Blockchain tracking method, device, equipment and storage medium for data transmission and reception process

Abstract

The present invention belongs to the field of blockchain technology and solves the technical problem of link location tracking in the data transmission process in the prior art. It provides a blockchain tracking method, device, equipment and storage medium for the data transmission and reception process. The method includes: when a first node and a second node of the blockchain interact with data, the interactive data is divided into file transmission and file verification; the file verification method is used to ensure the tamper-proofness of the file transmission process. By setting multiple verification vouchers, the second node uses verification rules to obtain the corresponding verification vouchers directly or indirectly from the first node in the verification order, so that the first node can grasp the processing link of the target file without the need for active feedback from the second node, which is conducive to improving the efficiency of blockchain transactions.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a blockchain tracking method, device, equipment, and storage medium for data transmission and reception processes. Background Art

[0002] Blockchain technology is built on a transmission network (also known as a blockchain network). The distributed node devices in the transmission network (hereinafter referred to as nodes) run blockchain programs to generate block data based on preset consensus strategies, and use chain data structures to verify and store block data, ultimately realizing a data tamper-proof mechanism and providing a new, secure and reliable technical approach for business development.

[0003] In the existing technology, when a file sender sends data to a file receiver, the data transmission process is often attacked by a third-party network, resulting in the tampering of the transmitted data. Since blockchain is a distributed storage technology, if the complete data is transmitted directly through the blockchain, it will increase the storage pressure of each node in the blockchain. At the same time, when the data sender transmits the data to the file receiver, the file sender often does not know whether the data meets the usage requirements of the file receiver at this time due to the untimely feedback from the file receiver, causing the file sender to waste resources because he needs to wait for the feedback information from the file receiver. Summary of the Invention

[0004] In view of this, embodiments of the present invention provide a blockchain tracking method, device, equipment and storage medium for the data sending and receiving process, which are used to solve the technical problems of link positioning and tracking in the data transmission process in the prior art.

[0005] The technical solution adopted in the present invention is:

[0006] The present invention provides a blockchain tracking method for data sending and receiving processes, which is applied to a blockchain system. The method includes:

[0007] In response to a file sending request from a first blockchain node to send a target file to a second blockchain node, wherein a local application system of a file sender accesses the first node, and a local application system of a file receiver accesses the second node;

[0008] Establishing a file transfer channel for transferring the target file according to the file sending request, and transferring the target file to the second node, wherein the file transfer channel is a channel corresponding to the file transfer of the target file on a non-blockchain chain;

[0009] Generating, according to the file sending request, a plurality of verification credentials corresponding to the target file for verifying the credibility of the target file, and performing trustworthy transmission of the verification credentials;

[0010] According to the preset verification process, each verification certificate is retrieved in turn at the second node to perform credibility verification on the target file.

[0011] Preferably, obtaining the target file includes:

[0012] generating a file transfer request in response to a file to be transferred sent to the first node by a local application system of a file sender;

[0013] generating, according to the file transfer request, the file transfer rule applied to the first node and the file verification rule applied to the second node;

[0014] Parsing the file to be transferred according to the file transfer rule to obtain a parsed file;

[0015] generating the target file based on the parsed file that complies with the file transfer rule;

[0016] The file verification rule is adapted to the file transmission rule.

[0017] Preferably, the verification process includes a first verification stage and a second verification stage, wherein the first verification stage is the signature information verification of the first node, and the second verification stage is the data tamper-proof verification.

[0018] Preferably, the target file credibility check includes:

[0019] According to the first verification stage of the verification process, a first verification certificate is retrieved to verify the signature information of the target file to obtain a first verification file;

[0020] According to the second verification stage of the verification process, a second verification credential is retrieved to perform tamper-proof verification on the first verification file to obtain an application file corresponding to the target file.

[0021] Preferably, generating the signature information of the first stage verification includes:

[0022] Obtaining a third private key of the first node, wherein the third private key is generated by a second base point based on an elliptic curve;

[0023] Calculate first sub-information rG(x, y) according to the second base point and the first random number;

[0024] Calculate second sub-information s=(h+dx) / r) according to the first random number, the first hash value and the third private key;

[0025] combining the first sub-information and the second sub-information into the signature information, and uploading the third public key corresponding to the third private key to the chain;

[0026] Among them, the third public key is the verification certificate of the first stage verification, r is the first random number, G is the second base point, x is the horizontal coordinate of point rG, y is the vertical coordinate of point rG, d is the third private key, and h is the first hash value corresponding to the encrypted file.

[0027] Preferably, the second verification credential includes a first credential and a second credential, wherein the first credential is used for tamper-proof verification of the encrypted file of the target file, and the second credential is used for decrypting the encrypted file.

[0028] Preferably, generating the first credential includes:

[0029] Obtaining a second public key corresponding to the second node;

[0030] Generate a negotiated key based on the second public key and the first private key of the first node;

[0031] Encrypting the encrypted file using the negotiated key to obtain the encrypted file;

[0032] Performing a hash calculation on the encrypted file to generate the first credential corresponding to the first hash value;

[0033] The key pair of the first node and the second node is generated based on the same first base point in the same finite domain, and the key pair includes a private key and a public key;

[0034] The second credential is the first public key corresponding to the first private key.

[0035] On the other hand, the present invention also provides a blockchain tracking method and device for data transmission and reception processes, which is applied to a blockchain system, comprising:

[0036] A data acquisition module is configured to respond to a file sending request from a first blockchain node to send a target file to a second blockchain node, wherein a local application system of a file sender is connected to the first node, and a local application system of a file receiver is connected to the second node;

[0037] A data transmission module is configured to establish a file transmission channel for transmitting the target file according to the file transmission request, and transmit the target file to the second node, wherein the file transmission channel is a channel corresponding to the file transmission of the target file on the non-blockchain chain;

[0038] Data processing module: used for generating a plurality of verification certificates corresponding to the target file for verifying the credibility of the target file according to the file sending request, and performing trustworthy transmission of the verification certificates;

[0039] Data verification module: used to retrieve each verification certificate in turn at the second node according to a preset verification process to perform credibility verification on the target file.

[0040] The present invention also provides an electronic device, comprising: at least one processor, at least one memory, and computer program instructions stored in the memory, wherein when the computer program instructions are executed by the processor, any one of the above-mentioned methods is implemented.

[0041] The present invention also provides a medium having computer program instructions stored thereon, which implement any of the above methods when the computer program instructions are executed by a processor.

[0042] In summary, the beneficial effects of the present invention are as follows:

[0043] The present invention provides a blockchain tracking method, device, equipment and storage medium for a data sending and receiving process. When a first node and a second node of a blockchain interact with data, the interactive data is divided into file transmission and file verification. File verification is used to ensure tamper-proofing of the file transmission process. By setting multiple verification credentials, the second node uses verification rules to obtain corresponding verification credentials directly or indirectly from the first node in a verification order, so that the first node can grasp the processing link of the target file without the need for active feedback from the second node, which is conducive to improving the efficiency of blockchain transactions. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for use in the embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work, and these are all within the scope of protection of the present invention.

[0045] Figure 1 This is a flowchart of a blockchain tracking method for the data sending and receiving process in Example 1 of the present invention;

[0046] Figure 2 Schematic diagram of the process of obtaining the credibility check of the target file in Example 1 of the present invention;

[0047] Figure 3 This is a structural diagram of a blockchain tracking method and device for the data sending and receiving process in Example 2 of the present invention;

[0048] Figure 4 Schematic diagram of the structure of the electronic device in Example 3 of the present invention. DETAILED DESCRIPTION

[0049] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. It should be noted that, in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. In the description of the present invention, it should be understood that the orientation or position relationship indicated by the terms "center", "upper", "lower", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside" and the like is based on the orientation or position relationship shown in the drawings, and is only for the convenience of describing the present application and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operate in a specific orientation, and therefore cannot be understood as limiting the present invention. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further limitations, elements defined by the phrase "comprising..." do not preclude the presence of other identical elements in the process, method, article, or apparatus comprising the elements. The various features of the present invention and its embodiments may be combined with each other if there is no conflict, and all are within the scope of protection of the present invention.

[0050] Example 1

[0051] See Figure 1 , Figure 1 A blockchain tracking method for a data sending and receiving process in embodiment 1 of the present invention is applied to a blockchain system. The method includes:

[0052] S1: In response to a file sending request from a first blockchain node to send a target file to a second blockchain node, wherein a local application system of a file sender is connected to the first node, and a local application system of a file receiver is connected to the second node;

[0053] Specifically, the file sender accesses the blockchain through the first node of the blockchain, and the file receiver accesses the blockchain through the second node of the blockchain. The file sender sends the file to be transferred to the first node through its local application system, and the file receiver obtains the required target file from the second node through its local application system; when the first node and the second node need to transfer a file, a post-file transfer request is sent to the blockchain, and the file transfer request includes a file sending request and / or a file receiving request. The blockchain management node configures file transfer rules and file verification rules for the first node and the second node according to the file transfer request, or calls pre-configured file transfer rules and file verification rules according to the file transfer request.

[0054] S2: Establishing a file transfer channel for transferring the target file according to the file sending request, and transferring the target file to the second node, wherein the file transfer channel is a channel corresponding to the file transfer of the target file on a non-blockchain chain;

[0055] Specifically, the target file is a file in the files to be transferred sent by the file sender that complies with the file transfer rules. The file sender sends the file to be transferred to the first node through its local application system. The first node uses the file transfer rules to parse the file to be transferred, and uses the file that complies with the transfer rules as the target file, and then establishes a file transfer channel for transmitting the target file; wherein, the file transfer rules include: transmission date rules, transmission time rules, file name rules, alarm rules, etc.

[0056] It should be noted that file transmission includes but is not limited to point-to-point transmission, physical media transmission, and third-party email transmission. The target file is transmitted to the second node through the file transmission channel, and the first certificate is uploaded to the chain (uploaded to the blockchain for storage).

[0057] S3: generating a plurality of verification credentials corresponding to the target file for verifying the credibility of the target file according to the file sending request, and performing trustworthy transmission of the verification credentials;

[0058] Specifically, before the target file needs to be transmitted to the second node, the first node generates multiple verification certificates based on the target file so that the second node can perform credibility verification after receiving the target file to prevent the target file from being tampered with during transmission.

[0059] S4: According to a preset verification process, the second node sequentially retrieves each verification certificate to perform a credibility verification on the target file.

[0060] Specifically, after receiving the target file, the second node directly or indirectly retrieves each verification certificate from the first node in turn to verify the credibility of the target file and confirm whether the target file is credible. At the same time, by obtaining the verification certificate directly or indirectly from the first node, the first node can grasp the processing link of the target file without the need for active feedback from the second node, which is conducive to improving the efficiency of blockchain transactions.

[0061] The blockchain tracking method of the data sending and receiving process of the present invention divides the interactive data into file transmission and file verification when the first node and the second node of the blockchain interact with each other. The file verification method is used to ensure the tamper-proofness of the file transmission process. By setting multiple verification certificates, the second node uses the verification rules to obtain the corresponding verification certificates directly or indirectly from the first node in the verification order, so that the first node can grasp the processing link of the target file without the need for active feedback from the second node, which is conducive to improving the efficiency of blockchain transactions.

[0062] In one embodiment, obtaining the target file includes:

[0063] S01: generating a file transfer request in response to a file to be transferred sent to the first node by a local application system of a file sender;

[0064] S02: generating, according to the file transfer request, the file transfer rule applied to the first node and the file verification rule applied to the second node;

[0065] S03: parsing the file to be transferred according to the file transfer rule to obtain a parsed file;

[0066] S04: generating the target file based on the parsed file that complies with the file transfer rule;

[0067] The file verification rule is adapted to the file transmission rule.

[0068] Specifically, when the first node receives the file to be transferred from the file sender, it generates a corresponding file transfer request, and determines the file transfer rule at the first node and the file verification rule that matches it at the second node based on the file transfer request. The first node parses the file to be transferred based on the file transfer rule, and determines each parsed file that matches the transfer rule as the target file; avoids transferring files that cannot be recognized by the file verification rule to the second node, causing abnormal alarms during file parsing.

[0069] It should be noted that: the file transfer rule can be applied for configuration from the management node based on the file transfer demand, or the management node can pre-configure at least one file transfer rule on each member node of the blockchain; in addition, any file transfer rule has a corresponding file verification rule. It can be understood that when the first node calls the file transfer rule to parse the file to be transferred, it needs to call the file transfer rule corresponding to the file verification rule that is compatible with the second node; the file verification rule is used by the second node to perform file format verification on the received target file. The file format verification includes: data field parsing rules, field type rules after parsing, field length, numerical field precision, whether it meets the required field, file header format, file content format, file end format, etc.

[0070] In one embodiment, the verification process includes a first verification stage and a second verification stage, wherein the first verification stage is the signature information verification of the first node, and the second verification stage is the data tamper-proof verification.

[0071] In one embodiment, see Figure 2 , said S4 includes:

[0072] S41: According to the first verification stage of the verification process, a first verification certificate is retrieved to verify the signature information of the target file to obtain a first verification file;

[0073] S42: According to the second verification stage of the verification process, a second verification credential is retrieved to perform an anti-tampering verification on the first verification file to obtain an application file corresponding to the target file.

[0074] Specifically, after the second node receives the target file sent by the first node, it calls the corresponding file verification rules to perform feasibility verification on the target file. The file verification rules include a first verification stage and a second verification stage. Preferably, the first stage verification is an authenticity verification of the signature information of the first node in the target file, and the second stage verification is an anti-tampering verification of the target file transmission process.

[0075] It should be noted that: each verification stage requires a different verification certificate. After completing all verification stages, the target file that has passed the verification is recorded as an application file, and then the application file is sent to the file recipient; the verification certificate used in each verification stage is obtained directly or indirectly from the first node, or when the second node obtains the corresponding verification certificate, the first node can obtain the corresponding call information, such as: when the second node initiates a transaction corresponding to the first verification certificate and the second verification certificate to the blockchain, the first node will perform consensus, accounting and other operations on the transaction.

[0076] In one embodiment, generating the signature information of the first stage verification includes:

[0077] Obtaining a third private key of the first node, wherein the third private key is generated by a second base point based on an elliptic curve;

[0078] Calculate first sub-information rG(x, y) according to the second base point and the first random number;

[0079] Calculate second sub-information s=(h+dx) / r) according to the first random number, the first hash value and the third private key;

[0080] combining the first sub-information and the second sub-information into the signature information, and uploading the third public key corresponding to the third private key to the chain;

[0081] Among them, the third public key is the verification certificate of the first stage verification, r is the first random number, G is the second base point, x is the horizontal coordinate of point rG, y is the vertical coordinate of point rG, d is the third private key, and h is the first hash value corresponding to the encrypted file.

[0082] Specifically, the second base point and the first random number of the elliptic curve are obtained, the third private key and the third public key of the first node are generated based on the second base point, and then the first sub-information rG(x, y) is calculated; the second sub-information s is calculated based on the formula s=(h+dx) / r using the first random number, the first hash value and the third private key; the first sub-information and the second sub-information are used as signature information, and then the third public key used for signature verification is stored on the chain, and the third public key is the first verification certificate, wherein the first hash value is the hash value of the target file or the hash value of its encrypted file. If the target file is transmitted in plain text, the first hash value is the target file. If the target file is transmitted in ciphertext, the first hash value is the hash value corresponding to the encrypted file of the target file; in order to save the computer overhead of the first node, it is preferred that the second base point and the first base point are the same base point, that is, the first public key is equal to the third public key, and the first private key is equal to the third private key.

[0083] The signature information of the target file is verified using the first verification certificate as follows: the second node calculates the second hash value H of the target file based on the received target file, calculates M=hG / s+xQ / s, and compares M with rG of the signature information. If they are consistent, the signature verification is successful, where M=HG / s+xQ / s=HG / s+x(dG) / s=(H+xd)G / s=r(H+xd)G / (h+dx).

[0084] Furthermore, the first node stores the third public key on the chain and / or sends it to the second node together with the target file through the file transfer channel. Preferably, the third public key is stored on the chain, so that after the second node receives the target file, when it verifies the authenticity of the signature by calling the third public key, the first node can know the processing flow of the target file at the second node without the need for the second node to provide active feedback.

[0085] In one embodiment, the second verification credential includes a first credential and a second credential, wherein the first credential is used to verify the tamper-proof nature of the encrypted file of the target file, and the second credential is used to decrypt the encrypted file.

[0086] In one embodiment, generating the first credential includes:

[0087] Obtaining a second public key corresponding to the second node;

[0088] Generate a negotiated key based on the second public key and the first private key of the first node;

[0089] Encrypting the encrypted file using the negotiated key to obtain the encrypted file;

[0090] Performing a hash calculation on the encrypted file to generate the first credential corresponding to the first hash value;

[0091] The key pair of the first node and the second node is generated based on the same first base point in the same finite field, and the key pair includes a private key and a public key.

[0092] In one embodiment, the second credential is a first public key corresponding to the first private key.

[0093] Specifically, an elliptic curve key agreement algorithm is used to encrypt a target file. The same base point in the same finite field is selected at the first node and the second node, and the base point is recorded as the first base point. The first public key and the first private key of the first node are calculated based on the first base point, and the second public key and the second private key of the second node are calculated based on the first base point. The first public key and the first private key constitute a key pair, and the second public key and the second private key constitute a key pair. The second public key and the first private key are used to calculate the first key for encrypting the target file. Similarly, the second private key and the first public key are used to calculate the second key for decrypting the target file. Since the base point is the same base point in the same finite field, the first key and the second key are the same, recorded as the agreement key, and the target file is encrypted using the agreement key to obtain an encrypted file. The agreement key is calculated by obtaining the other party's public key, and encryption and decryption of the target file can be achieved without exposing the private keys of the first node and the second node.

[0094] Furthermore, the first node stores the first public key on-chain and / or sends it to the second node together with the target file through a file transfer channel. Preferably, the first public key is stored on-chain so that after the second node receives the target file and decrypts it by calling the first public key, the first node can know the processing flow of the target file at the second node without the need for the second node to provide active feedback.

[0095] The blockchain tracking method of the data sending and receiving process of the present invention divides the interactive data into file transmission and file verification when the first node and the second node of the blockchain interact with each other; the file verification method is used to ensure the tamper-proofness of the file transmission process, and by setting multiple verification certificates, the second node uses the verification rules to obtain the corresponding verification certificates directly or indirectly from the first node in the verification order, so that the first node can grasp the processing link of the target file without the need for active feedback from the second node, which is conducive to improving the efficiency of blockchain transactions.

[0096] Example 2

[0097] The present invention also provides a blockchain tracking method device for data sending and receiving processes based on the data sending and receiving process of Example 1, see Figure 3 , applied to blockchain systems, including:

[0098] A data acquisition module is configured to respond to a file sending request from a first blockchain node to send a target file to a second blockchain node, wherein a local application system of a file sender is connected to the first node, and a local application system of a file receiver is connected to the second node;

[0099] A data transmission module is configured to establish a file transmission channel for transmitting the target file according to the file transmission request, and transmit the target file to the second node, wherein the file transmission channel is a channel corresponding to the file transmission of the target file on the non-blockchain chain;

[0100] Data processing module: used for generating a plurality of verification certificates corresponding to the target file for verifying the credibility of the target file according to the file sending request, and performing trustworthy transmission of the verification certificates;

[0101] Data verification module: used to retrieve each verification certificate in turn at the second node according to a preset verification process to perform credibility verification on the target file.

[0102] In one embodiment, the file acquisition unit for acquiring the target file includes:

[0103] A request response unit: generating a file transfer request in response to a file to be transferred sent to the first node by a local application system of a file sender;

[0104] A parameter configuration unit: generating, according to the file transfer request, the file transfer rule applied to the first node and the file verification rule applied to the second node;

[0105] File parsing unit: parsing the file to be transferred according to the file transfer rule to obtain a parsed file;

[0106] A file screening unit: generating the target file based on the parsed file that meets the file transfer rule;

[0107] The file verification rule is adapted to the file transmission rule.

[0108] In one embodiment, the verification process includes a first verification stage and a second verification stage, wherein the first verification stage is the signature information verification of the first node, and the second verification stage is the data tamper-proof verification.

[0109] In one embodiment, the data verification module includes:

[0110] A first verification unit: according to the first verification stage of the verification process, calling a first verification certificate to verify the signature information of the target file to obtain a first verification file;

[0111] The second verification unit: according to the second verification stage of the verification process, retrieves the second verification certificate to perform anti-tampering verification on the first verification file to obtain an application file corresponding to the target file.

[0112] In one embodiment, the signature unit for generating the signature information of the first stage verification includes:

[0113] A secret key acquisition unit: acquiring a third private key of the first node, wherein the third private key is generated by a second base point based on an elliptic curve;

[0114] A first calculation unit: calculates first sub-information rG(x, y) according to the second base point and the first random number;

[0115] A second calculation unit: calculates second sub-information s=(h+dx) / r) according to the first random number, the first hash value and the third private key;

[0116] Signature generation unit: combining the first sub-information and the second sub-information into the signature information, and uploading the third public key corresponding to the third private key to the chain;

[0117] Among them, the third public key is the verification certificate of the first stage verification, r is the first random number, G is the second base point, x is the horizontal coordinate of point rG, y is the vertical coordinate of point rG, d is the third private key, and h is the first hash value corresponding to the encrypted file.

[0118] In one embodiment, the second verification credential includes a first credential and a second credential, wherein the first credential is used to verify the tamper-proof nature of the encrypted file of the target file, and the second credential is used to decrypt the encrypted file.

[0119] Preferably, the credential unit for generating the first credential includes:

[0120] Key information unit: obtain the second public key corresponding to the second node;

[0121] A key calculation unit: generating a negotiated key based on the second public key and the first private key of the first node;

[0122] File encryption unit: encrypting the encrypted file using the negotiated secret key to obtain the encrypted file;

[0123] A credential generating unit: performing a hash calculation on the encrypted file to generate the first credential corresponding to the first hash value;

[0124] The key pair of the first node and the second node is generated based on the same first base point in the same finite domain, and the key pair includes a private key and a public key;

[0125] The second credential is the first public key corresponding to the first private key.

[0126] The present invention provides a blockchain tracking method, device, equipment and storage medium for a data sending and receiving process. When a first node and a second node of a blockchain interact with data, the interactive data is divided into file transmission and file verification. File verification is used to ensure tamper-proofing of the file transmission process. By setting multiple verification credentials, the second node uses verification rules to obtain corresponding verification credentials directly or indirectly from the first node in a verification order, so that the first node can grasp the processing link of the target file without the need for active feedback from the second node, which is conducive to improving the efficiency of blockchain transactions.

[0127] Example 5

[0128] The present invention provides an electronic device and a storage medium, see Figure 4 , comprising at least one processor, at least one memory, and computer program instructions stored in the memory.

[0129] Specifically, the above-mentioned processor may include a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of an embodiment of the present invention, and the electronic device includes at least one of the following: a computer, a mobile terminal, a PC, a tablet computer, etc.

[0130] The memory may include a large capacity memory for data or instructions. By way of example and not limitation, the memory may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive, or a combination of two or more of these. Where appropriate, the memory may include a removable or non-removable (or fixed) medium. Where appropriate, the memory may be inside or outside the data processing device. In a specific embodiment, the memory is a non-volatile solid-state memory. In a specific embodiment, the memory includes a read-only memory (ROM). Where appropriate, the ROM may be a mask-programmed ROM, a programmable ROM (PROM), an erasable PROM (EPROM), an electrically erasable PROM (EEPROM), an electrically rewritable ROM (EAROM), or a flash memory, or a combination of two or more of these.

[0131] The processor implements the blockchain tracking method for any one of the data sending and receiving processes in the first embodiment by reading and executing computer program instructions stored in the memory.

[0132] In one example, the electronic device may further include a communication interface and a bus, wherein the processor, the memory, and the communication interface are connected via the bus and communicate with each other.

[0133] The communication interface is mainly used to implement communication between the modules, devices, units and / or equipment in the embodiments of the present invention.

[0134] Bus comprises hardware, software or both, couples the parts of electronic equipment to each other.For example, and not limitation, bus can comprise accelerated graphics port (AGP) or other graphics bus, enhanced industry standard architecture (EISA) bus, front side bus (FSB), hypertransport (HT) interconnection, industry standard architecture (ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations.In suitable cases, bus can comprise one or more buses.Although the embodiment of the present invention describes and shows specific bus, the present invention considers any suitable bus or interconnection.

[0135] It should be understood that the present invention is not limited to the specific configurations and processes described above and illustrated in the figures. For the sake of brevity, a detailed description of known methods is omitted. In the above embodiments, several specific steps are described and illustrated as examples. However, the method of the present invention is not limited to the specific steps described and illustrated. Those skilled in the art may make various changes, modifications, and additions, or change the order of the steps after understanding the spirit of the present invention.

[0136] The functional blocks shown in the above-described block diagram can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in unit, a function card or the like. When implemented in software, the elements of the present invention are programs or code segments that are used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link by a data signal carried in a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROMs, flash memories, erasable ROMs (EROMs), floppy disks, CD-ROMs, optical disks, hard disks, optical fiber media, radio frequency (RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0137] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the above embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A blockchain tracking method for data sending and receiving processes, characterized in that: Applied to a blockchain system, the method includes: In response to a file sending request from a first blockchain node to send a target file to a second blockchain node, wherein a local application system of a file sender accesses the first node, and a local application system of a file receiver accesses the second node; Establishing a file transfer channel for transferring the target file according to the file sending request, and transferring the target file to the second node, wherein the file transfer channel is a channel corresponding to the file transfer of the target file on a non-blockchain chain; Generating, according to the file sending request, a plurality of verification credentials corresponding to the target file for verifying the credibility of the target file, and performing trustworthy transmission of the verification credentials; According to the preset verification process, the second node sequentially retrieves each verification certificate to perform a credibility check on the target file; The verification process includes a first verification stage and a second verification stage, wherein the first verification stage is the signature information verification of the first node, and the second verification stage is the data tamper-proof verification; Generating signature information of a first verification phase includes: obtaining a third private key of the first node, wherein the third private key is generated by a second base point based on an elliptic curve; Calculate first sub-information rG(x, y) according to the second base point and the first random number; Calculate second sub-information s=(h+dx) / r) according to the first random number, the first hash value, and the third private key; Combine the first sub-information and the second sub-information into the signature information, and upload the third public key corresponding to the third private key to the blockchain; wherein the third public key is the verification credential of the first verification phase, r is the first random number, G is the second base point, x is the horizontal coordinate of point rG, y is the vertical coordinate of point rG, d is the third private key, and h is the hash value of the target file or the first hash value corresponding to the encrypted file; The second verification credential includes a first credential and a second credential, wherein the first credential is used to verify the tamper-proof nature of the encrypted file of the target file, and the second credential is used to decrypt the encrypted file; Generating the first credential includes: obtaining a second public key corresponding to the second node; generating a negotiated key based on the second public key and the first private key of the first node; encrypting the encrypted file using the negotiated key to obtain the encrypted file; and performing a hash calculation on the encrypted file to generate the first credential corresponding to a first hash value; The key pair of the first node and the second node is generated based on the same first base point in the same finite domain, and the key pair includes a private key and a public key; The second credential is the first public key corresponding to the first private key.

2. The blockchain tracking method for data sending and receiving process according to claim 1 is characterized in that: Acquiring the target file includes: generating a file transfer request in response to a file to be transferred sent to the first node by a local application system of a file sender; generating, according to the file transfer request, the file transfer rule applied to the first node and the file verification rule applied to the second node; Parsing the file to be transferred according to the file transfer rule to obtain a parsed file; generating the target file based on the parsed file that complies with the file transfer rule; The file verification rule is adapted to the file transmission rule.

3. The blockchain tracking method for data sending and receiving process according to claim 1 is characterized in that: The target file credibility check includes: According to the first verification stage of the verification process, a first verification certificate is retrieved to verify the signature information of the target file to obtain a first verification file; According to the second verification stage of the verification process, a second verification credential is retrieved to perform tamper-proof verification on the first verification file to obtain an application file corresponding to the target file.

4. A blockchain tracking method and device for data transmission and reception process, characterized in that: Applied to blockchain systems, including: A data acquisition module is configured to respond to a file sending request from a first blockchain node to send a target file to a second blockchain node, wherein a local application system of a file sender is connected to the first node, and a local application system of a file receiver is connected to the second node; A data transmission module is configured to establish a file transmission channel for transmitting the target file according to the file transmission request, and transmit the target file to the second node, wherein the file transmission channel is a channel corresponding to the file transmission of the target file on the non-blockchain chain; Data processing module: used for generating a plurality of verification certificates corresponding to the target file for verifying the credibility of the target file according to the file sending request, and performing trustworthy transmission of the verification certificates; A data verification module is configured to retrieve each verification certificate in sequence at the second node according to a preset verification process to perform a credibility verification on the target file; the verification process includes a first verification phase and a second verification phase, wherein the first verification phase is a signature verification of the first node, and the second verification phase is a data tamper-proof verification; Generating signature information of a first verification phase includes: obtaining a third private key of the first node, wherein the third private key is generated by a second base point based on an elliptic curve; Calculate first sub-information rG(x, y) according to the second base point and the first random number; Calculate second sub-information s=(h+dx) / r) according to the first random number, the first hash value, and the third private key; Combine the first sub-information and the second sub-information into the signature information, and upload the third public key corresponding to the third private key to the blockchain; wherein the third public key is the verification credential of the first verification phase, r is the first random number, G is the second base point, x is the horizontal coordinate of point rG, y is the vertical coordinate of point rG, d is the third private key, and h is the hash value of the target file or the first hash value corresponding to the encrypted file; The second verification credential includes a first credential and a second credential, wherein the first credential is used to verify the tamper-proof nature of the encrypted file of the target file, and the second credential is used to decrypt the encrypted file; Generating the first credential includes: obtaining a second public key corresponding to the second node; generating a negotiated key based on the second public key and the first private key of the first node; encrypting the encrypted file using the negotiated key to obtain the encrypted file; and performing a hash calculation on the encrypted file to generate the first credential corresponding to a first hash value; The key pair of the first node and the second node is generated based on the same first base point in the same finite domain, and the key pair includes a private key and a public key; The second credential is the first public key corresponding to the first private key.

5. An electronic device, characterized in that: include: At least one processor, at least one memory, and computer program instructions stored in the memory, which implement the method according to any one of claims 1 to 3 when the computer program instructions are executed by the processor.

6. A storage medium having computer program instructions stored thereon, characterized in that: When the computer program instructions are executed by a processor, the method according to any one of claims 1 to 3 is implemented.

Images