Cross-chain aggregation transaction method based on zero knowledge proof

Abstract

The invention discloses a cross-chain aggregation transaction method based on zero-knowledge proof, and belongs to the technical field of blockchains, the zero-knowledge proof is used to aggregate user transactions on multiple side chains, and the zero-knowledge proof is also added to ensure the privacy of users; the aggregated transaction is accepted through the trusted third party, so that the transaction processing overhead of a main chain is reduced, and the communication overhead is also reduced; a small amount of data is generated through zero-knowledge proof, so that the verification node can quickly verify the transaction, and the time delay of the transaction is reduced; according to the cross-chain aggregation transaction method based on the zero-knowledge proof, redundancy of data on the chain is reduced, verification and storage burdens are reduced, a plurality of proof can be integrated into a simple evidence in the aggregation process, consumption of computing resources is reduced, and the overall efficiency of a system is improved when a large number of cross-chain transactions are processed.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a cross-chain aggregation transaction method based on zero-knowledge proof Background Art

[0002] With the rapid development of blockchain, Ethereum and Bitcoin are attracting more and more attention. In order to make blockchain more operable and scalable, people have conducted a lot of research on blockchain. Cross-chain communication is one of the solutions to solve the problem of blockchain data islands. It includes mainstream technologies such as notary mechanism, side chain, hash locking, distributed private key control, etc. The throughput in the existing blockchain system is insufficient.

[0003] Cross-chain communication refers to the technology and methods for data exchange and interaction between different blockchain networks. In 2013, Tier Nolan first proposed the concept of cross-chain atomic swaps on the Bitcoin forum, describing the use of hash locks and time locks to ensure the security and atomicity of transactions. In 2014, the Blockstream team published a white paper titled "Enabling Blockchain Innovations with Pegged Sidechains", which proposed the concept of sidechains. Zendoo proposed a trust-minimized cross-chain communication protocol that uses zk-SNARKs for verification. Hideaki Miyaji et al. proposed a cross-chain communication protocol called CCC in 2024. When multiple users in a blockchain perform cross-chain communication, the key-value commitment scheme is applied to the cross-chain communication, which can aggregate the values ​​of multiple users.

[0004] However, when there are multiple users on a side chain and users on multiple side chains communicate with the main chain at the same time, there is no efficient and secure communication solution. Summary of the invention

[0005] In order to solve the above problems, the present invention provides a cross-chain aggregation transaction method based on zero-knowledge proof to solve the problems of insufficient throughput and easy leakage of specific transaction information in the blockchain cross-chain system in the prior art.

[0006] To achieve the above objectives, the present invention provides a cross-chain aggregation transaction method based on zero-knowledge proof, which specifically includes the following steps:

[0007] Step S1: The user generates an exchange value V according to transaction requirements i,j , the exchange value is the specific amount of the transaction or other important transaction information;

[0008] Step S2: The user uses the private key sk and the generated exchange value V i,j Generate commitment C through cryptographic hash functioni,j :C i,j ←H(sk,V i,j );

[0009] Step S3: Verify Commitment C i,j The effectiveness of ensuring the commitment value C i,j By the legal exchange value V i,j And private key sk is generated;

[0010] Step S4: The user commits to a value C based on the verification i,j Generate local zero-knowledge proof with private key sk

[0011]

[0012] Step S5: Verify zero-knowledge proof The correctness of The corresponding commitment value C i,j Consistent with the private key sk;

[0013] Step S6: Zero-knowledge proofs generated by multiple users After being received by the side chain, Aggregated into agreed-upon on-chain zero-knowledge proofs

[0014] Step S7: After generation, verify the zero-knowledge evidence on the chain Check the completeness, accuracy, timestamp and signature of each piece of evidence;

[0015] Step S8: The trusted third party (TTP) will verify the zero-knowledge proofs on different side chains. Aggregate to form the final cross-chain zero-knowledge evidence Zk p .

[0016] Step S9: The trusted third party TTP aggregates the result Zk p Send to the main chain.

[0017] Preferably, in step S4, a local zero-knowledge proof is generated The formula is as follows:

[0018] pk = GeneratePublicKey(sk);

[0019] α=H(pk,r,C i,j );

[0020] β=r*CurveFunction(sk,C i,j );

[0021]

[0022] In the formula, sk represents the user's private key, r represents a random number, and C i,j It represents the commitment value generated by the user through the hash function, α and β are the proof elements, pk represents the public key, H represents the hash function, CurveFunction represents the elliptic curve function, and GeneratePublicKey represents the function of generating the private key using the public key.

[0023] Preferably, in step S6, the zero-knowledge proof of each side chain The expression is as follows:

[0024]

[0025] In the formula, is the user's zero-knowledge proof, It is the ultimate on-chain zero-knowledge evidence, and AGP is a function that aggregates user transactions.

[0026] Preferably, in step S9, the trusted third party TTP will send the aggregation result Zk p The transmission process is carried out through a secure communication protocol to ensure that the aggregation results are not tampered with or leaked during the transmission process. p After that, verification and status update are performed, which specifically includes the following steps:

[0027] S91: The main chain receives the aggregated zero-knowledge evidence Zk from TTP p After that, authenticity and integrity verification is performed;

[0028] S92: After verification, the main chain aggregates zero-knowledge evidence Zk p Update the global state of the blockchain, including updating the balance, status information or other relevant transaction records of user accounts;

[0029] S93: After completing the status update, the main chain sends the confirmation information of the transaction to the relevant parties, including the users and side chains involved in the transaction. The confirmation information includes the confirmation time, transaction ID and updated status of the transaction.

[0030] Preferably, in step S92, ensure that all cross-chain transactions are correctly recorded on the main chain.

[0031] Therefore, the present invention adopts the above-mentioned cross-chain aggregation transaction method based on zero-knowledge proof, which has the following beneficial effects:

[0032] (1) This paper proposes a relatively efficient and secure communication mechanism ZCC (Zero-knowledge Cross-chain Communication) - a cross-chain aggregation communication scheme based on zero-knowledge proof. The aggregation solution is applied to cross-chain communication, meeting the scenario requirements of multiple users on multiple side chains communicating with the main chain at the same time.

[0033] (2) The present invention uses zero-knowledge proof to verify the validity of a transaction without revealing any sensitive information, which means that the parties to the transaction can maintain privacy and avoid exposing their account information, transaction amount and other details, while ensuring the authenticity and legality of the transaction.

[0034] (3) The present invention allows efficient and seamless interaction between different blockchains through a unified zero-knowledge proof and aggregation mechanism. This interoperability not only enhances the flexibility of the system, but also provides a basis for integrating more chains and expanding functions in the future, ensuring that the system can adapt to growing needs.

[0035] (4) The present invention reduces the redundancy of on-chain data and the burden of verification and storage by aggregating zero-knowledge proofs. The aggregation process enables multiple proofs to be integrated into a concise proof, reducing the consumption of computing resources and improving the overall efficiency of the system when processing a large number of cross-chain transactions.

[0036] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 This is a blockchain system framework diagram based on cross-chain aggregation transactions in the present invention;

[0038] Figure 2 This is a graph of multi-user aggregated data on the side chain in an embodiment of the present invention;

[0039] Figure 3 It is a graph of multi-side chain data aggregated by a trusted third party in an embodiment of the present invention;

[0040] Figure 4 It is a comparison diagram of the results in the comparative examples of the present invention. DETAILED DESCRIPTION

[0041] The technical solution of the present invention is further described below through the accompanying drawings and embodiments.

[0042] Unless otherwise defined, technical or scientific terms used in the present invention shall have the common meanings understood by one having ordinary skills in the field to which the present invention belongs.

[0043] The words "include" or "comprises" and the like used in the present invention mean that the elements before the word include the elements listed after the word, and do not exclude the possibility of also including other elements. The orientation or position relationship indicated by the terms "inside", "outside", "upper", "lower", etc. is based on the orientation or position relationship shown in the drawings, which is only for the convenience of describing the present invention and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation of the present invention. When the absolute position of the described object changes, the relative position relationship may also change accordingly. In the present invention, unless otherwise clearly specified and limited, the terms "attachment" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral body; it can be directly connected, or indirectly connected through an intermediate medium, and it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0044] Example

[0045] like Figure 1-Figure 3 As shown in Figure 1, a cross-chain aggregation transaction method based on zero-knowledge proof, step S1: the user generates an exchange value V according to the transaction requirements i,j , the exchange value is the specific amount of the transaction or other important transaction information;

[0046] Step S2: The user uses the private key sk and the generated exchange value V i,j Generate commitment C through cryptographic hash function i,j :C i,j ←H(sk,V i,j );

[0047] Step S3: Verify Commitment C i,j The effectiveness of ensuring the commitment value C i,j By the legal exchange value V i,j And private key sk is generated;

[0048] Step S4: The user commits to a value C based on the verification i,j Generate local zero-knowledge proof with private key sk In step S4, a local zero-knowledge proof is generated The formula is as follows:

[0049] pk = GeneratePublicKey(sk);

[0050] α=H(pk,r,C i,j );

[0051] β=r*CurveFunction(sk,Ci,j );

[0052]

[0053] In the formula, sk represents the user's private key, r represents a random number, and C i,j It represents the commitment value generated by the user through the hash function, α and β are the proof elements, pk represents the public key, H represents the hash function, CurveFunction represents the elliptic curve function, and GeneratePublicKey represents the function of generating the private key using the public key.

[0054] Step S5: Verify zero-knowledge proof The correctness of The corresponding commitment value C i,j Consistent with the private key sk;

[0055] Step S6: Zero-knowledge proofs generated by multiple users After being received by the side chain, Aggregated into agreed-upon on-chain zero-knowledge proofs In step S6, the zero-knowledge proof of each sidechain The expression is as follows:

[0056]

[0057] In the formula, is the user's zero-knowledge proof, It is the ultimate on-chain zero-knowledge evidence, and AGP is a function that aggregates user transactions.

[0058] Step S7: After generation, verify the zero-knowledge evidence on the chain Check the completeness, accuracy, timestamp and signature of each piece of evidence;

[0059] Step S8: The trusted third party (TTP) will verify the zero-knowledge proofs on different side chains. Aggregate to form the final cross-chain zero-knowledge evidence Zk p .

[0060] Step S9: The trusted third party TTP aggregates the result Zk p Send to the main chain.

[0061] In step S9, the trusted third party TTP will send the aggregation result Zk p The transmission process is carried out through a secure communication protocol to ensure that the aggregation results are not tampered with or leaked during the transmission process. p After that, verification and status update are performed, which specifically includes the following steps:

[0062] S91: The main chain receives the aggregated zero-knowledge evidence Zk from TTP p After that, authenticity and integrity verification is performed;

[0063] S92: After verification, the main chain aggregates zero-knowledge evidence Zk p Update the global state of the blockchain, including updating the balance, status information or other relevant transaction records of user accounts;

[0064] S93: After completing the status update, the main chain sends the confirmation information of the transaction to the relevant parties, including the users and side chains involved in the transaction. The confirmation information includes the confirmation time, transaction ID and updated status of the transaction.

[0065] In step S92, ensure that all cross-chain transactions are correctly recorded on the main chain.

[0066] Comparative Example

[0067] Compared with direct transactions, this solution reduces the system throughput TPS by a small amount under the premise of multi-user and multi-side chains, but is superior to other main chain aggregation methods. The security and privacy protection of this solution are stronger than direct transactions, such as Figure 4 As shown in the figure, when the number of side chains is 3 to 5 and the number of users on each chain is 10 to 30, the system throughput TPS of this solution is higher than that of other main chain aggregation methods, but slightly lower than direct transactions. In terms of security and communication overhead, the present invention is stronger than direct transactions. Therefore, considering security, privacy protection and throughput TPS, this method is the best solution.

[0068] Therefore, the present invention adopts the above-mentioned cross-chain aggregate transaction method based on zero-knowledge proof, and aggregates multi-user transactions on each side chain into one transaction by considering the cross-chain communication overhead and improving the system TPS problem, and then sends each transaction to a trusted third party located between the multiple side chains and the main chain for further aggregation to form a super-aggregated transaction. This reduces the cross-chain communication and computing overhead and protects user privacy and security.

[0069] Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that they can still modify or replace the technical solution of the present invention with equivalents, and these modifications or equivalent replacements cannot cause the modified technical solution to deviate from the spirit and scope of the technical solution of the present invention.

Claims

1. A cross-chain aggregation transaction method based on zero-knowledge proof, characterized by: The specific steps include: Step S1: The user generates an exchange value V according to transaction requirements i,j , the exchange value is the specific amount of the transaction or other important transaction information; Step S2: The user uses the private key sk and the generated exchange value V i,j Generate commitment C through cryptographic hash function i,j :C i,j ←H(sk,V i,j ); Step S3: Verify Commitment C i,j The effectiveness of ensuring the commitment value C i,j By the legal exchange value V i,j And private key sk is generated; Step S4: The user commits to a value C based on the verification i,j Generate local zero-knowledge proof with private key sk Step S5: Verify zero-knowledge proof The correctness of The corresponding commitment value C i,j Consistent with the private key sk; Step S6: Zero-knowledge proofs generated by multiple users After being received by the side chain, Aggregated into agreed-upon on-chain zero-knowledge proofs Step S7: After generation, verify the zero-knowledge evidence on the chain Check the completeness, accuracy, timestamp and signature of each piece of evidence; Step S8: The trusted third party (TTP) will verify the zero-knowledge proofs on different side chains. Aggregate to form the final cross-chain zero-knowledge evidence Zk p . Step S9: The trusted third party TTP aggregates the result Zk p Send to the main chain.

2. According to a cross-chain aggregation transaction method based on zero-knowledge proof as described in claim 1, it is characterized by: In step S4, a local zero-knowledge proof is generated The formula is as follows: pk = GeneratePublicKey(sk); α=H(pk,r,C i,j ); β=r*CurveFunction(sk,C i,j ); In the formula, sk represents the user's private key, r represents a random number, and C i,j It represents the commitment value generated by the user through the hash function, α and β are the proof elements, pk represents the public key, H represents the hash function, CurveFunction represents the elliptic curve function, and GeneratePublicKey represents the function of generating the private key using the public key.

3. According to a cross-chain aggregation transaction method based on zero-knowledge proof as described in claim 2, it is characterized by: In step S6, the zero-knowledge proof of each sidechain The expression is as follows: In the formula, is the user's zero-knowledge proof, It is the ultimate on-chain zero-knowledge evidence, and AGP is a function that aggregates user transactions.

4. According to a cross-chain aggregation transaction method based on zero-knowledge proof as described in claim 3, it is characterized by: In step S9, the trusted third party TTP will send the aggregation result Zk p The transmission process is carried out through a secure communication protocol to ensure that the aggregation results are not tampered with or leaked during the transmission process. p After that, verification and status update are performed, which specifically includes the following steps: S91: The main chain receives the aggregated zero-knowledge evidence Zk from TTP p After that, authenticity and integrity verification is performed; S92: After verification, the main chain aggregates zero-knowledge evidence Zk p Update the global state of the blockchain, including updating the balance, status information or other relevant transaction records of user accounts; S93: After completing the status update, the main chain sends the confirmation information of the transaction to the relevant parties, including the users and side chains involved in the transaction. The confirmation information includes the confirmation time, transaction ID and updated status of the transaction.

5. According to a cross-chain aggregation transaction method based on zero-knowledge proof as described in claim 4, it is characterized by: In step S92, ensure that all cross-chain transactions are correctly recorded on the main chain.

Images