A blockchain intelligent access control method and device based on a reputation value

Abstract

The application discloses a kind of based on reputation value's blockchain intelligent access control method and device, belong to blockchain technical field, based on reputation value's blockchain intelligent access control method in it includes following six steps, step 1, connection is established with ordering node;Step 2, obtain latest distribution block;Step 3, evaluate peer behavior;Step 4, reputation value updates;Step 5, reputation state updates;Step 6, peer role updates;The application, by monitoring the behavior of node, the reputation value of the node that has generated error and suspicious behavior is dynamically adjusted, to reduce the influence of such node in the consensus process in blockchain system, so that the system maintains higher availability and reliability.

Description

Technical Field

[0001] This invention relates to the field of blockchain technology, and in particular to a blockchain smart access control method and device based on reputation value. Background Technology

[0002] Blockchain involves many scientific and technological issues, including mathematics, cryptography, the internet, and computer programming. Essentially, blockchain technology is a system composed of interconnected data blocks. It has certain rules, and its innovative distributed decision-making and security mechanisms lay the foundation for its applications. It features decentralization, immutability, full traceability, collective maintenance, and transparency.

[0003] In existing blockchain systems, the roles and permissions of each node are generally fixed, resulting in a relatively simple access control method. Summary of the Invention

[0004] The purpose of this invention is to overcome the shortcomings of existing technologies and optimize the management of system node permissions in blockchain while ensuring a certain degree of decentralization. It proposes a reputation-based intelligent access control method for blockchain. This method offers advantages such as fast response speed, data traceability, and flexible implementation of secure data storage and access control, thus solving the problem of limited access control methods in existing blockchain systems.

[0005] The technical solution of this invention is as follows:

[0006] The first aspect provides a blockchain-based smart access control method based on reputation values, including:

[0007] S1: The administrator node maintains a list that records information about all nodes currently participating in consensus. The nodes include sorting nodes and peer nodes. When a new sorting node is added to the list, full-duplex communication is established with the sorting node. The sorting node is used to package block data during the consensus process of peer nodes and send it to other nodes.

[0008] S2: For each round of consensus, the administrator node obtains all the blocks packaged by the sorting nodes during the consensus process and waits for the consensus result;

[0009] S3: If consensus is successful, the behavior of the peer nodes is evaluated based on the consistency between the latest message content written by the peer nodes in their local ledgers and the content of the block generated by this round of consensus; otherwise, the content of this block is discarded.

[0010] S4: Update the reputation value based on the evaluation results of the peer nodes' behavior;

[0011] S5: For each successful consensus round, after all peer nodes participating in the consensus have updated their reputation values, update the corresponding reputation status based on the reputation values ​​of the peer nodes.

[0012] S6: For each successful consensus round, after all peer nodes participating in the consensus have updated their reputation status, the node roles and permissions within the blockchain system are adjusted based on the reputation status of the peer nodes.

[0013] In one implementation, step S1 includes:

[0014] S1.1: The administrator node maintains a list that records information about all nodes currently participating in consensus. The nodes include ordering nodes and peer nodes. When a new ordering node is added to the list, full-duplex communication is established with the ordering node.

[0015] S1.2: The administrator node listens to the data exchange between the sorting nodes during the consensus process;

[0016] S1.3: During a consensus process, once the sorting node has completed sorting and packaging the block data, it distributes the packaged blocks to all other nodes in the blockchain system, including administrator nodes and peer nodes.

[0017] In one implementation, step S2 includes:

[0018] S2.1: The administrator node stores the blocks distributed by the ordering nodes during this consensus process in its own temporary storage pool, awaiting the final result of this consensus round.

[0019] S2.2: Consensus is successful when all peer nodes finally reach an agreement; otherwise, consensus fails.

[0020] In one implementation, step S3 includes:

[0021] S3.1: If consensus is successful, the administrator node establishes a connection with the peer nodes participating in this round of consensus in turn, queries the record content updated in their ledgers after the end of this round of consensus, and determines whether the queried record content is consistent with the block content stored in the temporary storage pool. If they are consistent, it is determined that the node has successfully participated in this consensus. If they are inconsistent or the peer nodes cannot communicate normally, it is determined that the node has hindered this consensus. The record content updated in the peer node's ledger after the end of this round of consensus is the latest message content written in the local ledger.

[0022] S3.2: In the event of consensus failure, the administrator node discards the block content in the temporary storage pool, queries the log file, and searches for the cause of the consensus failure.

[0023] In one implementation, step S4 includes:

[0024] If a node successfully participates in the consensus process, its reputation value is increased; if a node obstructs the consensus process, its reputation value is decreased.

[0025] In one implementation, step S5 includes:

[0026] For each successful consensus round, after all peer nodes participating in the consensus have updated their reputation values, the corresponding reputation status is updated according to the relationship between the peer node's reputation value and the pre-set reputation value range.

[0027] Based on the same inventive concept, a second aspect of the present invention provides a blockchain smart access control device based on reputation value, comprising:

[0028] The sorting node listening module is used by the administrator node to maintain a list that records information about all nodes currently participating in consensus. The nodes include sorting nodes and peer nodes. When a new sorting node is added to the list, full-duplex communication is established with the sorting node. The sorting node is used to package block data during the consensus process of peer nodes and send it to other nodes.

[0029] The peer node evaluation module is used for each round of consensus. The administrator node obtains all the blocks packaged by the sorting nodes during the consensus process and waits for the consensus result.

[0030] The block acquisition module is used to evaluate the behavior of peer nodes if consensus is successful, based on the consistency between the latest message content written by the peer nodes in their local ledgers and the content of the block generated in this round of consensus; otherwise, the block content is discarded.

[0031] The reputation value update module is used to update the reputation value based on the evaluation results of the peer node's behavior;

[0032] The reputation status update module is used to update the corresponding reputation status based on the reputation values ​​of all peer nodes that participated in the consensus after all successful consensus rounds have updated their reputation values.

[0033] The peer node role update module is used to adjust the node roles and permissions within the blockchain system based on the reputation status of all peer nodes that participated in the consensus after each successful consensus round has been updated.

[0034] Based on the same inventive concept, a third aspect of the present invention provides a computer-readable storage medium having a computer program stored thereon, which, when executed, implements the method described in the first aspect.

[0035] Based on the same inventive concept, a fourth aspect of the present invention provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the method described in the first aspect.

[0036] Compared with the prior art, the advantages and beneficial technical effects of the present invention are as follows:

[0037] The blockchain smart access control method based on reputation value disclosed in this invention uses reputation value as a reference standard to measure the trustworthiness of nodes on the chain. According to the update of reputation value and reputation status, the method intelligently realizes the role update and permission update of each node, so that the node role can be flexibly adjusted according to reputation value. This solves the problem of the single access control method in existing blockchain systems and enhances the security of blockchain systems. Attached Figure Description

[0038] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0039] Figure 1 This is a schematic diagram illustrating the monitoring of sorting nodes and peer nodes in an embodiment of the present invention;

[0040] Figure 2 This is a schematic diagram of view updating in an embodiment of the present invention. Detailed Implementation

[0041] This invention discloses a blockchain smart access control method based on reputation value, belonging to the field of blockchain technology. The method includes the following six steps: Step 1, establishing a connection with the sorting node; Step 2, obtaining the latest distributed block; Step 3, evaluating the behavior of peer nodes; Step 4, updating the reputation value; Step 5, updating the reputation status; and Step 6, updating the peer node role. This invention, by monitoring node behavior, dynamically adjusts the reputation value of nodes that have generated errors or suspicious behavior, thereby reducing the influence of such nodes on the consensus process of the blockchain system, thus maintaining high availability and reliability of the system.

[0042] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0043] Example 1

[0044] This invention provides a blockchain smart access control method based on reputation value, comprising:

[0045] S1: The administrator node maintains a list that records information about all nodes currently participating in consensus. The nodes include sorting nodes and peer nodes. When a new sorting node is added to the list, full-duplex communication is established with the sorting node. The sorting node is used to package block data during the consensus process of peer nodes and send it to other nodes.

[0046] S2: For each round of consensus, the administrator node obtains all the blocks packaged by the sorting nodes during the consensus process and waits for the consensus result;

[0047] S3: If consensus is successful, the behavior of the peer nodes is evaluated based on the consistency between the latest message content written by the peer nodes in their local ledgers and the content of the block generated by this round of consensus; otherwise, the content of this block is discarded.

[0048] S4: Update the reputation value based on the evaluation results of the peer nodes' behavior;

[0049] S5: For each successful consensus round, after all peer nodes participating in the consensus have updated their reputation values, update the corresponding reputation status based on the reputation values ​​of the peer nodes.

[0050] S6: For each successful consensus round, after all peer nodes participating in the consensus have updated their reputation status, the node roles and permissions within the blockchain system are adjusted based on the reputation status of the peer nodes.

[0051] Specifically, this invention mainly comprises two parts: node behavior monitoring (S1-S3) and view updating (S4-S6). The specific implementation process of node behavior monitoring is as follows: Figure 1 As shown, the specific implementation process of view update is as follows: Figure 2 As shown.

[0052] The nodes in the blockchain system include administrator nodes, peer nodes, and sorting nodes. Peer nodes participate in each round of consensus, while sorting nodes participate in data exchange during the consensus process, sorting and packaging the block data generated during the consensus process, and sending it to other nodes. Administrator nodes listen to and manage other nodes, and manage peer nodes and sorting nodes by maintaining a list. The recorded node information includes the identity number and coordinates of all nodes currently participating in the consensus.

[0053] Reputation score is a reference standard used to measure the trustworthiness of nodes on the blockchain. By using the reputation score of peer nodes as a judgment standard, different permissions are assigned to peer nodes with reputation scores in different ranges, thereby implementing rewards or penalties, which encourages nodes to follow the protocol and can ensure the availability and reliability of the blockchain system.

[0054] In one implementation, step S1 includes:

[0055] S1.1: The administrator node maintains a list that records information about all nodes currently participating in consensus. The nodes include ordering nodes and peer nodes. When a new ordering node is added to the list, full-duplex communication is established with the ordering node.

[0056] S1.2: The administrator node listens to the data exchange between the sorting nodes during the consensus process;

[0057] S1.3: During a consensus process, once the sorting node has completed sorting and packaging the block data, it distributes the packaged blocks to all other nodes in the blockchain system, including administrator nodes and peer nodes.

[0058] Specifically, the administrator node monitors the behavior of all other nodes.

[0059] In one implementation, step S2 includes:

[0060] S2.1: The administrator node stores the blocks distributed by the ordering nodes during this consensus process in its own temporary storage pool, awaiting the final result of this consensus round.

[0061] S2.2: Consensus is successful when all peer nodes finally reach an agreement; otherwise, consensus fails.

[0062] In one implementation, step S3 includes:

[0063] S3.1: If consensus is successful, the administrator node establishes a connection with the peer nodes participating in this round of consensus in turn, queries the record content updated in their ledgers after the end of this round of consensus, and determines whether the queried record content is consistent with the block content stored in the temporary storage pool. If they are consistent, it is determined that the node has successfully participated in this consensus. If they are inconsistent or the peer nodes cannot communicate normally, it is determined that the node has hindered this consensus. The record content updated in the peer node's ledger after the end of this round of consensus is the latest message content written in the local ledger.

[0064] S3.2: In the event of consensus failure, the administrator node discards the block content in the temporary storage pool, queries the log file, and searches for the cause of the consensus failure.

[0065] Specifically, the updated ledger content after the current consensus round refers to the latest message content written by peer nodes in their local ledgers, which are written by the peer nodes themselves after receiving blocks distributed by the ordering nodes; the block content stored in the temporary storage pool refers to the latest distributed blocks received by the administrator node from the ordering nodes. The consistency of these two is used for evaluation, as the former may be tampered with by peer nodes, and the latter is used to determine whether the former has been tampered with.

[0066] In one implementation, step S4 includes:

[0067] If a node successfully participates in the consensus process, its reputation value is increased; if a node obstructs the consensus process, its reputation value is decreased.

[0068] In one implementation, step S5 includes:

[0069] For each successful consensus round, after all peer nodes participating in the consensus have updated their reputation values, the corresponding reputation status is updated according to the relationship between the peer node's reputation value and the pre-set reputation value range.

[0070] Specifically, if the reputation value falls within a certain range, its reputation status will be updated to the corresponding status.

[0071] Example 2

[0072] Based on the same inventive concept, this embodiment discloses a blockchain smart access control device based on reputation value, comprising:

[0073] The sorting node listening module is used by the administrator node to maintain a list that records information about all nodes currently participating in consensus. The nodes include sorting nodes and peer nodes. When a new sorting node is added to the list, full-duplex communication is established with the sorting node. The sorting node is used to package block data during the consensus process of peer nodes and send it to other nodes.

[0074] The peer node evaluation module is used for each round of consensus. The administrator node obtains all the blocks packaged by the sorting nodes during the consensus process and waits for the consensus result.

[0075] The block acquisition module is used to evaluate the behavior of peer nodes if consensus is successful, based on the consistency between the latest message content written by the peer nodes in their local ledgers and the content of the block generated in this round of consensus; otherwise, the block content is discarded.

[0076] The reputation value update module is used to update the reputation value based on the evaluation results of the peer node's behavior;

[0077] The reputation status update module is used to update the corresponding reputation status based on the reputation values ​​of all peer nodes that participated in the consensus after all successful consensus rounds have updated their reputation values.

[0078] The peer node role update module is used to adjust the node roles and permissions within the blockchain system based on the reputation status of all peer nodes that participated in the consensus after each successful consensus round has been updated.

[0079] Since the apparatus described in Embodiment 2 of this invention is the same apparatus used to implement the blockchain smart access control method based on reputation value in Embodiment 1 of this invention, those skilled in the art can understand the specific structure and variations of this apparatus based on the method described in Embodiment 1 of this invention, and therefore will not be repeated here. All apparatuses used in the method of Embodiment 1 of this invention fall within the scope of protection of this invention.

[0080] Example 3

[0081] Based on the same inventive concept, the present invention also provides a computer-readable storage medium having a computer program stored thereon, which, when executed, implements the method described in Embodiment 1.

[0082] Since the computer-readable storage medium described in Embodiment 3 of this invention is the same computer-readable storage medium used in implementing the reputation-based blockchain smart access control method in Embodiment 1 of this invention, those skilled in the art can understand the specific structure and variations of this computer-readable storage medium based on the method described in Embodiment 1 of this invention, and therefore will not be repeated here. All computer-readable storage media used in the method of Embodiment 1 of this invention fall within the scope of protection of this invention.

[0083] Example 4

[0084] Based on the same inventive concept, this application also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the method in Embodiment 1.

[0085] Since the computer device described in Embodiment 4 of this invention is the same computer device used to implement the reputation-based blockchain smart access control method in Embodiment 1 of this invention, those skilled in the art can understand the specific structure and variations of this computer device based on the method described in Embodiment 1 of this invention, and therefore will not be repeated here. All computer devices used in the method of Embodiment 1 of this invention fall within the scope of protection of this invention.

[0086] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0087] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0088] Although preferred embodiments of the invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including both the preferred embodiments and all changes and modifications falling within the scope of the invention. Clearly, those skilled in the art can make various modifications and variations to the embodiments of the invention without departing from the spirit and scope of the invention. Thus, if these modifications and variations of the embodiments of the invention fall within the scope of the claims of the invention and their equivalents, the invention also intends to include these modifications and variations.

Claims

1. A blockchain smart access control method based on reputation value, characterized in that, include: S1: The administrator node maintains a list that records information about all nodes currently participating in consensus. The nodes include sorting nodes and peer nodes. When a new sorting node is added to the list, full-duplex communication is established with the sorting node. The sorting node is used to package block data during the consensus process of peer nodes and send it to other nodes. S2: For each round of consensus, the administrator node obtains all the blocks packaged by the sorting nodes during the consensus process and waits for the consensus result; S3: If consensus is successful, the behavior of the peer nodes is evaluated based on the consistency between the latest message content written by the peer nodes in their local ledgers and the content of the block generated by this round of consensus; otherwise, the content of this block is discarded. S4: Update the reputation value based on the evaluation results of the peer nodes' behavior; S5: For each successful consensus round, after all peer nodes participating in the consensus have updated their reputation values, the corresponding reputation status is updated according to the relationship between the reputation value of the peer node and the pre-set reputation value range. If the reputation value is within a certain reputation value range, its reputation status is updated to the corresponding status. S6: For each successful consensus round, after all peer nodes participating in the consensus have updated their reputation status, adjust the node roles and permissions within the blockchain system based on the reputation status of the peer nodes. Step S3 includes: S3.1: If consensus is successful, the administrator node establishes connections with the peer nodes participating in this round of consensus in turn, queries the updated record content of their ledgers after the end of this round of consensus, and determines whether the queried record content is consistent with the block content stored in the temporary storage pool. If they are consistent, it is determined that the node has successfully participated in this consensus. If they are inconsistent or the peer node cannot communicate normally, it is determined that the node has hindered this consensus. The updated record content of the peer node's ledger after the end of this round of consensus is the latest message content written in the local ledger, which is written by the peer node after receiving the block distributed by the sorting node. S3.2: In the event of consensus failure, the administrator node discards the block content in the temporary storage pool, queries the log file, and searches for the cause of the consensus failure. The block content stored in the temporary storage pool is the latest block distributed by the administrator node from the sorting node. Step S1 includes: S1.1: The administrator node maintains a list that records information about all nodes currently participating in consensus. The nodes include ordering nodes and peer nodes. When a new ordering node is added to the list, full-duplex communication is established with the ordering node. S1.2: The administrator node listens to the data exchange between the sorting nodes during the consensus process.

2. The blockchain smart access control method based on reputation value as described in claim 1, characterized in that, Step S2 includes: S2.1: The administrator node stores the blocks distributed by the ordering nodes during this consensus process in its own temporary storage pool, awaiting the final result of this consensus round. S2.2: Consensus is successful when all peer nodes finally reach an agreement; otherwise, consensus fails.

3. The blockchain smart access control method based on reputation value as described in claim 1, characterized in that, Step S4 includes: If a node successfully participates in the consensus process, its reputation value is increased; if a node obstructs the consensus process, its reputation value is decreased.

4. A blockchain-based smart access control device based on reputation value, characterized in that, Based on the method described in claim 1, it includes: The sorting node listening module is used by the administrator node to maintain a list that records information about all nodes currently participating in consensus. The nodes include sorting nodes and peer nodes. When a new sorting node is added to the list, full-duplex communication is established with the sorting node. The sorting node is used to package block data during the consensus process of peer nodes and send it to other nodes. The peer node evaluation module is used for each round of consensus. The administrator node obtains all the blocks packaged by the sorting nodes during the consensus process and waits for the consensus result. The block acquisition module is used to evaluate the behavior of peer nodes if consensus is successful, based on the consistency between the latest message content written by the peer nodes in their local ledgers and the content of the block generated in this round of consensus; otherwise, the block content is discarded. The reputation value update module is used to update the reputation value based on the evaluation results of the peer node's behavior. The reputation status update module is used to update the corresponding reputation status based on the reputation values ​​of all peer nodes that participated in the consensus after all successful consensus rounds have updated their reputation values. The peer node role update module is used to adjust the node roles and permissions within the blockchain system based on the reputation status of all peer nodes that participated in the consensus after each successful consensus round has been updated.

5. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed, it implements the method as described in any one of claims 1 to 4.

6. A computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the method as described in any one of claims 1 to 4.

Images