Data transfer security assessment method and system for cross-chain transactions

Abstract

The application discloses a data transfer security evaluation method and system for cross-chain transactions, relates to the technical field of blockchains, and comprises the following steps: reading a target block network for performing cross-chain transactions, performing token encapsulation based on target transaction data on a source block subchain, and performing transfer block locking on the target block subchain; identifying the target block network, setting a verification port on the source block subchain and the target block subchain; performing self-security verification and output security verification of data blocks to generate first security evaluation data; performing self-security verification and receiving security verification based on the transfer block to generate second security evaluation data; performing risk control analysis on the flow risk of a side chain flow path to determine third security evaluation data; and generating a transfer security evaluation result based on the first security evaluation data, the second security evaluation data and the third security evaluation data. Thus, the technical effect of evaluating potential security risks based on interoperation is achieved.

Description

Technical Field

[0001] This invention relates to the field of blockchain technology, and in particular to a method and system for assessing the security of data transfer in cross-chain transactions. Background Technology

[0002] Blockchain-based cross-chain transactions are characterized by decentralization, trustlessness, and immutability. Combined with smart contracts, they enhance transparency and security. However, existing cross-chain transaction data transfer computations suffer from high complexity and inconsistencies in protocols and standards across different blockchain networks, leading to poor interoperability and potential security risks. Summary of the Invention

[0003] The purpose of this application is to provide a method and system for assessing the security of data transfer in cross-chain transactions, in order to address the technical problems of poor interoperability and potential security risks in existing technologies.

[0004] In view of the above technical issues, this application provides a method and system for data transfer security assessment in cross-chain transactions.

[0005] Firstly, this application provides a data transfer security assessment method for cross-chain transactions, wherein the method includes:

[0006] Read the target blockchain for cross-chain transactions, wherein the target blockchain includes at least two sub-chains and the target transaction data is timestamped;

[0007] The source block subchain is tokenized based on the target transaction data, and the transfer block is locked in the target block subchain.

[0008] Identify the target blockchain and set verification ports in the source block subchain and the target block subchain, wherein the verification port includes an output verification port and a receive verification port;

[0009] Based on the output verification port, perform self-security verification and output security verification of data blocks in the source block sub-chain to generate first security assessment data;

[0010] Based on the receiving verification port, perform self-security verification and receiving security verification based on the transfer blocks in the target block subchain to generate second security assessment data;

[0011] For the sidechain flow path between the source block subchain and the target block subchain, a risk control analysis of the circulation risk is performed to determine the third security assessment data, wherein the circulation risk is determined based on information confrontation records;

[0012] Based on the first security assessment data, the second security assessment data, and the third security assessment data, a transfer security assessment result is generated.

[0013] Secondly, this application also provides a data transfer security assessment system for cross-chain transactions, wherein the system includes:

[0014] The target acquisition module is used to read the target blockchain for cross-chain transactions, wherein the target blockchain includes at least two sub-chains and the target transaction data is timestamped.

[0015] The encapsulation module is used to encapsulate the source block subchain with tokens based on the target transaction data and to perform transfer block locking in the target block subchain.

[0016] A port verification module is used to identify the target blockchain and set verification ports on the source block subchain and the target block subchain. The verification port includes an output verification port and a receiving verification port.

[0017] The source security assessment module is used to perform self-security verification and output security verification based on the data blocks in the source block subchain based on the output verification port, and generate the first security assessment data.

[0018] The target security assessment module is used to perform self-security verification and receiving security verification based on the transfer blocks in the target block subchain based on the receiving verification port, and generate second security assessment data.

[0019] The path security assessment module is used to perform risk control analysis on the sidechain flow path between the source block subchain and the target block subchain, and determine the third security assessment data, wherein the flow risk is determined based on information confrontation records.

[0020] The comprehensive evaluation module is used to generate a transfer security evaluation result based on the first security evaluation data, the second security evaluation data, and the third security evaluation data.

[0021] Thirdly, this application also provides an electronic device, including: a memory for storing executable instructions; and a processor for implementing the data transfer security assessment method for cross-chain transactions provided in this application when executing the executable instructions stored in the memory.

[0022] Fourthly, this application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the data transfer security assessment method for cross-chain transactions provided in this application.

[0023] One or more technical solutions provided in this application have at least the following technical effects or advantages:

[0024] By reading the target blockchain for cross-chain transactions, the source blockchain subchain is tokenized based on the target transaction data, and the transfer block is locked on the target blockchain subchain. The target blockchain is identified, and verification ports are set on both the source and target blockchain subchains, including an output verification port and a receiving verification port. Based on the output verification port, self-security verification and output security verification are performed on the data blocks in the source blockchain subchain to generate first security assessment data. Based on the receiving verification port, self-security verification and receiving security verification are performed on the transfer blocks in the target blockchain subchain to generate second security assessment data. Risk control analysis of circulation risks is performed on the sidechain transfer path between the source and target blockchain subchains to determine third security assessment data, where circulation risk is determined based on information adversarial records. Based on the first, second, and third security assessment data, a transfer security assessment result is generated. This achieves the technical effect of assessing potential security risks based on interoperability.

[0025] The above description is merely an overview of the technical solution of this application. In order to more clearly explain the technical means of this application, and to enable its implementation in accordance with the contents of the specification, and to make the above and other objectives, features and advantages of this application more apparent and understandable, specific embodiments of this application are described below. Attached Figure Description

[0026] The embodiments of the present invention and the following brief description are illustrated in conjunction with the figures, which are described below:

[0027] Figure 1 This is a flowchart illustrating the data transfer security assessment method for cross-chain transactions used in this application;

[0028] Figure 2 This is a flowchart illustrating the self-security verification process in the data transfer security assessment method for cross-chain transactions used in this application.

[0029] Figure 3 This is a schematic diagram of the data transfer security assessment system for cross-chain transactions used in this application;

[0030] Figure 4 This is a schematic diagram of the structure of an exemplary electronic device of this application.

[0031] Explanation of reference numerals in the attached drawings: Target acquisition module 11, Encapsulation module 12, Port verification module 13, Source security assessment module 14, Target security assessment module 15, Path security assessment module 16, Comprehensive assessment module 17, Processor 31, Memory 32, Input device 33, Output device 34. Detailed Implementation

[0032] This application addresses the technical problems of poor interoperability and potential security risks faced by existing technologies by providing a data transfer security assessment method and system for cross-chain transactions.

[0033] The overall approach adopted in this technical embodiment to solve the above problems is as follows:

[0034] First, the source blockchain subchain is read from the target blockchain for the cross-chain transaction. It is then tokenized based on the target transaction data and locked on the target blockchain subchain. Next, the target blockchain is identified, and verification ports are set between the source and target blockchain subchains. These verification ports include output and receive verification ports. Based on the output verification port, self-security verification and output security verification of the data blocks in the source blockchain subchain are performed, generating first security assessment data. Simultaneously, based on the receive verification port, self-security verification and receive security verification of the transferred blocks in the target blockchain subchain are performed, generating second security assessment data. Risk control analysis of circulation risk is performed on the sidechain transfer path between the source and target blockchain subchains, clarifying third security assessment data. The assessment of circulation risk is based on confirmation of information adversarial records. Finally, based on the first, second, and third security assessment data, the transfer security assessment result of the cross-chain transaction is generated. This ensures that every step of the cross-chain transaction process undergoes a security assessment, including the transfer of data between the source and target blockchains. This achieves the technical effect of assessing potential security risks based on interoperability.

[0035] To better understand the above technical solutions, the following detailed description will be provided in conjunction with the accompanying drawings and specific embodiments. It should be noted that the described embodiments are only a part of the embodiments of this application, not all of them. It should be understood that this application is not limited to the exemplary embodiments described herein. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention. Furthermore, it should be noted that, for ease of description, only the parts related to this invention are shown in the accompanying drawings, not all of them.

[0036] Example 1

[0037] like Figure 1 As shown, this application provides a data transfer security assessment method for cross-chain transactions, the method comprising:

[0038] S100: Read the target blockchain for cross-chain transactions, wherein the target blockchain includes at least two sub-chains and the target transaction data is timestamped.

[0039] Optionally, the target blockchain network refers to a blockchain network of multiple sub-chains intended for cross-chain transactions and data transfers. The target blockchain network must contain at least two sub-chains. The system reads block and transaction data from the target blockchain network via blockchain nodes or an API. Then, it parses the transaction data and checks the timestamp of the target transaction data. The timestamp helps determine the exact time the transaction occurred, allowing for tracking the time sequence throughout the cross-chain transaction process.

[0040] Furthermore, after reading the target blockchain for the cross-chain transaction, step S100 includes:

[0041] Establish a cross-chain transaction plan, which includes cross-chain access principles and two-way value circulation principles;

[0042] Based on the aforementioned cross-chain transaction plan, an authentication decision based on the transaction request is executed for the target blockchain to determine the task authentication result;

[0043] The task authentication result is identified, and a cross-chain transaction instruction is generated.

[0044] Optionally, before conducting cross-chain transactions, a cross-chain transaction contingency plan should be constructed based on the nature of cross-chain transactions and data security requirements. The contingency plan specifies a set of authentication rules that cross-chain transactions must meet, including, for example, the cross-chain access principle and the two-way value flow principle. This plan is used for application authentication of cross-chain transactions based on the task side, ensuring that cross-chain transactions can proceed as expected.

[0045] Optionally, cross-chain access principles include security principles, compliance principles, interoperability principles, and privacy protection principles. Among these, the security principle ensures that cross-chain transactions are conducted in a secure environment, such as using encryption and digital signature technologies to ensure the confidentiality and integrity of information. The compliance principle ensures that cross-chain transactions adhere to relevant regulations. The interoperability principle specifies the operational technical solutions for cross-chain transactions, such as using standardized cross-chain protocols and interfaces to ensure interoperability between different blockchain networks. The privacy protection principle addresses user privacy, ensuring that sensitive information is not leaked.

[0046] Optionally, the principles of two-way value circulation include: the asset anchoring principle, which ensures that the anchoring and circulation of assets are traceable and verifiable in cross-chain transactions; the transaction confirmation principle, which enables two-way confirmation of cross-chain transactions, ensuring that both parties can confirm the validity of the transaction; and the real-time settlement principle, which enables near real-time settlement of cross-chain transactions, reducing the time required for transaction confirmation.

[0047] Optionally, a certification process based on a cross-chain transaction plan can be used to certify cross-chain transaction applications, thereby ensuring that only certified transactions can enter the cross-chain transaction process. For example, the certification process includes: identity verification and transaction condition verification. First, identity verification of both parties ensures that the entities participating in the cross-chain transaction are legitimate and authorized to conduct the transaction. Then, condition verification verifies whether the transaction meets preset conditions, including compliance, security, interoperability, privacy protection, asset anchoring, and transaction confirmation.

[0048] Optionally, cross-chain transaction instructions can be generated based on the task authentication results. For example, firstly, the authentication results are analyzed to determine whether the conditions for executing a cross-chain transaction are met. Then, based on successful authentication, the transaction request is analyzed, information is extracted, and a cross-chain transaction instruction is generated. The cross-chain transaction instruction includes bidirectional asset circulation information, transaction details, etc.

[0049] Optionally, transaction requests, task authentication results, and cross-chain transaction instructions can be stored together to establish an authentication application history database that records relevant information for each cross-chain transaction for auditing and traceability. Furthermore, an anomaly handling mechanism for cross-chain transactions should be designed to ensure that problems arising during transactions can be promptly detected, addressed, and communicated to relevant parties.

[0050] S200: Encapsulate the source block subchain with tokens based on the target transaction data, and perform transfer block locking on the target block subchain;

[0051] Optionally, for cross-chain transactions from a source subchain to a target subchain, the target transaction data needs to be tokenized and locked on the target subchain. The token is a digital certificate of rights.

[0052] For example, to encapsulate target transaction data into a token, firstly, select a suitable token standard for cross-chain transactions, such as ERC-20 or ERC-721. Ensure the target blockchain supports the selected token standard. Then, define the corresponding token contract on the target blockchain, including parameters such as the token's name, symbol, and total supply. Next, encapsulate the target transaction data from the source blockchain into a token transaction data structure, including information such as the transacting parties, transaction amount, and transaction timestamp. Finally, issue the corresponding token on the target blockchain and bind the encapsulated transaction data to the token.

[0053] Optionally, a block locking contract can be created on the target subchain via a transfer block lock to manage and verify the tokens transferred from the source subchain. For example, first, a token locking request is initiated on the source subchain to transfer the tokens to the target subchain. Then, the block locking contract on the target subchain verifies the validity of the tokens, thus confirming that the token transfer has been successful.

[0054] S300: Identify the target blockchain and set verification ports in the source block subchain and the target block subchain, wherein the verification port includes an output verification port and a receiving verification port;

[0055] Optionally, the target blockchain is identified, and output verification ports and receive verification ports are set for both the source and target sub-chains. The output verification port is set on the source sub-chain to verify the security of data and transaction requests sent by both the source and target sub-chains. The receive verification port is configured on the target sub-chain to verify the security of data and transaction requests received by both the target sub-chain and its sub-chains.

[0056] S400: Based on the output verification port, perform self-security verification and output security verification based on the data blocks in the source block sub-chain to generate first security assessment data;

[0057] Optionally, different blockchains have different security levels. For example, blockchains with built-in cross-chain protocols and contracts are more secure than those without. The version and standard of the cross-chain protocol and contract also affect the blockchain's security level.

[0058] Optionally, the source block subchain performs its own security verification on its data blocks based on the output verification port to ensure data integrity. This may include generating a digest of the data using a hash algorithm and then using that digest for verification in cross-chain transactions.

[0059] Optional, source blockchain output security verification. This includes ensuring that the output transaction requests, data, and related information comply with the source blockchain's security standards, and verifying server interface status and the degree of isolation elimination between links.

[0060] Optionally, first security assessment data is generated through self-security verification and output security verification. This data may include data integrity of the source block subchain, digital signature verification results, etc. The basic steps and considerations for self-security verification and output security verification of data blocks in the source block subchain during cross-chain transactions are outlined. This ensures that security and protocol consistency are fully considered in the implementation.

[0061] S500: Based on the receiving verification port, perform self-security verification and receiving security verification based on the transfer blocks in the target block sub-chain, and generate second security assessment data;

[0062] Optionally, the self-security verification and reception security verification of the transferred blocks in the target block subchain are performed through the receiving verification port. This is based on the same method and principle used for self-security verification and output security verification of data blocks in the source block subchain. For example, this involves the data integrity of the transferred blocks, the receiving protocol, and key configuration. It should be understood that, for the sake of brevity, further elaboration is not provided here.

[0063] S600: For the sidechain flow path between the source block subchain and the target block subchain, perform risk control analysis on the circulation risk and determine the third security assessment data, wherein the circulation risk is determined based on information confrontation records;

[0064] The sidechain transfer path between the source and target blockchain sub-chains refers to the path through which digital assets flow from one blockchain sub-chain (source blockchain) to another (target blockchain sub-chain) in cross-chain transactions. This sidechain transfer path involves different blockchain networks, protocols, smart contracts, and other factors. For example, this path includes intermediary nodes, cross-chain contracts, and smart bridging protocols. By conducting risk control analysis on the sidechain transfer path, the effectiveness, security, and verifiability of the digital asset transfer path can be ensured.

[0065] Furthermore, since circulation risk is determined based on information adversarial records, step S600 also includes:

[0066] If the information adversarial record is a non-empty set, extract the adversarial sequence, wherein the adversarial sequence includes risk type - risk adversarial point - protection level;

[0067] Identify the active adversarial sequence based on the adversarial sequence, perform comprehensive risk control analysis on the remaining adversarial sequences, and determine the third security assessment data.

[0068] Optionally, if the information confrontation record is not empty, the confrontation sequence is extracted. The information confrontation record includes relevant information about information confrontations that have occurred in the cross-chain circulation path. Analyzing the above records helps to reflect potential risk points in the sidechain circulation path.

[0069] Among them, proactive adversarial sequences refer to adversarial sequences in which the protection system responds immediately and takes proactive interception and other adversarial protective actions. Proactive adversarial sequences reflect security risk information with high risk that requires proactive protection. The remaining adversarial sequences contain potential risk information. A comprehensive risk control analysis is conducted on adversarial sequences that do not fall under proactive adversarial sequences. This includes assessing the risk level of each adversarial point and the protective measures to be taken.

[0070] Optionally, third security assessment data can be determined based on the results of comprehensive risk control analysis. For example, third security assessment data includes the risk level, potential points of attack, and protection level of the entire cross-chain circulation path.

[0071] S700: Based on the first security assessment data, the second security assessment data, and the third security assessment data, generate a transfer security assessment result.

[0072] Optionally, by associating the first, second, and third security assessment data, these data can be mapped to the same cross-chain transaction. Then, the associating data is cross-validated, comparing the information provided by each security assessment data point to check for consistency or mutual support. For example, if the first security assessment data indicates high security in a certain aspect, and the second and third security assessment data reach similar conclusions, confidence in the high security level in that aspect can be increased. Through these steps, a transfer security assessment result is generated, ensuring the accuracy and confidence level of the transfer security assessment result.

[0073] Furthermore, after generating the transfer security assessment results, step S700 includes:

[0074] Based on the transfer security assessment results, security indicator feature values ​​are identified and weighted summation is performed to generate a comprehensive security level.

[0075] Based on the transfer security assessment results and the overall security level, determine whether the mapped individual risk control threshold and overall risk control threshold are met;

[0076] If the conditions are not met, risk control tracing and adaptive configuration adjustment will be implemented.

[0077] Optionally, by considering the importance of each security indicator, multiple security indicators are weighted and summed to generate a comprehensive security level. By considering the importance of each security indicator, a comprehensive security assessment result for cross-chain transactions is obtained. Then, the transfer security assessment result and the comprehensive security level are compared with individual risk control thresholds and the comprehensive risk control threshold, respectively, to determine whether they meet the mapping requirements. These thresholds are predefined security standards used to determine whether cross-chain transactions can continue.

[0078] Optionally, if a cross-chain transaction fails to meet the set risk control thresholds, the system will perform risk source tracing, i.e., track the specific source of the risk, and then take adaptive configuration and control measures. This may include suspending transactions, adjusting security strategies, updating keys, developing smart contracts, adjusting protocols, and adjusting the underlying system performance. Through the above steps, the security of cross-chain transactions is ensured. By conducting multi-level assessments and threshold determinations, potential security risks are guaranteed during cross-chain operations.

[0079] Furthermore, after generating the transfer security assessment results, step S700 also includes:

[0080] Complete the cross-chain data transfer, make data circulation conservation decisions, and determine the transfer verification results. The conservation standard is the conservation of data value.

[0081] If the transfer verification result is not conserved, risk control tracing is performed in conjunction with the third security assessment data, and a retransfer instruction is generated.

[0082] Based on the results of risk control and source tracing, determine and implement risk contingency plans;

[0083] Upon receiving the retransfer instruction, the difference data based on the target transaction data is determined, and a cross-chain transfer is performed.

[0084] Optionally, after completing the cross-chain data transfer, the transaction is re-verified to check the data flow conservation. If the data flow is not conserved before and after the transfer, it indicates potential data omissions or tampering, requiring risk control and tracing. Then, based on the re-transfer instruction, the difference data from the target transaction data is determined, and the cross-chain transfer is performed. This ensures that the corrected data is correctly transmitted to the target blockchain. The difference data refers to the portion of the data that changes after the cross-chain transfer compared to the data before the transfer. Through these steps, data conservation and security are guaranteed, ensuring that the cross-chain transfer does not lead to loss or alteration of data value.

[0085] Furthermore, such as Figure 2 As shown, self-security verification is performed, including:

[0086] Identify the basic link information of the source block subchain and the target block subchain, wherein the basic link information is determined at least based on link type, link level, and protocol configuration;

[0087] Based on the aforementioned basic link information, the link credibility is determined;

[0088] Retrieve cross-chain transaction records based on the target blockchain within the predetermined time zone and calculate the risk probability;

[0089] Based on the credibility of the link and the probability of risk, the self-security verification result is determined, wherein the self-security verification result corresponds one-to-one with the block sub-chain.

[0090] Optionally, self-security verification can be performed on the sub-chain, involving the basic link information of the target sub-chain and the transaction records of the target blockchain network where the target sub-chain resides. Specifically, the basic link information is determined based on characteristic information such as link type, link level, and protocol configuration.

[0091] Optionally, risk events can be extracted from the transaction records of the target blockchain's sub-chain and the risk probability can be calculated to assess the risk of cross-chain transactions. The risk probability calculation involves factors such as the success rate, failure rate, and complexity of historical cross-chain transactions. Then, based on the link's credibility and the risk probability, the self-security verification result is determined. This ensures the sub-chain's own security in cross-chain transactions. If the link is untrustworthy or has a high risk probability, more cautious self-security verification or updates to the sub-chain's basic link configuration may be necessary.

[0092] Furthermore, after performing output security checks and receive security checks, the following steps are also included:

[0093] If the first security assessment data does not meet the first security threshold, an output delay instruction is generated.

[0094] If the second security assessment data does not meet the second security threshold, a receive delay instruction is generated.

[0095] Optionally, if the first security assessment data does not meet the first security threshold, it indicates that the security of the source block subchain does not meet the security requirements for cross-chain transactions. In this case, an output delay instruction is generated to postpone the output of data. Furthermore, if the second security assessment data does not meet the second security threshold, it indicates that the security of the target block subchain does not meet the security requirements for cross-chain transactions. In this case, a receive delay instruction is generated to postpone the reception of data. Through these steps, the data security of each step and node in the cross-chain transaction is ensured. Based on the output and receive delay instructions, risk isolation and data transfer are achieved, reducing the probability of security risk events.

[0096] In summary, the data transfer security assessment method for cross-chain transactions provided by this invention has the following technical effects:

[0097] By reading the target blockchain for cross-chain transactions, the source blockchain subchain is tokenized based on the target transaction data, and the transfer block is locked on the target blockchain subchain. The target blockchain is identified, and verification ports are set on both the source and target blockchain subchains, including an output verification port and a receiving verification port. Based on the output verification port, self-security verification and output security verification are performed on the data blocks in the source blockchain subchain to generate first security assessment data. Based on the receiving verification port, self-security verification and receiving security verification are performed on the transfer blocks in the target blockchain subchain to generate second security assessment data. Risk control analysis of circulation risks is performed on the sidechain transfer path between the source and target blockchain subchains to determine third security assessment data, where circulation risk is determined based on information adversarial records. Based on the first, second, and third security assessment data, a transfer security assessment result is generated. This achieves the technical effect of assessing potential security risks based on interoperability.

[0098] Example 2

[0099] Based on the same concept as the data transfer security assessment method for cross-chain transactions described in the embodiments, such as Figure 3 As shown, this application also provides a data transfer security assessment system for cross-chain transactions, the system comprising:

[0100] The target acquisition module 11 is used to read the target blockchain for cross-chain transactions, wherein the target blockchain includes at least two sub-chains and the target transaction data is marked with a timestamp.

[0101] Encapsulation module 12 is used to encapsulate the source block subchain with tokens based on the target transaction data and to perform transfer block locking in the target block subchain;

[0102] The port verification module 13 is used to identify the target blockchain and set verification ports on the source block subchain and the target block subchain, wherein the verification port includes an output verification port and a receiving verification port;

[0103] The source security assessment module 14 is used to perform self-security verification and output security verification based on the data blocks in the source block sub-chain based on the output verification port, and generate the first security assessment data.

[0104] The target security assessment module 15 is used to perform self-security verification and receiving security verification based on the transfer blocks in the target block subchain based on the receiving verification port, and generate second security assessment data.

[0105] The path security assessment module 16 is used to perform risk control analysis on the sidechain flow path between the source block subchain and the target block subchain, and determine the third security assessment data, wherein the flow risk is determined based on information confrontation records.

[0106] The comprehensive evaluation module 17 is used to generate a transfer security evaluation result based on the first security evaluation data, the second security evaluation data and the third security evaluation data.

[0107] Furthermore, the system also includes a traceability and control unit, used for:

[0108] Based on the transfer security assessment results, security indicator feature values ​​are identified and weighted summation is performed to generate a comprehensive security level. For the transfer security assessment results and the comprehensive security level, it is determined whether the mapped individual risk control threshold and comprehensive risk control threshold are met. If not, risk control tracing and adaptive configuration adjustment are performed.

[0109] Furthermore, the system also includes a conservation differential retransfer unit, used for: completing cross-chain data transfer, making data circulation conservation decisions, and determining the transfer verification result, wherein the conservation standard is data value conservation; identifying the transfer verification result, and if it is not conserved, performing risk control tracing based on the third security assessment data and generating a retransfer instruction; determining and executing a risk contingency plan based on the risk control tracing result; and, upon receiving the retransfer instruction, determining the differential data based on the target transaction data and performing a cross-chain transfer.

[0110] Furthermore, the target acquisition module 11 also includes:

[0111] The contingency plan configuration unit is used to establish a cross-chain transaction contingency plan, which includes cross-chain access principles and two-way value circulation principles.

[0112] The authentication decision unit is used to perform authentication decisions based on transaction requests for the target blockchain based on the cross-chain transaction plan, and to determine the task authentication result.

[0113] The instruction generation unit is used to identify the task authentication result and generate cross-chain transaction instructions.

[0114] Furthermore, the system also includes a self-security verification unit, used for:

[0115] Identify the basic link information of the source block subchain and the target block subchain, wherein the basic link information is determined at least based on link type, link level, and protocol configuration; determine the link credibility based on the basic link information; retrieve cross-chain transaction records based on the target blockchain network within a predetermined time zone and calculate the risk probability; determine the self-security verification result based on the link credibility and the risk probability, wherein the self-security verification result corresponds one-to-one with the block subchain.

[0116] Furthermore, the system also includes a delay control unit for:

[0117] If the first security assessment data does not meet the first security threshold, an output delay instruction is generated; if the second security assessment data does not meet the second security threshold, a receive delay instruction is generated.

[0118] Furthermore, the path security assessment module 16 also includes:

[0119] An adversarial sequence unit is used to extract an adversarial sequence if the information adversarial record is a non-empty set, wherein the adversarial sequence includes risk type, risk adversarial point, and protection level;

[0120] The comprehensive risk control analysis unit is used to identify active adversarial sequences based on the adversarial sequences, perform comprehensive risk control analysis on the remaining adversarial sequences, and determine the third security assessment data.

[0121] Example 3

[0122] Figure 4 This is a schematic diagram of the structure of an exemplary electronic device provided by the present invention, showing a block diagram of an exemplary electronic device suitable for implementing embodiments of the present invention. Figure 4 The electronic device shown is merely an example and should not be construed as limiting the functionality or scope of the embodiments of the present invention. Figure 4 As shown, the electronic device includes a processor 31, a memory 32, an input device 33, and an output device 34; the number of processors 31 in the electronic device can be one or more. Figure 4 Taking a processor 31 as an example, the processor 31, memory 32, input device 33, and output device 34 in an electronic device can be connected via a bus or other means. Figure 4 Taking the example of a connection between China and Israel via a bus.

[0123] The memory 32, as a computer-readable storage medium, can be used to store software programs, computer-executable programs, and modules, such as the program instructions / modules corresponding to the data transfer security assessment method for cross-chain transactions in this embodiment of the invention. The processor 31 executes various functional applications and data processing of the computer device by running the software programs, instructions, and modules stored in the memory 32, thereby implementing the aforementioned data transfer security assessment method for cross-chain transactions.

[0124] It should be understood that the focus of the embodiments mentioned in this specification is their difference from other embodiments. The specific embodiments in the aforementioned Embodiment 1 are also applicable to the data transfer security assessment system for cross-chain transactions described in Embodiment 2. For the sake of brevity, they will not be elaborated further here.

[0125] It should be understood that the embodiments disclosed in this application and the above description can enable those skilled in the art to implement this application. At the same time, this application is not limited to the embodiments mentioned above; obvious modifications, combinations, and substitutions to the embodiments mentioned in this application also fall within the scope of protection of this application.

Claims

1. A data transfer security assessment method for cross-chain transactions, characterized in that, The method includes: Read the target blockchain for cross-chain transactions, wherein the target blockchain includes at least two sub-chains and the target transaction data is timestamped; The source block subchain is tokenized based on the target transaction data, and the transfer block is locked in the target block subchain. Identify the target blockchain and set verification ports in the source block subchain and the target block subchain, wherein the verification port includes an output verification port and a receive verification port; Based on the output verification port, perform self-security verification and output security verification of data blocks in the source block sub-chain to generate first security assessment data; Based on the receiving verification port, perform self-security verification and receiving security verification based on the transfer blocks in the target block subchain to generate second security assessment data; For the sidechain flow path between the source block subchain and the target block subchain, a risk control analysis of circulation risk is performed to determine the third security assessment data. Circulation risk is determined based on information confrontation records. If the information confrontation records are a non-empty set, confrontation sequences are extracted. The confrontation sequence includes risk type, risk confrontation point, and protection level. Active confrontation sequences based on the confrontation sequences are identified, and comprehensive risk control analysis is performed on the remaining confrontation sequences to determine the third security assessment data. Based on the first security assessment data, the second security assessment data, and the third security assessment data, a transfer security assessment result is generated. By associating the first security assessment data, the second security assessment data, and the third security assessment data, the security assessment data can be mapped to the same cross-chain transaction. Then, the associated data is cross-validated to compare the information provided by each security assessment data and check whether they are consistent or mutually supportive.

2. The method as described in claim 1, characterized in that, After generating the transfer security assessment result, the method includes: Based on the transfer security assessment results, security indicator feature values ​​are identified and weighted summation is performed to generate a comprehensive security level. Based on the transfer security assessment results and the overall security level, determine whether the mapped individual risk control threshold and overall risk control threshold are met; If the conditions are not met, risk control tracing and adaptive configuration adjustment will be implemented.

3. The method as described in claim 1, characterized in that, After generating the transfer security assessment result, the method includes: Complete the cross-chain data transfer, make data circulation conservation decisions, and determine the transfer verification results. The conservation standard is the conservation of data value. If the transfer verification result is not conserved, risk control tracing is performed in conjunction with the third security assessment data, and a retransfer instruction is generated. Based on the results of risk control and source tracing, determine and implement risk contingency plans; Upon receiving the retransfer instruction, the difference data based on the target transaction data is determined, and a cross-chain transfer is performed.

4. The method as described in claim 1, characterized in that, After reading the target blockchain for the cross-chain transaction, the following is included: Establish a cross-chain transaction plan, which includes cross-chain access principles and two-way value circulation principles; Based on the aforementioned cross-chain transaction plan, an authentication decision based on the transaction request is executed for the target blockchain to determine the task authentication result; The task authentication result is identified, and a cross-chain transaction instruction is generated.

5. The method as described in claim 1, characterized in that, Perform self-security verification, the method includes: Identify the basic link information of the source block subchain and the target block subchain, wherein the basic link information is determined at least based on link type, link level, and protocol configuration; Based on the aforementioned basic link information, the link credibility is determined; Retrieve cross-chain transaction records based on the target blockchain within the predetermined time zone and calculate the risk probability; Based on the credibility of the link and the probability of risk, the self-security verification result is determined, wherein the self-security verification result corresponds one-to-one with the block sub-chain.

6. The method as described in claim 1, characterized in that, After performing output security verification and receive security verification, the method includes: If the first security assessment data does not meet the first security threshold, an output delay instruction is generated. If the second security assessment data does not meet the second security threshold, a receive delay instruction is generated.

7. A data transfer security assessment system for cross-chain transactions, characterized in that, The system is used to perform the data transfer security assessment method for cross-chain transactions as described in any one of claims 1 to 6, the system comprising: The target acquisition module is used to read the target blockchain for cross-chain transactions, wherein the target blockchain includes at least two sub-chains and the target transaction data is timestamped. The encapsulation module is used to encapsulate the source block subchain with tokens based on the target transaction data and to perform transfer block locking in the target block subchain. A port verification module is used to identify the target blockchain and set verification ports on the source block subchain and the target block subchain. The verification port includes an output verification port and a receiving verification port. The source security assessment module is used to perform self-security verification and output security verification based on the data blocks in the source block subchain based on the output verification port, and generate the first security assessment data. The target security assessment module is used to perform self-security verification and receiving security verification based on the transfer blocks in the target block subchain based on the receiving verification port, and generate second security assessment data. The path security assessment module is used to perform risk control analysis on the sidechain flow path between the source block subchain and the target block subchain, and determine the third security assessment data, wherein the flow risk is determined based on information confrontation records. The comprehensive evaluation module is used to generate a transfer security evaluation result based on the first security evaluation data, the second security evaluation data, and the third security evaluation data. By associating the first security evaluation data, the second security evaluation data, and the third security evaluation data, the security evaluation data can be mapped to the same cross-chain transaction. Then, the associated data is cross-validated to compare the information provided by each security evaluation data and check whether they are consistent or mutually supportive.

8. An electronic device, characterized in that, The electronic device includes: Memory, used to store executable instructions; The processor, when executing executable instructions stored in the memory, implements the data transfer security assessment method for cross-chain transactions as described in any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When executed by the processor, the program implements the data transfer security assessment method for cross-chain transactions as described in any one of claims 1 to 6.

Images