a blockchain;

[0156] A first processing unit: generating N configuration files according to the organization information and the number of the first nodes;

[0157] Wherein, N≥the number of the first nodes, and N is a positive integer.

[0158] In one embodiment, if the target organization is to join a specific blockchain, the parameter processing module includes:

[0159] Second parameter unit: obtains the second node quantity corresponding to the authority information of the target organization;

[0160] The second processing unit generates M configuration files according to the institution information and the second node quantity.

[0161] M is equal to the second node quantity, and M is a positive integer greater than or equal to 1.

[0162] In an embodiment, if the target institution is a new blockchain, the blockchain deployment module comprises:

[0163] The first creating unit generates a genesis block on the target institution side according to the institution attribute and the institution information.

[0164] The second creating unit generates N configuration files according to the institution information.

[0165] The first deploying unit establishes a blockchain based on the target institution according to the genesis block and N configuration files.

[0166] N is greater than or equal to the minimum node quantity required for establishing a blockchain, and N is a positive integer.

[0167] In an embodiment, the first creating unit comprises:

[0168] The data calling unit calls a creation strategy of a genesis block according to the institution attribute.

[0169] The file generating unit generates a genesis file according to the creation strategy and the institution information.

[0170] The file deploying unit downloads and runs the genesis file to generate the genesis block on the target institution side.

[0171] In an embodiment, the second creating unit comprises:

[0172] The node information unit obtains a third node quantity corresponding to the institution information and a first node quantity corresponding to the minimum node quantity required for establishing a blockchain.

[0173] The quantity comparison unit generates N configuration files according to the institution information based on a comparison result of the first node quantity and the third node quantity.

[0174] If the first node quantity is greater than the third node quantity, N is equal to the first node quantity, otherwise, N is equal to the third node quantity.

[0175] In an embodiment, if the target institution is to join a specified blockchain, the blockchain deployment module comprises:

[0176] The first file unit generates M configuration files according to the institution information.

[0177] The file application unit deploys a blockchain node on the target organization side according to the M configuration files, and deploys node information of the target organization on the networking organization side, thereby completing the blockchain deployment of the target organization.

[0178] In an embodiment, the file application unit comprises:

[0179] The node file unit generates N node configuration files for deploying a blockchain node of the target organization according to the organization information.

[0180] The identity file unit desensitizes sensitive data of the node configuration file to generate an identity information file for the target organization networking request.

[0181] The organization networking unit sends the identity configuration information to the networking organization to complete the blockchain networking deployment of the target organization.

[0182] The node deployment unit downloads the node configuration file on the target organization side to complete the deployment of the blockchain node on the target organization side.

[0183] In an embodiment, the organization networking unit comprises:

[0184] The invitation information unit obtains invitation information for the target organization to join the blockchain, wherein the invitation information comprises a URL link required for the organization to network based on the blockchain.

[0185] The information transmission unit sends the identity information file to the networking organization through the URL link of the invitation information.

[0186] The information loading unit writes the identity information file into the blockchain according to the identity information file on the networking organization.

[0187] In an embodiment, if the target organization is a subordinate organization of an existing blockchain organization, sending the identity information file to the networking organization comprises:

[0188] The URL construction unit constructs a URL link of the target organization and its superior organization according to pre-stored address information of the superior organization of the target organization.

[0189] The information transmission unit sends the identity information file to the networking organization through the superior organization according to the constructed URL link.

[0190] In an embodiment, if the target organization is not a subordinate organization of an existing blockchain organization, sending the identity information file to the networking organization comprises:

[0191] The networking request unit sends a networking request of the target organization to a first management platform.

[0192] URL link unit: according to the networking request, constructing a URL link and sending to the second management platform;

[0193] Identity information sending unit: according to the URL link, sending the identity information file to the networking organization;

[0194] Wherein, the first management platform is arranged at the trusted third party organization side, and is used for maintaining the management platform of the organization basic information in the block chain network, and the second management platform is the management platform of the target organization side.

[0195] The application provides an organization network access device based on a block chain, which comprises inputting organization information of a target organization at a target organization side and generating a configuration file required for deploying a block chain, the configuration file being generated by a management platform for network initialization of the block chain deployed by the organization, the management platform being deployed at the target organization side, or the target organization computer being capable of remotely logging in the management platform through a specified interface, downloading the configuration file from the management platform and running the configuration file to complete the block chain deployment; the application can ensure that the configuration file required for the block chain deployment is automatically completed by a software program at the target organization side, without the need of an operation and maintenance personnel to participate in the configuration file production or data migration, improve the efficiency and accuracy of the block chain network initialization, and prevent the problem of data leakage of the target organization caused by human beings.

[0196] Embodiment 3

[0197] The application provides an electronic device and a storage medium, please refer to Figure 10 , comprising at least one processor, at least one memory and computer program instructions stored in the memory.

[0198] Specifically, the above-mentioned processor can include a central processing unit (CPU), or a specific integrated circuit (Application Specific Integrated Circuit, ASIC), or can be configured to implement one or more integrated circuits of the embodiments of the application, and the electronic device at least includes one of the following: computer, mobile terminal, PC, tablet computer, etc.

[0199] The memory may include a large capacity memory for data or instructions. By way of example and not limitation, the memory may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive, or a combination of two or more of these. Where appropriate, the memory may include a removable or non-removable (or fixed) medium. Where appropriate, the memory may be inside or outside the data processing device. In a specific embodiment, the memory is a non-volatile solid-state memory. In a specific embodiment, the memory includes a read-only memory (ROM). Where appropriate, the ROM may be a mask-programmed ROM, a programmable ROM (PROM), an erasable PROM (EPROM), an electrically erasable PROM (EEPROM), an electrically rewritable ROM (EAROM), or a flash memory, or a combination of two or more of these.

[0200] The processor reads and executes computer program instructions stored in the memory to implement any one of the blockchain-based institution network access methods in the first embodiment.

[0201] In one example, the electronic device may further include a communication interface and a bus, wherein the processor, the memory, and the communication interface are connected via the bus and communicate with each other.

[0202] The communication interface is mainly used to implement communication between the modules, devices, units and / or equipment in the embodiments of the present invention.

[0203] Bus comprises hardware, software or both, couples the parts of electronic equipment to each other.For example, and not limitation, bus can comprise accelerated graphics port (AGP) or other graphics bus, enhanced industry standard architecture (EISA) bus, front side bus (FSB), hypertransport (HT) interconnection, industry standard architecture (ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations.In suitable cases, bus can comprise one or more buses.Although the embodiment of the present invention describes and shows specific bus, the present invention considers any suitable bus or interconnection.

[0204] It should be understood that the present invention is not limited to the specific configurations and processes described above and illustrated in the figures. For the sake of brevity, a detailed description of known methods is omitted. In the above embodiments, several specific steps are described and illustrated as examples. However, the method of the present invention is not limited to the specific steps described and illustrated. Those skilled in the art may make various changes, modifications, and additions, or change the order of the steps after understanding the spirit of the present invention.

[0205] The functional blocks shown in the above-described block diagram can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in unit, a function card or the like. When implemented in software, the elements of the present invention are programs or code segments that are used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link by a data signal carried in a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROMs, flash memories, erasable ROMs (EROMs), floppy disks, CD-ROMs, optical disks, hard disks, optical fiber media, radio frequency (RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0206] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the above embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A blockchain-based institutional network access method, characterized in that: A management platform is deployed on the target organization side, wherein the management platform has a built-in application for generating files required for blockchain deployment. The method includes: Acquire the organization information and organization attributes of the target organization, wherein the organization attributes include single-organization networking and multi-organization networking; Generate a node configuration file and a networking file for blockchain deployment on the target institution side based on the institution information and the institution attributes; Deploy the blockchain to the target organization according to the configuration file and the networking file; The networking files include identity information files and creation files; If the target organization is a newly built blockchain network consisting of a single organization, generating a node configuration file and a networking file for blockchain deployment on the target organization side based on the organization information and the organization attributes includes: Get the first node number corresponding to the minimum number of nodes required to create a blockchain; Generate the genesis file and N node configuration files according to the organization information and the number of the first nodes; Wherein, N≥the number of the first nodes, and N is a positive integer.

2. The blockchain-based institution network access method according to claim 1, characterized in that: If the target organization is a multi-organization network, generating a node configuration file and a network file for blockchain deployment on the target organization side based on the organization information and the organization attributes includes: Obtaining identity information of the target organization; If the identity information indicates that the target organization is a member organization, generating the node configuration file and the identity information file of the target organization according to the organization information; If the identity information indicates that the target organization is a networking organization, the node configuration file and the genesis file of the target organization are generated according to the organization information.

3. The blockchain-based institution network access method according to claim 1, characterized in that: Desensitizing the data in the node configuration file to obtain the identity information file.

4. The blockchain-based institution network access method according to claim 1, characterized in that: If the target organization is a single-organization network that joins a designated blockchain, deploying the blockchain to the target organization according to the configuration file and the networking file includes: Generate the identity information file and M node configuration files according to the organization information; Run M of the configuration files and deploy M blockchain nodes on the target institution side; On the networking organization side, the identity information file is run to load the identity information of the target organization into the blockchain; Wherein, M≥1, and M is a positive integer.

5. The blockchain-based institution network access method according to claim 4, characterized in that: On the networking organization side, running the identity information file to load the identity information of the target organization into the blockchain includes: Obtaining an invitation from the target organization to join the blockchain, wherein the invitation includes a URL link required for the blockchain-based organization to join the network; Sending the identity information file to the networking organization via the URL link of the invitation information; According to the identity information file, the identity information file is written into the blockchain in the networking organization.

6. The blockchain-based institution network access method according to claim 5, characterized in that: Obtaining the URL link includes: Sending a networking request of the target organization to the first management platform; Constructing a URL link according to the networking request and sending it to the second management platform; According to the URL link, the identity information file is sent to the networking organization; Among them, the first management platform is deployed in a trusted third-party organization and is used as a management platform for maintaining basic information of institutions in the blockchain network, and the second management platform is deployed in the management platform of the target institution.

7. A blockchain-based institutional network access device, characterized in that: Deploy a management platform on the target organization side, which has a built-in application for generating the files required for blockchain deployment, including: Parameter acquisition module: used to obtain the organization information and organization attributes of the target organization, wherein the organization attributes include single-organization networking and multi-organization networking; Parameter processing module: used to generate node configuration files and networking files for blockchain deployment on the target institution side based on the institution information and the institution attributes; Blockchain deployment module: used to deploy blockchain to the target organization according to the configuration file and the networking file; The networking file includes an identity information file and a genesis file; if the target organization is a newly built blockchain network with a single organization network, the node configuration file and networking file for blockchain deployment generated on the target organization side based on the organization information and the organization attributes include: Get the first node number corresponding to the minimum number of nodes required to create a blockchain; Generate the genesis file and N node configuration files according to the organization information and the number of the first nodes; Wherein, N≥the number of the first nodes, and N is a positive integer.

8. An electronic device, characterized in that: include: At least one processor, at least one memory, and computer program instructions stored in the memory, which implement the method according to any one of claims 1 to 6 when the computer program instructions are executed by the processor.

9. A storage medium having computer program instructions stored thereon, characterized in that: When the computer program instructions are executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images