A cross-chain aggregation transaction method based on zero-knowledge proof

Abstract

The present invention discloses a cross-chain aggregation transaction method based on zero-knowledge proof. In the field of blockchain technology, zero-knowledge proof is used to aggregate user transactions on multiple side chains, and zero-knowledge proof is also added to ensure user privacy. The aggregated transactions are accepted by a trusted third party, which reduces the main chain's transaction processing overhead and also reduces communication overhead. The small amount of data generated by zero-knowledge proof enables verification nodes to quickly verify transactions, reducing transaction latency. The cross-chain aggregation transaction method based on zero-knowledge proof provided by the present invention reduces the redundancy of on-chain data and the burden of verification and storage. The aggregation process enables multiple proofs to be integrated into a concise proof, reducing the consumption of computing resources and improving the overall efficiency of the system when processing a large number of cross-chain transactions.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a cross-chain aggregation transaction method based on zero-knowledge proof Background Art

[0002] With the rapid development of blockchain, Ethereum and Bitcoin are attracting increasing attention. To enhance blockchain operability and scalability, extensive research is underway. Cross-chain communication is one solution to addressing blockchain data silos. It includes mainstream technologies such as notary mechanisms, sidechains, hash locking, and distributed private key control. However, existing blockchain systems suffer from insufficient throughput.

[0003] Cross-chain communication refers to the technologies and methods for exchanging and interacting data between different blockchain networks. In 2013, Tier Nolan first proposed the concept of cross-chain atomic swaps on the Bitcoin forum, describing the use of hash locks and time locks to ensure the security and atomicity of transactions. In 2014, the Blockstream team published a white paper titled "Enabling Blockchain Innovations with Pegged Sidechains," which proposed the concept of sidechains. Zendoo proposed a trust-minimized cross-chain communication protocol that uses zk-SNARKs for verification. In 2024, Hideaki Miyaji et al. proposed a cross-chain communication protocol called CCC. This protocol applies a key-value commitment scheme to cross-chain communication when multiple users in a blockchain perform cross-chain communication, allowing the values ​​of multiple users to be aggregated.

[0004] However, when there are multiple users on a side chain and users on multiple side chains communicate with the main chain at the same time, there is no efficient and secure communication solution. Summary of the Invention

[0005] In order to solve the above problems, the present invention provides a cross-chain aggregation transaction method based on zero-knowledge proof to solve the problems of insufficient throughput and easy leakage of specific transaction information in the blockchain cross-chain system in the existing technology.

[0006] To achieve the above objectives, the present invention provides a cross-chain aggregation transaction method based on zero-knowledge proof, which specifically includes the following steps:

[0007] Step S1: The user generates an exchange value V based on transaction requirements i,j ,Exchange value is the specific amount of the transaction or other important transaction information;

[0008] Step S2: The user uses the private key sk and the generated exchange value V i,j Generate commitment C through cryptographic hash functioni,j :C i,j ←H(sk,V i,j );

[0009] Step S3: Verify Commitment C i,j The effectiveness of the commitment value C i,j By the legal exchange value V i,j And private key sk is generated;

[0010] Step S4: The user commits to a value C based on the verification i,j Generate local zero-knowledge proof with private key sk

[0011]

[0012] Step S5: Verify the zero-knowledge proof The correctness of and the corresponding commitment value C i,j Consistent with the private key sk;

[0013] Step S6: Zero-knowledge proofs generated by multiple users After being received by the side chain, Aggregated into agreed-upon on-chain zero-knowledge evidence

[0014] Step S7: After generation, verify the zero-knowledge evidence on the chain Check the completeness, accuracy, time stamp and signature of each piece of evidence;

[0015] Step S8: The trusted third party (TTP) will verify the zero-knowledge proofs on different side chains. Aggregate to form the final cross-chain zero-knowledge evidence Zk p .

[0016] Step S9: The trusted third party TTP aggregates the result Zk p Send to the main chain.

[0017] Preferably, in step S4, a local zero-knowledge proof is generated The formula is as follows:

[0018] pk = GeneratePublicKey(sk);

[0019] α=H(pk,r,C i,j );

[0020] β=r*CurveFunction(sk,C i,j );

[0021]

[0022] In the formula, sk represents the user's private key, r represents a random number, and C i,j It represents the commitment value generated by the user through the hash function, α and β are the proof elements, pk represents the public key, H represents the hash function, CurveFunction represents the elliptic curve function, and GeneratePublicKey represents the function that uses the public key to generate the private key.

[0023] Preferably, in step S6, the zero-knowledge proof of each side chain The expression is as follows:

[0024]

[0025] Where, is the user's zero-knowledge proof, It is the ultimate on-chain zero-knowledge evidence, and AGP is a function that aggregates user transactions.

[0026] Preferably, in step S9, the trusted third party TTP will send the aggregation result Zk p The transmission process is carried out through a secure communication protocol to ensure that the aggregation results are not tampered with or leaked during the transmission process. The main chain receives Zk p Verification and status update are then performed, which includes the following steps:

[0027] S91: The main chain receives the aggregated zero-knowledge evidence Zk from TTP p After that, authenticity and integrity verification is performed;

[0028] S92: After verification, the main chain will use the aggregated zero-knowledge evidence Zk p Update the global state of the blockchain, including updating user account balances, status information, or other relevant transaction records;

[0029] S93: After completing the status update, the main chain sends the transaction confirmation information to the relevant parties, including the users and side chains involved in the transaction. The confirmation information includes the transaction confirmation time, transaction ID and updated status.

[0030] Preferably, in step S92, ensure that all cross-chain transactions are correctly recorded on the main chain.

[0031] Therefore, the present invention adopts the above-mentioned cross-chain aggregation transaction method based on zero-knowledge proof, which has the following beneficial effects:

[0032] (1) This paper proposes a relatively efficient and secure communication mechanism ZCC (Zero-knowledge Cross-chain Communication) - a cross-chain aggregation communication scheme based on zero-knowledge proof. The aggregation solution is applied to cross-chain communication, meeting the scenario requirements of multiple users on multiple side chains communicating with the main chain at the same time.

[0033] (2) The present invention uses zero-knowledge proof to verify the validity of transactions without leaking any sensitive information, which means that all parties to the transaction can maintain privacy and avoid exposing their account information, transaction amount and other details, while ensuring the authenticity and legality of the transaction.

[0034] (3) This invention allows efficient and seamless interaction between different blockchains through a unified zero-knowledge proof and aggregation mechanism. This interoperability not only enhances the flexibility of the system, but also provides a foundation for integrating more chains and expanding functionality in the future, ensuring that the system can adapt to growing needs.

[0035] (4) The present invention reduces the redundancy of on-chain data and reduces the burden of verification and storage by aggregating zero-knowledge proofs. The aggregation process enables multiple proofs to be integrated into a concise proof, reducing the consumption of computing resources and improving the overall efficiency of the system when processing a large number of cross-chain transactions.

[0036] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 This is a blockchain system framework diagram based on cross-chain aggregation transactions in the present invention;

[0038] Figure 2 This is a graph of multi-user aggregated data on the side chain in an embodiment of the present invention;

[0039] Figure 3 It is a graph of multi-sidechain data aggregated by a trusted third party in an embodiment of the present invention;

[0040] Figure 4 It is a comparison diagram of the results in the comparative examples of the present invention. DETAILED DESCRIPTION

[0041] The technical solution of the present invention is further described below with reference to the accompanying drawings and embodiments.

[0042] Unless otherwise defined, technical or scientific terms used in the present invention shall have the same meaning as commonly understood by one of ordinary skill in the art to which the present invention belongs.

[0043] The words “include” or “comprising” and similar words used in the present invention mean that the elements before the word include the elements listed after the word, and do not exclude the possibility of also including other elements. The orientation or position relationship indicated by the terms “inside”, “outside”, “upper”, “lower”, etc. is based on the orientation or position relationship shown in the accompanying drawings. It is only for the convenience of describing the present invention and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation of the present invention. When the absolute position of the described object changes, the relative position relationship may also change accordingly. In the present invention, unless otherwise clearly stipulated and limited, the terms such as “attachment” should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral whole; it can be directly connected or indirectly connected through an intermediate medium, and it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to the specific circumstances.

[0044] Example

[0045] like Figure 1-Figure 3 As shown, a cross-chain aggregation transaction method based on zero-knowledge proof, step S1: the user generates an exchange value V according to the transaction requirements i,j ,Exchange value is the specific amount of the transaction or other important transaction information;

[0046] Step S2: The user uses the private key sk and the generated exchange value V i,j Generate commitment C through cryptographic hash function i,j :C i,j ←H(sk,V i,j );

[0047] Step S3: Verify Commitment C i,j The effectiveness of the commitment value C i,j By the legal exchange value V i,j And private key sk is generated;

[0048] Step S4: The user commits to a value C based on the verification i,j Generate local zero-knowledge proof with private key sk In step S4, generate a local zero-knowledge proof The formula is as follows:

[0049] pk = GeneratePublicKey(sk);

[0050] α=H(pk,r,C i,j );

[0051] β=r*CurveFunction(sk,Ci,j );

[0052]

[0053] In the formula, sk represents the user's private key, r represents a random number, and C i,j It represents the commitment value generated by the user through the hash function, α and β are the proof elements, pk represents the public key, H represents the hash function, CurveFunction represents the elliptic curve function, and GeneratePublicKey represents the function that uses the public key to generate the private key.

[0054] Step S5: Verify the zero-knowledge proof The correctness of and the corresponding commitment value C i,j Consistent with the private key sk;

[0055] Step S6: Zero-knowledge proofs generated by multiple users After being received by the side chain, Aggregated into agreed-upon on-chain zero-knowledge evidence In step S6, the zero-knowledge proof of each side chain The expression is as follows:

[0056]

[0057] Where, is the user's zero-knowledge proof, It is the ultimate on-chain zero-knowledge evidence, and AGP is a function that aggregates user transactions.

[0058] Step S7: After generation, verify the zero-knowledge evidence on the chain Check the completeness, accuracy, time stamp and signature of each piece of evidence;

[0059] Step S8: The trusted third party (TTP) will verify the zero-knowledge proofs on different side chains. Aggregate to form the final cross-chain zero-knowledge evidence Zk p .

[0060] Step S9: The trusted third party TTP aggregates the result Zk p Send to the main chain.

[0061] In step S9, the trusted third party TTP will send the aggregation result Zk p The transmission process is carried out through a secure communication protocol to ensure that the aggregation results are not tampered with or leaked during the transmission process. The main chain receives Zk p Verification and status update are then performed, which includes the following steps:

[0062] S91: The main chain receives the aggregated zero-knowledge evidence Zk from TTP p After that, authenticity and integrity verification is performed;

[0063] S92: After verification, the main chain will use the aggregated zero-knowledge evidence Zk p Update the global state of the blockchain, including updating user account balances, status information, or other relevant transaction records;

[0064] S93: After completing the status update, the main chain sends the transaction confirmation information to the relevant parties, including the users and side chains involved in the transaction. The confirmation information includes the transaction confirmation time, transaction ID and updated status.

[0065] In step S92, ensure that all cross-chain transactions are correctly recorded on the main chain.

[0066] Comparative Example

[0067] This solution reduces the system throughput TPS by a small amount compared with direct transactions under the premise of multi-user and multi-side chains, but is superior to other main chain aggregation methods. The security and privacy protection of this solution are stronger than direct transactions, such as Figure 4 As shown, when the number of sidechains is 3 to 5 and the number of users on each chain is 10 to 30, the system throughput TPS of this solution is higher than other mainchain aggregation methods, but slightly lower than direct transactions. However, in terms of security and communication overhead, this method is superior to direct transactions. Therefore, considering security, privacy protection, and throughput TPS, this method is the optimal solution.

[0068] Therefore, this invention adopts the aforementioned zero-knowledge proof-based cross-chain aggregate transaction method. By considering cross-chain communication overhead and improving system TPS, it aggregates multiple user transactions on each sidechain into a single transaction. Each transaction is then sent to a trusted third party located between the multiple sidechains and the main chain for further aggregation, forming a super-aggregated transaction. This reduces cross-chain communication and computing overhead and protects user privacy and security.

[0069] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit the same. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that they can still modify or replace the technical solutions of the present invention with equivalents, and these modifications or equivalent replacements cannot cause the modified technical solutions to deviate from the spirit and scope of the technical solutions of the present invention.

Claims

1. A cross-chain aggregation transaction method based on zero-knowledge proof, characterized by: The specific steps include: Step S1: The user generates an exchange value V based on transaction requirements i,j ,Exchange value is the specific amount of the transaction or other important transaction information; Step S2: The user uses the private key sk and the generated exchange value V i,j Generate commitment C through cryptographic hash function i,j :C i,j ←H(sk,V i,j ); Step S3: Verify Commitment C i,j The effectiveness of the commitment value C i,j By the legal exchange value V i,j And private key sk is generated; Step S4: The user commits to a value C based on the verification i,j Generate local zero-knowledge proof with private key sk Step S5: Verify the zero-knowledge proof The correctness of and the corresponding commitment value C i,j Consistent with the private key sk; Step S6: Zero-knowledge proofs generated by multiple users After being received by the side chain, Aggregated into agreed-upon on-chain zero-knowledge evidence Step S7: After generation, verify the zero-knowledge evidence on the chain Check the completeness, accuracy, time stamp and signature of each piece of evidence; Step S8: The trusted third party (TTP) will verify the zero-knowledge proofs on different side chains. Aggregate to form the final cross-chain zero-knowledge evidence Zk p， Step S9: The trusted third party TTP aggregates the result Zk p Send to the main chain.

2. A cross-chain aggregate transaction method based on zero-knowledge proof according to claim 1, characterized in that: In step S4, generate a local zero-knowledge proof The formula is as follows: pk = GeneratePublicKey(sk); α=H(pk,r,C i,j ); β=r*CurveFunction(sk,C i,j ); In the formula, sk represents the user's private key, r represents a random number, and C i,j It represents the commitment value generated by the user through the hash function, α and β are the proof elements, pk represents the public key, H represents the hash function, CurveFunction represents the elliptic curve function, and GeneratePublicKey represents the function that uses the public key to generate the private key.

3. A cross-chain aggregate transaction method based on zero-knowledge proof according to claim 2, characterized in that: In step S6, the zero-knowledge proof of each side chain The expression is as follows: Where, is the user's zero-knowledge proof, It is the ultimate on-chain zero-knowledge evidence, and AGP is a function that aggregates user transactions.

4. A cross-chain aggregate transaction method based on zero-knowledge proof according to claim 3, characterized in that: In step S9, the trusted third party TTP will send the aggregation result Zk p The transmission process is carried out through a secure communication protocol to ensure that the aggregation results are not tampered with or leaked during the transmission process. The main chain receives Zk p Verification and status update are then performed, which includes the following steps: S91: The main chain receives the aggregated zero-knowledge evidence Zk from TTP p After that, authenticity and integrity verification is performed; S92: After verification, the main chain will use the aggregated zero-knowledge evidence Zk p Update the global state of the blockchain, including updating user account balances, status information, or other relevant transaction records; S93: After completing the status update, the main chain sends the transaction confirmation information to the relevant parties, including the users and side chains involved in the transaction. The confirmation information includes the transaction confirmation time, transaction ID and updated status.

5. A cross-chain aggregate transaction method based on zero-knowledge proof according to claim 4, characterized in that: In step S92, ensure that all cross-chain transactions are correctly recorded on the main chain.

Images