Blockchain protocol supporting in-out network isolation method, system, device and medium

Abstract

The application discloses an internal and external network isolation method, system, equipment and medium supporting a blockchain protocol, and belongs to the technical field of data isolation transmission. The existing internal and external network data transmission needs to pass through a network gateway to be transferred, which influences the data transmission efficiency and is not conducive to popularization and use. The internal and external network isolation method supporting the blockchain protocol identifies the protocol of static data packets by constructing an internal and external network isolation model supporting the blockchain protocol. Once the consensus protocol is identified, the data is transmitted through a secure channel, and the network gateway is no longer used, so that the data transmission efficiency is greatly improved under the premise of guaranteeing network security, and the method is conducive to popularization and use. Meanwhile, the data information recorded by each blockchain node is stored in the cache by using a data cache model. The consensus protocol is identified uniformly every specified time or when the data volume is greater than a parameter threshold, and then the data is transmitted through the isolation network gateway or the secure channel, so that the data penetration efficiency is improved, and the problem of system performance degradation caused by frequent data penetration of the isolation network gateway is solved.

Description

Technical Field

[0001] This invention relates to methods, systems, devices, and media for isolating internal and external networks that support blockchain protocols, and belongs to the field of data isolation and transmission technology. Background Technology

[0002] Chinese Patent (CN113507480A) discloses a network device, a network gateway device and system, and a method for data transmission and reporting between networks. In the above-described embodiments, multiple network gateway devices are interconnected and form a blockchain. The method for data transmission between networks based on the network gateway devices includes: responding to a request to report data to a second network received from a connected first network; registering the data reporting task in the blockchain according to the request; generating a feature identifier based on the data reporting task in the blockchain and sending it to the blockchain; determining a target network gateway device based on the feature identifier on the blockchain; and executing the data reporting task from the first network to the second network via the target network gateway device.

[0003] The technical solution provided by the above invention enables secure communication between the local area network and the external network, enhancing the security of the blockchain network from the outside in.

[0004] However, all data in the above isolation scheme needs to be transferred through a network gateway, which makes data transmission take a long time, thus affecting data transmission efficiency and hindering its widespread use. Summary of the Invention

[0005] To address the shortcomings of existing technologies, the present invention aims to provide a method for isolating internal and external networks that supports blockchain protocols. This method identifies protocols in static data packets by constructing an internal / external network isolation model that supports blockchain protocols. Once a consensus protocol is identified, the data is transmitted through a secure channel, eliminating the need for a network gateway, thereby significantly improving data transmission efficiency while ensuring network security. Simultaneously, a data caching model is used to store the data recorded by each blockchain node in a cache. Consensus protocol identification is performed uniformly at specified intervals or when the data volume exceeds a parameter threshold. Data is then transmitted uniformly through the isolation network gateway or into the secure channel, improving data penetration efficiency and solving the problem of system performance degradation caused by frequent data penetration through the isolation network gateway.

[0006] The second objective of this invention is to provide a protocol penetration function for blockchain consensus protocols. The internal and external network isolation device can identify the blockchain consensus protocol. Once identified, the consensus protocol is transmitted through a secure channel, eliminating the need for a network gateway, thus significantly improving data transmission efficiency while ensuring network security. Simultaneously, a data caching function is implemented on the client side. Data information recorded by each blockchain node is stored in the cache. At specified intervals or when the data volume exceeds a parameter threshold, consensus protocol identification is performed uniformly, and then the data is transmitted uniformly through the isolation network gateway or into the secure channel, improving data penetration efficiency and solving the problem of system performance degradation caused by frequent data penetration of the isolation network gateway. Furthermore, data consistency verification is implemented on the client side, ensuring data consistency before and after penetration, thus supporting the internal and external network isolation system for blockchain protocols.

[0007] The third objective of this invention is to provide a method, system, device, and medium for internal and external network isolation that supports blockchain protocol, which can significantly improve the efficiency of data transmission while ensuring network security; solve the problem of system performance degradation caused by frequent data penetration of isolation gateways; and ensure data consistency before and after penetration.

[0008] To achieve one of the above objectives, the first technical solution of the present invention is as follows:

[0009] An internal / external network isolation method supporting blockchain protocols includes the following:

[0010] The first step is to obtain one or more data packets to be sent from the blockchain node;

[0011] The second step is to place one or more data packets into the information queue and use a pre-built data caching model to calculate the size of each data packet to obtain the parameter values ​​of one or more data packets.

[0012] The third step is to sum the parameter values ​​of one or more data packets to obtain the parameter sum;

[0013] The fourth step is to compare the parameter sum with the parameter threshold. When the parameter sum is greater than the parameter threshold or exceeds the set time, one or more data packets are packaged to form a new static data packet.

[0014] The fifth step involves identifying the protocol of static data packets using a pre-built internal and external network isolation model that supports blockchain protocols.

[0015] When a static data packet is determined to be a consensus protocol, it is then transmitted through a pre-established secure channel.

[0016] When a static data packet is determined not to be part of a consensus protocol, it is placed in a network gateway for transfer, thereby completing the isolation of the data packet between the internal and external networks.

[0017] Through continuous exploration and experimentation, this invention identifies static data packets by constructing an internal and external network isolation model that supports blockchain protocols. Once a consensus protocol is identified, it will be transmitted through a secure channel, eliminating the need for a network gateway. This significantly improves data transmission efficiency while ensuring network security, making it easier to promote and use.

[0018] Meanwhile, by using a data caching model, the data information recorded by each blockchain node will be stored in the cache. Every specified time or when the data volume exceeds the parameter threshold, a consensus protocol will be identified in a unified manner, and then the data will be transmitted through the isolation gateway or into the secure channel in a unified manner, thereby improving the data penetration efficiency and solving the problem of system performance degradation caused by frequent data penetration through the isolation gateway.

[0019] As a preferred technical measure:

[0020] The method for protocol identification of static data packets in the internal / external network isolation model is as follows:

[0021] The first M bits of a static data packet are parsed. If the request method, request header, request version, and protocol identifier can be correctly obtained and compared with the consensus protocol standard, the consensus protocol recognition is successful. At this time, the static data packet will be forwarded.

[0022] If the parsing is incorrect or the comparison fails, the static data packet will be transferred to the network gateway.

[0023] As a preferred technical measure:

[0024] The method for protocol identification of static data packets in the internal / external network isolation model is as follows:

[0025] Static data packets undergo security reviews at the network protocol and code scanning levels, and static data packets that pass the review are forwarded.

[0026] Static data packets that fail the review are transferred to the network gateway.

[0027] As a preferred technical measure:

[0028] The process of establishing a safe passage is as follows:

[0029] A message digest is generated using a hash algorithm and based on the public key and identification information.

[0030] A digital signature is generated by encrypting the message digest using the private key provided by the Certificate Authority (CA).

[0031] A digital certificate is formed by combining a public key, identification information, and a digital signature.

[0032] Use digital certificates to build a channel that can transmit static data packets.

[0033] As a preferred technical measure:

[0034] It also includes using a consistency algorithm to perform consistency verification on data packets or static data packets;

[0035] The consensus algorithm is a hash operation. The hash operation performs a hash calculation on the data packet to obtain the hash value of the data packet. After the data packet passes through the internal and external network isolation model that supports the blockchain protocol, the hash operation is performed again to determine whether the hash value of the data packet after transmission is the same as the hash value before transmission.

[0036] To achieve one of the above objectives, the second technical solution of the present invention is as follows:

[0037] An internal and external network isolation system supporting blockchain protocol adopts the above-mentioned internal and external network isolation method supporting blockchain protocol; it includes at least one network gateway for data exchange and relay, a data acquisition module, a data caching module, a data calculation module, a data packet generation module, and an internal and external network isolation module supporting blockchain protocol;

[0038] The network gateway uses a switch or channel for isolation control;

[0039] The data acquisition module is used to acquire one or more data packets to be sent from the blockchain node;

[0040] The data caching module is used to place one or more data packets into the information queue and calculate the size of each data packet to obtain the parameter values ​​of one or more data packets.

[0041] The data calculation module is used to sum the parameter values ​​of one or more data packets to obtain the parameter sum;

[0042] The data packet generation module is used to compare the parameter sum with the parameter threshold. When the parameter sum is greater than the parameter threshold or exceeds the set time, one or more data packets are packaged to form a new static data packet.

[0043] An internal / external network isolation module supporting blockchain protocols is used for protocol identification of static data packets, including:

[0044] When a static data packet is determined to be a consensus protocol, it is then transmitted through a pre-established secure channel.

[0045] When a static data packet is determined not to be part of a consensus protocol, it is placed in a network gateway for transfer.

[0046] Through continuous exploration and experimentation, this invention identifies static data packets by constructing an internal and external network isolation module that supports blockchain protocols. Once the consensus protocol is identified, it will be transmitted through a secure channel, eliminating the need for a network gateway. This significantly improves data transmission efficiency while ensuring network security, making it easier to promote and use.

[0047] Meanwhile, by using a data caching module, the data information recorded by each blockchain node will be stored in the cache. Every specified time or when the data volume exceeds the parameter threshold, a consensus protocol will be identified in a unified manner, and then the data will be transmitted through the isolation gateway or into the security channel in a unified manner, thereby improving the data penetration efficiency and solving the problem of system performance degradation caused by frequent data penetration through the isolation gateway.

[0048] As a preferred technical measure:

[0049] It also includes Blockchain Node 1, Client 1, an internal and external network isolation device that supports the blockchain protocol, Client 2, and Blockchain Node 2;

[0050] Blockchain node one is used to send one or more data packets to client one;

[0051] Client 1 has a consistency module, which is used to cache one or more data packets and perform consistency verification on the data packets. After the verification is successful, one or more data packets are transmitted to the internal and external network isolation device.

[0052] The internal and external network isolation device that supports blockchain protocols is equipped with a protocol identification module for identifying the protocol of data packets. When the identification module determines that the data packet is a consensus protocol, the data packet can be placed in a secure channel and transmitted to client 2 to complete the subsequent blockchain data transmission.

[0053] Client 2 has a consistency module, which is used to cache one or more data packets received and perform consistency verification on the data packets. After the verification is successful, one or more data packets are transmitted to blockchain node 2.

[0054] As a preferred technical measure:

[0055] The internal and external network isolation device that supports blockchain protocols includes a dedicated hardware communication card, a private communication protocol module, an encryption signature module, and a national cryptographic algorithm module;

[0056] Hardware communication cards use hardware to intercept communication data between internal and external networks;

[0057] A private communication protocol module is used for transmitting private data communication protocols.

[0058] The encryption and signature module uses a data certificate to sign the data and uses the private key of the Certificate Authority (CA) to issue a signature certificate and an encryption certificate. The client uses the public key of the CA to verify the legitimacy of the signature certificate.

[0059] The national cryptographic algorithm module is used to implement IPSec-VPN link-level encryption.

[0060] To achieve one of the above objectives, the third technical solution of the present invention is as follows:

[0061] A computer device comprising:

[0062] One or more processors;

[0063] Storage device for storing one or more programs;

[0064] When the one or more programs are executed by the one or more processors, the one or more processors implement the above-described method for isolating internal and external networks that supports blockchain protocols.

[0065] To achieve one of the above objectives, the fourth technical solution of the present invention is as follows:

[0066] A computer-readable storage medium having a computer program stored thereon that, when executed by a processor, implements the above-described method for isolating internal and external networks supporting a blockchain protocol.

[0067] Compared with the prior art, the present invention has the following beneficial effects:

[0068] Through continuous exploration and experimentation, this invention identifies static data packets by constructing an internal and external network isolation model that supports blockchain protocols. Once a consensus protocol is identified, it will be transmitted through a secure channel, eliminating the need for a network gateway. This significantly improves data transmission efficiency while ensuring network security, making it easier to promote and use.

[0069] Meanwhile, by using a data caching model, the data information recorded by each blockchain node will be stored in the cache. Every specified time or when the data volume exceeds the parameter threshold, a consensus protocol will be identified in a unified manner, and then the data will be transmitted through the isolation gateway or into the secure channel in a unified manner, thereby improving the data penetration efficiency and solving the problem of system performance degradation caused by frequent data penetration through the isolation gateway.

[0070] Furthermore, this invention can provide protocol penetration functionality for blockchain consensus protocols. The internal and external network isolation device can identify the blockchain consensus protocol. Once the consensus protocol is identified, it will be transmitted through a secure channel without using a network gateway, thereby significantly improving the efficiency of data transmission while ensuring network security, which is conducive to its widespread use.

[0071] Furthermore, relying on the client to implement the data caching function, the data information recorded by each blockchain node will be stored in the cache. Every specified time or when the data volume exceeds the parameter threshold, a consensus protocol will be identified in a unified manner, and then the data will be transmitted through the isolation gateway or into the security channel in a unified manner, which will improve the data penetration efficiency and solve the problem of system performance degradation caused by frequent data penetration through the isolation gateway.

[0072] Furthermore, data consistency verification is implemented on the client side. To prevent data errors after data penetration, consistency algorithms are used to constrain the data to be transmitted. Combined with caching, the data is packaged and hashed. After data penetration is successful, the client performs consistency verification on the data packets, thus ensuring data consistency before and after penetration. Attached Figure Description

[0073] Figure 1 This is a flowchart illustrating an internal / external network isolation method supporting the blockchain protocol of the present invention.

[0074] Figure 2 This is a framework diagram of an internal and external network isolation system supporting the blockchain protocol according to the present invention;

[0075] Figure 3 A diagram illustrating consensus protocol penetration in this invention;

[0076] Figure 4 An illustration of data caching for this invention;

[0077] Figure 5 This is a diagram illustrating the consistency verification process for this invention. Detailed Implementation

[0078] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0079] Conversely, this invention encompasses any substitutions, modifications, equivalent methods, and solutions made within the spirit and scope of the invention as defined in the claims. Furthermore, to provide a better understanding of the invention, certain specific details are described in detail below. However, those skilled in the art will fully understand the invention even without these detailed descriptions.

[0080] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the scope of the invention.

[0081] like Figure 1 As shown, this invention supports a specific embodiment of the method for isolating internal and external networks in blockchain protocols:

[0082] An internal / external network isolation method supporting blockchain protocols includes the following:

[0083] The first step is to obtain one or more data packets to be sent from the blockchain node;

[0084] The second step is to place one or more data packets into the information queue and use a pre-built data caching model to calculate the size of each data packet to obtain the parameter values ​​of one or more data packets.

[0085] The third step is to sum the parameter values ​​of one or more data packets to obtain the parameter sum;

[0086] The fourth step is to compare the parameter sum with the parameter threshold. When the parameter sum is greater than the parameter threshold or exceeds the set time, one or more data packets are packaged to form a new static data packet.

[0087] The fifth step involves identifying the protocol of static data packets using a pre-built internal and external network isolation model that supports blockchain protocols.

[0088] When a static data packet is determined to be a consensus protocol, it is then transmitted through a pre-established secure channel.

[0089] When a static data packet is determined not to be part of a consensus protocol, it is placed in a network gateway for transfer, thereby completing the isolation of the data packet between the internal and external networks.

[0090] like Figure 2 As shown, this invention supports a specific embodiment of an internal and external network isolation system for blockchain protocols:

[0091] An internal and external network isolation system supporting blockchain protocols includes an internal and external network isolation device supporting blockchain protocols, as well as client one and client two.

[0092] An internal and external network isolation device that supports blockchain protocols is used to complete consensus protocol penetration and trusted data transfer between two isolated network segments.

[0093] Client 1 and Client 2 are responsible for data caching and consistency verification, and are deployed in network A and network B respectively.

[0094] like Figure 3 As shown, a specific embodiment of the consensus protocol penetration of the present invention is as follows:

[0095] When a blockchain node needs to send a data packet, it first sends the data packet to an internal / external network isolation device that supports the blockchain protocol. The protocol identification module in the isolation device will identify the protocol of the data packet. When the identification module determines that the data packet is a consensus protocol, the data packet can be placed in a secure channel and transmitted to another network to complete the subsequent blockchain data transmission.

[0096] The consensus protocol penetration method of the present invention parses the incoming data packet through a protocol parsing module. By parsing the fixed first 64 bits of the data packet, if the request method, request header, request version, and protocol identifier can be correctly obtained, the data packet is forwarded to the protocol parsing module at the other end after being compared with the specified consensus protocol standard. If it is the specified consensus protocol, the data packet is transmitted to the protocol parsing module at the other end through a secure channel.

[0097] like Figure 4 As shown, a specific embodiment of the data caching of the present invention is as follows:

[0098] When a blockchain node needs to send a data packet, it will first enter the information queue of client one, an internal and external network isolation device that supports the blockchain protocol. Data issuance is automatically regulated by the data size parameter threshold configured in the cache area, and after issuance, it enters the consensus protocol penetration stage. After passing through the secure channel, the data enters the cache of client two on the other end. Similarly, data issuance is regulated by the data size parameter threshold configured in the cache area, thereby improving data transmission stability and reducing the pressure on the server.

[0099] In this invention, the data recorded by each blockchain node is stored in a cache, and the data is exchanged uniformly through the isolation device at specified intervals (configuration parameters), which improves the data penetration efficiency and solves the problem of system performance degradation caused by frequent data penetration through the internal and external network isolation devices supporting the blockchain.

[0100] like Figure 5 As shown, a specific embodiment of the consistency verification of the present invention is as follows:

[0101] Both Client 1 and Client 2 have a consistency module that performs data consistency verification. When processing data packets, Client 1's consistency module performs a hash operation on the packet to obtain its hash value. After the packet passes through the internal / external network isolation device supporting the blockchain protocol, Client 2's consistency module performs another hash operation to determine if the hash value is the same as the original hash value, thus achieving consistency verification and preventing errors caused by data penetration.

[0102] To prevent data errors after data penetration, this invention constructs a consistency module using a consistency algorithm (hash algorithm). Its function is to transform a fixed-length or arbitrary-length input into a fixed-length output, known as a hash value. This transformation is a compression mapping; typically, the space of hash values ​​is much smaller than the space of inputs. Different inputs may hash to the same output, and it's impossible to uniquely determine the input value from the hash value. Simply put, hashing is a process that compresses a message of fixed or arbitrary length into a message digest of a fixed length. The most important characteristic of a hash algorithm is that the same input will always produce the same output, and different inputs have a very high probability of producing different outputs. The purpose of a hash algorithm is to verify whether the original data has been tampered with. Combined with caching functionality, the data to be transmitted is packaged and hashed. After data penetration, the client will perform a consistency check on the data packets, thus ensuring data consistency before and after penetration.

[0103] A specific embodiment of the blockchain protocol-supported internal and external network isolation device of the present invention:

[0104] Internal and external network isolation devices that support blockchain protocols include the following:

[0105] A dual hardware platform is used to achieve isolation between the intranet and the network.

[0106] It utilizes a novel dedicated switching channel technology, achieved through dedicated hardware communication cards, proprietary communication protocols, and encrypted signature mechanisms.

[0107] Hardware communication cards use hardware to intercept communication data between internal and external networks, filtering out insecure data and only receiving trusted data.

[0108] Private communication protocols are proprietary data communication protocols. Only data transmitted using private communication protocols will be received. Due to their proprietary nature, they are not exposed to the outside world, thus offering higher security.

[0109] The cryptographic signature mechanism is a method of signing data using data certificates. The CA issues signing certificates and encryption certificates with its private key, and the client needs to use the CA's public key to verify the validity of the certificates.

[0110] The national cryptographic algorithm is used to achieve link-level encryption for IPSec-VPN.

[0111] The secure access gateway product integrates IPsec and SSL security protocols based on domestically developed cryptographic algorithms (SM1 / SM2 / SM3 / SM4). This product complies with the requirements of the Cybersecurity Classified Protection 2.0 and national cryptographic standardization rectification.

[0112] Disconnect common protocol connections between networks.

[0113] Data packets are split or combined to form new static data packets. These new static data packets undergo security reviews at the network protocol and code scanning levels. Only data packets that pass the review can flow into internal units. The internal and external network isolation device that supports blockchain protocols ensures data communication security by performing strong identity authentication on internal users and establishing a two-way encrypted tunnel between the terminal and the secure access gateway.

[0114] After parsing the data packets and identifying the consensus protocol, a secure channel is provided for data transmission.

[0115] The incoming data packet will be parsed by the protocol parsing module. By parsing the first 64 bits of the packet, if the request method, request header, request version, and protocol identifier are correctly determined, and compared with the specified consensus protocol standard, the consensus protocol identification is successful. At this point, the data packet will be forwarded to the protocol parsing module at the other end using a secure transmission channel established via a digital certificate (the data certificate generation process involves using a hash algorithm to generate a message digest from the public key and identification information. To prevent impersonation, the message digest is encrypted with a private key provided by a Certificate Authority (CA), generating a digital signature. The public key, identification information, and digital signature are then combined to form a digital certificate).

[0116] It provides caching for data information of blockchain nodes, thereby improving system stability.

[0117] This invention uses a network gateway to ensure secure data communication between the internal network (local area network) and the external network (wide area network, also known as the public network). It adds specific support for blockchain platforms. Data is sent to the client's information queue through blockchain nodes. Data is only released when its size reaches the threshold value configured in the cache area, thereby improving transmission speed. With the booming development of the information industry in my country, the need for data exchange between high-security networks and other low-security networks in enterprises is becoming increasingly apparent, and the use of blockchain technology is becoming more widespread. For security reasons, most enterprises tend to use security products from domestic security vendors. However, most security vendors do not provide adequate support for blockchain technology. These factors have led to the emergence of methods for isolating internal and external networks that support blockchain protocols.

[0118] This invention supports a blockchain protocol-based method for isolating internal and external networks, which includes a data exchange area, essentially a ferry in the data exchange process. Currently, there are two technologies for controlling the exchange channel: a ferry switch and a channel method. The ferry switch is an electronic switching switch that prevents the data exchange area from simultaneously connecting to the internal and external networks at any given time, forming a spatial gap (GAP) and achieving physical isolation. The channel method changes the communication mode between the internal and external networks, interrupting the direct connection and using private communication methods to achieve physical isolation.

[0119] Furthermore, this invention supports a method for isolating internal and external networks for blockchain protocols, providing protocol penetration functionality for blockchain consensus protocols. The isolation device can identify the blockchain consensus protocol, and once identified, it will be transmitted through a secure channel, eliminating the need for a network gateway.

[0120] Data caching is implemented on the client side. Data recorded by each blockchain node is stored in the cache. Consensus protocol identification is performed uniformly at specified intervals, and then data is transmitted uniformly through the isolation gateway or into the secure channel, improving data penetration efficiency and solving the problem of system performance degradation caused by frequent data penetration through the isolation gateway.

[0121] Data consistency verification is implemented on the client side. To prevent data errors after data penetration, consistency algorithms are used to constrain the data to be transmitted. The data is packaged and hashed using a caching function. After the data penetration is successful, the client will perform consistency verification on the data packets, thus ensuring data consistency before and after penetration.

[0122] An embodiment of a device applying the method of the present invention:

[0123] A computer device comprising:

[0124] One or more processors;

[0125] Storage device for storing one or more programs;

[0126] When the one or more programs are executed by the one or more processors, the one or more processors implement the above-described method for isolating internal and external networks that supports blockchain protocols.

[0127] An embodiment of a computer medium applying the method of the present invention:

[0128] A computer-readable storage medium having a computer program stored thereon that, when executed by a processor, implements the above-described method for isolating internal and external networks supporting a blockchain protocol.

[0129] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0130] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, as well as combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0131] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0132] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0133] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that modifications or equivalent substitutions can still be made to the specific implementation of the present invention. Any modifications or equivalent substitutions that do not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A method for isolating internal and external networks supporting blockchain protocols, characterized in that, Includes the following: The first step is to obtain one or more data packets to be sent from the blockchain node; The second step is to place one or more data packets into the information queue and use a pre-built data caching model to calculate the size of each data packet to obtain the parameter values ​​of one or more data packets. The third step is to sum the parameter values ​​of one or more data packets to obtain the parameter sum; The fourth step is to compare the parameter sum with the parameter threshold. When the parameter sum is greater than the parameter threshold or exceeds the set time, one or more data packets are packaged to form a new static data packet. The fifth step involves identifying the protocol of static data packets using a pre-built internal and external network isolation model that supports blockchain protocols. When a static data packet is determined to be a consensus protocol, it is then transmitted through a pre-established secure channel. When a static data packet is determined not to be part of a consensus protocol, it is placed in a network gateway for transfer.

2. The method for isolating internal and external networks supporting blockchain protocols as described in claim 1, characterized in that, The method for protocol identification of static data packets in the internal / external network isolation model is as follows: The first M bits of a static data packet are parsed. If the request method, request header, request version, and protocol identifier can be correctly obtained and compared with the consensus protocol standard, the consensus protocol recognition is successful. At this time, the static data packet will be forwarded. If the parsing is incorrect or the comparison fails, the static data packet will be transferred to the network gateway.

3. The method for isolating internal and external networks supporting blockchain protocols as described in claim 1, characterized in that, The method for protocol identification of static data packets in the internal / external network isolation model is as follows: Static data packets undergo security reviews at the network protocol and code scanning levels, and static data packets that pass the review are forwarded. Static data packets that fail the review are transferred to the network gateway.

4. The method for isolating internal and external networks supporting blockchain protocols as described in claim 1, characterized in that, The process of establishing a safe passage is as follows: A message digest is generated using a hash algorithm and based on the public key and identification information. A digital signature is generated by encrypting the message digest using the private key provided by the Certificate Authority (CA). A digital certificate is formed by combining a public key, identification information, and a digital signature. Use digital certificates to build a channel that can transmit static data packets.

5. The method for isolating internal and external networks supporting blockchain protocols as described in claim 1, characterized in that, It also includes using a consistency algorithm to perform consistency verification on data packets or static data packets, thereby ensuring data consistency before and after the penetration; The consensus algorithm is a hash operation. The hash operation performs a hash calculation on the data packet to obtain the hash value of the data packet. After the data packet passes through the internal and external network isolation model that supports the blockchain protocol, the hash operation is performed again to determine whether the hash value of the data packet after transmission is the same as the hash value before transmission.

6. An internal / external network isolation system supporting blockchain protocols, characterized in that, The method for isolating internal and external networks that supports blockchain protocols is adopted as described in any one of claims 1-5; It includes at least one network gateway for data exchange and relay, a data acquisition module, a data caching module, a data calculation module, a data packet generation module, and an internal / external network isolation module that supports blockchain protocols; The network gateway uses a switch or channel for isolation control; The data acquisition module is used to acquire one or more data packets to be sent from the blockchain node; The data caching module is used to place one or more data packets into the information queue and calculate the size of each data packet to obtain the parameter values ​​of one or more data packets. The data calculation module is used to sum the parameter values ​​of one or more data packets to obtain the parameter sum; The data packet generation module is used to compare the parameter sum with the parameter threshold. When the parameter sum is greater than the parameter threshold or exceeds the set time, one or more data packets are packaged to form a new static data packet. An internal / external network isolation module supporting blockchain protocols is used for protocol identification of static data packets, including: When a static data packet is determined to be a consensus protocol, it is then transmitted through a pre-established secure channel. When a static data packet is determined not to be part of a consensus protocol, it is placed in a network gateway for transfer.

7. The internal and external network isolation system supporting blockchain protocol as described in claim 6, characterized in that, It also includes Blockchain Node 1, Client 1, an internal and external network isolation device that supports the blockchain protocol, Client 2, and Blockchain Node 2; Blockchain node one is used to send one or more data packets to client one; Client 1 has a consistency module, which is used to cache one or more data packets and perform consistency verification on the data packets. After the verification is successful, one or more data packets are transmitted to the internal and external network isolation device. The internal and external network isolation device that supports blockchain protocols is equipped with a protocol identification module for identifying the protocol of data packets. When the identification module determines that the data packet is a consensus protocol, the data packet can be placed in a secure channel and transmitted to client 2 to complete the subsequent blockchain data transmission. Client 2 has a consistency module, which is used to cache one or more data packets received and perform consistency verification on the data packets. After the verification is successful, one or more data packets are transmitted to blockchain node 2.

8. The internal and external network isolation system supporting blockchain protocol as described in claim 7, characterized in that, The internal and external network isolation device that supports blockchain protocols includes a dedicated hardware communication card, a private communication protocol module, an encryption signature module, and a national cryptographic algorithm module; Hardware communication cards use hardware to intercept communication data between internal and external networks; A private communication protocol module is used for transmitting private data communication protocols. The encryption and signature module uses a data certificate to sign the data and uses the private key of the Certificate Authority (CA) to issue a signature certificate and an encryption certificate. The client uses the public key of the CA to verify the legitimacy of the signature certificate. The national cryptographic algorithm module is used to implement IPSec-VPN link-level encryption.

9. A computer device, characterized in that, It includes: One or more processors; Storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement an internal and external network isolation method supporting a blockchain protocol as described in any one of claims 1-5.

10. A computer-readable storage medium, characterized in that, It stores a computer program that, when executed by a processor, implements an internal / external network isolation method supporting a blockchain protocol as described in any one of claims 1-5.

Images