Communication method and system based on block chain

Abstract

The invention provides a communication method and system based on a block chain, and the method comprises the steps: generating a corresponding certificate operation record when a first type of network node registers a certificate or revokes the certificate, adding the certificate operation record to a certificate operation list in a block structure in the first type of network node, sending the certificate operation record to a second type of network nodes in the communication system; when the second type of network nodes acquire the certificate operation records of the first type of network nodes, the certificate operation records are added to a certificate operation list in a block structure in the second type of network nodes; and when the current recording period is ended, the target network node sends the target block structure therein to a third type of network nodes in the communication system. And when any network node executes updating operations such as certificate registration and revocation, an automatic process is triggered, and the latest data change is synchronized to each network node in the network, so that the consistency and the real-time performance of the data of the whole network are maintained.

Description

Technical Field

[0001] The present invention relates to the field of information security, and in particular to a communication method and system based on blockchain. Background Art

[0002] With the rapid advancement of Internet technology, users are increasingly inclined to complete various operations and obtain services through online platforms. This move has greatly improved the convenience of operation, but it also brings potential risks to data confidentiality and security. Public Key Infrastructure (PKI) is a widely applicable security solution that relies on asymmetric encryption algorithms (i.e. public key theory) and third-party authentication mechanisms to build a solid barrier for security services for users.

[0003] The core pillar of the PKI architecture lies in the Certificate Authority (CA). The current digital certificate authentication system consists of three key components: the CA system responsible for issuing certificates, the RA system that executes the registration and review process, and the KMC center that manages the key. The trust foundation of this system lies in the trust and recognition of the issuing authority (i.e., the Certificate Authority CA) by the certificate user. However, in recent years, the frequent exposure of information security vulnerabilities by certificate authorities, including data leakage and operational errors, has led to the illegal acquisition of sensitive data of many certificate users, and the risk of information communication being monitored. Such cases have been repeatedly banned and have caused widespread concern. Summary of the invention

[0004] The purpose of the present invention is to provide a blockchain-based communication method and system to at least partially improve the above-mentioned problems.

[0005] In order to achieve the above purpose, the technical solution adopted by the embodiment of the present invention is as follows:

[0006] In a first aspect, an embodiment of the present invention provides a blockchain-based communication system, wherein the communication system includes a plurality of network nodes;

[0007] The first type of network node is used to generate a corresponding certificate operation record when registering a certificate or revoking a certificate, add the certificate operation record to a certificate operation list in a block structure in the first type of network node, and send the certificate operation record to a second type of network node in the communication system;

[0008] The first type of network node is any network node in the communication system;

[0009] The second type of network node is used for adding the certificate operation record to the certificate operation list in the block structure in the second type of network node when acquiring the certificate operation record of the first type of network node;

[0010] The second type of network node is any network node other than the first type of network node in the communication system;

[0011] At the end of the current recording cycle, the target network node is used to send the target block structure therein to a third type of network node in the communication system, so that the third type of network node updates the copy of the certificate list information therein according to the certificate operation list in the target block structure of the target network node, wherein the third type of network node is any network node in the communication system except the target network node, the target network node is the network node with the highest integrity of the certificate operation list in the current recording cycle, and the copy of the certificate list information includes all certificate information in the blockchain communication system.

[0012] In a second aspect, an embodiment of the present invention provides a blockchain-based communication method, which is applied to the above-mentioned communication system, and the method includes:

[0013] When registering a certificate or revoking a certificate, the first type of network node generates a corresponding certificate operation record, adds the certificate operation record to a certificate operation list in a block structure in the first type of network node, and sends the certificate operation record to a second type of network node in the communication system;

[0014] The first type of network node is any network node in the communication system;

[0015] When the second type of network node obtains the certificate operation record of the first type of network node, the second type of network node adds the certificate operation record to the certificate operation list in the block structure in the second type of network node;

[0016] The second type of network node is any network node other than the first type of network node in the communication system;

[0017] At the end of the current recording period, the target network node sends the target block structure therein to the third type of network node in the communication system, so that the third type of network node updates the copy of the certificate list information therein according to the certificate operation list in the target block structure of the target network node, wherein the third type of network node is any network node in the communication system except the target network node, the target network node is the network node with the highest integrity of the certificate operation list in the current recording period, and the copy of the certificate list information includes all certificate information in the blockchain communication system.

[0018] Compared with the prior art, the embodiment of the present invention provides a communication method and system based on blockchain. When registering or revoking a certificate, the first type of network node generates a corresponding certificate operation record, adds the certificate operation record to the certificate operation list in the block structure of the first type of network node, and sends the certificate operation record to the second type of network node in the communication system; when the second type of network node obtains the certificate operation record of the first type of network node, it adds the certificate operation record to the certificate operation list in the block structure of the second type of network node; at the end of the current record cycle, the target network node sends the target block structure therein to the third type of network node in the communication system, so that the third type of network node updates the copy of the certificate list information therein according to the certificate operation list in the target block structure of the target network node. When any network node performs update operations such as certificate registration and revocation, an automatic process will be triggered to synchronize the latest data changes to each network node in the network, thereby maintaining the consistency and real-time performance of the data of the entire network.

[0019] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, preferred embodiments are given below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0021] Figure 1 A schematic diagram of the architecture of a communication system provided by an embodiment of the present invention.

[0022] Figure 2 A schematic diagram of a block structure provided by an embodiment of the present invention.

[0023] Figure 3 A schematic diagram of a key distribution process provided by an embodiment of the present invention.

[0024] Figure 4 A flowchart of a blockchain-based communication method provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0026] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0027] It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings. At the same time, in the description of the present invention, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0028] In the description of the present invention, it is also necessary to explain that, unless otherwise clearly specified and limited, the terms "disposed" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be an indirect connection through an intermediate medium, or it can be the internal communication of two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0029] Some embodiments of the present invention are described in detail below in conjunction with the accompanying drawings. In the absence of conflict, the following embodiments and features in the embodiments can be combined with each other.

[0030] In order to effectively solve the many challenges in the current technology field, the advantages of blockchain technology and the concept of decentralization are innovatively integrated, and the role of the certificate authority (CA) in the traditional digital certificate authentication system is completely abandoned. This move aims to build a new mechanism that can seamlessly realize the core functions of identity authentication, public key exchange, etc. originally carried by traditional digital certificates without relying on any central certificate authority.

[0031] In view of this, the embodiment of the present invention provides a blockchain-based communication system, exploring and implementing a digital certificate solution that does not rely on traditional certificate authorities and adopts a decentralized architecture, which becomes an effective way to solve this series of security challenges and reshape the trust environment.

[0032] Please refer to Figure 1 , Figure 1 A schematic diagram of the architecture of a communication system provided in an embodiment of the present invention. The blockchain-based communication system includes multiple network nodes, and the network nodes can communicate with each other through, but are not limited to, a P2P network. It should be noted that any network node can be connected to one or more other network nodes in the communication system.

[0033] P2P network, also known as Peer-to-Peer or point-to-point network, is an Internet system with no central server and information exchanged entirely by user groups.

[0034] The first type of network node is used to generate a corresponding certificate operation record when registering or revoking a certificate, add the certificate operation record to the certificate operation list in the block structure in the first type of network node, and send the certificate operation record to the second type of network node in the communication system.

[0035] The first type of network node is any network node in the communication system, and the second type of network node is any network node in the communication system except the first type of network node.

[0036] It should be noted that the same network node can be both a first-category network node and a second-category network node at the same time point. Optionally, there are N network nodes in the communication system, and when the i-th network node registers a certificate or revokes a certificate, the i-th network node is a first-category network node, and all network nodes except the i-th network node are second-category network nodes corresponding to the i-th network node.

[0037] The second type of network node is used to add the certificate operation record to the certificate operation list in the block structure in the second type of network node when acquiring the certificate operation record of the first type of network node.

[0038] The second type of network node is any network node in the communication system except the first type of network node.

[0039] Optionally, the operation records in the certificate operation list are shown in Table 1 below.

[0040] Table 1

[0041]

[0042]

[0043] The corresponding representation of the operation record is: data=ttlv(node+oper+cert).

[0044] At the end of the current recording cycle, the target network node is used to send the target block structure therein to the third type network node in the communication system, so that the third type network node updates its copy of the certificate list information according to the certificate operation list in the target block structure of the target network node.

[0045] Among them, the third type of network node is any network node in the communication system except the target network node. The target network node is the network node with the highest integrity of the certificate operation list in the current recording period. The certificate list information copy includes all certificate information in the communication system of the blockchain. It should be noted that the target network node can be different in different recording periods.

[0046] In the blockchain-based communication system provided by the embodiment of the present invention, data adopts a distributed storage architecture to ensure that each network node holds a complete copy of the certificate list information. When any network node performs update operations such as certificate registration and revocation, an automatic process will be triggered to efficiently synchronize the latest data changes to each network node in the network through a peer-to-peer (p2p) network mechanism, thereby maintaining the consistency and real-time performance of the entire network data.

[0047] At the end of the current record period, the blockchain-based communication system can determine the target network node by voting.

[0048] As shown in Table 1, in an optional implementation, the certificate operation record includes the node ID (nodeId) of the first type of network node, the operation type information (oper), and the certificate information (cert) of the operation, wherein the operation type information is a registration certificate or a revocation certificate, and the certificate information of the operation includes the certificate ID, the certificate public key, and the certificate signature value.

[0049] Optionally, the concatenated data of the certificate ID and the certificate public key is signed by the certificate private key to obtain a certificate signature value.

[0050] On this basis, regarding how each network node determines its own node ID before registering a certificate, the embodiment of the present invention also provides an optional implementation method, please refer to the following.

[0051] Before registering the certificate, the network node is also used to use a preset random algorithm to generate a random number of preset bits as a node private key.

[0052] Optionally, a 256-bit (32-byte) random number is generated as a private key through a highly secure random algorithm. This private key is like a key to the digital world and must be kept strictly confidential because it is the core of controlling the address and subsequent certificate operations.

[0053] Network nodes are also used to utilize the elliptic curve digital signature algorithm to forge corresponding node public keys based on the node private key.

[0054] Optionally, the Elliptic Curve Digital Signature Algorithm (ECDSA) is used to forge a corresponding 512-bit (64-byte) public key with the private key as the cornerstone. There is a strict mathematical relationship between the public key and the private key, ensuring the one-to-one uniqueness.

[0055] The network node is also used to perform a hash operation on the node public key to obtain a node hash value, and encode a target field in the node hash value to obtain a node ID.

[0056] Optionally, the node public key is hashed using Keccak256 (SHA-3) to obtain a 256-bit hash value. Then, the last 20 bytes (i.e. 160 bits, the target field) are selected from this complex hash value as the prototype of the Ethereum address. Finally, this number is converted into a format that is easier to recognize and input through Base58Check encoding, thus forming a unique identity for the node.

[0057] Please refer to Figure 2 , Figure 2 Schematic diagram of a block structure provided by an embodiment of the present invention. Figure 2 As shown, the block structure includes a block header and a block body. The block header includes the current block hash value, the previous block hash value, a timestamp (UTC timestamp), a random number, a blockchain version number, and a Merkle root. The block body includes a certificate operation list.

[0058] Among them, the certificate operation list includes all certificate operation records obtained by the network node in the current recording period, the hash value of the previous block is the hash value corresponding to the target area structure in the previous recording period, the timestamp indicates the start time of the current recording period, the random number is related to the length of the current recording period, and the Merkle root (Mark root) indicates the integrity of the certificate operation list in the current recording period. Optionally, the Mark root is the hash value of all operation records in the current block, which is used to compare whether the node records all block operations correctly. If the value is consistent with that of the third type of network node, it means that the operation list recorded in the node is correct and there is no need to update the operation list in the node.

[0059] In an optional embodiment, all network nodes (including third-type network nodes and target network nodes) are used to store the target block structure within the current recording period, and update the blockchain table based on the current block hash value and the previous block hash value in the target block structure. The blockchain table includes the block hash value corresponding to the target block structure within each recording period, and the block hash values ​​in the blockchain table are sorted according to the time of the recording period.

[0060] This design ensures the continuity and immutability of the blockchain. This chain structure not only leads the journey of data tracing to the genesis or root block, but also gives the ability to fully traverse the entire blockchain history. As an indispensable element in this mechanism, the timestamp not only records the exact moment when the block is generated. It also plays a vital role in verifying the integrity and accuracy of the block hash value calculation. The hash value calculation of the current block follows a set of strict and precise rules. These rules ensure the uniqueness and security of the hash value. Any slight data change will result in a completely different hash value, thereby ensuring that all information on the blockchain cannot be forged and permanently stored.

[0061] Optionally, when creating a block structure, the network node is used to perform a hash operation based on the timestamp, random number, blockchain version number, Merkle root, and the hash value of the previous block to obtain a first-order hash value, and then reverse the first-order hash value to obtain the current block hash value.

[0062] The hash value calculation rules are as follows:

[0063] hash1 = sha256 (sha256 (version number + previous block hash + Merkle root + timestamp + random number));

[0064] currentHash = hash1[::-1];

[0065] Optionally, perform double sha-256 calculation on the version number, the hash value of the previous block, the Merkle root, the UTC timestamp, and the random number to obtain hash1; then invert hash1 to finally obtain the current hash value currentHash.

[0066] In an optional implementation, the certificate list information copy adopts an MPT structure (Merkle Patricia Tree structure, compact prefix tree).

[0067] In the traditional digital certificate management system, applicants rely on OCSP (Online Certificate Status Protocol) to query the validity of certificates in real time, while CRL (Certificate Revocation List) is the traditional way to obtain certificate revocation information in batches. However, these mechanisms are rooted in the centralized design concept and have the risk of single point failure and performance bottleneck. In view of this situation, the embodiments of the present invention are committed to conceiving and building an innovative architecture, aiming to enable each node in a decentralized environment to efficiently retrieve certificate information and respond immediately to any changes in the certificate status.

[0068] Specifically, an optimized data storage and retrieval mechanism is introduced, among which the MPT (Merkle Patricia Tree) data structure stands out with its unique advantages. MPT not only integrates the efficient verification characteristics of Merkle Tree, but also absorbs the design concept of Trie tree to reduce storage space and accelerate query speed by sharing string prefixes, and applies advanced compression algorithms for further optimization. This exquisite combination makes MPT an ideal choice for processing large amounts of data in blockchain and distributed systems. For the specific structure of MPT, please refer to the Ethereum storage structure, which will not be elaborated here.

[0069] Regarding how to achieve secure communication through network nodes in the system, the embodiment of the present invention also provides an optional implementation method, please refer to Figure 3 , Figure 3 A schematic diagram of a key distribution process provided by an embodiment of the present invention.

[0070] When the first communication node needs to communicate with the second communication node, the first communication node is used to query its internal copy of the certificate list information to obtain the certificate information of the second communication node, wherein the first communication node and the second communication node are both network nodes in the communication system of the blockchain.

[0071] The first communication node is used to verify the signature according to the certificate information of the second communication node, and send a first random number to the second communication node when the verification passes.

[0072] If the first communication node fails to query the certificate information of the second communication node, or the first communication node fails to verify the signature, a corresponding error response is returned.

[0073] The second communication node is used to query its internal copy of the certificate list information when receiving the first random number, so as to obtain the certificate information of the first communication node.

[0074] The second communication node is used to verify the signature according to the certificate information of the first communication node, and send a second random number to the first communication node when the verification passes.

[0075] If the second communication node fails to query the certificate information of the first communication node, or the second communication node fails to verify the signature, a corresponding error response is returned.

[0076] The second communication node is further configured to generate a session key according to the first random number and the second random number.

[0077] The first communication node is further configured to generate a session key according to the first random number and the second random number.

[0078] The first communication node and the second communication node communicate using the session key.

[0079] Optionally, using the first random number and the second random number, the first communication node and the second communication node jointly generate a session key through a predetermined key negotiation algorithm (such as Diffie-Hellman key exchange). This key will be used to encrypt subsequent communication content to ensure the security of data transmission. At this point, the certificate verification and session key negotiation process is successfully completed.

[0080] The core value of digital certificates lies in the disclosure of public keys and effective authentication of identities. When two nodes communicate, in order to ensure the secure transmission of information, a session key needs to be generated to encrypt the communication content. The generation of session keys depends on the exchange and verification of the public keys of both parties. At this time, digital certificates play a key role, enabling nodes to securely obtain the public keys of the other party and perform identity recognition, thereby establishing a bridge for encrypted communication.

[0081] It is worth noting that the certificate system is also capable of performing the functions of traditional certificates such as electronic signatures, code signatures, and identity authentication, providing strong support for trust building and data transmission security in the blockchain ecosystem.

[0082] In an optional embodiment, the blockchain-based communication system adopts a PoW consensus mechanism or a PoS consensus mechanism to provide a standard for data consistency for network nodes in the communication system.

[0083] PoW, also known as Proof-of-Work, is a consensus mechanism whose core principle is to require participants to complete a certain amount of computing work to prove that they have indeed put in effort and resources.

[0084] PoS, also known as Proof-of-Stack, is a consensus mechanism in which the participants of the next block are selected based on the amount of currency they hold or the proportion of their equity.

[0085] The blockchain-based communication system proposed in the embodiment of the present invention implements a decentralized digital certificate system solution based on blockchain, provides quantum-safe signature services for a wide range of users, ensures that user identities are authentic and reliable, and data is unconditionally secure against tampering and non-repudiation, and will become an important part of the blockchain decentralized digital certificate security infrastructure.

[0086] The embodiment of the present invention also provides a blockchain-based communication method, which is applied to the above-mentioned blockchain-based communication system. Figure 4 , the communication method based on blockchain includes: S10, S20 and S30, which are specifically described as follows.

[0087] S10, when registering or revoking a certificate, the first type of network node generates a corresponding certificate operation record, adds the certificate operation record to the certificate operation list in the block structure in the first type of network node, and sends the certificate operation record to the third type of network node in the communication system.

[0088] The first type of network node is any network node in the communication system.

[0089] S20, when the second type of network node obtains the certificate operation record of the first type of network node, the second type of network node adds the certificate operation record to the certificate operation list in the block structure of the second type of network node.

[0090] The second type of network node is any network node in the communication system except the first type of network node.

[0091] S30, when the current recording period ends, the target network node sends the target block structure therein to the third type of network node in the communication system.

[0092] The third type of network node updates the copy of the certificate list information therein according to the certificate operation list in the target block structure of the target network node.

[0093] Among them, the third type of network node is any network node in the communication system except the target network node. The target network node is the network node with the highest integrity of the certificate operation list in the current recording period. The copy of the certificate list information includes all certificate information in the blockchain communication system.

[0094] Optionally, the certificate operation record includes the node ID of the first type of network node, operation type information and certificate information of the operation, wherein the operation type information is registration certificate or revocation certificate, and the certificate information of the operation includes certificate ID, certificate public key and certificate signature value.

[0095] It should be noted that the blockchain-based communication method provided in this embodiment can perform the functional purposes shown in the above-mentioned blockchain-based communication system embodiment to achieve the corresponding technical effects. For the sake of brief description, for parts not mentioned in this embodiment, please refer to the corresponding content in the above-mentioned embodiment.

[0096] In summary, the embodiment of the present invention provides a communication method and system based on blockchain. When registering or revoking a certificate, the first type of network node generates a corresponding certificate operation record, adds the certificate operation record to the certificate operation list in the block structure of the first type of network node, and sends the certificate operation record to the second type of network node in the communication system; when the second type of network node obtains the certificate operation record of the first type of network node, it adds the certificate operation record to the certificate operation list in the block structure of the second type of network node; at the end of the current record cycle, the target network node sends the target block structure therein to the third type of network node in the communication system, so that the third type of network node updates the copy of the certificate list information therein according to the certificate operation list in the target block structure of the target network node. When any network node performs update operations such as certificate registration and revocation, an automatic process will be triggered to synchronize the latest data changes to each network node in the network, thereby maintaining the consistency and real-time performance of the data of the entire network.

[0097] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

[0098] It will be apparent to those skilled in the art that the invention is not limited to the details of the exemplary embodiments described above and that the invention can be implemented in other specific forms without departing from the spirit or essential features of the invention. Therefore, the embodiments should be considered exemplary and non-limiting in all respects, and the scope of the invention is defined by the appended claims rather than the foregoing description, and it is intended that all variations falling within the meaning and scope of the equivalent elements of the claims be included in the invention. Any reference numeral in a claim should not be considered as limiting the claim to which it relates.

Claims

1. A communication system based on blockchain, characterized in that: The communication system comprises a plurality of network nodes; The first type of network node is used to generate a corresponding certificate operation record when registering a certificate or revoking a certificate, add the certificate operation record to a certificate operation list in a block structure in the first type of network node, and send the certificate operation record to a second type of network node in the communication system; The first type of network node is any network node in the communication system; The second type of network node is used for adding the certificate operation record to the certificate operation list in the block structure in the second type of network node when acquiring the certificate operation record of the first type of network node; The second type of network node is any network node in the communication system except the first type of network node; At the end of the current recording cycle, the target network node is used to send the target block structure therein to a third type of network node in the communication system, so that the third type of network node updates the copy of the certificate list information therein according to the certificate operation list in the target block structure of the target network node, wherein the third type of network node is any network node in the communication system except the target network node, the target network node is the network node with the highest integrity of the certificate operation list in the current recording cycle, and the copy of the certificate list information includes all certificate information in the blockchain communication system.

2. The blockchain-based communication system according to claim 1, characterized in that: The certificate operation record includes the node ID of the first type of network node, operation type information and certificate information of the operation, wherein the operation type information is registration certificate or revocation certificate, and the certificate information of the operation includes certificate ID, certificate public key and certificate signature value.

3. The blockchain-based communication system according to claim 2, characterized in that: Before registering the certificate, the network node is also used to generate a random number of preset bits using a preset random algorithm as a node private key; The network node is also used to forge a corresponding node public key using an elliptic curve digital signature algorithm with the node private key as the cornerstone; The network node is further used to perform a hash operation on the node public key to obtain a node hash value, and to encode a target field in the node hash value to obtain the node ID.

4. The blockchain-based communication system according to claim 1, characterized in that: The block structure includes a current block hash value, a previous block hash value, a timestamp, a random number, a blockchain version number, a Merkle root, and a certificate operation list, wherein the certificate operation list includes all certificate operation records acquired by the network node within the current recording period, the previous block hash value is a hash value corresponding to the target area structure within the previous recording period, the timestamp indicates the start time of the current recording period, and the random number is related to the length of the current recording period.

5. The blockchain-based communication system according to claim 4, characterized in that: The network node is used to store the target block structure within the current recording period, and update the blockchain table based on the current block hash value and the previous block hash value in the target block structure, wherein the blockchain table includes the block hash value corresponding to the target block structure within each recording period, and the block hash values ​​in the blockchain table are sorted according to the time of the recording period.

6. The blockchain-based communication system according to claim 4, characterized in that: When creating a block structure, the network node is used to perform a hash operation based on the timestamp, the random number, the blockchain version number, the Merkle root, and the previous block hash value to obtain a first-order hash value, and then reverse the first-order hash value to obtain the current block hash value.

7. The blockchain-based communication system according to claim 1, characterized in that: The certificate list information copy adopts the MPT structure.

8. The blockchain-based communication system according to claim 1, wherein: When the first communication node needs to communicate with the second communication node, the first communication node is used to query its internal copy of the certificate list information to obtain the certificate information of the second communication node, wherein the first communication node and the second communication node are both network nodes in the communication system of the blockchain; The first communication node is used to verify the signature according to the certificate information of the second communication node, and send a first random number to the second communication node when the signature verification passes; The second communication node is used to query its internal copy of the certificate list information when receiving the first random number to obtain the certificate information of the first communication node; The second communication node is used to verify the signature according to the certificate information of the first communication node, and send a second random number to the first communication node when the signature verification passes; The second communication node is further used to generate a session key according to the first random number and the second random number; The first communication node is further used to generate a session key according to the first random number and the second random number; The first communication node and the second communication node communicate using the session key.

9. A communication method based on blockchain, characterized in that: Applied to the communication system according to any one of claims 1 to 8, the method comprising: When registering a certificate or revoking a certificate, the first type of network node generates a corresponding certificate operation record, adds the certificate operation record to a certificate operation list in a block structure in the first type of network node, and sends the certificate operation record to a second type of network node in the communication system; The first type of network node is any network node in the communication system; When the second type of network node obtains the certificate operation record of the first type of network node, the second type of network node adds the certificate operation record to the certificate operation list in the block structure in the second type of network node; The second type of network node is any network node in the communication system except the first type of network node; At the end of the current recording period, the target network node sends the target block structure therein to the third type of network node in the communication system, so that the third type of network node updates the copy of the certificate list information therein according to the certificate operation list in the target block structure of the target network node, wherein the third type of network node is any network node in the communication system except the target network node, the target network node is the network node with the highest integrity of the certificate operation list in the current recording period, and the copy of the certificate list information includes all certificate information in the blockchain communication system.

10. The blockchain-based communication method according to claim 9, characterized in that: The certificate operation record includes the node ID of the first type of network node, operation type information and certificate information of the operation, wherein the operation type information is registration certificate or revocation certificate, and the certificate information of the operation includes certificate ID, certificate public key and certificate signature value.

Images