A blockchain system based on a xinchuang environment

Abstract

The application relates to the technical field of blockchains, in particular to a blockchain system based on a Xingcheng environment, which comprises a management subsystem, a blockchain network and a plurality of clients; the blockchain network is connected with the management subsystem and the plurality of clients based on a secure transmission layer protocol TLS of a national encryption algorithm; the client is used for providing data services of the blockchain network for users, including providing user certificate hosting, transaction initiation and chaining and transaction query functions for users; the management subsystem is used for managing node certificates and user certificates of the blockchain network, monitoring the running state of the blockchain network, and recording log information generated in the running process of the blockchain network. The system solves the problems of uncontrollable blockchain running environment and uncontrollable encryption algorithm in the existing Xingcheng industry due to the lack of unified standards.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of blockchain, in particular to a blockchain system based on a China-specific environment. BACKGROUND

[0002] Blockchain has become an infrastructure in the field of information technology and is widely used in various industries. However, most existing blockchain systems use international standard encryption algorithms. When running in a non-China-specific server environment, there are security risks in encryption algorithms, operating systems, and computer hardware due to the lack of low-level standards and architecture ecology of Internet Technology (IT) in China. Moreover, the China-specific industry is still in the development stage, and related technical standards are not unified, which causes certain difficulties and problems in software and hardware adaptation. Projects with high data security requirements also have strong requirements for the use of blockchain. Therefore, there is an urgent need for a blockchain system suitable for a China-specific environment, which has a controllable running environment and controllable encryption algorithm. SUMMARY

[0003] The embodiments of the present application provide a blockchain system based on a China-specific environment, which is used to solve the problem of uncontrollable running environment and uncontrollable encryption algorithm of the existing blockchain.

[0004] The embodiments of the present application provide a blockchain system based on a China-specific environment, which includes a management subsystem, a blockchain network, and a plurality of clients.

[0005] The blockchain network, the management subsystem, and the plurality of clients are connected based on a Transport Layer Security (TLS) of a national encryption algorithm, respectively.

[0006] The client is configured to provide data services of the blockchain network for a user, including providing user certificate hosting, transaction initiation and chaining, and transaction query functions for the user.

[0007] The management subsystem is configured to manage blockchain network node certificates and user certificates, monitor the running state of the blockchain network, and record log information generated in the running process of the blockchain network. The algorithms used in the node certificates and the user certificates are SM2 signing with SM3. The node certificates are stored in the file system of the computing device running the node and are encrypted and stored by using an SM4 symmetric encryption algorithm.

[0008] Based on the above blockchain system, the security risks existing in the encryption algorithm, operating system and computer hardware of the existing blockchain network based on a non-sin creation environment are solved, and the problems of uncontrollable blockchain running environment and uncontrollable encryption algorithm caused by the lack of unified standards in the existing sin creation industry are also solved. Flexible deployment can be carried out according to the differences of different sin creation environments, and it is safe and reliable.

[0009] In a possible embodiment, the blockchain network comprises endorsement nodes, consensus nodes and supervision nodes; wherein the endorsement nodes are connected with a first client in the plurality of clients and connected with the consensus nodes, and the supervision nodes are connected with a second client in the plurality of clients and connected with the consensus nodes;

[0010] The endorsement nodes are configured to sign and endorse the transaction request initiated by the user, and broadcast the transaction request after signing and endorsement;

[0011] The consensus nodes are configured to perform on-chain operation on the transaction data corresponding to the transaction request;

[0012] The supervision nodes are configured to obtain the transaction request of the user, and to supervise the target transaction.

[0013] Based on the above blockchain system, the endorsement nodes, consensus nodes and supervision nodes of the blockchain network are used to realize the on-chain operation of the transaction data of the user and the supervision of the transaction business.

[0014] In a possible embodiment, the endorsement nodes, the consensus nodes and the supervision nodes are connected through a point-to-point (P2P) network communication.

[0015] Based on the above blockchain system, through the P2P network communication connection, all nodes can provide resources including bandwidth, storage space and computing power, thereby increasing the capacity of the blockchain system.

[0016] In a possible embodiment, the endorsement nodes are specifically configured to:

[0017] The transaction request is calculated by the SM3 algorithm to obtain a first hash value;

[0018] The first hash value is verified by signing according to the user certificate carried in the transaction request, and it is judged whether the verification is passed;

[0019] If yes, the transaction request is run in the smart contract to obtain the transaction result corresponding to the transaction request;

[0020] The transaction result is signed and endorsed based on the SM2 algorithm using a private key, and the transaction result after signing and endorsement is broadcasted.

[0021] Based on the above blockchain system, the transaction request of the user can be encrypted and verified, and broadcast in the blockchain system.

[0022] In a possible embodiment, the endorsing node is further configured to verify the received broadcast transaction.

[0023] Based on the above blockchain system, the received transaction broadcast can be verified.

[0024] In a possible embodiment, the client is specifically configured to:

[0025] When the user initiates a transaction request, the transaction request is hashed by using an SM3 algorithm to obtain a second hash value;

[0026] The second hash value is signed by using the private key of the user to obtain a signature result;

[0027] The signature result and the user certificate are sent to the related node of the blockchain network.

[0028] Based on the above blockchain system, the transaction request of the user is encrypted, signed, and uploaded to the blockchain network.

[0029] In a possible embodiment, the client is further configured to:

[0030] When the return message of the blockchain related node is received, the hash value of the return message is verified by using an SM2 algorithm and the node certificate attached in the return message;

[0031] When the verification is passed, the transaction data corresponding to the return message is packaged to obtain a data packet;

[0032] After the data packet is summarized, the data packet carrying the summary information is sent to the blockchain network.

[0033] Based on the above blockchain system, after the signature verification, packaging and summarization of the return information of the blockchain related node are performed, the return message is chained.

[0034] In a possible embodiment, the consensus node is specifically configured to:

[0035] The encrypted envelope sent by the user is verified, wherein the encrypted envelope is obtained by packaging and encrypting the transaction request initiated by the user;

[0036] After the verification is passed, whether the current blockchain system meets the block generation condition is determined by using a pre-configured consensus mechanism;

[0037] If yes, a hash value of a previous block is calculated using an SM3 algorithm, and the hash value of the previous block is taken as a block header, and the encrypted envelope is taken as a block body, to obtain a current block;

[0038] The current block is broadcast to a consensus cluster, to implement a chain operation on transaction data corresponding to the transaction request.

[0039] Based on the above blockchain system, the encrypted envelope obtained after the transaction request initiated by the user is packed and encrypted can be chained.

[0040] In a possible embodiment, the Xingcheng environment includes a server using a preset chip, a preset operating system, and a preset database.

[0041] Based on the above blockchain system, conditions can be created for the blockchain system to be adapted to the Xingcheng system.

[0042] In a possible embodiment, the blockchain system is developed based on a Go language or a Java language; and the Xingcheng environment is adapted to the blockchain system, including adaptation of a CPU instruction set, adaptation of an operating system, and adaptation of a database driver.

[0043] Based on the above blockchain system, the blockchain system can be adapted to the Xingcheng environment, and the blockchain system can be flexibly deployed, and is safe and reliable. BRIEF DESCRIPTION OF DRAWINGS

[0044] Figure 1 A blockchain system based on a Xingcheng environment provided by an embodiment of the present application is shown in the figure;

[0045] Figure 2 Another blockchain system based on a Xingcheng environment provided by an embodiment of the present application is shown in the figure;

[0046] Figure 3 Another blockchain system based on a Xingcheng environment provided by an embodiment of the present application is shown in the figure. DETAILED DESCRIPTION

[0047] In order to make the purposes, technical solutions and advantages of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely in combination with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the scope of protection of the present application. The embodiments in the present application and the features in the embodiments can be combined with each other in a non-conflicting manner. Moreover, although a logical order is shown in the flowchart, in some cases, the steps shown or described can be performed in an order different from that here.

[0048] The terms "first" and "second" in the description and claims of the present application and the above drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the term "comprising" and any variations thereof are intended to cover non-exclusive protection. For example, a process, method, system, product or device including a series of steps or units is not limited to the listed steps or units, but can optionally include steps or units not listed, or can optionally include other steps or units inherent to the process, method, product or device. "Multiple" in the present application can mean at least two, for example, two, three or more, and the embodiments of the present application are not limited.

[0049] In the technical solutions of the present application, the collection, transmission and use of data comply with the requirements of relevant national laws and regulations.

[0050] In order to facilitate those skilled in the art to understand, first, some terms and terms related to the embodiments of the present application are briefly described and explained as follows:

[0051] Blockchain: a new decentralized protocol, each "chain" is composed of a group of block structures recording the digest information of the previous block in the block header, which can safely store data, information cannot be forged and tampered, can automatically execute smart contracts without any centralized agency review. Compared with traditional centralized systems, it has the advantages of decentralization, data tamper-proofing, etc., and has good application in various fields, solving important problems such as trust mechanism and privacy protection.

[0052] National cryptographic algorithm: national commercial cryptographic algorithm, mainly including SM2, SM3, SM4 algorithm standards and application specifications, "SM" is the abbreviation of "commercial secret". National cryptographic algorithm is divided into symmetric cryptographic algorithm, asymmetric cryptographic algorithm and hash cryptographic algorithm. Symmetric cryptographic algorithm includes block cipher algorithm SM4 and stream cipher algorithm ZUC; asymmetric cryptographic algorithm includes SM2 and SM9 algorithm; hash cryptographic algorithm includes SM3.

[0053] The Information Technology Innovation Industry (ITAI) refers to an industry focused on information technology innovation. An ITAI environment is an environment independently developed based on domestically produced central processing units (CPUs) and operating systems, within the context of information technology application innovation. As a key component of "new infrastructure," the ITAI industry will become a crucial driver of economic development.

[0054] Furthermore, based on the above explanations of terms and related terminology, the design concept of this application will be further elaborated and explained below:

[0055] Most existing blockchain systems use internationally standard encryption algorithms. When running on non-domestic-application server environments, security vulnerabilities exist in the encryption algorithms, operating systems, and computer hardware. Furthermore, the domestically developed domestic technology industry is still in its developmental stage, with related technical standards not yet unified, and there are still difficulties and problems in software and hardware adaptation. Projects with high data security requirements also have strong requirements for blockchain usage; therefore, the demand for blockchain systems based on domestically developed domestic environments is extremely urgent.

[0056] To address the aforementioned issues, this application provides a blockchain system based on a domestically developed information technology innovation environment. It employs national cryptographic algorithms and can run in a pre-defined domestically developed information technology innovation environment. This solves the problems of uncontrollable operating environment and uncontrollable encryption algorithms in existing blockchain systems. Furthermore, it can be flexibly deployed to accommodate the differences in various domestically developed information technology innovation environments, making it a secure, reliable, and flexible data security infrastructure.

[0057] Based on the above technical effects, the preferred embodiments of this application will be described below with reference to the accompanying drawings. It should be understood that the preferred embodiments described herein are only for illustration and explanation of this application and are not intended to limit this application. Furthermore, the embodiments of this application and the features in the embodiments can be combined with each other without conflict.

[0058] like Figure 1 As shown, this application provides a blockchain system based on the domestic IT innovation environment. The blockchain system includes a management subsystem 11, a blockchain network 12, and a client set 13, wherein the client set 13 includes at least a first client 131 and a second client 132.

[0059] The blockchain network 12 connects with the management subsystem 11 and any client in the client set, respectively, based on the national cryptographic algorithm and the secure transport layer protocol TLS (English: Transport Layer Security, abbreviated as TLS).

[0060] Any client in the client set 13 is configured to provide data services of the blockchain network 12 for a user, including providing the user with user certificate hosting, transaction initiation and chaining, and transaction query functions, in particular:

[0061] When the user initiates a transaction request through any client, the transaction request initiated by the user is hashed by the SM3 algorithm to obtain a second hash value. Further, the second hash value is signed using the private key of the user to obtain a signature result. At this time, the user certificate of the user is obtained, and the signature result and the user certificate are sent to the related nodes of the blockchain network.

[0062] When the return message of the blockchain related node is received, the hash value corresponding to the return message is verified by signing based on the SM2 algorithm and the node certificate attached in the return message, and when the verification is passed, the transaction data corresponding to the return message is packaged to obtain a data packet. Further, the data packet is summarized, and the data packet carrying the summary information is sent to the related nodes of the blockchain network, so that the transaction data can be uploaded to the blockchain network.

[0063] The management subsystem 11 is configured to manage the node certificate and the user certificate of the blockchain network 12, monitor the running state of the blockchain network 12, and record the log information generated in the running process of the blockchain network 12. The node certificate and the user certificate are both issued by a certificate authority CA (English: Certificate Authority, abbreviated as CA), and the algorithm used is SM2 signing with SM3, and the algorithm identifier Oid is 1.2.156.10197.1.501. The node certificate is stored in the file system of the computing device running the node, and is encrypted and stored by using the SM4 symmetric encryption algorithm.

[0064] Based on the above blockchain system, the security risks existing in the encryption algorithm, the operating system and the computer hardware of the existing blockchain network based on the non-signal creation environment are solved, and the problem that the existing signal creation industry is uncontrollable due to the lack of unified standards, and the encryption algorithm is uncontrollable. The problem is solved, and the blockchain running environment is flexible and reliable.

[0065] In a possible embodiment, as Figure 2As shown, the blockchain network 12 includes an endorsement node 21, a consensus node 22, and a supervision node 23; wherein the endorsement node 21 is connected with a first client 131 in the client set 13 and connected with the consensus node 22, the supervision node 23 is connected with a second client 132 in the client set 13 and connected with the consensus node 22; the specific connection mode between the endorsement node 21, the consensus node 22 and the supervision node 23 can be: connected through a peer-to-peer (P2P) network communication connection.

[0066] The endorsement node 21 is configured to endorse signature for a transaction request initiated by a user and broadcast the transaction request after the signature, and specifically includes:

[0067] The transaction request initiated by the user is hashed by using the SM3 algorithm to obtain a first hash value; the user certificate carried in the transaction request is obtained, and the first hash value is verified by signature according to the user certificate, and it is determined whether the verification is passed; if the verification is passed, the transaction request initiated by the user is run in the smart contract, and then a transaction result corresponding to the transaction request is obtained; the transaction result is endorsed by signature based on the SM2 algorithm using a private key, and the transaction result after the signature is broadcasted.

[0068] In addition, the endorsement node 21 is also configured to verify the broadcasted transaction received.

[0069] The consensus node 22 is configured to perform a chain operation on transaction data corresponding to the transaction request, and specifically includes:

[0070] The encrypted envelope sent by the user is verified, and it is determined whether the verification is passed, wherein the encrypted envelope is obtained by packaging and encrypting the transaction request initiated by the user. After the verification is passed, it is determined whether the current blockchain system meets the block generation condition by using a pre-configured consensus mechanism, if the block generation condition is met, the hash value of the previous block is calculated by using the SM3 algorithm, and the hash value of the previous block is taken as a block header, and the encrypted envelope is taken as a block body, thereby obtaining a current block. Further, the current block is broadcasted to a consensus cluster, and the chain operation on the transaction data corresponding to the transaction request is implemented.

[0071] The supervision node 23 obtains the transaction request of the user and is configured to supervise the target transaction. In addition to the function of the endorsement node, the supervision node 23 also has a higher management authority, and can participate in the transaction as an administrator of the alliance party in some business that needs to be supervised.

[0072] Based on the above blockchain system, through the different functions of the endorsement node, the consensus node and the supervision node, security guarantee is provided for the chain operation and broadcast of the transaction data.

[0073] In a possible embodiment, the Xinda environment on which the above blockchain system is based includes a server using a preset chip, a preset operating system and a preset database. The blockchain system is developed based on a Go language or a Java language; and the Xinda environment is compatible with the blockchain system, including CPU instruction set compatibility, operating system compatibility and database driver compatibility.

[0074] In terms of instruction set compatibility, the Go language and Java language environment compatible with the Xinda chip instruction set are used, the blockchain algorithm suite is developed according to the commercial secret algorithm standard and the use requirements of the blockchain system, and the blockchain network is compatible with the Xinda environment through containerized deployment according to the differences between operating systems; and the database driver is developed and reformed according to the use requirements of the domestic database, so as to realize flexible configuration of various domestic database drivers and meet the data storage requirements of the blockchain management system.

[0075] In a possible embodiment, as shown in Figure 3 FIG. 1 is a schematic diagram of a blockchain system, according to different business functions of the endorsing nodes, the endorsing nodes are divided into different organizations, wherein each first client is connected with two endorsing nodes to form an organization, of course, the number of endorsing nodes in each organization and the number of formed organizations are not limited. In addition, the second client is connected with the supervisory node to form a supervisory organization. Figure 3 The block in the blockchain is a storage unit of the blockchain system.

[0076] Based on the above blockchain system, the security risks of the existing blockchain network based on a non-Xinda environment in terms of encryption algorithm, operating system and computer hardware are solved, and the problems of uncontrollable blockchain running environment and uncontrollable encryption algorithm in the existing Xinda industry due to the lack of unified standards are also solved, and the flexible deployment can be carried out according to the differences between different Xinda environments, which is safe and reliable.

[0077] Although the preferred embodiments of the present application have been described, those skilled in the art can make further changes and modifications to the embodiments once they know the basic inventive concept. Therefore, the appended claims are intended to be interpreted as including all changes and modifications falling within the scope of the present application.

[0078] Obviously, those skilled in the art can make various modifications and variations to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is intended to include these modifications and variations.

Claims

1. A blockchain system based on a domestically developed information technology application environment, characterized in that, The blockchain system includes a management subsystem, a blockchain network, and multiple clients; The blockchain network, the management subsystem, and the multiple clients are connected based on the secure transport layer protocol TLS using Chinese cryptographic algorithms. The client is used to provide users with data services of the blockchain network, including providing users with user certificate custody, transaction initiation and on-chain, and transaction query functions; The management subsystem is used to manage the blockchain network node certificates and user certificates, monitor the operation status of the blockchain network, and record the log information generated during the operation of the blockchain network. The node certificates and user certificates use the SM2signing with SM3 algorithm, and the node certificates are stored in the file system of the computing device on which the node runs, and are encrypted using the SM4 symmetric encryption algorithm.

2. The blockchain system as described in claim 1, characterized in that, The blockchain network includes endorsement nodes, consensus nodes, and monitoring nodes; wherein, the endorsement node is connected to a first client among the plurality of clients and is also connected to the consensus node, and the monitoring node is connected to a second client among the plurality of clients and is also connected to the consensus node; The endorsement node is used to sign and endorse the transaction request initiated by the user, and to broadcast the signed and endorsed transaction request. The consensus node is used to upload the transaction data corresponding to the transaction request to the blockchain. The monitoring node is used to acquire user transaction requests and to monitor target transactions.

3. The blockchain system as described in claim 2, characterized in that, The endorsing node, the consensus node, and the monitoring node are connected via a peer-to-peer (P2P) network.

4. The blockchain system as described in claim 2, characterized in that, The endorsement node is specifically used for: The transaction request is hashed using the SM3 algorithm to obtain a first hash value; Based on the user certificate carried in the transaction request, the first hash value is signed and verified, and it is determined whether the verification is successful. If so, the transaction request is executed in the smart contract to obtain the transaction result corresponding to the transaction request; The transaction result is signed and endorsed using the private key based on the SM2 algorithm, and the signed and endorsed transaction result is broadcast.

5. The blockchain system as described in claim 2, characterized in that, The endorsement node is also used to verify the received broadcast transactions.

6. The blockchain system as described in claim 1, characterized in that, The client is specifically used for: When the user initiates a transaction request, the transaction request is hashed using the SM3 algorithm to obtain a second hash value; The second hash value is signed using the user's private key to obtain a signature result; The signature result and the user certificate are sent to the relevant nodes of the blockchain network.

7. The blockchain system as described in claim 1, characterized in that, The client is also used for: Upon receiving a return message from a blockchain-related node, the hash value of the return message is verified by signature based on the SM2 algorithm and the node certificate attached to the return message. Upon successful verification, the transaction data corresponding to the returned message is packaged to obtain a data packet; After digesting the data packet, the data packet carrying the digest information is sent to the blockchain network.

8. The blockchain system as described in claim 2, characterized in that, The consensus node is specifically used for: Verify the encrypted envelope sent by the user, wherein the encrypted envelope is obtained by packaging and encrypting the transaction request initiated by the user; After verification, a pre-configured consensus mechanism is used to determine whether the current blockchain system meets the block production conditions. If so, the SM3 algorithm is used to calculate the hash value of the previous block, and the hash value of the previous block is used as the block header, and the encrypted envelope is used as the block body to obtain the current block; The current block is broadcast to the consensus cluster to enable the on-chain operation of the transaction data corresponding to the transaction request.

9. The blockchain system as described in claim 1, characterized in that, The domestic IT innovation environment includes servers with pre-set chips, pre-set operating systems, and pre-set databases.

10. The blockchain system as described in claim 1, characterized in that, The blockchain system is developed based on the Go or Java programming language; the domestic IT innovation environment is compatible with the blockchain system, including CPU instruction set compatibility, operating system compatibility, and database driver compatibility.

Images