Block chain business risk assessment method, device and system and computer equipment

Abstract

The invention relates to a block chain business risk assessment method, system and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a signature request for a block chain service, and extracting service information carried in the signature request; based on the service information, performing simulation execution of the block chain service, and determining on-chain asset simulation data after simulation execution of the block chain service; according to the on-chain asset simulation data and on-chain asset original data before simulation execution of the block chain service, determining on-chain asset simulation change data of the block chain service; performing matching analysis on the on-chain asset expected change data and the on-chain asset simulation change data of the block chain service, and determining the matching degree of the on-chain asset expected change data and the on-chain asset simulation change data; and based on the matching degree, determining a risk assessment result of the block chain service. By adopting the method, the security of the block chain business processing process can be improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a blockchain business risk assessment method, apparatus, system, computer equipment, computer-readable storage medium, and computer program product. Background Art

[0002] Blockchain is a decentralized multi-node network that has been widely used in scenarios such as information sharing, data storage, and multi-party collaboration. In the application of blockchain, digital signatures are mainly used to implement permission control. Specifically, the requester can initiate a signature request for blockchain business to the signer. Only when the signer signs the blockchain business will the subsequent processing flow be triggered.

[0003] However, the current blockchain business content is mixed, and there are some malicious businesses such as phishing and fraud. In traditional technology, the signer decides whether to sign the blockchain business based on the knowledge he has. Due to the limitations of the signer's own knowledge, the risk assessment of the blockchain business is often not accurate enough. Therefore, traditional technology has the disadvantage of poor security. Summary of the invention

[0004] Based on this, it is necessary to provide a blockchain business risk assessment method, device, system, computer equipment, computer-readable storage medium and computer program product that can improve security in response to the above-mentioned technical problems.

[0005] In a first aspect, the present application provides a blockchain business risk assessment method. The method comprises:

[0006] Obtain a signature request for a blockchain service and extract the service information carried in the signature request;

[0007] Based on the business information, simulate and execute the blockchain business, and determine the on-chain asset simulation data after the blockchain business is simulated and executed;

[0008] Determine the on-chain asset simulation change data of the blockchain service according to the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the blockchain service;

[0009] Matching and analyzing the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets to determine the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets;

[0010] Based on the matching degree, a risk assessment result of the blockchain business is determined.

[0011] In a second aspect, the present application provides a blockchain business risk assessment system. The system includes a requesting party, a risk assessing party, and a signing party;

[0012] The requesting party initiates a signature request for the blockchain service;

[0013] The risk assessment party obtains a signature request for a blockchain business and extracts the business information carried in the signature request; based on the business information, simulates and executes the blockchain business to determine the on-chain asset simulation data after the blockchain business is simulated and executed; determines the on-chain asset simulation change data of the blockchain business based on the on-chain asset simulation data and the on-chain asset original data before the simulated execution of the blockchain business; matches and analyzes the on-chain asset expected change data of the blockchain business with the on-chain asset simulation change data to determine the matching degree between the on-chain asset expected change data and the on-chain asset simulation change data; and determines the risk assessment result of the blockchain business based on the matching degree;

[0014] The signer obtains the risk assessment result and signs the blockchain business if the risk assessment result meets the low risk condition.

[0015] In a third aspect, the present application provides a blockchain business risk assessment device. The device comprises:

[0016] A business information extraction module, used to obtain a signature request for a blockchain business and extract the business information carried in the signature request;

[0017] A simulation execution module, used to simulate the execution of the blockchain business based on the business information, and determine the on-chain asset simulation data after the blockchain business is simulated and executed;

[0018] A simulation change data determination module, used to determine the on-chain asset simulation change data of the blockchain service according to the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the blockchain service;

[0019] A data analysis module, used to match and analyze the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets, and determine the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets;

[0020] A risk assessment result determination module is used to determine the risk assessment result of the blockchain business based on the matching degree.

[0021] In a fourth aspect, the present application provides a computer device. The computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program:

[0022] Obtain a signature request for a blockchain service and extract the service information carried in the signature request;

[0023] Based on the business information, simulate and execute the blockchain business, and determine the on-chain asset simulation data after the blockchain business is simulated and executed;

[0024] Determine the on-chain asset simulation change data of the blockchain service according to the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the blockchain service;

[0025] Matching and analyzing the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets to determine the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets;

[0026] Based on the matching degree, a risk assessment result of the blockchain business is determined.

[0027] In a fifth aspect, the present application provides a computer-readable storage medium. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0028] Obtain a signature request for a blockchain service and extract the service information carried in the signature request;

[0029] Based on the business information, simulate and execute the blockchain business, and determine the on-chain asset simulation data after the blockchain business is simulated and executed;

[0030] Determine the on-chain asset simulation change data of the blockchain service according to the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the blockchain service;

[0031] Matching and analyzing the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets to determine the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets;

[0032] Based on the matching degree, a risk assessment result of the blockchain business is determined.

[0033] In a sixth aspect, the present application provides a computer program product. The computer program product includes a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0034] Obtain a signature request for a blockchain service and extract the service information carried in the signature request;

[0035] Based on the business information, simulate and execute the blockchain business, and determine the on-chain asset simulation data after the blockchain business is simulated and executed;

[0036] Determine the on-chain asset simulation change data of the blockchain service according to the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the blockchain service;

[0037] Matching and analyzing the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets to determine the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets;

[0038] Based on the matching degree, a risk assessment result of the blockchain business is determined.

[0039] The above-mentioned blockchain business risk assessment method, device, system, computer equipment, computer-readable storage medium and computer program product, based on the signature request for the blockchain business, conducts risk assessment on the blockchain business, which is equivalent to conducting risk assessment before the signatory signs, so that the signatory can decide whether to sign according to the risk assessment result, and can filter out high-risk businesses before signing to avoid losses. In addition, based on the business information extracted from the signature request, the blockchain business is simulated and executed, and the risk assessment result of the blockchain business is determined according to the expected change data of the on-chain assets of the blockchain business and the matching degree between the simulated change data of the chain assets caused by the simulated execution, which can conduct risk assessment on the blockchain business from the level of the execution result, which is conducive to improving the accuracy of the risk assessment result. Therefore, the above-mentioned method can accurately conduct risk assessment on the blockchain business before the signatory signs, which is conducive to improving the security of the blockchain business processing process. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 An application environment diagram of a blockchain business risk assessment method in an embodiment;

[0041] Figure 2 A flowchart of a blockchain business risk assessment method in one embodiment;

[0042] Figure 3 A schematic diagram of specific contents of a signature request in an embodiment;

[0043] Figure 4 A schematic diagram of specific contents of a signature request in another embodiment;

[0044] Figure 5A schematic diagram of a display page for a signature request in one embodiment;

[0045] Figure 6 A schematic diagram of a display page for a signature request in another embodiment;

[0046] Figure 7 A schematic diagram of a page showing matching results of a requesting party address in one embodiment;

[0047] Figure 8 A schematic diagram of a display page for recipient risk information in one embodiment;

[0048] Fig. 9 A flowchart of a blockchain business risk assessment method in another embodiment;

[0049] Fig.10 A schematic diagram of a connection display page of a blockchain resource client in one embodiment;

[0050] Fig.11 A schematic diagram of a blockchain business risk assessment process in one embodiment;

[0051] Fig.12 A schematic diagram of the interaction process of a blockchain business risk assessment method in one embodiment;

[0052] Fig.13 A schematic diagram of the composition of a blockchain system in one embodiment;

[0053] Fig.14 It is a structural block diagram of a blockchain business risk assessment device in one embodiment;

[0054] Fig.15 is an internal structure diagram of a computer device in one embodiment;

[0055] Fig.16 FIG. 4 is a diagram showing the internal structure of a computer device in another embodiment. DETAILED DESCRIPTION

[0056] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0057] Before going into detail, some terms involved in this application are explained first.

[0058] Blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of the information (anti-counterfeiting) and generate the next block.

[0059] The blockchain system involved in the embodiment of the present invention can be a distributed system formed by connecting a client and multiple nodes (any form of computing devices in the access network, such as servers and user terminals) through network communication. Each node in the blockchain system can have application functions. The application is deployed in the blockchain to implement specific services according to actual business needs, record data related to the implementation of functions to form record data, carry a digital signature in the record data to indicate the source of the task data, and send the record data to other nodes in the blockchain system for other nodes to add the record data to the temporary block when the source and integrity of the record data are successfully verified.

[0060] The blockchain system also supports decentralized applications (DAPP). Decentralized applications consist of a front-end interface and smart contracts. The front-end interface can be, for example, an application (APP) interface, a mini-program interface, or a web page. In practice, users usually do not interact directly with the blockchain, but can apply for blockchain signature transactions through operations on the front-end interface, and forward and call smart contract chain data in the background.

[0061] Furthermore, each node of the blockchain has a corresponding node identifier, which can be the blockchain address corresponding to the node. Blockchain addresses include user addresses and contract addresses. The difference between the two is that user addresses have private keys, and users can manage on-chain assets through private keys; contract addresses do not have private keys, but are generated based on transactions submitted by the deployer. They have contract codes, and can manage on-chain assets under the contract address through contract code execution.

[0062] The blockchain business risk assessment method provided in this application can be applied to Figure 1In the application environment shown. The application environment includes a requester 101, a risk assessor 102 and a signer 103, which can communicate over the network and realize consensus, data recording and chain functions in blockchain technology based on smart contracts. Among them, the risk assessor 102, in the process of implementing the blockchain business risk assessment method: obtains the signature request initiated by the requester 101 for the blockchain business, extracts the business information carried in the signature request; based on the business information, simulates the execution of the blockchain business, and determines the on-chain asset simulation data after the blockchain business is simulated and executed; according to the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the blockchain business, determines the on-chain asset simulation change data of the blockchain business; matches and analyzes the on-chain asset expected change data of the blockchain business with the on-chain asset simulation change data, and determines the matching degree between the on-chain asset expected change data and the on-chain asset simulation change data; based on the matching degree, determines the risk assessment result of the blockchain business. The signer 103 can obtain the risk assessment result and decide whether to sign the blockchain business according to the risk assessment result. For example, the signatory 103 can sign the blockchain business if the risk assessment result meets the low risk condition. It can be understood that if the signatory 103 signs the blockchain business, the blockchain business can proceed with the subsequent on-chain processing flow; if the signatory 103 refuses to sign the blockchain business, the blockchain business cannot proceed with the subsequent on-chain processing flow.

[0063] Furthermore, the requesting party 101, the risk assessing party 102 and the signing party 103 can all be implemented through a terminal or a server. The terminal includes but is not limited to a mobile phone, a computer, an intelligent voice interaction device, an intelligent home appliance, a vehicle terminal, an aircraft, etc., and the server can be implemented as an independent server or a server cluster composed of multiple servers. The embodiments of the present invention can be applied to various scenarios, including but not limited to cloud technology, artificial intelligence, smart transportation, assisted driving, etc.

[0064] In one embodiment, Figure 2 As shown, a blockchain business risk assessment method is provided. This embodiment applies this method to Figure 1 Taking the risk assessment method 102 in the example as an example, the method includes the following steps:

[0065] Step S202: Obtain a signature request for the blockchain business and extract the business information carried in the signature request.

[0066] Among them, blockchain business refers to the business implemented based on the blockchain system. The specific categories of the blockchain business are not unique. From the perspective of the types of business implemented, blockchain business can include identity authentication business, virtual resource transfer business, data traceability business, etc. Identity authentication business can be, for example, authentication of the identity of the signatory, or authentication of the identity of a third party after obtaining the authorization of the signatory. It can be understood that in the scenario of identity authentication of a third party, the signatory can be a party with identity management authority. Virtual resource transfer business is a blockchain business that can realize the transfer of virtual resources from one blockchain account to another blockchain account. The virtual resource can be, for example, a data resource stored in the blockchain, or a virtual resource such as game props and player skins developed in a game scenario, or a digital collection, etc. Data traceability is a description of the original data before the target data is derived, and the evolution process of the original data. It is understandable that in the process of data tracing business processing, it is usually necessary to query multiple databases, and these databases may include semi-open databases that need to be authorized to query. In this scenario, the signatory of the blockchain business is the manager of the semi-open database. Only after obtaining the signature authorization of the signatory can the subsequent data tracing processing be performed by querying the semi-open database. Furthermore, from the perspective of whether it is necessary to call smart contracts, blockchain business can include businesses that need to call smart contracts to be implemented, and can also include businesses that can be implemented without calling smart contracts. For example, the identity authentication business for the signatory can be implemented without calling smart contracts, and the virtual resource transfer business usually requires the call of smart contracts to be implemented.

[0067] A signature request refers to a request initiated by a requester that expects to obtain a signature from a signatory for a blockchain service. The signature request may carry information about the requester and business information about the blockchain service. The requester information refers to information that can uniquely characterize the requester, such as the blockchain address or identity of the requester. The identity may be, for example, a decentralized identity (DID). The business information of the blockchain service refers to information that can be used to characterize the blockchain service, and the business information may include, for example, business description information, contract information of the smart contract to be called, and the like. Taking the virtual resource transfer service as an example, the business description information may include, for example, resource information of the virtual resources to be transferred, resource recipient information, and the like. The contract information may be information that can uniquely characterize a smart contract, such as a contract number or a contract address.

[0068] Specifically, the risk assessor obtains a signature request for a blockchain business and extracts the business information of the blockchain business from the signature request. Furthermore, the specific way in which the risk assessor obtains the signature request may be active or passive, which is not limited here. The specific way in which the risk assessor extracts business information from the signature request is not unique. For example, the risk assessor may extract business information from the signature request based on the location of the business information in the signature request; or may extract business information from the signature request based on the identification field of the business information. For example, Figure 3 and Figure 4 As shown, the business information refers to the information after the field "params" and between "[" and "]".

[0069] Step S204: Based on the business information, simulate the execution of the blockchain business and determine the on-chain asset simulation data after the blockchain business is simulated and executed.

[0070] Among them, on-chain assets refer to digital assets circulated on the blockchain. The on-chain assets may include native virtual assets generated by packaging blocks through on-chain processing nodes, and on-chain data published through smart contracts. The on-chain data may include, for example, game props, digital goods, commodity coupons, etc. On-chain asset simulation data refers to on-chain asset data after the simulated execution of blockchain business. The on-chain asset simulation data may include the account asset simulation data of each blockchain account on the blockchain after the simulated execution of blockchain business. The asset data may include resource types and the resource amounts of each type of resource. In other words, the same blockchain account may include multiple types of virtual resources.

[0071] Specifically, the risk assessment party has the business simulation execution function, and can simulate the execution of the blockchain business corresponding to the business content represented by the business information, and determine the on-chain asset simulation data after the blockchain business is simulated and executed. Furthermore, the risk assessment party can execute the blockchain business in a simulated environment, and use the state data after execution as the on-chain asset simulation data; the risk assessment party can also execute the blockchain business in a real environment, and use the state data after execution as the on-chain asset simulation data, but do not perform consensus accounting on the state data, so that the simulated execution does not affect the actual asset data of the blockchain system. Taking the business information including the contract information of the smart contract to be called as an example, the risk assessment party can simulate the call of the smart contract based on the contract information, so that the blockchain business is simulated and executed, and determine the on-chain asset simulation data after the simulated execution.

[0072] It can be understood that in actual applications, the execution of a certain blockchain business will only cause changes in the account assets of the blockchain account associated with the blockchain business. Based on this, when the business information includes the account information of the blockchain account associated with the blockchain business, the risk assessment party only pays attention to the account asset simulation data of each blockchain account associated with the blockchain business after simulating the execution of the blockchain business, and determines the account asset simulation data of each account as the on-chain asset simulation data after the blockchain business is simulated and executed.

[0073] Step S206, determining the on-chain asset simulation change data of the blockchain business based on the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the blockchain business.

[0074] The original data of on-chain assets refers to the on-chain asset data before the simulated execution of the blockchain business. Specifically, the risk assessment party can compare and analyze the simulated data of on-chain assets and the original data of on-chain assets before the simulated execution of the blockchain business to determine the simulated change data of the on-chain assets of the blockchain business.

[0075] Take the case where the on-chain asset simulation data includes the account asset simulation data of multiple blockchain accounts, and each account asset simulation data includes multiple resource types. The risk assessment party can obtain the original account asset data of each blockchain account, and for each blockchain account, perform data comparison according to the resource type to determine the account asset simulation change data of the blockchain account, and then obtain the on-chain asset simulation change data including the account asset simulation change data of each blockchain account. Exemplarily, if the account asset original data of blockchain account A includes virtual resources A1 of amount a1 and virtual resources A2 of amount a2, and the account asset simulation data of blockchain account A includes virtual resources A1 of amount a3 and virtual resources A2 of amount a4, then the account asset simulation change data of blockchain account A includes: the change amount of virtual resource A1 is "a3-a1", and the change amount of virtual resource A2 is "a4-a2".

[0076] The risk assessor may also compare data for each resource type after obtaining the original account asset data of each blockchain account, determine the simulated change data of the virtual resource of that type, and then obtain the on-chain asset simulated change data including the simulated change data of each resource type. For example, if the original account asset data of blockchain account A includes virtual resource A1 of amount a1, the simulated account asset data of blockchain account A includes virtual resource A1 of amount a3, the original account asset data of blockchain account B includes virtual resource A1 of amount b1, the simulated account asset data of blockchain account B includes virtual resource A1 of amount b3, and a1-a3=b3-b1=△A1, then the simulated change data of virtual resource A1 is: virtual resource A1 of amount △A1 is transferred from blockchain account A to blockchain account B.

[0077] It should be noted that not all blockchain services will cause changes in on-chain assets after being simulated. For example, the identity authentication service for the signer is to authenticate the signature provided by the signer in response to the signature request to determine the identity of the signer. The entire service processing process will not cause changes in on-chain assets. In other words, the original data of the on-chain assets and the simulated data of the on-chain assets may be the same. In this case, the simulated change data of the on-chain assets of the blockchain service can be zero, indicating that the simulated execution of the blockchain service will not cause changes in the on-chain assets.

[0078] Step S208, matching and analyzing the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets, and determining the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets.

[0079] The expected change data of on-chain assets can be determined based on the business information of the blockchain business. For example, based on the transfer resource information in the business information of the virtual asset transfer business, the expected change data of on-chain assets of the virtual asset transfer business can be determined; for another example, if the blockchain business can be determined as an identity authentication business for the signatory based on the business information, it can be determined that the blockchain business is not expected to cause changes in on-chain assets, that is, the expected change data of on-chain assets is zero.

[0080] Specifically, the risk assessment party may match and analyze the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets to determine the degree of match between the expected change data of the on-chain assets and the simulated change data of the on-chain assets.

[0081] There is no unique way to conduct matching analysis. In the case where the on-chain asset simulation change data includes the simulated change data of multiple types of virtual resources, the risk assessment party can perform matching analysis on the expected change data and simulated change data of each type of virtual resource, determine the matching degree of resource changes corresponding to each type of virtual resource, and then perform statistical calculations on the matching degrees of each resource change to determine the matching degree between the expected change data of the on-chain asset and the simulated change data of the on-chain asset. In the case where the on-chain asset simulation change data includes the simulated change data of multiple blockchain accounts, the risk assessment party can also perform matching analysis on the expected change data and simulated change data of each blockchain account, determine the matching degree of resource changes corresponding to each blockchain account, and then perform statistical calculations on the matching degrees of each resource change to determine the matching degree between the expected change data of the on-chain asset and the simulated change data of the on-chain asset.

[0082] Among them, the resource change matching degree can be represented by a ratio or a difference, and the specific algorithm of statistical calculation may include addition, multiplication, etc. In a specific embodiment, the difference between the expected change value and the simulated change value of the virtual resource A1 in the blockchain account A can be determined as the resource change matching degree of the virtual resource A1 under the blockchain account A, and the average value of the resource change matching degree of each virtual resource under the blockchain account A can be determined as the resource change matching degree of the blockchain account A. In a specific embodiment, the ratio of the expected change value and the simulated change value of the virtual resource A1 in the blockchain account A can be determined as the resource change matching degree of the virtual resource A1 under the blockchain account A, and the minimum value of the resource change matching degree of each virtual resource under the blockchain account A can be determined as the resource change matching degree of the blockchain account A.

[0083] Step S210: Determine the risk assessment result of the blockchain business based on the matching degree.

[0084] Among them, the risk assessment result may include risk level, risk score, etc., and may also include a specific risk description. Specifically, the risk assessor may establish a corresponding relationship between the matching degree and the risk assessment result, and determine the risk assessment result of the blockchain business from the corresponding relationship based on the matching degree. Exemplarily, when the expected change data of the on-chain assets and the simulated change data of the on-chain assets meet the matching conditions, the risk assessor may obtain a risk assessment result of low risk for the blockchain business; when the expected change data of the on-chain assets and the simulated change data of the on-chain assets are inconsistent, the risk assessor may obtain a risk assessment result of risk for the blockchain business. Further, the risk assessor may also obtain a risk assessment result of low risk for the blockchain business when the matching degree meets the matching conditions, and obtain a risk assessment result of high risk for the blockchain business when the matching degree does not meet the matching conditions. The matching degree meeting the matching conditions may mean that the matching degree is greater than the matching degree threshold, or may mean that the matching degree is greater than or equal to the matching degree threshold.

[0085] In some embodiments, the risk assessor may also conduct risk assessment on the blockchain business to be signed from other dimensions, such as checking the abnormal content of the business information, conducting risk assessment on the requester who initiates the signature request, conducting risk verification on the address contained in the business information, and so on.

[0086] Taking abnormal content inspection as an example, the risk assessor can determine whether the business information contains abnormal content based on the field composition of the business information and the semantics represented by the business information. Among them, abnormal content can refer to the content in the business information that contains grammatical errors or lexical errors, or it can refer to the content in the business information that matches the abnormal information sample. The abnormal information sample can be a predetermined information sample with abnormalities. Specifically, the risk assessor can determine an abnormal information library containing multiple abnormal information samples, and search for a target information sample that matches the current business information in the abnormal information library. The business information matches the target information sample, which can mean that the similarity between the two is greater than the similarity threshold, or the similarity is greater than or equal to the similarity threshold.

[0087] Furthermore, in the case where there is abnormal content in the business information, the number of characters contained in the abnormal content can be further determined, and the abnormal content inspection result can be determined based on the number of characters. It can be understood that in the case where there is no abnormal content, there is no risk in the blockchain business in the dimension of business information; in the case where there is abnormal content in the business information, the more characters contained in the abnormal content, the higher the risk of the blockchain business in the dimension of business information. For example, Figure 3As shown in FIG. 1 , it is a signature request for identity authentication service. The service information 301 carried in the signature request is a hexadecimal parameter, which can be converted into ordinary text and then checked for abnormal content to obtain the corresponding abnormal content check result. Figure 4 As shown, it is a signature request for the virtual resource transfer service, which carries the resource transferor information (from), resource transferee information (to), transfer resource information (value), etc. These service information 401 are all hexadecimal parameters, which can be converted into ordinary text and then checked for abnormal content to obtain the corresponding abnormal content check results.

[0088] Furthermore, the addresses included in the business information may include the smart contract and contract address required to implement the blockchain business, the address of the resource receiver, etc. For the contract address, if the corresponding smart contract is determined to be a newly deployed contract based on the contract address, or if it is determined that the contract address has not participated in the blockchain business in the past, the risk assessment party can view the contract code of the smart contract through the interface, analyze the code, determine whether the smart contract contains malicious code, and obtain the corresponding address check result.

[0089] In practical applications, 100 points can be used to indicate that there is no risk in blockchain business. Risk assessment can be performed on blockchain business to be signed from various dimensions. For each dimension, if there is a risk, 10 points will be deducted to obtain the final risk assessment result. In addition, the risk assessment party can also output the risk assessment result to the signatory party so that the signatory party can determine whether to sign based on the risk assessment result.

[0090] The above-mentioned blockchain business risk assessment method performs risk assessment on blockchain business based on the signature request for blockchain business, which is equivalent to performing risk assessment before the signatory signs, so that the signatory can decide whether to sign according to the risk assessment result, and can filter out high-risk business before signing to avoid losses. In addition, based on the business information extracted from the signature request, the blockchain business is simulated and executed, and the risk assessment result of the blockchain business is determined according to the expected change data of the on-chain assets of the blockchain business and the matching degree between the simulated change data of the chain assets caused by the simulated execution, which can perform risk assessment on the blockchain business from the level of the execution result, which is conducive to improving the accuracy of the risk assessment result. Therefore, the above-mentioned method can accurately assess the risk of the blockchain business before the signatory signs, which is conducive to improving the security of the blockchain business processing process.

[0091] In one embodiment, the blockchain service includes a virtual resource transfer service; the service information includes resource transferor information, resource receiver information, and transfer resource information. In the case of this embodiment, step S204 includes: determining the resource transferor represented by the resource transferor information and the resource receiver represented by the resource receiver information; simulating and executing the virtual resource transfer service based on the transfer resource information, simulating the transfer of the virtual resource to be transferred from the resource transferor to the resource receiver.

[0092] Among them, the resource transferor information refers to information that can uniquely characterize the resource transferor, such as the blockchain address or identity of the resource transferor; the resource receiver information refers to information that can uniquely characterize the resource receiver, such as the blockchain address or identity of the resource receiver. The identity identifier can be, for example, a decentralized identity identifier. It should be noted that in actual applications, the signatory may be the resource transferor, or may not be the resource transferor, but a third party with management authority over the transferor account of the resource transferor. Furthermore, the transfer resource information refers to information related to the resources to be transferred corresponding to the virtual resource transfer service. The transfer resource information may include, for example, the resource type and resource amount of the resources to be transferred, and may also include the contract address of the smart contract required to transfer the resources.

[0093] Specifically, the risk assessor may determine the resource transferor represented by the resource transferor information and the resource receiver represented by the resource receiver information, and then simulate the execution of the virtual resource transfer service based on the transferred resource information to transfer the virtual resources to be transferred from the resource transferor to the resource receiver.

[0094] In this embodiment, for the virtual resource transfer business, the resource transferor and the resource recipient are first determined, and then the virtual resource transfer business is simulated and executed based on the transferred resource information. This can ensure that the simulated change data of the on-chain assets determined by the simulated execution is consistent with the actual execution situation, which is conducive to improving the accuracy of the risk assessment results.

[0095] In a specific embodiment, the transfer resource information includes the contract address of the smart contract to be called for the transfer resource. In the case of this embodiment, the virtual resource transfer service is simulated based on the transfer resource information to simulate the transfer of the virtual resource to be transferred from the resource transferor to the resource receiver, including: simulating the call of the smart contract based on the contract address of the smart contract to realize the simulated execution of the virtual resource transfer service.

[0096] In a specific embodiment, the transfer resource information includes resource type and resource amount. In the case of this embodiment, the virtual resource transfer service is simulated based on the transfer resource information to simulate the transfer of the virtual resources to be transferred from the resource transferor to the resource receiver, including: determining the virtual resources to be transferred that match the resource type and resource amount from the available virtual resources of the resource transferor; and simulating the transfer of the virtual resources to be transferred from the resource transferor to the resource receiver.

[0097] The available virtual resources of the resource transferor refer to the virtual resources stored in the blockchain account of the resource transferor and not frozen. In actual applications, the same resource transferor can be associated with multiple virtual resource transfer services. The risk assessment party can freeze the virtual resources that the virtual resource transfer service expects to transfer from the virtual transferor for each virtual resource transfer service to ensure that the service can be executed smoothly after being signed and authorized.

[0098] Specifically, the blockchain account of the resource transferor may include multiple types of virtual resources. Based on this, the risk assessment party can determine the virtual resources to be transferred that match the resource type and resource amount from the available virtual resources of the resource transferor, and then simulate the transfer of the virtual resources to be transferred from the resource transferor to the resource recipient. It can be understood that if the available virtual resources of the resource transferor do not include the virtual resources to be transferred that match the resource type and resource amount, the business process will be terminated and the risk information of insufficient available resources will be fed back to the requester.

[0099] In this embodiment, virtual resources to be transferred that match the resource type and resource amount are determined from the available virtual resources of the resource transferor and transferred to the resource recipient. This can identify the risk of blockchain business being unable to be executed due to insufficient available virtual resources, which is conducive to improving the accuracy of risk assessment results.

[0100] In one embodiment, the on-chain asset simulation data includes account asset simulation data of an account associated with a blockchain business. In this embodiment, step S206 includes: obtaining the original on-chain asset data before simulating the execution of the blockchain business; comparing and analyzing the account asset simulation data with the original account asset data to determine the account asset simulation change data of the account associated with the blockchain business; and determining the on-chain asset simulation change data of the blockchain business based on the account asset simulation change data.

[0101] Among them, the original data of assets on the chain includes the original data of account assets of the blockchain business-related accounts, and the simulated change data of account assets includes the change data of account assets of the blockchain business-related accounts. The blockchain business-related accounts may include the respective blockchain accounts of the initiator of the identity authentication request, the signatory, and the party whose identity is to be authenticated. The signatory may be the party whose identity is to be authenticated. The virtual resource transfer business-related accounts may include the respective blockchain accounts of the resource transferor, the resource recipient, and the signatory. The signatory may be the resource transferor.

[0102] Specifically, the risk assessor can obtain the original account asset data of the account associated with the blockchain business before simulating the execution of the blockchain business. Then, for each blockchain account, the simulated account asset data of the blockchain account is compared and analyzed with the original account asset data of the blockchain account to determine the simulated change data of the account assets of the blockchain account. Finally, the risk assessor determines the simulated change data of the on-chain assets of the blockchain business based on the simulated change data of the account assets.

[0103] Furthermore, there is no unique way to determine the simulated change data of on-chain assets of blockchain business.

[0104] In a specific embodiment, the blockchain business associated account includes multiple recipient accounts of resource recipients; the on-chain asset simulation data includes the account asset simulation data of each recipient account; and the on-chain asset original data includes the account asset original data of each recipient account. In the case of this embodiment, the risk assessment party can compare and analyze the account asset simulation data of each recipient account with the account asset original data of the recipient account, determine the account asset simulation change data of the recipient account, and determine the account asset simulation change data of each recipient account as the on-chain asset simulation change data of the blockchain business.

[0105] It can be understood that the sum of the simulated change data of the account assets of each recipient account corresponds to the simulated change data of the account assets of the transferor account. For example, the resource transferor A transfers d1 amount of virtual resources E to the resource receiver B, and transfers d2 amount of virtual resources E to the resource receiver C. In this embodiment, the simulated change data of each account asset is determined as the simulated change data of the on-chain assets of the blockchain business, which is equivalent to being able to mark the simulated change data of the virtual assets of each blockchain account in detail, which can facilitate the signatory to obtain more risk information, which is conducive to further improving security.

[0106] In a specific embodiment, the risk assessor may also perform statistical analysis on the simulated asset change data of each account to determine the simulated asset change data of the blockchain business. Exemplarily, the risk assessor may determine the total number of changes of the same type of assets as the simulated asset change data on the chain. For example, the resource transferor A transfers a total of D amount of virtual assets E to the resource receivers B and C.

[0107] In the above embodiment, determining the simulated change data of the on-chain assets for the blockchain business-related accounts can ensure the accuracy of the determined simulated change data, which is conducive to improving the accuracy of the risk assessment results determined based on the simulated change data.

[0108] In one embodiment, the account asset simulation data is compared and analyzed with the account asset original data to determine the account asset simulation change data of the blockchain business-related account, including: comparing and analyzing the account asset simulation data with the account asset original data to determine the resource type and resource change amount that have changed in the blockchain business-related account; based on the resource type and resource change amount, determining the account asset simulation change data of the blockchain business-related account.

[0109] As mentioned above, a blockchain account may contain multiple types of virtual resources. Based on this, after obtaining the account asset simulation data and the account asset original data of the blockchain business-related account, the risk assessment party may compare and analyze the account asset simulation data with the account asset original data based on the resource types of the virtual resources contained in the account asset simulation data and the account asset original data, and the resource amounts of each type of virtual resources, to determine the resource types and resource change amounts that have changed in the blockchain business-related account, and then determine the account asset simulation change data of the blockchain business-related account based on the resource types and resource change amounts. In a specific embodiment, the account asset simulation change data includes the resource change amounts of each type of virtual resource.

[0110] In this embodiment, the account asset simulation change data of the blockchain business-related account is determined according to the resource type and the resource change amount, which can ensure the accuracy of the determined account asset simulation change data, and is conducive to improving the accuracy of the risk assessment results determined based on the account asset simulation change data.

[0111] In one embodiment, the blockchain business risk assessment method also includes: performing semantic analysis on business information to determine the business type of the blockchain business; determining the expected change type of on-chain assets that matches the business type; and when the expected change in on-chain assets is a change in on-chain assets, determining the expected change data of on-chain assets for the blockchain business.

[0112] Among them, the expected change types of on-chain assets include changes in on-chain assets and no changes in on-chain assets. Specifically, the risk assessor can perform semantic analysis on the business information to determine the business type of the blockchain business. The business type may include, for example, identity authentication business and virtual resource transfer business. Then, the risk assessor determines the expected change type of on-chain assets that matches the business type. For example, the identity authentication business will not cause changes in on-chain assets, and the virtual resource transfer business will cause changes in on-chain assets. Next, the risk assessor determines the expected change data of on-chain assets of the blockchain business when the expected change situation of on-chain assets is that on-chain assets change; when the expected change situation of on-chain assets is that on-chain assets do not change, the expected change data of on-chain assets is determined as set data, such as zero.

[0113] In this embodiment, when the expected change situation of the on-chain assets is that the on-chain assets have changed, determining the expected change data of the on-chain assets of the blockchain business can simplify the processing process when the expected change situation of the on-chain assets is that the on-chain assets do not change, which is conducive to improving efficiency.

[0114] In one embodiment, the blockchain service includes a virtual resource transfer service; the expected change data of the assets on the chain include the expected change data of the original resources and the resources consumed on the chain; the simulated change data of the assets on the chain include the simulated change data of the original resources and the resources consumed on the chain. In the case of this embodiment, step S208 includes: matching and analyzing the expected change data of the original resources and the simulated change data to determine the first change matching degree of the original resources; matching and analyzing the expected change data of the resources consumed on the chain and the simulated change data to determine the second change matching degree of the resources consumed on the chain; statistically analyzing the first change matching degree and the second change matching degree to determine the matching degree of the expected change data of the assets on the chain and the simulated change data of the assets on the chain.

[0115] In the blockchain system, only transactions that are packaged and uploaded to the chain can be executed by consensus of each blockchain node, and the operation of packaging and uploading to the chain can be executed by the upchain processing node. The process of packaging transactions and uploading them to the chain consumes the computing resources of the upchain processing node. Therefore, it is usually necessary to transfer virtual resources that match the computing resources to the upchain processing node to motivate the upchain processing node to consume its own computing resources for upchain processing. The virtual resources that need to be transferred to the upchain processing node in the process of transferring the original resources are called upchain consumption resources. In actual applications, for the same virtual resource transfer business, the change data of the original resources caused by execution in different situations is fixed, but the upchain consumption resources required to be consumed may be different. This is because the upchain consumption resources are related to the business busyness of the blockchain system and cannot be accurately estimated.

[0116] Specifically, the risk assessment party can match and analyze the expected change data and simulated change data of the original resources to determine the first change matching degree of the original resources; match and analyze the expected change data and simulated change data of the on-chain consumed resources to determine the second change matching degree of the on-chain consumed resources. Then, statistical analysis is performed on the first change matching degree and the second change matching degree to determine the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets. Among them, statistical analysis can include summing, averaging, taking maximum values, etc.

[0117] Exemplarily, the risk assessment party may perform a consistency matching analysis on the expected change data and the simulated change data of the original resources, and determine that the first change matching degree is a match when the two are consistent, and determine that the first change matching degree is a mismatch when the two are inconsistent; perform a similar matching analysis on the expected change data and the simulated change data of the on-chain consumed resources, and determine that the second change matching degree is a match when the two meet the similar matching conditions, and determine that the second change matching degree is a mismatch when the two do not meet the similar matching conditions. Finally, the risk assessment party determines that the expected change data of the on-chain assets and the simulated change data of the on-chain assets do not match when at least one of the first change matching degree or the second change matching degree is a mismatch. Among them, the similar matching condition may refer to that the difference between the expected change data and the simulated change data of the on-chain consumed resources is less than the set difference, or is less than or equal to the set difference.

[0118] In the above embodiment, the change data of the original resources and the on-chain consumed resources are matched respectively, which can ensure the accuracy of the matching degree between the final expected change data of the on-chain assets and the simulated change data of the on-chain assets, thereby ensuring the accuracy of the risk assessment results.

[0119] In one embodiment, the blockchain business risk assessment method further includes: determining the address of the requester who initiated the signature request; performing a risk assessment on the address of the requester to determine the risk information of the requester of the blockchain business. In the case of this embodiment, step S210 includes: determining the risk assessment result of the blockchain business based on the risk information of the requester and the matching degree.

[0120] Among them, the requester address may refer to the blockchain address corresponding to the requester, or may refer to the URL (uniform resource locator) address of the requester. The requester risk information is information used to characterize the risk of the requester, and may include information such as the requester risk level and the requester risk score. Specifically, the risk assessor may determine the address of the requester that initiates the signature request, conduct a risk assessment on the requester address, determine the requester risk information of the blockchain business, and then comprehensively consider the requester risk information and the matching degree to determine the risk assessment result of the blockchain business. The specific method of comprehensively considering the requester risk information and the matching degree may be, for example, to standardize the two and then perform a weighted sum, or to determine the greater risk represented by each of the two as the risk assessment result of the blockchain business.

[0121] In a specific embodiment, the risk assessor can extract the address of the requester who initiated the signature request from the request page showing the signature request, for example Figure 5 501 and Figure 6 601 of them.

[0122] There is no unique way to conduct risk assessment on the requester address. In a specific embodiment, considering that the data structure and specific data composition of the abnormal address have certain commonalities, the risk assessor can extract the address features of the requester address, match the address features with the common features of the abnormal address, and then determine the risk information of the requester of the blockchain business based on the matching degree of the two. The higher the matching degree, the higher the risk of the requester. The address features can include sub-features such as field composition and field length.

[0123] In a specific embodiment, a compliant address library and an abnormal address library may be established, and the address of the requester may be matched with the address samples contained in the compliant address library and the abnormal address library. If the compliant address library includes compliant address samples that match the address of the requester, it is determined that there is no risk to the requester. If the abnormal address library includes abnormal address samples that match the address of the requester, it is determined that there is a risk to the requester. The compliant address samples and abnormal address samples may be reported by contributors from various channels, and the risk assessment party may add them to the corresponding address library after review and verification.

[0124] In the above embodiment, the risk assessment result of the blockchain business is determined in combination with the requester risk information obtained by performing a risk assessment on the requester address, which can further ensure the accuracy of the risk assessment result.

[0125] In one embodiment, a risk assessment is performed on the requester address to determine the risk information of the requester of the blockchain business, including: obtaining at least two address samples with different risk levels; matching the requester address with each address sample respectively, and determining a target address sample that matches the requester address from each address sample; and determining the risk information of the requester of the blockchain business according to the risk level of the target address sample.

[0126] Among them, at least two address samples with different risk levels may include a compliant address with no risk, an abnormal address with risk, and an ambiguous address with risk to be assessed. Specifically, the risk assessor may obtain at least two address samples with different risk levels, match the requester address with each address sample respectively, and determine the target address sample that matches the requester address from each address sample. Then, based on the risk level of the target address sample, determine the risk information of the requester of the blockchain business. Exemplarily, if the target address sample is a compliant sample, the risk information of the requester of the blockchain business may be that there is no risk; if the target address sample is an abnormal sample, the risk information of the requester of the blockchain business may be that there is risk; if the target address sample is an ambiguous sample, the risk information of the requester of the blockchain business may be that the risk is to be assessed. Figure 7 As shown, the address matching result 701 can be displayed on the signer's interface, so that the signer can choose to click "Reject" to refuse to sign the blockchain business based on the address matching result, or choose to click "Continue" to continue subsequent risk detection.

[0127] In this embodiment, the risk assessment of the requesting party is performed by matching with address samples of different risk levels, and the risk information of the requesting party of the blockchain business is determined, which is conducive to improving efficiency.

[0128] In one embodiment, the address samples include compliant addresses without risk and ambiguous addresses with risk to be assessed. In the case of this embodiment, the requester address is matched with each address sample respectively, and a target address sample matching the requester address is determined from each address sample, including: matching the requester address with each compliant address respectively for consistency, and determining a target address sample consistent with the requester address from each compliant address; matching the requester address with each ambiguous address respectively for similarity, and determining a target address sample similar to the requester address from each ambiguous address.

[0129] In actual applications, compliant addresses are usually official addresses that have been certified for compliance. These compliant addresses are usually certain and cannot be changed, while fuzzy addresses with pending risks are uncertain. Usually, a new address obtained after a fuzzy address is transformed is still a fuzzy address with pending risks. Based on this, in the matching process of compliant addresses, consistency matching is performed to determine target address samples that are consistent with the requester's address from each compliant address; in the matching process of fuzzy addresses, similarity matching is performed to determine target address samples that are similar to the requester's address from each fuzzy address, thereby further ensuring the accuracy of the requester's risk information.

[0130] In one embodiment, the blockchain business risk assessment method further includes: performing similarity matching between the requester address and each compliant address respectively, and determining the address similarity between the requester address and each compliant address; when there is a selected compliant address among the compliant addresses that matches the requester address, determining the requester address as a fuzzy address.

[0131] Among them, the fuzzy address is not the same as the selected compliant address, and the similarity between the fuzzy address and the selected compliant address meets the similarity condition. The similarity meeting the similarity condition may mean that the similarity is greater than the similarity threshold, or the similarity is greater than or equal to the similarity threshold. The similarity can be characterized by cosine similarity, Euclidean distance, or Levenshtein distance. Specifically, the risk assessor may perform similarity matching between the requester address and each compliant address respectively, determine the address similarity between the requester address and each compliant address, and determine the requester address as a fuzzy address if there is a selected compliant address matching the requester address among the compliant addresses.

[0132] In this embodiment, the requesting party address that is different from the selected compliant address and whose similarity to the selected compliant address meets the similarity condition is determined as a fuzzy address. The fuzzy address library can be updated in real time during the risk assessment process, which is conducive to further improving the accuracy of the requesting party risk information.

[0133] In one embodiment, the blockchain service includes a virtual resource transfer service; the service information includes resource receiver information. In the case of this embodiment, the blockchain risk assessment method further includes: obtaining virtual resource data of a receiver account that matches the resource receiver information; performing risk assessment on the receiver account based on the virtual resource data to determine the receiver risk information of the blockchain service. In the case of this embodiment, step S210 includes: determining the risk assessment result of the blockchain service based on the receiver risk information and the matching degree.

[0134] Specifically, the virtual resource data of each blockchain node can be counted through the blockchain node interface, and then the virtual resource data of the recipient account that matches the resource recipient information can be obtained. The virtual resource data may include the virtual resources held by the recipient account, the historical resource transaction status of the recipient account, and so on. Then, the risk assessment party can conduct a risk assessment on the recipient account based on the virtual resource data, determine the recipient risk information of the blockchain business, and determine the risk assessment result of the blockchain business based on the recipient risk information and the matching degree. Among them, the specific method of determining the risk assessment result of the blockchain business based on the recipient risk information and the matching degree is similar to the specific method of determining the risk assessment result of the blockchain business based on the requester risk information and the matching degree in the previous text, and will not be repeated here.

[0135] In this embodiment, risk assessment is also performed from the perspective of the resource recipient, which is beneficial to further improve the accuracy of the risk assessment results.

[0136] In a specific embodiment, the virtual resource data may include at least one of available resource data and resource historical transaction data. In the case of this embodiment, the recipient account is risk assessed based on the virtual resource data to determine the recipient risk information of the blockchain business, including at least one of the following two items: based on the matching result between the issuer of the available resource data and the authority with resource issuance authority, the recipient risk information of the blockchain business is determined; based on the transaction frequency information obtained by statistical analysis of the resource historical transaction data, the recipient risk information of the blockchain business is determined.

[0137] Specifically, the risk assessor can determine the issuer of the virtual resources held in the recipient's account, and match the issuer with the authoritative institution on the blockchain that has the authority to issue resources, obtain the issuer matching result, and determine the recipient's risk information for the blockchain business based on the issuer matching result: if the issuers of the virtual resources held in the recipient's account are all authoritative institutions, it means that the recipient's risk is low; if the issuers of the virtual resources held in the recipient's account include non-authoritative institutions, it means that the recipient's risk is high. The risk assessor can also perform statistical analysis on the historical transaction data of resources to obtain transaction frequency information, and determine the recipient's risk information for the blockchain business based on the transaction frequency information. The transaction frequency information may, for example, include the number of transactions, transaction frequency, and details of each transaction. Figure 8 As shown, the recipient risk information may include that there has been no transaction with the recipient address in the history, the recipient address has too frequent transactions (for example, 80 transactions in one day), and the recipient address has been reported as an abnormal account address, etc.

[0138] In this embodiment, the receiver risk assessment is performed based on at least one of the issuer of the resources held by the receiver address or the transaction frequency information of the receiver address, which is conducive to improving the accuracy of the receiver risk assessment result.

[0139] In a specific embodiment, Fig. 9 As shown, the blockchain business risk assessment method includes the following steps:

[0140] Step S901, obtaining a signature request for a virtual resource transfer service;

[0141] Step S902, determining the address of the requester initiating the signature request;

[0142] Step S903, obtaining at least two address samples with different risk levels, matching the address of the requesting party with each address sample respectively, and determining a target address sample matching the address of the requesting party from each address sample;

[0143] Step S904, determining the risk information of the requester of the blockchain service according to the risk level of the target address sample;

[0144] Step S905, extracting the business information carried in the signature request;

[0145] The business information includes the resource transferor information, resource receiver information, resource type and resource amount;

[0146] Step S906, determining the resource transferor represented by the resource transferor information and the resource receiver represented by the resource receiver information;

[0147] Step S907, obtaining virtual resource data of a recipient account of a resource recipient;

[0148] Step S908, performing risk assessment on the recipient's account based on the virtual resource data to determine the recipient's risk information for the blockchain service;

[0149] Step S909, determining the virtual resources to be transferred that match the resource type and resource amount from the available virtual resources of the resource transferor;

[0150] Step S910, simulating the transfer of the virtual resources to be transferred from the resource transferor to the resource receiver;

[0151] Step S911, obtaining the original data of the assets on the chain before simulating the execution of the blockchain business;

[0152] Among them, the original data of on-chain assets includes the original data of account assets of accounts associated with blockchain business;

[0153] Step S912, comparing and analyzing the account asset simulation data with the account asset original data to determine the resource type and resource change amount that have changed in the blockchain business-related account;

[0154] Step S913, based on the resource type and the resource change amount, determine the account asset simulation change data of the blockchain business associated account;

[0155] Step S914, determining the on-chain asset simulation change data of the blockchain business based on the account asset simulation change data;

[0156] Among them, the simulated change data of on-chain assets includes the simulated change data of original resources and on-chain consumed resources respectively;

[0157] Step S915, performing matching analysis on the expected change data and the simulated change data of the original resource to determine the first change matching degree of the original resource;

[0158] Step S916, performing matching analysis on the expected change data and the simulated change data of the uplink consumed resources to determine a second change matching degree of the uplink consumed resources;

[0159] Step S917, statistically analyzing the first change matching degree and the second change matching degree to determine the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets;

[0160] Step S918, based on the risk information of the requesting party, the risk information of the receiving party and the matching degree, determine the risk assessment result of the blockchain business.

[0161] In conjunction with the accompanying drawings, the blockchain business risk assessment method of the present application is described in detail by taking the case of implementing risk assessment for blockchain business through a resource client on the blockchain as an example.

[0162] Among them, the resource client is used to implement the resource management business function, and based on the resource management business function, realize the communication connection with the decentralized application client. The resource client is a tool for managing and storing user digital resources. For example, digital resources can be transferred to other accounts based on the resource client, and digital resources transferred from other accounts can be received based on the resource client. The resource client can be a hardware device or a software program. In this application, the resource client of the target object can establish a communication connection with the decentralized application client to realize the authorized login and other related operations of the target object.

[0163] It is understandable that as various decentralized applications are widely deployed on the blockchain, user activities on the blockchain have increased. When using decentralized applications, users can use blockchain key management tools to log in. The address in the blockchain key management tool corresponds to a user on the blockchain. The decentralized application can obtain the user address from the key management tool through some interfaces, and in order to solve the problem that the Dapp background cannot trust the user address used when logging in to the decentralized application.

[0164] In one embodiment, the requester can initiate a signature request for a blockchain business to the signer through DAPP, and the signer can implement risk assessment for the blockchain business by calling the resource client. The resource client can be a browser plug-in or an independent application (APP). Fig.10 As shown, the resource client API (Application Programming Interface) can be called when obtaining a signature request to prompt the signer to establish a connection with the resource client to implement risk assessment of the blockchain business being signed. That is to say, in the case of this embodiment, the signer can also serve as a risk assessor, which refers to risk assessment of blockchain business. Furthermore, multiple types of resource client information can be displayed to the signer for the signer to choose from. Fig.10 After connecting to the resource client, Figure 5 and Figure 6 As shown, the request information to be confirmed will be displayed on the display interface of the signer. The request information may include the requester's address, i.e. Figure 5 and Figure 6 The URL address in the signature request, and the description of the signature request, such as Figure 5 In "Message", Figure 6 The amount of ETH transferred in and so on.

[0165] like Fig.11 and Fig.12As shown, after obtaining the signature request through the resource client, the risk assessor can conduct a risk assessment on the blockchain business from multiple dimensions to determine the risk assessment results of the blockchain business. For example, the risk assessor can match the requester URL with the respective address samples in the compliance list, the abnormal list, and the fuzzy list to determine the target address sample that matches the requester URL. If the target address sample is in the compliance list, the requester URL is considered to be a trusted address; if the target address sample is in the abnormal list, the requester URL is considered to be an untrustworthy address; if the target address sample is in the fuzzy list, the risk of the requester URL is considered to be assessed. Among them, the fuzzy address samples in the fuzzy list are similar to but not identical to the compliant address samples in the compliance list. For example, when the compliant address sample is "wallte.com", the fuzzy address sample can be "walllte.com" or "wa11te.com". As Figure 7 As shown, the requester risk information determined after address matching will be displayed to the signer, who will choose to "continue" the assessment or "reject" the signature based on the requester information. The purpose of this application to conduct risk assessment on blockchain services is to alert the signer to the risks, and the final decision on the signature lies with the signer. Furthermore, the historical transaction data of the requester's address can also be analyzed, and the requester risk information can be determined by combining the address matching results and historical transaction data. For example, the requester address that initiates the request for the first time usually has a greater risk; for another example, the shorter the interval between the first transaction time and the last transaction time, and the more frequent the transactions, the higher the corresponding risk.

[0166] If the signer chooses to continue, the risk assessor can conduct further checks based on the business information carried in the signature request. Specifically, the business information can be checked for abnormal content to obtain abnormal content inspection results. The business information can be, for example, the text to be signed, the transaction parameters of the transaction to be signed, etc. Furthermore, if the blockchain business involves the transfer of virtual resources, further checks are required. For example, resource data analysis can be performed on the resource receiver, and the risk information of the receiver can be determined based on the on-chain asset list and historical transaction status of the resource receiver. For example, Figure 8 As shown, the recipient risk information may include that there has been no transaction with the recipient address in the history, the recipient address has too frequent transactions (for example, 80 transactions in one day), and the recipient address has been reported as an abnormal account address, etc.

[0167] Furthermore, the blockchain business can be simulated and executed based on the business information to analyze asset changes and determine the matching degree between the asset simulation change data and the asset expected change data before and after the simulation execution. For example, the asset expected change data determined based on the business information is to transfer virtual resources A1 of amount a1 to B, but the asset simulation change data is to transfer virtual resources A1 of amount a2 to B, and a2 is much greater than a1, which means that the matching degree between the asset simulation change data and the asset expected change data is low, and the risk of the blockchain business is relatively high.

[0168] It should be noted that when risk assessment of blockchain business is conducted from multiple dimensions, the risk information of the corresponding dimension can be displayed to the signatory after the risk assessment of each dimension is completed. In other words, the signatory can choose to continue, reject or sign after the assessment of any dimension is completed. If the signatory chooses to reject or sign, the risk assessment for the blockchain business ends. If the signatory chooses to continue, the risk assessment of other dimensions will continue.

[0169] Finally, the risk assessor can determine the final risk assessment result by combining the risk information of the requester, the abnormal content inspection results, the risk information of the receiver, the matching degree of asset changes and other inspection results in multiple dimensions. So that the signer can determine whether to sign the blockchain business based on the risk assessment results. Figure 8 As shown in FIG. 1 , the risk assessment result may include a list of existing risks, description information of each risk, and asset simulation change data. Fig.12 As shown in the figure, after the signature is completed, the blockchain business can enter the subsequent on-chain execution process.

[0170] By adopting the above method, the risk assessment function for blockchain business can be integrated into the resource client on the blockchain, realizing the design of risk control blockchain pending signature transactions and ensuring the security of the signatory's on-chain assets.

[0171] In one embodiment, an application scenario for applying the blockchain business risk assessment method is also provided, and the application scenario can be, for example, an identity confirmation scenario. In this application scenario, the requester can initiate a signature request for the identity confirmation business, and the risk assessment party obtains the signature request, extracts the business information carried in the signature request, and simulates the execution of the identity confirmation business based on the business information to determine the on-chain asset simulation data after the identity confirmation business is simulated. Then, the requester determines the on-chain asset simulation change data of the identity confirmation business based on the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the identity confirmation business. Next, the requester matches and analyzes the expected on-chain asset change data of the identity confirmation business with the on-chain asset simulation change data to determine the matching degree between the expected on-chain asset change data and the on-chain asset simulation change data. It can be understood that for normal identity confirmation business, it usually does not cause changes in on-chain assets. That is to say, if the simulated execution causes changes in on-chain assets, it means that the expected change data of on-chain assets and the simulated change data of on-chain assets do not match well, and a risk assessment result that the identity confirmation business has risks can be obtained; if the simulated execution does not cause changes in on-chain assets, it means that the expected change data of on-chain assets and the simulated change data of on-chain assets have a high degree of match, and a risk assessment result that the identity confirmation business does not have risks can be obtained. Finally, the signer can obtain the risk assessment result and decide whether to sign the identity confirmation business based on the risk assessment result.

[0172] In one embodiment, an application scenario for applying the blockchain business risk assessment method is also provided, and the application scenario can be, for example, a virtual resource transfer scenario. In this application scenario, the requester can initiate a signature request for the virtual resource transfer business, and the risk assessor obtains the signature request, extracts the business information carried in the signature request, and simulates the execution of the virtual resource transfer business based on the business information, and determines the on-chain asset simulation data after the virtual resource transfer business is simulated. Then, the requester determines the on-chain asset simulation change data of the virtual resource transfer business based on the on-chain asset simulation data and the on-chain asset original data before the simulated execution of the identity confirmation business. Next, the requester matches and analyzes the on-chain asset expected change data of the virtual resource transfer business with the on-chain asset simulation change data, determines the matching degree between the on-chain asset expected change data and the on-chain asset simulation change data, and determines the risk assessment result of the virtual resource transfer business based on the matching degree. It can be understood that the virtual resource transfer business usually causes changes in on-chain assets. The virtual resources are specifically transferred from the resource transferor to the resource transferee, and the signatory has the management authority of the virtual resources of the resource transferor and can authorize the transfer of the virtual resources of the transferor through signature. Furthermore, the expected change data of the on-chain assets and the simulated change data of the on-chain assets are matched and analyzed, which may include matching analysis of the respective virtual resource transfer amounts and virtual resource transfer objects (i.e., the resource transferee) of the two. Finally, the signatory can obtain the risk assessment results and decide whether to sign the virtual resource transfer business based on the risk assessment results.

[0173] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0174] Based on the same inventive concept, the embodiment of the present application also provides a blockchain business system for implementing the blockchain business risk assessment method involved above. The implementation scheme for solving the problem provided by the system is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more blockchain business system embodiments provided below can refer to the limitations of the blockchain business risk assessment method above, and will not be repeated here.

[0175] In some embodiments, Fig.13 As shown, a blockchain system 1300 is provided, including a requester 1301, a risk assessor 1302 and a signer 1303. The requester 1301 initiates a signature request for a blockchain business. The risk assessor 1302 obtains a signature request for a blockchain business and extracts the business information carried in the signature request; based on the business information, simulates and executes the blockchain business to determine the simulated data of the on-chain assets after the blockchain business is simulated and executed; according to the simulated data of the on-chain assets and the original data of the on-chain assets before the simulated execution of the blockchain business, determines the simulated change data of the on-chain assets of the blockchain business; matches and analyzes the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets to determine the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets; and determines the risk assessment result of the blockchain business based on the matching degree. The signer 1303 obtains the risk assessment result and signs the blockchain business if the risk assessment result meets the low risk condition.

[0176] In the above blockchain system, the risk assessment party conducts risk assessment on the blockchain business based on the signature request for the blockchain business, which is equivalent to conducting risk assessment before the signer signs, so that the signer can decide whether to sign according to the risk assessment result, and can filter out high-risk businesses before signing to avoid losses. In addition, based on the business information extracted from the signature request, the blockchain business is simulated and executed, and the risk assessment result of the blockchain business is determined based on the expected change data of the on-chain assets of the blockchain business and the matching degree between the simulated change data of the chain assets caused by the simulated execution, which can conduct risk assessment on the blockchain business from the level of the execution result, which is conducive to improving the accuracy of the risk assessment result. Therefore, the above method can accurately assess the risk of the blockchain business before the signer signs, which is conducive to improving the security of the blockchain business processing process.

[0177] Based on the same inventive concept, the embodiment of the present application also provides a blockchain business risk assessment device for implementing the blockchain business risk assessment method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more blockchain business risk assessment device embodiments provided below can refer to the limitations of the blockchain business risk assessment method above, and will not be repeated here.

[0178] In some embodiments, Fig.14As shown, a blockchain business risk assessment device 1400 is provided, including: a business information extraction module 1402, a simulation execution module 1404, a simulation change data determination module 1406, a data analysis module 1408 and a risk assessment result determination module 1410, wherein:

[0179] The business information extraction module 1402 is used to obtain a signature request for a blockchain business and extract the business information carried in the signature request;

[0180] The simulation execution module 1404 is used to simulate the execution of the blockchain business based on the business information, and determine the on-chain asset simulation data after the blockchain business is simulated and executed;

[0181] The simulation change data determination module 1406 is used to determine the on-chain asset simulation change data of the blockchain service according to the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the blockchain service;

[0182] The data analysis module 1408 is used to match and analyze the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets, and determine the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets;

[0183] The risk assessment result determination module 1410 is used to determine the risk assessment result of the blockchain business based on the matching degree.

[0184] In one embodiment, the blockchain service includes a virtual resource transfer service; the service information includes resource transferor information, resource receiver information, and transfer resource information. In this embodiment, the simulation execution module 1404 includes:

[0185] A resource transfer object determination unit, used to determine a resource transferor represented by the resource transferor information and a resource receiver represented by the resource receiver information;

[0186] The simulation execution unit is used to simulate the execution of the virtual resource transfer service based on the transfer resource information, and simulate the transfer of the virtual resources to be transferred from the resource transferor to the resource receiver.

[0187] In one embodiment, the transfer resource information includes resource type and resource amount. In this embodiment, the simulation execution unit is specifically used to: determine the virtual resources to be transferred that match the resource type and resource amount from the available virtual resources of the resource transferor; and simulate the transfer of the virtual resources to be transferred from the resource transferor to the resource receiver.

[0188] In one embodiment, the on-chain asset simulation data includes account asset simulation data of a blockchain business associated account. In this embodiment, the simulation change data determination module 1406 includes:

[0189] The original data acquisition unit is used to acquire the original data of the assets on the chain before the simulated execution of the blockchain business; the original data of the assets on the chain includes the original data of the account assets of the accounts associated with the blockchain business;

[0190] A comparison and analysis unit, used to compare and analyze the simulated account asset data with the original account asset data, and determine the simulated change data of the account assets of the blockchain business-related account;

[0191] The simulated change data determination unit is used to determine the on-chain asset simulated change data of the blockchain business based on the account asset simulated change data.

[0192] In one embodiment, the comparison and analysis unit is specifically used to: compare and analyze the account asset simulation data with the account asset original data to determine the resource type and resource change amount that have changed in the blockchain business-related account; based on the resource type and resource change amount, determine the account asset simulation change data of the blockchain business-related account.

[0193] In one embodiment, the blockchain business risk assessment device 1400 also includes an expected change data determination module, which is used to: perform semantic analysis on business information to determine the business type of the blockchain business; determine the expected change type of on-chain assets that matches the business type; the expected change type of on-chain assets includes changes in on-chain assets and no changes in on-chain assets; when the expected change situation of on-chain assets is that the on-chain assets change, determine the expected change data of on-chain assets of the blockchain business.

[0194] In one embodiment, the blockchain service includes a virtual resource transfer service; the expected change data of the assets on the chain include the expected change data of the original resources and the on-chain consumption resources; the simulated change data of the assets on the chain include the simulated change data of the original resources and the on-chain consumption resources. In the case of this embodiment, the data analysis module 1408 is specifically used to: match and analyze the expected change data of the original resources and the simulated change data to determine the first change matching degree of the original resources; match and analyze the expected change data of the on-chain consumption resources and the simulated change data to determine the second change matching degree of the on-chain consumption resources; perform statistical analysis on the first change matching degree and the second change matching degree to determine the matching degree of the expected change data of the assets on the chain and the simulated change data of the assets on the chain.

[0195] In one embodiment, the blockchain business risk assessment device 1400 further includes: a requester address determination module, which is used to determine the requester address that initiates the signature request; a requester risk assessment module, which is used to perform a risk assessment on the requester address and determine the requester risk information of the blockchain business. In the case of this embodiment, the risk assessment result determination module 1410 is specifically used to: determine the risk assessment result of the blockchain business based on the requester risk information and the matching degree.

[0196] In one embodiment, the requester risk assessment module includes: an address sample acquisition unit, which is used to obtain at least two address samples with different risk levels; an address matching unit, which is used to match the requester address with each address sample respectively, and determine the target address sample that matches the requester address from each address sample; a requester risk information determination unit, which is used to determine the requester risk information of the blockchain business according to the risk level of the target address sample.

[0197] In one embodiment, the address samples include compliant addresses without risks and ambiguous addresses with risks to be assessed. In the case of this embodiment, the address matching unit is specifically used to: perform consistency matching between the requester address and each compliant address, and determine a target address sample consistent with the requester address from each compliant address; perform similarity matching between the requester address and each ambiguous address, and determine a target address sample similar to the requester address from each ambiguous address.

[0198] In one embodiment, the blockchain business risk assessment device 1400 also includes a fuzzy address determination module, which is used to: perform similarity matching between the requester address and each compliant address respectively, and determine the address similarity between the requester address and each compliant address; when there is a selected compliant address matching the requester address among the compliant addresses, the requester address is determined as a fuzzy address; the fuzzy address is not the same as the selected compliant address, and the similarity between the fuzzy address and the selected compliant address meets the similarity condition.

[0199] In one embodiment, the blockchain business includes a virtual resource transfer business; the business information includes resource recipient information. In the case of this embodiment, the blockchain business risk assessment device 1400 also includes: a virtual resource data acquisition module, which is used to obtain virtual resource data of a recipient account that matches the resource recipient information; a recipient risk assessment module, which is used to perform risk assessment on the recipient account based on the virtual resource data and determine the recipient risk information of the blockchain business. In the case of this embodiment, the risk assessment result determination module 1410 is specifically used to: determine the risk assessment result of the blockchain business based on the recipient risk information and the matching degree.

[0200] In one embodiment, the virtual resource data includes at least one of available resource data and resource historical transaction data. In the case of this embodiment, the receiver risk assessment module is specifically used to perform at least one of the following two items: determine the receiver risk information of the blockchain business based on the matching result between the issuer of the available resource data and the authority with resource issuance authority; determine the receiver risk information of the blockchain business based on the transaction frequency information obtained by statistical analysis of the resource historical transaction data.

[0201] Each module in the above-mentioned blockchain business risk assessment device can be implemented in whole or in part by software, hardware, or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0202] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Fig.15 As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data involved in the blockchain business risk assessment method. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a blockchain business risk assessment method is implemented.

[0203] In one embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as follows: Fig.15As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and the external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless method can be implemented through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a blockchain business risk assessment method is implemented. The display unit of the computer device is used to form a visually visible image, and can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen. The input device of the computer device can be a touch layer covered on the display screen, or a button, trackball or touchpad set on the computer device casing, or an external keyboard, touchpad or mouse, etc.

[0204] Those skilled in the art will understand that Fig.14 and Fig.15 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0205] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above-mentioned blockchain business risk assessment method when executing the computer program.

[0206] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the steps in the above-mentioned blockchain business risk assessment method are implemented.

[0207] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above-mentioned blockchain business risk assessment method when executed by a processor.

[0208] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards of the relevant regions and areas.

[0209] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0210] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0211] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A blockchain business risk assessment method, characterized in that: The method comprises: Obtain a signature request for a blockchain service and extract the service information carried in the signature request; Based on the business information, simulate and execute the blockchain business, and determine the on-chain asset simulation data after the blockchain business is simulated and executed; Determine the on-chain asset simulation change data of the blockchain service according to the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the blockchain service; Matching and analyzing the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets to determine the degree of match between the expected change data of the on-chain assets and the simulated change data of the on-chain assets; Based on the matching degree, a risk assessment result of the blockchain business is determined.

2. The method according to claim 1, characterized in that The blockchain service includes a virtual resource transfer service; the service information includes resource transferor information, resource receiver information and transferred resource information; The simulating and executing the blockchain business based on the business information to determine the on-chain asset simulation data after the blockchain business is simulated and executed includes: Determine the resource transferor represented by the resource transferor information and the resource receiver represented by the resource receiver information; The virtual resource transfer service is simulated and executed based on the transfer resource information, and the virtual resource to be transferred is simulated and transferred from the resource transfer-out party to the resource receiver.

3. The method according to claim 2, characterized in that The transfer resource information includes resource type and resource amount; The simulating and executing the virtual resource transfer service based on the transfer resource information to simulate the transfer of the virtual resource to be transferred from the resource transferor to the resource receiver includes: Determining, from the available virtual resources of the resource transferor, the virtual resources to be transferred that match the resource type and the resource amount; The virtual resource to be transferred is transferred from the resource transfer-out party to the resource receiver in a simulated manner.

4. The method according to claim 1, characterized in that The on-chain asset simulation data includes account asset simulation data of blockchain business-related accounts; The determining, according to the on-chain asset simulation data and the on-chain asset original data before the simulated execution of the blockchain service, the on-chain asset simulation change data of the blockchain service comprises: Obtaining original data of assets on the chain before simulating the execution of the blockchain business; the original data of assets on the chain includes original data of account assets of accounts associated with the blockchain business; Compare and analyze the simulated account asset data with the original account asset data to determine the simulated account asset change data of the blockchain business-related account; Based on the account asset simulation change data, determine the on-chain asset simulation change data of the blockchain business.

5. The method according to claim 4, characterized in that The comparing and analyzing the simulated account asset data with the original account asset data to determine the simulated account asset change data of the blockchain business-related account includes: Compare and analyze the simulated account asset data with the original account asset data to determine the type of resources and the amount of resource changes in the blockchain business-related account; Based on the resource type and the resource change amount, determine the account asset simulation change data of the blockchain business-related account.

6. The method according to claim 1, characterized in that The method further comprises: Performing semantic analysis on the business information to determine the business type of the blockchain business; Determine the expected change type of on-chain assets that matches the business type; the expected change type of on-chain assets includes changes in on-chain assets and no changes in on-chain assets; When the expected change of the on-chain assets is a change of the on-chain assets, the expected change data of the on-chain assets of the blockchain business is determined.

7. The method according to claim 1, characterized in that The blockchain business includes a virtual resource transfer business; the expected change data of the on-chain assets includes the expected change data of the original resources and the on-chain consumable resources; the simulated change data of the on-chain assets includes the simulated change data of the original resources and the on-chain consumable resources; The matching analysis of the expected on-chain asset change data of the blockchain business with the on-chain asset simulated change data to determine the matching degree between the expected on-chain asset change data and the on-chain asset simulated change data includes: Performing matching analysis on the expected change data and the simulated change data of the original resource to determine a first change matching degree of the original resource; Performing matching analysis on the expected change data and the simulated change data of the uplink consumption resources to determine a second change matching degree of the uplink consumption resources; Statistically analyze the first change matching degree and the second change matching degree to determine the matching degree between the expected change data of the on-chain asset and the simulated change data of the on-chain asset.

8. The method according to any one of claims 1 to 7, characterized in that The method further comprises: Determine the address of the requester who initiated the signature request; Performing a risk assessment on the requester address to determine the risk information of the requester of the blockchain service; Determining the risk assessment result of the blockchain business based on the matching degree includes: Based on the requesting party risk information and the matching degree, a risk assessment result of the blockchain business is determined.

9. The method according to claim 8, characterized in that The performing risk assessment on the address of the requester to determine the risk information of the requester of the blockchain service includes: Obtain at least two address samples with different risk levels; Matching the requesting party address with each of the address samples respectively, and determining a target address sample matching the requesting party address from each of the address samples; Determine the risk information of the requester of the blockchain service according to the risk level of the target address sample.

10. The method according to claim 9, characterized in that The address samples include compliant addresses without risks and ambiguous addresses with risks to be assessed; The step of matching the requesting party address with each of the address samples respectively and determining a target address sample matching the requesting party address from each of the address samples includes: Match the requesting party address with each of the compliant addresses for consistency, and determine a target address sample that is consistent with the requesting party address from each of the compliant addresses; The requesting party address is respectively matched with each of the fuzzy addresses, and a target address sample similar to the requesting party address is determined from each of the fuzzy addresses.

11. The method according to claim 10, characterized in that The method further comprises: Performing similarity matching between the requesting party address and each of the compliant addresses respectively, and determining the address similarity between the requesting party address and each of the compliant addresses; In the case that there is a selected compliant address matching the requester address among the compliant addresses, the requester address is determined as an ambiguous address; the ambiguous address is different from the selected compliant address, and the similarity between the ambiguous address and the selected compliant address satisfies a similarity condition.

12. The method according to any one of claims 1 to 7, characterized in that The blockchain service includes a virtual resource transfer service; the service information includes resource recipient information; The method further comprises: Acquire virtual resource data of a recipient account that matches the resource recipient information; Performing a risk assessment on the recipient account based on the virtual resource data to determine the recipient risk information of the blockchain service; Determining the risk assessment result of the blockchain business based on the matching degree includes: Based on the recipient risk information and the matching degree, a risk assessment result of the blockchain business is determined.

13. The method according to claim 12, characterized in that The virtual resource data includes at least one of available resource data and resource historical transaction data; The step of performing risk assessment on the recipient account based on the virtual resource data to determine the recipient risk information of the blockchain service includes at least one of the following two items: Determine the risk information of the recipient of the blockchain service based on the matching result between the issuer of the available resource data and the authority with the resource issuance authority; Based on the transaction frequency information obtained by statistically analyzing the historical transaction data of the resource, the risk information of the recipient of the blockchain business is determined.

14. A blockchain system, characterized in that: The system includes a requesting party, a risk assessing party, and a signing party; The requesting party initiates a signature request for the blockchain service; The risk assessment party obtains a signature request for the blockchain business and extracts the business information carried in the signature request; Based on the business information, simulate and execute the blockchain business to determine the on-chain asset simulation data after the blockchain business is simulated and executed; determine the on-chain asset simulation change data of the blockchain business according to the on-chain asset simulation data and the on-chain asset original data before the blockchain business is simulated and executed; match and analyze the on-chain asset expected change data of the blockchain business with the on-chain asset simulation change data to determine the matching degree between the on-chain asset expected change data and the on-chain asset simulation change data; Based on the matching degree, determining the risk assessment result of the blockchain business; The signer obtains the risk assessment result and signs the blockchain business if the risk assessment result meets the low risk condition.

15. A blockchain business risk assessment device, characterized in that: The device comprises: A business information extraction module, used to obtain a signature request for a blockchain business and extract the business information carried in the signature request; A simulation execution module, used to simulate the execution of the blockchain business based on the business information, and determine the on-chain asset simulation data after the blockchain business is simulated and executed; A simulation change data determination module, used to determine the on-chain asset simulation change data of the blockchain service according to the on-chain asset simulation data and the on-chain asset original data before the simulation execution of the blockchain service; A data analysis module, used to match and analyze the expected change data of the on-chain assets of the blockchain business with the simulated change data of the on-chain assets, and determine the matching degree between the expected change data of the on-chain assets and the simulated change data of the on-chain assets; A risk assessment result determination module is used to determine the risk assessment result of the blockchain business based on the matching degree.

16. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 13 are implemented.

17. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 13 are implemented.

18. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 13 are implemented.

Images