Traceable block chain privacy message transmission method and system

Abstract

The invention discloses a traceable block chain privacy message transmission method and system, and relates to the technical field of block chains. A sender generates one-time public keys of both parties, one-time addresses of both parties, identity ciphertexts, identity decipherable certificates and message ciphertexts; and combining the one-time public keys of the two parties, the one-time addresses of the two parties, the identity ciphertexts, the identity decipherable certificates and the message ciphertexts into a transaction and submitting the transaction to the block chain, and deploying a smart contract on the block chain, the smart contract being used for receiving and verifying the transaction. According to the method and the device, the sender encrypts the identity of the sender and provides the decryptable identity proof at the same time, as long as the block chain verifies the decryptable identity proof, the receiver can certainly decrypt the real sender identity, and besides the sender and the receiver, the decryptable identity of the sender can be decrypted. And any other party cannot know the real identities and message contents of the sender and the receiver, so that the privacy of the transaction is ensured.

Description

Technical Field

[0001] The present application relates to the field of blockchain technology, and specifically to a traceable blockchain privacy message delivery method and system. Background Art

[0002] With the continuous development of information technology and the widespread popularity of Internet applications, data privacy and information security issues have become increasingly prominent, especially in network communications, where protecting user privacy and ensuring the confidentiality of information have become core issues that need to be addressed. In traditional communication methods, although encryption technology and anonymous transmission are used to protect user privacy, in actual applications, how to effectively balance privacy protection with information traceability and verifiability is still a technical challenge.

[0003] As a decentralized distributed ledger technology, blockchain has the advantages of data immutability, information transparency, and traceability, making it a potential solution to information privacy protection issues. By recording data on the blockchain, blockchain can provide a safe and reliable way to transmit information and store data. However, traditional blockchain technology often emphasizes openness and transparency, which poses a great challenge in the process of protecting user privacy. Especially when it is necessary to protect user identity information and communication content, how to ensure data traceability and verification without exposing sensitive data has become an urgent problem to be solved.

[0004] The patent with the publication number CN107911216B discloses a blockchain transaction privacy protection method and system. The nodes of the blockchain system create a transaction group that can realize signatures. The user creates an account on the node, and the node joins the group after generating the public and private key information of the account; the transaction request node uses the broadcast encryption algorithm to encrypt the transaction information, and the encrypted transaction information is group-signed, and then the encrypted and group-signed transaction information is broadcast; the ordinary non-accounting node verifies and broadcasts the transaction information, and the accounting node decrypts the transaction information and executes the smart contract for accounting processing, and the broadcast encryption is recorded in the public account book. The saved data is only allowed to be opened by the accounting node, the transaction request node and the management node. The management node uses the group private key to decrypt the real account address, tracks the group signature of the group user, and exposes the identity of the signer to achieve supervision. However, this method does not protect the privacy of the real identity of the transaction participants, and the transaction can only be executed on the accounting node. The ordinary non-accounting node is only used to save the encrypted data; in addition, a centralized accounting node is required to record the undecrypted data.

[0005] The patent with publication number: CN113128999B discloses a blockchain privacy protection method and device. The first blockchain terminal broadcasts and encrypts the transaction data based on the preset group public key and the preset public keys of each legal account to obtain a transaction data packet; the first blockchain terminal signs the transaction data packet and broadcasts the signed transaction data packet to each blockchain node to trigger any blockchain node to store the transaction data packet in the block when it determines that the transaction data packet has passed the signature verification and the public account has not been tampered with. However, this method does not protect the privacy of the real identity of the transaction participants, nor does it explain how the blockchain consensus is maintained and how the state is converted after the transaction data is encrypted.

[0006] In summary, the existing technologies are unable to protect the privacy of the real identities of transaction participants, nor can they be traced, resulting in the inability to ensure the authenticity and integrity of the information. Summary of the invention

[0007] To this end, the present application provides a traceable blockchain privacy message delivery method and system to solve the problem that the existing technology is unable to protect the privacy of the real identity of the transaction participants.

[0008] In order to achieve the above objectives, this application provides the following technical solutions:

[0009] In a first aspect, a traceable blockchain privacy message delivery method is provided, the method being applied to a sender, comprising:

[0010] Step 1: Generate one-time public keys and one-time addresses for both parties;

[0011] Step 2: Use the recipient's one-time public key to encrypt its own identity information and generate identity ciphertext;

[0012] Step 3: Generate a decryptable identity certificate; the decryptable identity certificate is used to ensure that the sender holds a legal identity information certificate and the receiver can decrypt the sender's true identity;

[0013] Step 4: Use the receiver's one-time public key to encrypt the message content and generate the message ciphertext;

[0014] Step 5: Combining the identity ciphertext, the identity decryptable certificate and the message ciphertext into a transaction; the sender and the receiver of the transaction are the one-time addresses of both parties respectively;

[0015] Step 6: Submit the transaction to the blockchain; a smart contract is deployed on the blockchain, and the smart contract is used to receive and verify the transaction.

[0016] Preferably, in step 1, the one-time public key is generated by:

[0017] P one =H(rP view )G+P dec

[0018] Among them, P one represents a one-time public key, H represents a hash function, r represents a random number, P view Indicates querying the public key, P dec represents the decryption public key, and G represents the public base point on the elliptic curve.

[0019] Preferably, in step 1, the one-time address generation formula is:

[0020] A one =Address(P one )

[0021] Among them, A one Represents a one-time address, Address represents a function for calculating a one-time address, P one Represents a one-time public key.

[0022] Preferably, in step 3, the decryptable identity proof is generated using zk-STARK technology.

[0023] Preferably, in step 6, the smart contract uses a zk-STARK verification algorithm when verifying the transaction.

[0024] Preferably, the method further includes: the receiver obtains the transaction on the blockchain and determines whether the one-time address in the transaction belongs to him / herself; if so, the receiver uses the one-time private key to decrypt the identity ciphertext and message ciphertext in the transaction, thereby obtaining the sender's identity and message content.

[0025] Second, a traceable blockchain privacy message delivery system, including:

[0026] A one-time address generation module, used to generate one-time public keys and one-time addresses of both parties;

[0027] The identity information encryption module is used to encrypt the identity information of the recipient using the one-time public key of the recipient and generate the identity ciphertext;

[0028] The decryptable identity certificate generation module is used to generate a decryptable identity certificate; the decryptable identity certificate is used to ensure that the sender holds a legal identity information certificate and the receiver can decrypt the sender's true identity;

[0029] The message encryption module is used to encrypt the message content using the receiver's one-time public key and generate a message ciphertext;

[0030] A combined transaction module, used to combine the identity ciphertext, the identity decryptable certificate and the message ciphertext into a transaction; the sender and the receiver of the transaction are the one-time addresses of both parties respectively;

[0031] The transaction on-chain module is used to submit the transaction to the blockchain; a smart contract is deployed on the blockchain, and the smart contract is used to receive and verify the transaction.

[0032] In a third aspect, a computer device includes a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, it implements the steps of a traceable blockchain privacy message delivery method.

[0033] In a fourth aspect, a computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of a traceable blockchain privacy message delivery method.

[0034] In the fifth aspect, a computer program product includes a computer program or instructions, which, when executed by a processor, implement the steps of a traceable blockchain privacy message delivery method.

[0035] Compared with the prior art, this application has at least the following beneficial effects:

[0036] 1. This application provides a traceable blockchain privacy message transmission method and system. The sender generates a one-time public key, a one-time address, an identity ciphertext, an identity decryptable certificate, and a message ciphertext for both parties, and combines the one-time public key, the one-time address, the identity ciphertext, the identity decryptable certificate, and the message ciphertext for both parties into a transaction and submits it to the blockchain. A smart contract is deployed on the blockchain, and the smart contract is used to receive and verify the transaction. In this application, the sender encrypts its own identity and provides an identity decryptable certificate. As long as the blockchain verifies the identity decryptable certificate, the receiver will be able to decrypt the true sender's identity, and no other party except the sender and the receiver can know the true identity of the sender and the receiver and the message content, ensuring the privacy of the transaction.

[0037] 2. By introducing zk-STARK technology, when generating decryptable proof of identity and smart contract verification of transactions, it ensures that the receiver can decrypt and obtain the sender’s real identity information, thereby achieving information traceability. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more intuitively illustrate the prior art and the present application, exemplary drawings are given below. It should be understood that the specific shapes and structures shown in the drawings should not generally be regarded as limiting conditions for implementing the present application; for example, those skilled in the art are capable of easily making conventional adjustments or further optimizations to the addition / reduction / attribution division, specific shapes, positional relationships, connection methods, dimensional ratios, etc. of certain units (components) based on the technical concepts and exemplary drawings disclosed in the present application.

[0039] Figure 1 A basic flow chart of a traceable blockchain privacy message delivery method provided in Example 1 of the present application;

[0040] Figure 2 A flowchart of a method for determining a traceable blockchain privacy message delivery method provided in Example 1 of the present application. DETAILED DESCRIPTION

[0041] The present application is further described below in detail through specific embodiments in conjunction with the accompanying drawings.

[0042] In the description of this application: unless otherwise specified, the meaning of "plurality" is two or more. The terms "first", "second", "third", etc. in this application are intended to distinguish the objects referred to, and do not have special meanings in terms of technical connotations (for example, they should not be understood as emphasizing the importance or order, etc.). Expressions such as "including", "comprising", "having", etc. also mean "not limited to" (certain units, components, materials, steps, etc.).

[0043] The terms such as "upper", "lower", "left", "right", "middle", etc. cited in this application are usually used to indicate the general relative position relationship for the purpose of intuitive understanding by referring to the drawings, and are not absolute limitations on the position relationship in the actual product.

[0044] Embodiment 1

[0045] See also Figure 1 and Figure 2 This embodiment provides a traceable blockchain privacy message delivery method, which is applied to the sender and includes:

[0046] S1: Generate one-time public keys and one-time addresses of both parties;

[0047] Specifically, the public key refers to the encryption key disclosed in the public key encryption system, which is used to encrypt messages or verify digital signatures. The public key is used in pairs with the corresponding private key, where the public key is public and the private key is kept secret, ensuring that only the person holding the private key can decrypt the information or generate a valid signature.

[0048] The private key is a secret key used to decrypt messages or generate digital signatures in a public key encryption system. It exists in pairs with the public key. The public key is public, while the private key must be kept strictly confidential. The security of the private key is critical because anyone who possesses the private key can decrypt information encrypted by the public key or forge a signature.

[0049] An address is an identifier used in a blockchain system to receive digital assets. It consists of a string of letters and numbers. The process of generating an address usually starts with a public key generated by the user. First, the user generates a pair of keys: a private key and a public key. The public key is calculated from the private key using an elliptic curve cryptographic algorithm. The public key is then double-hashed (for example, first with SHA-256 and then with RIPEMD-160) to obtain a shorter hash value. Finally, this hash value is specifically encoded (such as Base58Check encoding) and prefixed to generate the final address. This address can be publicly used to receive digital assets, while the corresponding private key must be kept confidential to ensure the security of the transfer.

[0050] An elliptic curve is a plane algebraic curve defined as satisfying the equation y 2 =x 3 +ax+b, where a and b are real constants. Elliptic curves are widely used in cryptography because of their computational difficulty in the elliptic curve discrete logarithm problem (ECDLP), which can provide efficient and secure encryption methods.

[0051] A hash function is an algorithm that converts data input of any length into an output (hash value) of fixed length. Hash functions are one-way, that is, the original input cannot be reversed from the hash value, and the hash values ​​generated for different inputs are almost always different. It is widely used in data integrity verification, digital signatures, and cryptography.

[0052] In this step, the sender generates a one-time public key and a one-time address for both parties, which are used for the current transaction, protecting the anonymity of the identities of both parties. Specifically:

[0053] Generate a one-time public key:

[0054] First generate a random number r, and then use the corresponding query public key P view and the decryption public key P dec Calculate the one-time public key P one :

[0055] P one =H(rP view )G+P dec

[0056] Where H represents a hash function and G represents a public base point on the elliptic curve. If the one-time address belongs to the recipient, rG is disclosed in the transaction.

[0057] Generate a one-time address:

[0058] The user uses a one-time public key P one , get the one-time address A one :

[0059] A one =Address(P one )

[0060] Among them, Address represents the function of calculating a one-time address. According to the actual design, hash calculation can be performed first, and then a prefix can be added after encoding conversion.

[0061] Generate a one-time private key:

[0062] The user uses his own private key S dec (Satisfy P dec =S dec G), you can get the one-time private key S one :

[0063] S one =H(rP view )+S dec .

[0064] S2: Use the recipient's one-time public key to encrypt its own identity information and generate identity ciphertext;

[0065] Specifically, the sender encrypts its own identity information (query public key and decryption public key) using the receiver's one-time public key and generates an identity ciphertext.

[0066] S3: Generate a decryptable identity certificate; the decryptable identity certificate is used to ensure that the sender holds a legal identity information certificate and the receiver can decrypt the sender's true identity;

[0067] In this step, the sender uses zk-STARK technology to generate a decryptable identity certificate, which ensures that the sender holds a legal identity certificate and the receiver can use the decryption private key to decrypt the sender's true identity. Specifically:

[0068] S301: Write a zk-STARK constraint to calculate the sender's one-time address;

[0069] S302: Write zk-STARK constraints for encrypted identity information;

[0070] S303: Write a zk-STARK constraint to verify the sender's identity certificate;

[0071] S304: Set the zk-STARK public input to the sender's one-time address and the sender's identity ciphertext, and the secret input to the identity information certificate (which contains the query public key and the decryption public key);

[0072] S305: Perform calculations on the zk-STARK proof algorithm and obtain a decryptable identity certificate.

[0073] It should be noted that zk-STARK (Zero-Knowledge Scalable Transparent Argument of Knowledge) is a zero-knowledge proof technology that allows a party to prove the authenticity of a certain knowledge or data without revealing any specific information. zk-STARK is efficient, scalable and transparent, does not rely on trusted settings, and can provide fast verification in large-scale data and complex calculations. It has important applications in the fields of blockchain and privacy protection, including:

[0074] Constraints: A set of rules or conditions imposed on each state and transition between states in a computational process in order to verify the correctness of the computational process.

[0075] Public Input: Input data that is known to both parties and does not need to be hidden during the proof process. This data is usually used as the starting point of the calculation or the basis for verification.

[0076] Secret input: During the proof process, one party wishes to hide input data that the other party does not want to know. This data is usually sensitive information such as personal privacy or business secrets.

[0077] Proof Algorithm: A protocol that does not require a trusted setup. By arithmetizing the computation process and making polynomial commitments, it is possible to prove the correctness of the computation results to the verifier without leaking any private data.

[0078] Verification algorithm: Verify the correctness of the calculation process by performing a series of checks and calculations on the proof information provided by the prover, thereby ensuring that the prover has not cheated.

[0079] In this step, the sender encrypts his or her identity and provides proof of identity decryption. As long as the proof of identity decryption is verified on the chain, the receiver will be able to decrypt the true identity of the sender.

[0080] S4: Use the receiver's one-time public key to encrypt the message content and generate a message ciphertext;

[0081] Specifically, in this step, the sender encrypts the message content using the receiver's one-time public key to generate a message ciphertext. In this step, the message is encrypted using a key jointly held by the sender and the receiver, ensuring that only the sender and the receiver can decrypt the message.

[0082] S5: Combine the identity ciphertext, identity decryptable proof and message ciphertext into a transaction; the sender and receiver of the transaction are the one-time addresses of both parties respectively;

[0083] S6: Submit the transaction to the blockchain; a smart contract is deployed on the blockchain, which is used to receive and verify the transaction.

[0084] Specifically, a smart contract is a self-executing code deployed on the blockchain to automate and execute contract terms. It runs automatically when specific conditions are met without human intervention, thus ensuring the transparency and credibility of the contract. Smart contracts can handle functions such as asset transfer, automatic payment, and verification of conditions, and are widely used in finance, supply chain, insurance and other fields. Because it is based on blockchain technology, smart contracts are tamper-proof and irreversible, ensuring the security and reliability of contract execution.

[0085] In this step, the sender uploads the transaction to the blockchain, where a smart contract is deployed. The smart contract receives and verifies the transaction. This includes running the zk-STARK verification algorithm to verify the validity of the identity decryptability certificate to ensure that the sender's identity can be decrypted. The verification algorithm is as follows:

[0086] Based on the zk-STARK constraints and public inputs from step 3 (no secret inputs are required), the zk-STARK verification algorithm is calculated to obtain a valid or invalid result.

[0087] A traceable blockchain privacy message delivery method provided by this embodiment also includes: the receiver obtains the transaction on the blockchain and determines whether the one-time address in the transaction belongs to himself. If it belongs to himself, the one-time private key is used to decrypt the identity ciphertext and message ciphertext in the transaction, thereby obtaining the sender's identity and message content.

[0088] The process by which the receiver determines whether a one-time address belongs to him is as follows:

[0089] Use your own query private key view and public rG calculations view rG=rP view , then verify P' dec =P one -H(rP view ) Is G your own decryption public key? If so, it means that the one-time address belongs to you.

[0090] When the one-time address belongs to the recipient, calculate the one-time private key s one ,as follows:

[0091] s one =H(rP view )+s enc

[0092] Among them, s enc is the recipient's decryption private key.

[0093] In this embodiment, if the one-time address of the receiver in the transaction matches the address of the receiver, the receiver uses the one-time private key to decrypt the message and the sender's identity. Except for the sender and the receiver, no other party can know the sender and the receiver's identity and the message content, ensuring the privacy of the transaction.

[0094] It should be noted that, in this embodiment, all participants must register in a public key infrastructure (PKI), which is responsible for verifying user identities and issuing identity information certificates, including query public keys and decryption public keys.

[0095] Public Key Infrastructure (PKI) is a framework for creating, managing, distributing, using, storing, and revoking digital certificates and public keys. By using encryption technology, PKI ensures the security of network communications and provides authentication, data integrity, and information confidentiality.

[0096] This embodiment provides a traceable blockchain privacy message delivery method, in which the message sender generates a sender's one-time address, a receiver's one-time address, a sender's identity ciphertext, a proof of identity decryptability, and a message ciphertext, and assembles them into a transaction on the chain. The on-chain contract receives the transaction and verifies the decryptability proof. The receiver scans the receiver's one-time address of the on-chain transaction to check whether it belongs to the receiver. If so, the message and the sender's identity are decrypted. Because there is a proof of identity decryptability, the receiver must be able to know the sender's identity. Except for the sender and the receiver, other parties cannot know the sender's identity, the receiver's identity, and the original message. All relevant participants need to register with the public key infrastructure, which reviews, registers, and promulgates the user's identity and the corresponding query public key and decryption public key.

[0097] In the traceable blockchain privacy message transmission method provided in this embodiment, the identities of blockchain participants remain anonymous, and communication messages are encrypted to ensure data security. At the same time, by introducing zk-STARK technology, the receiver can decrypt and obtain the sender's real identity information, thereby ensuring the traceability of the system.

[0098] Embodiment 2

[0099] This embodiment provides a traceable blockchain privacy message delivery system, including:

[0100] A one-time address generation module, used to generate one-time public keys and one-time addresses of both parties;

[0101] The identity information encryption module is used to encrypt the identity information of the recipient using the one-time public key of the recipient and generate the identity ciphertext;

[0102] The decryptable identity certificate generation module is used to generate a decryptable identity certificate; the decryptable identity certificate is used to ensure that the sender holds a legal identity information certificate and the receiver can decrypt the sender's true identity;

[0103] The message encryption module is used to encrypt the message content using the receiver's one-time public key and generate a message ciphertext;

[0104] A combined transaction module, used to combine the identity ciphertext, the identity decryptable certificate and the message ciphertext into a transaction; the sender and the receiver of the transaction are the one-time addresses of both parties respectively;

[0105] The transaction on-chain module is used to submit the transaction to the blockchain; a smart contract is deployed on the blockchain, and the smart contract is used to receive and verify the transaction.

[0106] For the specific implementation content of each module in a traceable blockchain privacy message delivery system, please refer to the above definition of a traceable blockchain privacy message delivery method, which will not be repeated here.

[0107] Embodiment 3

[0108] This embodiment provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the steps of a traceable blockchain privacy message delivery method are implemented.

[0109] Embodiment 4

[0110] This embodiment provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of a traceable blockchain privacy message delivery method are implemented.

[0111] Embodiment 5

[0112] This embodiment provides a computer program product, including a computer program or instructions, which, when executed by a processor, implement the steps of a traceable blockchain privacy message delivery method.

[0113] The technical features of the above embodiments may be arbitrarily combined (as long as there is no contradiction in the combination of these technical features). To make the description concise, not all possible combinations of the technical features in the above embodiments are described; these embodiments that are not explicitly written should also be considered to be within the scope of this specification.

Claims

1. A traceable blockchain privacy message delivery method, characterized in that: The method is applied to the sender, comprising: Step 1: Generate one-time public keys and one-time addresses for both parties; Step 2: Use the recipient's one-time public key to encrypt its own identity information and generate identity ciphertext; Step 3: Generate a decryptable identity certificate; the decryptable identity certificate is used to ensure that the sender holds a legal identity information certificate and the receiver can decrypt the sender's true identity; Step 4: Encrypt the message content using the receiver's one-time public key and generate the message ciphertext; Step 5: Combining the identity ciphertext, the identity decryptable certificate and the message ciphertext into a transaction; the sender and the receiver of the transaction are the one-time addresses of both parties respectively; Step 6: Submit the transaction to the blockchain; a smart contract is deployed on the blockchain, and the smart contract is used to receive and verify the transaction.

2. The traceable blockchain private message delivery method according to claim 1 is characterized in that: In step 1, the one-time public key generation formula is: P one =H(rP view )G+P dec Among them, P one represents a one-time public key, H represents a hash function, r represents a random number, P view Indicates querying the public key, P dec represents the decryption public key, and G represents the public base point on the elliptic curve.

3. The traceable blockchain private message delivery method according to claim 2 is characterized in that: In step 1, the one-time address generation formula is: A one =Address(P one ) Among them, A one Represents a one-time address, Address represents a function for calculating a one-time address, P one Represents a one-time public key.

4. The traceable blockchain private message delivery method according to claim 1 is characterized in that: In step 3, the decryptable proof of identity is generated using zk-STARK technology.

5. The traceable blockchain private message delivery method according to claim 1 is characterized in that: In step 6, the smart contract verifies the transaction using the zk-STARK verification algorithm.

6. The traceable blockchain privacy message delivery method according to claim 1 is characterized in that: Also includes: The receiver obtains the transaction on the blockchain and determines whether the one-time address in the transaction belongs to him / her. If it does, the receiver uses the one-time private key to decrypt the identity ciphertext and message ciphertext in the transaction to obtain the sender's identity and message content.

7. A traceable blockchain privacy message delivery system, characterized in that: include: A one-time address generation module, used to generate one-time public keys and one-time addresses of both parties; The identity information encryption module is used to encrypt the identity information of the recipient using the one-time public key of the recipient and generate the identity ciphertext; The decryptable identity certificate generation module is used to generate a decryptable identity certificate; the decryptable identity certificate is used to ensure that the sender holds a legal identity information certificate and the receiver can decrypt the sender's true identity; The message encryption module is used to encrypt the message content using the receiver's one-time public key and generate a message ciphertext; A combined transaction module, used to combine the identity ciphertext, the identity decryptable certificate and the message ciphertext into a transaction; the sender and the receiver of the transaction are the one-time addresses of both parties respectively; The transaction on-chain module is used to submit the transaction to the blockchain; a smart contract is deployed on the blockchain, and the smart contract is used to receive and verify the transaction.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product comprising a computer program or instructions, characterized in that When the computer program or instruction is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images