Blockchain endorsement method, device and equipment and readable storage medium

Abstract

The application provides a blockchain endorsement method, device and equipment and a readable storage medium. The method applied to a terminal front-end processing node comprises the following steps: receiving a first request sent by an endorsement node; wherein the first request is used for requesting signature information of at least one user; sending a signature request to a terminal corresponding to the user according to the first request; obtaining signature information sent by the terminal after endorsement according to the signature request; and sending the signature information to the endorsement node. In the embodiment of the application, when a transaction is endorsed on a blockchain technology platform, a signature request is sent to a terminal corresponding to a user through a terminal front-end processing node, signature information generated by calling a pre-configured private key for endorsement according to the signature request is obtained, and the user can participate in the endorsement through the terminal, so that the authenticity of the endorsement is ensured.

Description

Technical Field

[0001] This invention relates to the field of blockchain, and in particular to a blockchain endorsement method, apparatus, device, and readable storage medium. Background Technology

[0002] Different participants in a blockchain (consortium blockchain) network include organizations, nodes, terminal applications, administrators, and users. Each participant (an active element inside or outside the network that can use the services) has a digital identity encapsulated in an X.509 digital certificate. The immutability and non-repudiation of the blockchain are technically guaranteed by the digital signatures of these digital identities.

[0003] In most current blockchain technology platforms, the digital identities of organizations, nodes, and users are deployed on blockchain nodes. The private keys corresponding to the certificates are stored through software encryption or hardware encryption machines. When endorsing according to the endorsement policy, regardless of whether the private key corresponding to the node certificate or the user certificate is selected, the user's behavior does not actually participate. Instead, the system calls the private key signature to make the response on behalf of the user, making the on-chain data immutable. However, without user participation, the "authenticity" is not guaranteed. Summary of the Invention

[0004] The purpose of this invention is to provide a blockchain endorsement method, apparatus, device, and readable storage medium to solve the problem that the authenticity of transactions cannot be guaranteed when the user does not participate in the transaction endorsement process on the existing blockchain technology platform.

[0005] To address the aforementioned technical problems, embodiments of the present invention provide a blockchain endorsement method applied to a terminal front-end processing node, the method comprising:

[0006] Receive a first request sent by an endorsement node; wherein the first request is used to request signature information from at least one user;

[0007] Based on the first request, a signature request is sent to the terminal corresponding to the user;

[0008] Obtain the signature information sent by the terminal after endorsing the signature request;

[0009] Send the signature information to the endorsing node.

[0010] Optionally, obtaining the signature information sent by the terminal after endorsing according to the signature request includes:

[0011] Obtain first response information sent by the terminal according to the signature request, wherein the first response information is used to instruct the user to agree to the signature;

[0012] An endorsement request is sent to the terminal based on the first response information;

[0013] Obtain the signature information sent by the terminal after endorsing the endorsement according to the endorsement request.

[0014] Optionally, the method further includes:

[0015] Receive the user's certificate generation request;

[0016] Send a public key acquisition request to the terminal corresponding to the user;

[0017] After receiving the public key information sent by the terminal based on the public key acquisition request, a certificate signing request file is generated;

[0018] Based on the certificate signing request file, obtain the user certificate issued by the blockchain;

[0019] The user certificate is sent to the corresponding terminal.

[0020] Optionally, obtaining the blockchain-issued user certificate based on the certificate signing request file includes:

[0021] Based on the certificate signing request file, a request to generate a user certificate is sent to the blockchain;

[0022] Obtain the user certificate issued by the blockchain based on the generated user certificate request.

[0023] Optionally, sending a signature request to the terminal corresponding to the user includes:

[0024] A signature request is sent to the user's corresponding terminal via SMS or BIP.

[0025] and / or send a signature request to the user's corresponding terminal via an application programming interface (API);

[0026] The step of obtaining the signature information sent by the terminal after endorsing according to the signature request includes:

[0027] The signature information sent by the terminal after endorsing the signature request is obtained through SMS service or BIP standalone transport protocol;

[0028] And / or obtain the signature information sent by the terminal after endorsing the signature request through the application programming interface (API).

[0029] Optionally, the first request sent by the receiving endorsement node includes:

[0030] Receive the first request sent by the endorsement node via Hypertext Transfer Protocol (HTTP);

[0031] Sending the signature information to the endorsing node includes:

[0032] The signature information is sent to the endorsing node via the Hypertext Transfer Protocol (HTTP).

[0033] This invention also provides a blockchain endorsement method applied to a terminal, comprising:

[0034] Receive signature requests sent by the terminal front-end processing node;

[0035] Generate signature information by endorsing the signature request;

[0036] The signature information is sent to the terminal front-end processing node.

[0037] Optionally, the step of endorsing and generating signature information based on the signature request includes:

[0038] Upon detecting that the user agrees to the signature request, a first response message is sent to the terminal front-end processing node;

[0039] Receive the endorsement request sent by the terminal front-end processing node based on the first response information;

[0040] Generate signature information by endorsing the endorsement request.

[0041] Optionally, the method further includes:

[0042] Receive the public key acquisition request sent by the terminal front-end processing node;

[0043] According to the public key acquisition request, the public key information is sent to the terminal front-end processing node. The public key information is used to generate a certificate signing request file, and the certificate signing request file is used to obtain the user certificate.

[0044] Receive the user certificate sent by the terminal front-end processing node.

[0045] Optionally, the signature request sent by the receiving terminal front-end processing node includes:

[0046] Receive signature requests sent by the terminal front-end processing node via SMS service or BIP standalone transport protocol;

[0047] And / or receive signature requests sent by the terminal front-end processing node via the application programming interface (API);

[0048] Sending the signature information to the terminal front-end processing node includes:

[0049] The signature information is sent to the terminal front-end processing node via SMS service or BIP standalone transport protocol.

[0050] And / or send the signature information to the terminal front-end processing node via the application programming interface (API).

[0051] This invention also provides a blockchain endorsement method, applied to endorsement nodes, comprising:

[0052] Upon receiving blockchain business data, a first request is sent to the terminal front-end processing node. The first request is used to request signature information from at least one user.

[0053] Receive the signature information sent by the terminal front-end processing node.

[0054] Optionally, upon receiving blockchain business data, a first request is sent to the terminal front-end processing node, including:

[0055] Upon receiving blockchain business data, the endorsement strategy within the blockchain business data is obtained;

[0056] If the endorsement policy indicates that a signature is required, a first request is sent to the terminal front-end processing node.

[0057] Optionally, sending the first request to the terminal front-end processing node includes:

[0058] The first request is sent to the terminal front-end processing node via the Hypertext Transfer Protocol (HTTP).

[0059] The receipt of the signature information sent by the terminal front-end processing node includes:

[0060] The signature information sent by the terminal front-end processing node is received via the Hypertext Transfer Protocol (HTTP).

[0061] This invention also provides a network device, including a transceiver, wherein the transceiver is used for:

[0062] Receive a first request sent by an endorsement node; wherein the first request is used to request signature information from at least one user;

[0063] Based on the first request, a signature request is sent to the terminal corresponding to the user;

[0064] Obtain the signature information sent by the terminal after endorsing the signature request;

[0065] Send the signature information to the endorsing node.

[0066] This invention also provides a network device, including a transceiver and a processor, wherein:

[0067] The transceiver is used to receive signature requests sent by the terminal front-end processing node;

[0068] The processor is used to endorse and generate signature information based on the signature request;

[0069] The transceiver is also used to send the signature information to the terminal front-end processing node.

[0070] This invention also provides a network device, including a transceiver, wherein the transceiver is used for:

[0071] Upon receiving blockchain business data, a first request is sent to the terminal front-end processing node. The first request is used to request signature information from at least one user.

[0072] Receive the signature information sent by the terminal front-end processing node.

[0073] This invention also provides a blockchain endorsement device applied to a terminal front-end processing node, comprising:

[0074] The first receiving module is used to receive a first request sent by the endorsing node; wherein the first request is used to request signature information of at least one user;

[0075] The first sending module is configured to send a signature request to the terminal corresponding to the user in accordance with the first request;

[0076] The first acquisition module is used to acquire the signature information sent by the terminal after endorsing the signature request;

[0077] The second sending module is used to send the signature information to the endorsement node.

[0078] This invention also provides a blockchain endorsement device, applied to a terminal, comprising:

[0079] The second receiving module is used to receive signature requests sent by the terminal front-end processing node;

[0080] The first generation module is used to endorse and generate signature information based on the signature request.

[0081] The third sending module is used to send the signature information to the terminal front-end processing node.

[0082] This invention also provides a blockchain endorsement device, applied to an endorsement node, comprising:

[0083] The fourth sending module is used to send a first request to the terminal front-end processing node when receiving blockchain business data. The first request is used to request signature information of at least one user.

[0084] The third receiving module is used to receive the signature information sent by the terminal front-end processing node.

[0085] This invention also provides a network device, including: a processor, a memory, and a program stored in the memory and executable on the processor, wherein the program, when executed by the processor, implements the blockchain endorsement method as described in any of the preceding embodiments.

[0086] This invention also provides a readable storage medium, comprising: a program stored on the readable storage medium, wherein when the program is executed by a processor, it implements the steps of the blockchain endorsement method as described in any of the preceding claims.

[0087] At least one of the above technical solutions of the present invention has the following beneficial effects:

[0088] In the above scheme, compared with the existing technology, a terminal front-end processing node is added. This node interacts with both the terminal and the blockchain. Upon receiving a first request from the blockchain's endorsing node, it sends a signature request to the user's corresponding terminal, obtains the signature information sent by the terminal after endorsing according to the signature request, and feeds back the signature information to the blockchain's endorsing node. In this embodiment, the private key used to generate the signature information is stored in the terminal. When endorsing transactions on the blockchain platform, the terminal front-end processing node needs to send a signature request to the user's corresponding terminal to obtain the signature information generated by the terminal using a pre-configured private key based on the signature request. This allows users to participate through their terminals, ensuring the authenticity of the endorsement. Attached Figure Description

[0089] Figure 1 This is a schematic diagram of the architecture of the blockchain endorsement system according to an embodiment of the present invention;

[0090] Figure 2 This is a flowchart illustrating a blockchain endorsement method according to one embodiment of the present invention.

[0091] Figure 3 This is a flowchart illustrating a blockchain endorsement method according to another embodiment of the present invention;

[0092] Figure 4 This is a flowchart illustrating a blockchain endorsement method according to another embodiment of the present invention;

[0093] Figure 5 This is one of the flowcharts illustrating the blockchain endorsement method using an embodiment of the present invention;

[0094] Figure 6 This is a second schematic diagram of the blockchain endorsement method using an embodiment of the present invention;

[0095] Figure 7 This is a schematic diagram of the structure of a network device according to one embodiment of the present invention;

[0096] Figure 8 This is a schematic diagram of the structure of a network device according to another embodiment of the present invention;

[0097] Figure 9 This is a schematic diagram of the structure of a network device according to another embodiment of the present invention;

[0098] Figure 10 This is a schematic diagram of the structure of a blockchain endorsement device according to one embodiment of the present invention;

[0099] Figure 11 This is a schematic diagram of the structure of a blockchain endorsement device according to another embodiment of the present invention;

[0100] Figure 12 This is a schematic diagram of the structure of a blockchain endorsement device according to another embodiment of the present invention. Detailed Implementation

[0101] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0102] like Figure 1 As shown in the figure, this embodiment of the invention provides an architecture diagram of a blockchain endorsement system. Compared with the prior art, a terminal front-end processing node is added. The terminal front-end processing node includes, but is not limited to, one or more of the following: an application (APP) on the terminal, independent platform software, and a functional module in the blockchain. The terminal is a terminal configured with a Subscriber Identity Module (SIM). The blockchain is a consortium blockchain. The nodes in the blockchain include, but are not limited to, ledger nodes, consensus nodes, and endorsement nodes. The modules in the blockchain include, but are not limited to, a verification function module, a member service module, and a certificate management function module.

[0103] Generally, the business process of blockchain includes three parts: 1. Business submission and endorsement; 2. Consensus or sorting; 3. Verification and writing to blocks. This invention improves the first part, business submission and endorsement, which will be described in detail below; the second part, consensus or sorting, and the third part, verification and writing to blocks, are not improved and are no different from existing technologies, so they will not be elaborated on in the embodiments of this invention.

[0104] like Figure 2 As shown, this embodiment of the invention provides a blockchain endorsement method applied to a terminal front-end processing node, the method comprising:

[0105] Step S101: Receive a first request sent by the endorsement node; wherein the first request is used to request signature information of at least one user;

[0106] In step S101, each organization includes, but is not limited to, users, endorsement nodes, and terminals. The terminal front-end processing node receives a first request sent by any endorsement node. The first request carries business data to be signed. The first request is used to request signature information from at least one user. The user and the endorsement node belong to the same organization. The signature information includes signed business data generated after signing the business data to be signed.

[0107] Step S102: Based on the first request, send a signature request to the terminal corresponding to the user;

[0108] In step S102, the user, terminal, and endorsement node belong to the same organization, and each user corresponds to one terminal. To improve the terminal's response efficiency and increase the success rate, signature requests are sent simultaneously to terminals belonging to multiple users within the organization. The information carried in the signature requests includes, but is not limited to, private key index, business description, and business data to be signed.

[0109] Step S103: Obtain the signature information sent by the terminal after endorsing the signature request;

[0110] In step S103, the terminal front-end processing node acquires signature information sent by one or more terminals within a preset time. The signature information includes signed business data generated after signing the business data to be signed.

[0111] Step S104: Send the signature information to the endorsement node.

[0112] In this embodiment of the invention, after receiving the first request sent by the blockchain, the terminal front-end processing node sends a signature request to the user's corresponding terminal and obtains the signature information generated by the terminal by calling the pre-configured private key according to the signature request, so that the user can participate through the terminal and ensure the authenticity of the endorsement.

[0113] Optionally, obtaining the signature information sent by the terminal after endorsing according to the signature request includes:

[0114] Obtain first response information sent by the terminal according to the signature request, wherein the first response information is used to instruct the user to agree to the signature;

[0115] An endorsement request is sent to the terminal based on the first response information;

[0116] Obtain the signature information sent by the terminal after endorsing the endorsement according to the endorsement request.

[0117] In this embodiment of the invention, in order to allow users to participate in the endorsement process and ensure the authenticity of the endorsement, the terminal front-end processing node needs to obtain the user's consent before obtaining the signature information generated by the terminal endorsement. After receiving the first response information indicating that the user agrees to sign, it sends an endorsement request to the terminal.

[0118] Optionally, the method further includes:

[0119] Receive the user's certificate generation request;

[0120] Send a public key acquisition request to the terminal corresponding to the user;

[0121] After receiving the public key information sent by the terminal based on the public key acquisition request, a certificate signing request file is generated;

[0122] Based on the certificate signing request file, obtain the user certificate issued by the blockchain;

[0123] The user certificate is sent to the corresponding terminal.

[0124] In this embodiment of the invention, the user corresponding to the aforementioned signature information is a user with a user certificate, which ensures the endorsement process provided by this embodiment and improves the authenticity of the endorsement. The process of applying for a user certificate is described below. The information carried in the user's certificate generation request includes, but is not limited to, the user's identity document (ID) and the organization to which the user belongs. The terminal front-end processing node sends a public key acquisition request to the user's corresponding terminal through a Bearer Independent Protocol (BIP) or an Application Programming Interface (API) based on the user's certificate generation request. After receiving the public key information sent by the terminal, the terminal front-end processing node creates and generates a certificate signing request (CSR) file based on the user ID, the organization to which the user belongs, and the public key information. Based on the certificate signing request file, the blockchain-issued user certificate is obtained, and the user certificate is sent to the corresponding terminal.

[0125] It should be noted that the blockchain system supports both built-in Certificate Authority (CA) services and third-party CA services. In this embodiment of the invention, the built-in CA services supported by the blockchain system are preferred for greater convenience.

[0126] Optionally, obtaining the blockchain-issued user certificate based on the certificate signing request file includes:

[0127] Based on the certificate signing request file, a request to generate a user certificate is sent to the blockchain;

[0128] Obtain the user certificate issued by the blockchain based on the generated user certificate request.

[0129] In this embodiment of the invention, the information carried in the generated user certificate request includes, but is not limited to, a certificate signing request file. The blockchain calls the certificate management function module according to the generated user certificate request. The certificate management function module issues a user certificate using the user's home organization certificate and stores the user certificate in the blockchain for verification of user signatures in subsequent business processes. The specific verification method is no different from the method in the prior art, and will not be described in detail. Finally, the terminal front-end processing node obtains the user certificate issued by the blockchain.

[0130] Optionally, sending a signature request to the terminal corresponding to the user includes:

[0131] A signature request is sent to the user's corresponding terminal via SMS or BIP.

[0132] and / or send a signature request to the user's corresponding terminal via an application programming interface (API);

[0133] The step of obtaining the signature information sent by the terminal after endorsing according to the signature request includes:

[0134] The signature information sent by the terminal after endorsing the signature request is obtained through SMS service or BIP standalone transport protocol;

[0135] And / or obtain the signature information sent by the terminal after endorsing the signature request through the application programming interface (API).

[0136] In this embodiment of the invention, when the terminal front-end processing node is an independent platform software or a functional module in a blockchain, it interacts with the terminal via Short Message Service (SMS) or Block Injection (BIP); when the terminal front-end processing node is an APP on the terminal, it interacts with the terminal via Application Programming Interface (API); when the terminal front-end processing node is either an independent platform software or a functional module in a blockchain and an APP on the terminal, the APP on the terminal interacts with the terminal via API, and the independent platform software or a functional module in the blockchain interacts with the terminal via SMS or BIP; when the terminal front-end processing node includes independent platform software, the independent platform software and the APP on the terminal interact via Hypertext Transfer Protocol (HTTP).

[0137] Among them, the APP on the terminal can provide a rich user interface, but the online time is limited by the terminal. Independent platform software or a functional module in the blockchain can generate a user interface on the terminal through the SIM Application Toolkit (STK). The interface is simple, but SMS or BIP can provide the ability to be always online, and inform the user through the terminal in time, so that the user can view the signature request in time and the terminal completes the endorsement.

[0138] Optionally, the first request sent by the receiving endorsement node includes:

[0139] Receive the first request sent by the endorsement node via Hypertext Transfer Protocol (HTTP);

[0140] Sending the signature information to the endorsing node includes:

[0141] The signature information is sent to the endorsing node via the Hypertext Transfer Protocol (HTTP).

[0142] In this embodiment of the invention, the interaction method between the terminal front-end processing node and the blockchain is described. When the terminal front-end processing node is an APP on the terminal, it interacts with the blockchain via HTTP.

[0143] like Figure 3 As shown, this embodiment of the invention also provides a blockchain endorsement method, applied to a terminal, including:

[0144] Step S201: Receive a signature request sent by the terminal front-end processing node;

[0145] In step S201, the information carried in the signature request includes, but is not limited to, private key index, service description and service data to be signed. The signature request is displayed on the terminal in the form of a terminal APP notification, or the signature request is displayed in a pop-up menu on the terminal through the SIM Application Toolkit (STK).

[0146] Step S202: Generate signature information by endorsing the signature request;

[0147] In step S202, the terminal calls the private key pre-configured on the terminal's SIM card to endorse the signature according to the signature request, and generates signature information. The signature information includes the signed business data generated after signing the business data to be signed. Compared with other hardware wallets, the SIM card has the function of always being online, which makes it easy to notify one or more users within the organization when endorsing, and efficiently completes the endorsement process.

[0148] Step S203: Send the signature information to the terminal front-end processing node.

[0149] In this embodiment of the invention, the private key used to generate signature information is configured on the terminal. After receiving a signature request sent by the terminal front-end processing node, the terminal calls the pre-configured private key to generate the endorsement signature information according to the signature request. The signature information is generated on the terminal side, allowing users to participate through the terminal and ensuring the authenticity of the endorsement.

[0150] Optionally, the step of endorsing and generating signature information based on the signature request includes:

[0151] Upon detecting that the user agrees to the signature request, a first response message is sent to the terminal front-end processing node;

[0152] Receive the endorsement request sent by the terminal front-end processing node based on the first response information;

[0153] Generate signature information by endorsing the endorsement request.

[0154] In this embodiment of the invention, the user views the signature request on the terminal and agrees to the signature. Upon detecting the user's agreement to the signature request, the terminal sends a first response to the terminal's front-end processing node. Based on the endorsement request sent by the front-end processing node, the user's private key, pre-configured on the terminal's SIM card, is used to endorse and sign the business data to be signed, generating signature information. The user participates in the endorsement process through the terminal, increasing the authenticity of the endorsement.

[0155] Optionally, the method further includes:

[0156] Receive the public key acquisition request sent by the terminal front-end processing node;

[0157] According to the public key acquisition request, the public key information is sent to the terminal front-end processing node. The public key information is used to generate a certificate signing request file, and the certificate signing request file is used to obtain the user certificate.

[0158] Receive the user certificate sent by the terminal front-end processing node.

[0159] In this embodiment of the invention, the user corresponding to the aforementioned signature information is a user with a user certificate, thereby ensuring the endorsement process provided by this embodiment and improving the authenticity of the endorsement. Applying for a user certificate requires the user's public key information, which is generated on the user's terminal. After receiving a public key acquisition request from the terminal front-end processing node, the terminal generates a user public-private key pair through the SIM card, sends the public key information (including the public key and key index) to the terminal front-end processing node, obtains the user certificate sent by the terminal front-end processing node, and stores the user certificate in the terminal.

[0160] Optionally, the signature request sent by the receiving terminal front-end processing node includes:

[0161] Receive signature requests sent by the terminal front-end processing node via SMS service or BIP standalone transport protocol;

[0162] And / or receive signature requests sent by the terminal front-end processing node via the application programming interface (API);

[0163] Sending the signature information to the terminal front-end processing node includes:

[0164] The signature information is sent to the terminal front-end processing node via SMS service or BIP standalone transport protocol.

[0165] And / or send the signature information to the terminal front-end processing node via the application programming interface (API).

[0166] In this embodiment of the invention, when the terminal front-end processing node is an independent platform software or a functional module in a blockchain, the terminal interacts with the terminal front-end processing node through a Short Message Service (SMS) or a Block Injection (BIP); when the terminal front-end processing node is an app on the terminal, the terminal interacts with the terminal front-end processing node through an Application Programming Interface (API); when the terminal front-end processing node is either an independent platform software or a functional module in a blockchain and an app on the terminal, the terminal interacts with the app on the terminal through the API and with the independent platform software or a functional module in the blockchain through SMS or a BIP; when the terminal front-end processing node includes independent platform software, the independent platform software and the app on the terminal interact through the Hyper Text Transfer Protocol (HTTP).

[0167] Among them, the APP on the terminal can provide a rich user interface, but the online time is limited by the terminal. Independent platform software or a functional module in the blockchain can generate a user interface on the terminal through the SIM Application Toolkit (STK). The interface is simple, but SMS or BIP can provide the ability to be always online, and inform the user through the terminal in time, so that the user can view the signature request in time and the terminal completes the endorsement.

[0168] like Figure 4 As shown, this embodiment of the invention also provides a blockchain endorsement method, applied to endorsement nodes, including:

[0169] Step S301: Upon receiving blockchain business data, a first request is sent to the terminal front-end processing node. The first request is used to request signature information of at least one user.

[0170] In step S301, each organization includes, but is not limited to, users, endorsement nodes, and terminals. When an endorsement node receives blockchain business data sent by its affiliated organization, it assembles the blockchain business data and calls the endorsement function module to send a first request to the terminal front-end processing node. The first request carries business data to be signed. The first request is used to request signature information from at least one user. The user and the endorsement node belong to the same organization. The signature information includes signed business data generated after signing the business data to be signed.

[0171] Step S302: Receive the signature information sent by the terminal front-end processing node.

[0172] In this embodiment of the invention, since the private key used to generate signature information is not configured on the endorsement node, when blockchain business data is received, a first request needs to be sent to the terminal front-end processing node. Only after the user agrees to sign can the endorsement-generated signature information be obtained. Compared with the prior art, which directly generates signature information on the endorsement node, this allows users to participate and ensures the authenticity of the endorsement.

[0173] Optionally, upon receiving blockchain business data, a first request is sent to the terminal front-end processing node, including:

[0174] Upon receiving blockchain business data, the endorsement strategy within the blockchain business data is obtained;

[0175] If the endorsement policy indicates that a signature is required, a first request is sent to the terminal front-end processing node.

[0176] In this embodiment of the invention, the conditions for sending the first request in step S301 are explained. When the endorsing node receives blockchain business data sent by the organization to which it belongs, it assembles the blockchain business data and obtains the endorsement policy in the blockchain business data. The endorsement policy indicates the users who need to obtain signature information. The endorsing node calls the endorsement function module to view the endorsement policy. When the endorsement policy indicates that the signature of the organization to which the endorsing node belongs is required, the endorsing node sends the first request to the terminal front-end processing node.

[0177] Optionally, sending the first request to the terminal front-end processing node includes:

[0178] The first request is sent to the terminal front-end processing node via the Hypertext Transfer Protocol (HTTP).

[0179] The receipt of the signature information sent by the terminal front-end processing node includes:

[0180] The signature information sent by the terminal front-end processing node is received via the Hypertext Transfer Protocol (HTTP).

[0181] In this embodiment of the invention, the interaction method between the blockchain and the terminal front-end processing node is described. When the terminal front-end processing node is an APP on the terminal, the blockchain interacts with the terminal front-end processing node via HTTP.

[0182] like Figure 5 As shown, the endorsement process in a blockchain system requires the participation of one or more parties, and the technical processes differ. To more clearly illustrate the endorsement process of this invention, an endorsement scenario between two organizations is constructed, requiring the participation of both organizations. The participating parties are described below:

[0183] The participants include Organization 1 and Organization 2. Organization 1 includes User 1, Terminal 1, and Endorsing Node 1. Organization 2...

[0184] This includes user 2, terminal 2, and endorsement node 2. It should be noted that in practical applications, there are multiple users, terminals, and endorsement nodes. The steps of the endorsement method using this embodiment of the invention are as follows:

[0185] In step S401, user 1 sends blockchain business data to endorsement node 1 and endorsement node 2. It should be noted that the blockchain business data is sent by users within an organization to each endorsement node, and the specific organization is set according to the actual situation.

[0186] Organization 1 and Organization 2 endorse the product simultaneously. The endorsement process for Organization 1 is as follows:

[0187] Step S402: Endorsement node 1 calls the endorsement function module to view the endorsement strategy and determines whether endorsement is required based on the endorsement strategy.

[0188] Step S403: If it is determined that endorsement is required, the endorsement node 1 sends a first request to the terminal front-end processing node. The first request is used to request the signature information of user 1 and carries the business data to be signed.

[0189] In step S404, the terminal front-end processing node sends a signature request to terminal 1, and user 1 views the signature request through terminal 1. The signature request is displayed on terminal 1 in the form of a terminal APP notification, or the signature request is displayed in a pop-up menu on terminal 1 through the SIM Application Toolkit (STK).

[0190] In step S405, user 1 performs an operation on terminal 1 according to the signature request. When terminal 1 detects that user 1 agrees to the signature request, it sends the first response information to the terminal front-end processing node.

[0191] Step S406: The terminal front-end processing node sends an endorsement request to terminal 1 based on the first response information;

[0192] Step S407: Terminal 1 uses the private key pre-configured on Terminal 1 to endorse the application according to the endorsement request, generates signature information, and sends the signature information to the terminal front-end processing node. The signature information includes signed business data generated after signing the business data to be signed.

[0193] Step S408: The terminal front-end processing node sends signature information to endorsement node 1.

[0194] The endorsement steps for Organization 2 are as follows:

[0195] Step S402: Endorsement node 2 calls the endorsement function module to view the endorsement strategy and determines whether endorsement is required based on the endorsement strategy.

[0196] In step S403, if it is determined that endorsement is required, the endorsement node 2 sends a first request to the terminal front-end processing node. The first request is used to request the signature information of user 2 and carries the business data to be signed.

[0197] In step S404, the terminal front-end processing node sends a signature request to terminal 2. User 2 can view the signature request through terminal 2. The signature request is displayed on terminal 2 in the form of a terminal APP notification, or the signature request is displayed in a pop-up menu on terminal 2 through the SIM Application Toolkit (STK).

[0198] In step S405, user 2 performs an operation on terminal 2 according to the signature request. When terminal 2 detects that user 2 agrees to the signature request, it sends the first response information to the terminal front-end processing node.

[0199] Step S406: The terminal front-end processing node sends an endorsement request to terminal 2 based on the first response information;

[0200] Step S407: Terminal 2 invokes the private key pre-configured on Terminal 2 to endorse the application according to the endorsement request, generates signature information, and sends the signature information to the terminal front-end processing node. The signature information includes the signed business data generated after signing the business data to be signed.

[0201] In step S408, the terminal front-end processing node sends signature information to the endorsement node 2.

[0202] like Figure 6 As shown in this embodiment of the invention, the user corresponding to the signature information requested by the endorsement node is a user with a user certificate. Therefore, before starting the endorsement process, it is necessary to register the user certificate. The steps for registering the user certificate are as follows:

[0203] Step S501: The user sends a certificate generation request to the terminal front-end processing node. The information carried in the certificate generation request includes, but is not limited to, the user's identity document (ID) number and the organization to which the user belongs.

[0204] Step S502: The terminal front-end processing node sends a public key acquisition request to the terminal based on the certificate generation request;

[0205] Step S503: The terminal generates a public-private key pair through the SIM card based on the public key acquisition request;

[0206] Step S504: The terminal sends the public key information of the public-private key pair to the terminal front-end processing node. The public key information includes the public key and the key index.

[0207] Step S505: The terminal front-end processing node creates and generates a certificate signing request file based on the user ID, the organization to which it belongs, and the public key information;

[0208] Step S506: Send a request to generate a user certificate to the blockchain. The information carried in the request to generate a user certificate includes, but is not limited to, a certificate signing request file.

[0209] Step S507: The blockchain calls the certificate management function module according to the generated user certificate request. The certificate management function module issues the user certificate using the user's home organization certificate and stores the user certificate in the blockchain.

[0210] Step S508: The blockchain sends the user certificate to the terminal front-end processing node.

[0211] In step S509, the terminal front-end processing node sends the user certificate to the terminal, and the terminal stores the user certificate. The user can view the user certificate on the terminal side.

[0212] like Figure 7 As shown, this embodiment of the invention also provides a network device 100, including a transceiver 101, wherein the transceiver 101 is used for:

[0213] Receive a first request sent by an endorsement node; wherein the first request is used to request signature information from at least one user;

[0214] Based on the first request, a signature request is sent to the terminal corresponding to the user;

[0215] Obtain the signature information sent by the terminal after endorsing the signature request;

[0216] Send the signature information to the endorsing node.

[0217] Optionally, the transceiver 101 is further configured to:

[0218] Obtain first response information sent by the terminal according to the signature request, wherein the first response information is used to instruct the user to agree to the signature;

[0219] An endorsement request is sent to the terminal based on the first response information;

[0220] Obtain the signature information sent by the terminal after endorsing the endorsement according to the endorsement request.

[0221] Optionally, the transceiver 101 is further configured to:

[0222] Receive the user's certificate generation request;

[0223] Send a public key acquisition request to the terminal corresponding to the user;

[0224] After receiving the public key information sent by the terminal based on the public key acquisition request, a certificate signing request file is generated;

[0225] Based on the certificate signing request file, obtain the user certificate issued by the blockchain;

[0226] The user certificate is sent to the corresponding terminal.

[0227] Optionally, the transceiver 101 is further configured to:

[0228] Based on the certificate signing request file, a request to generate a user certificate is sent to the blockchain;

[0229] Obtain the user certificate issued by the blockchain based on the generated user certificate request.

[0230] Optionally, the transceiver 101 is further configured to:

[0231] A signature request is sent to the user's corresponding terminal via SMS or BIP.

[0232] And / or send a signature request to the user's corresponding terminal via a programmable programming interface (API);

[0233] The signature information sent by the terminal after endorsing the signature request is obtained through SMS service or BIP standalone transport protocol;

[0234] And / or obtain the signature information sent by the terminal after endorsing the signature request through a programmable interface API.

[0235] Optionally, the transceiver 101 is further configured to:

[0236] Receive the first request sent by the endorsement node via Hypertext Transfer Protocol (HTTP);

[0237] The signature information is sent to the endorsing node via the Hypertext Transfer Protocol (HTTP).

[0238] like Figure 8 As shown, this embodiment of the invention also provides a network device 200, including a transceiver 201 and a processor 202, wherein:

[0239] The transceiver 201 is used to receive signature requests sent by the terminal front-end processing node;

[0240] The processor 202 is used to endorse and generate signature information according to the signature request;

[0241] The transceiver 201 is also used to send the signature information to the terminal front-end processing node.

[0242] Optionally, the transceiver 201 is further configured to send a first response message to the terminal front-end processing node when it detects that the user agrees to the signature request;

[0243] The transceiver 201 is also used to receive the endorsement request sent by the terminal front-end processing node according to the first response information;

[0244] The processor 202 is also configured to generate signature information by endorsing the endorsement request.

[0245] Optionally, the transceiver 201 is further configured to:

[0246] Receive the public key acquisition request sent by the terminal front-end processing node;

[0247] According to the public key acquisition request, the public key information is sent to the terminal front-end processing node. The public key information is used to generate a certificate signing request file, and the certificate signing request file is used to obtain the user certificate.

[0248] Receive the user certificate sent by the terminal front-end processing node.

[0249] Optionally, the transceiver 201 is further configured to:

[0250] Receive signature requests sent by the terminal front-end processing node via SMS service or BIP I independent transport protocol;

[0251] And / or receive signature requests sent by the terminal front-end processing node via the application programming interface (API);

[0252] The signature information is sent to the terminal front-end processing node via SMS service or BIPI (Bidirectional Transport Protocol Independent);

[0253] And / or send the signature information to the terminal front-end processing node via the application programming interface (API).

[0254] like Figure 9 As shown, this embodiment of the invention also provides a network device 300, including a transceiver 301, wherein the transceiver 301 is used for:

[0255] Upon receiving blockchain business data, a first request is sent to the terminal front-end processing node. The first request is used to request signature information from at least one user.

[0256] Receive the signature information sent by the terminal front-end processing node.

[0257] Optionally, the transceiver 301 is further configured to:

[0258] Upon receiving blockchain business data, the endorsement strategy within the blockchain business data is obtained;

[0259] If the endorsement policy indicates that a signature is required, a first request is sent to the terminal front-end processing node.

[0260] Optionally, the transceiver 301 is further configured to:

[0261] The first request is sent to the terminal front-end processing node via the Hypertext Transfer Protocol (HTTP).

[0262] The signature information sent by the terminal front-end processing node is received via the Hypertext Transfer Protocol (HTTP).

[0263] like Figure 10 As shown, this embodiment of the invention also provides a blockchain endorsement device, applied to a terminal front-end processing node, comprising:

[0264] The first receiving module 401 is used to receive a first request sent by the endorsing node; wherein the first request is used to request signature information of at least one user;

[0265] The first sending module 402 is used to send a signature request to the terminal corresponding to the user according to the first request;

[0266] The first acquisition module 403 is used to acquire the signature information sent by the terminal after endorsing the signature request;

[0267] The second sending module 404 is used to send the signature information to the endorsement node.

[0268] Optionally, the first acquisition module 403 includes:

[0269] The first acquisition unit is used to acquire first response information sent by the terminal according to the signature request, wherein the first response information is used to instruct the user to agree to the signature.

[0270] The first sending unit is configured to send an endorsement request to the terminal based on the first response information;

[0271] The second acquisition unit is used to acquire the signature information sent by the terminal after endorsing the endorsement according to the endorsement request.

[0272] Optionally, the device further includes:

[0273] The fourth receiving module is used to receive the user's certificate generation request;

[0274] The fifth sending module is used to send a public key acquisition request to the terminal corresponding to the user;

[0275] The second generation module is used to generate a certificate signing request file after receiving the public key information sent by the terminal according to the public key acquisition request;

[0276] The second acquisition module is used to acquire the user certificate issued by the blockchain based on the certificate signing request file;

[0277] The sixth sending module is used to send the user certificate to the corresponding terminal.

[0278] Optionally, the second acquisition module includes:

[0279] The second sending unit is used to send a request to generate a user certificate to the blockchain according to the certificate signing request file;

[0280] The third acquisition unit is used to acquire the user certificate issued by the blockchain according to the generated user certificate request.

[0281] Optionally, the first sending module 402 is used to send a signature request to the terminal corresponding to the user via SMS or BIP; and / or to send a signature request to the terminal corresponding to the user via API.

[0282] The first acquisition module 403 is used to acquire the signature information sent by the terminal after endorsing the signature request via SMS or BIP; and / or to acquire the signature information sent by the terminal after endorsing the signature request via API.

[0283] Optionally, the first receiving module 401 is configured to receive a first request sent by the endorsement node via the Hypertext Transfer Protocol (HTTP).

[0284] The second sending module 404 is used to send the signature information to the endorsement node via the Hypertext Transfer Protocol (HTTP).

[0285] It should be noted that the embodiments of this device are devices corresponding to the embodiments of the above methods. All implementations in the embodiments of the above methods are applicable to the embodiments of this device and can achieve the same technical effect.

[0286] like Figure 11 As shown, this embodiment of the invention also provides a blockchain endorsement device, applied to a terminal, comprising:

[0287] The second receiving module 501 is used to receive a signature request sent by the terminal front-end processing node;

[0288] The first generation module 502 is used to endorse and generate signature information according to the signature request.

[0289] The third sending module 503 is used to send the signature information to the terminal front-end processing node.

[0290] Optionally, the first generation module 502 includes:

[0291] The third sending unit is used to send first response information to the terminal front-end processing node when it is detected that the user agrees to the signature request;

[0292] The first receiving unit is used to receive the endorsement request sent by the terminal front-end processing node according to the first response information;

[0293] The first generation unit is used to generate signature information by endorsing the endorsement request.

[0294] Optionally, the device further includes:

[0295] The fifth receiving module is used to receive the public key acquisition request sent by the terminal front-end processing node;

[0296] The seventh sending module is used to send public key information to the terminal front-end processing node according to the public key acquisition request. The public key information is used to generate a certificate signing request file, and the certificate signing request file is used to obtain the user certificate.

[0297] The sixth receiving module is used to receive the user certificate sent by the terminal front-end processing node.

[0298] Optionally, the second receiving module 501 is used to receive a signature request sent by the terminal front-end processing node via SMS service or BIP standalone transport protocol; and / or to receive a signature request sent by the terminal front-end processing node via application programming interface (API);

[0299] The third sending module 503 is used to send the signature information to the terminal front-end processing node via SMS or BIP; and / or to send the signature information to the terminal front-end processing node via API.

[0300] It should be noted that the embodiments of this device are devices corresponding to the embodiments of the above methods. All implementations in the embodiments of the above methods are applicable to the embodiments of this device and can achieve the same technical effect.

[0301] like Figure 12 As shown, this embodiment of the invention also provides a blockchain endorsement device, applied to an endorsement node, comprising:

[0302] The fourth sending module 601 is used to send a first request to the terminal front-end processing node when receiving blockchain business data. The first request is used to request signature information of at least one user.

[0303] The third receiving module 602 is used to receive the signature information sent by the terminal front-end processing node.

[0304] Optionally, the fourth transmitting module 601 includes:

[0305] The fourth acquisition unit is used to acquire the endorsement strategy in the blockchain business data when the blockchain business data is received.

[0306] The fourth sending unit is used to send a first request to the terminal front-end processing node when the endorsement policy indicates that a signature is required.

[0307] Optionally, the fourth sending module 601 is used to send a first request to the terminal front-end processing node via the Hypertext Transfer Protocol (HTTP);

[0308] The third receiving module 602 is used to receive the signature information sent by the terminal front-end processing node via the Hypertext Transfer Protocol (HTTP).

[0309] It should be noted that the embodiments of this device are devices corresponding to the embodiments of the above methods. All implementations in the embodiments of the above methods are applicable to the embodiments of this device and can achieve the same technical effect.

[0310] This invention also provides a network device, including: a processor, a memory, and a program stored in the memory and executable on the processor, wherein the program, when executed by the processor, implements the blockchain endorsement method as described in any of the preceding embodiments.

[0311] This invention also provides a readable storage medium, comprising: a program stored on the readable storage medium, wherein when the program is executed by a processor, it implements the steps of the blockchain endorsement method as described in any of the preceding claims.

[0312] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0313] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Therefore, if these modifications and variations fall within the scope of the claims of this invention and their equivalents, this invention also intends to include these modifications and variations.

Claims

1. A blockchain endorsement method, characterized in that, Applied to a terminal front-end processing node, the method includes: Receive a first request sent by an endorsement node; wherein the first request is used to request signature information from at least one user; the first request carries business data to be signed; Based on the first request, a signature request is sent to the terminal corresponding to the user; Obtain the signature information sent by the terminal after endorsing the signature request; Send the signature information to the endorsing node.

2. The method according to claim 1, characterized in that, The step of obtaining the signature information sent by the terminal after endorsing according to the signature request includes: Obtain first response information sent by the terminal according to the signature request, wherein the first response information is used to instruct the user to agree to the signature; An endorsement request is sent to the terminal based on the first response information; Obtain the signature information sent by the terminal after endorsing the endorsement according to the endorsement request.

3. The method according to claim 1, characterized in that, The method further includes: Receive the user's certificate generation request; Send a public key acquisition request to the terminal corresponding to the user; After receiving the public key information sent by the terminal based on the public key acquisition request, a certificate signing request file is generated; Based on the certificate signing request file, obtain the user certificate issued by the blockchain; The user certificate is sent to the corresponding terminal.

4. The method according to claim 3, characterized in that, The step of obtaining the blockchain-issued user certificate based on the certificate signing request file includes: Based on the certificate signing request file, a request to generate a user certificate is sent to the blockchain; Obtain the user certificate issued by the blockchain based on the generated user certificate request.

5. The method according to claim 1, characterized in that, Sending a signature request to the terminal corresponding to the user includes: A signature request is sent to the user's corresponding terminal via SMS or BIP. and / or send a signature request to the user's corresponding terminal via an application programming interface (API); The step of obtaining the signature information sent by the terminal after endorsing according to the signature request includes: The signature information sent by the terminal after endorsing the signature request is obtained through SMS service or BIP standalone transport protocol; And / or obtain the signature information sent by the terminal after endorsing the signature request through the application programming interface (API).

6. The method according to claim 1, characterized in that, The first request sent by the receiving endorsement node includes: Receive the first request sent by the endorsement node via Hypertext Transfer Protocol (HTTP); Sending the signature information to the endorsing node includes: The signature information is sent to the endorsing node via the Hypertext Transfer Protocol (HTTP).

7. A blockchain endorsement method, characterized in that, Applied to terminals, including: Receive signature requests sent by the terminal front-end processing node; Generate signature information by endorsing the signature request; Send the signature information to the terminal front-end processing node; The signature request is sent by the terminal front-end processing node based on a first request, which is used to request signature information from at least one user; the first request carries business data to be signed.

8. The method according to claim 7, characterized in that, The step of endorsing and generating signature information based on the signature request includes: Upon detecting that the user agrees to the signature request, a first response message is sent to the terminal front-end processing node; Receive the endorsement request sent by the terminal front-end processing node based on the first response information; Generate signature information by endorsing the endorsement request.

9. The method according to claim 7, characterized in that, The method further includes: Receive the public key acquisition request sent by the terminal front-end processing node; According to the public key acquisition request, the public key information is sent to the terminal front-end processing node. The public key information is used to generate a certificate signing request file, and the certificate signing request file is used to obtain the user certificate. Receive the user certificate sent by the terminal front-end processing node.

10. The method according to claim 7, characterized in that, The signature request sent by the receiving terminal front-end processing node includes: Receive signature requests sent by the terminal front-end processing node via SMS service or BIP standalone transport protocol; And / or receive signature requests sent by the terminal front-end processing node via the application programming interface (API); Sending the signature information to the terminal front-end processing node includes: The signature information is sent to the terminal front-end processing node via SMS service or BIP standalone transport protocol. And / or send the signature information to the terminal front-end processing node via the application programming interface (API).

11. A blockchain endorsement method, characterized in that, Applied to endorsement nodes, including: Upon receiving blockchain business data, a first request is sent to the terminal front-end processing node. The first request is used to request signature information from at least one user. The first request carries business data to be signed. Receive the signature information sent by the terminal front-end processing node; The signature information is endorsed by the user's terminal according to the signature request and then sent to the terminal front-end processing node; the signature request is sent by the terminal front-end processing node to the user's terminal according to the first request.

12. The method according to claim 11, characterized in that, Upon receiving blockchain business data, a first request is sent to the terminal front-end processing node, including: Upon receiving blockchain business data, the endorsement strategy within the blockchain business data is obtained; If the endorsement policy indicates that a signature is required, a first request is sent to the terminal front-end processing node.

13. The method according to claim 11, characterized in that, Sending the first request to the terminal front-end processing node includes: The first request is sent to the terminal front-end processing node via the Hypertext Transfer Protocol (HTTP). The receipt of the signature information sent by the terminal front-end processing node includes: The signature information sent by the terminal front-end processing node is received via the Hypertext Transfer Protocol (HTTP).

14. A network device, characterized in that, Includes a transceiver, wherein the transceiver is used for: Receive a first request sent by an endorsement node; wherein the first request is used to request signature information from at least one user; the first request carries business data to be signed; Based on the first request, a signature request is sent to the terminal corresponding to the user; Obtain the signature information sent by the terminal after endorsing the signature request; Send the signature information to the endorsing node.

15. A network device, characterized in that, Includes a transceiver and a processor, of which: The transceiver is used to receive signature requests sent by the terminal front-end processing node; The processor is used to endorse and generate signature information based on the signature request; The transceiver is also used to send the signature information to the terminal front-end processing node; The signature request is sent by the terminal front-end processing node based on a first request, which is used to request signature information from at least one user; the first request carries business data to be signed.

16. A network device, characterized in that, Includes a transceiver, wherein the transceiver is used for: Upon receiving blockchain business data, a first request is sent to the terminal front-end processing node. The first request is used to request signature information from at least one user. The first request carries business data to be signed. Receive the signature information sent by the terminal front-end processing node; The signature information is endorsed by the user's terminal according to the signature request and then sent to the terminal front-end processing node; the signature request is sent by the terminal front-end processing node to the user's terminal according to the first request.

17. A blockchain endorsement device, characterized in that, Applied to terminal front-end processing nodes, including: The first receiving module is used to receive a first request sent by the endorsing node; wherein the first request is used to request signature information of at least one user; the first request carries business data to be signed; The first sending module is configured to send a signature request to the terminal corresponding to the user in accordance with the first request; The first acquisition module is used to acquire the signature information sent by the terminal after endorsing the signature request; The second sending module is used to send the signature information to the endorsement node.

18. A blockchain endorsement device, characterized in that, Applied to terminals, including: The second receiving module is used to receive signature requests sent by the terminal front-end processing node; The first generation module is used to endorse and generate signature information based on the signature request. The third sending module is used to send the signature information to the terminal front-end processing node; The signature request is sent by the terminal front-end processing node based on a first request, which is used to request signature information from at least one user; the first request carries business data to be signed.

19. A blockchain endorsement device, characterized in that, Applied to endorsement nodes, including: The fourth sending module is used to send a first request to the terminal front-end processing node upon receiving blockchain business data. The first request is used to request signature information from at least one user. The first request carries business data to be signed. The third receiving module is used to receive the signature information sent by the terminal front-end processing node; The signature information is endorsed by the user's terminal according to the signature request and then sent to the terminal front-end processing node; the signature request is sent by the terminal front-end processing node to the user's terminal according to the first request.

20. A network device, characterized in that, include: A processor, a memory, and a program stored in the memory and executable on the processor, wherein the program, when executed by the processor, implements the blockchain endorsement method as described in any one of claims 1 to 6, or the blockchain endorsement method as described in any one of claims 7 to 10, or the blockchain endorsement method as described in any one of claims 11 to 13.

21. A readable storage medium, characterized in that, include: The readable storage medium stores a program that, when executed by a processor, implements the steps of the blockchain endorsement method as described in any one of claims 1 to 6, or the steps of the blockchain endorsement method as described in any one of claims 7 to 10, or the steps of the blockchain endorsement method as described in any one of claims 11 to 13.

Images