Block chain public service system and method based on layered architecture

Abstract

The invention relates to the technical field of block chains, in particular to a block chain public service system and method based on a layered architecture. Comprising an access layer configured to receive an external request and perform load balancing and security encryption, the access layer comprises a load balancing module and a national secret encryption module, the load balancing module is used for performing load balancing through an Nginx load balancer, and the national secret encryption module is used for encrypting data in a network transmission process; the business layer is in communication connection with the access layer and comprises a plurality of decoupled micro-service modules, and each micro-service module comprises a transaction service module and a certificate service module which are respectively used for processing block chain transactions and managing digital certificates; and the data layer is in communication connection with the business layer and is used for storing data, and the data layer comprises a relational database cluster, a cache database cluster and a block chain node.

Description

Technical Field

[0001] This invention relates to the field of blockchain technology, and specifically to a blockchain public service system and method based on a layered architecture. Background Technology

[0002] As the core carrier of distributed ledgers, blockchain technology has shown significant value in finance, supply chain, government affairs and other fields in recent years. However, the design and deployment models of early blockchain systems still have significant technical barriers and cost thresholds, which limit their popularization and application among small and medium-sized enterprises and individual developers.

[0003] Traditional blockchains employ a consortium blockchain architecture, requiring private servers for node deployment and data isolation. This model necessitates enterprises or institutions building their own physical servers or purchasing cloud service resources, and configuring high-performance computing equipment (such as multi-core CPUs, large-capacity memory, and high-speed storage) to support blockchain consensus computation, data synchronization, and cryptographic operations. For example, during the operation of consensus algorithms (such as PBFT and Raft), nodes need to continuously participate in voting and state synchronization, placing stringent demands on network bandwidth and computing resources. Furthermore, to ensure data security, private deployments typically require accompanying security equipment such as firewalls and intrusion detection systems (IDS), further increasing hardware investment costs. According to industry research, the initial hardware investment for small- to medium-sized consortium blockchain nodes can reach hundreds of thousands of yuan, and ongoing maintenance and upgrade costs must also be borne.

[0004] Secondly, at the software level, the traditional use of ShareChain requires developers to have technical capabilities in multiple fields: SDK Integration and Secondary Development: Developers need to thoroughly study the official sample SDKs, understand their interface design, data structures, and calling logic, and perform customized development based on business needs. For example, deploying smart contracts requires calling the on-chain compiler through the SDK to compile high-level languages ​​(such as Solidity) into bytecode and upload it to the blockchain network, which involves complex version compatibility and error handling.

[0005] Understanding the core mechanisms of blockchain: Developers need to master the lifecycle management of smart contracts (writing, testing, deploying, and upgrading), the application scenarios of asymmetric encryption algorithms (such as ECDSA and SM2) (transaction signing and authentication), the design of authorization mechanisms (Role-Based Access Control (RBAC) or Attribute-Based Encryption (ABE), and the parameter configuration of consensus algorithms (such as DPoS and HotStuff) (block time, block size, and node weight). This knowledge is scattered across multiple disciplines such as cryptography, distributed systems, and game theory, resulting in a steep learning curve.

[0006] On-chain interaction logic development: Developers are responsible for handling the interaction logic between the blockchain and the business system, including transaction status monitoring (such as waiting for transaction confirmation, rolling back abnormal transactions), block header synchronization (verifying the legitimacy of the chain), and event subscription (such as monitoring contract events to trigger subsequent operations). Due to the aforementioned technical complexity, the traditional integration cycle for a shared blockchain typically lasts several months, encompassing multiple stages including requirements analysis, architecture design, development testing, and deployment. During this process, companies need to invest significant technical personnel (such as blockchain engineers, cryptography experts, and operations staff) to provide end-to-end support, leading to a surge in labor costs. Statistics show that the development cost of a shared blockchain project for a medium-sized enterprise can reach millions of yuan, and they must bear the risk of project delays or even failure due to incorrect technology selection, insufficient consensus algorithm performance, or security vulnerabilities.

[0007] The high cost and high barriers to entry of traditional blockchain technology directly deter small and medium-sized enterprises and individual developers. Limited resources: Small and medium-sized enterprises typically lack dedicated blockchain teams and need to rely on external service providers or open-source communities for support. However, service providers are expensive and have long response times, and the fragmentation of open-source documentation further exacerbates the development difficulty.

[0008] Business agility requirements: Individual developers or startups need to quickly validate their business models, but the lengthy development cycle and high trial-and-error costs of traditional blockchains are in serious conflict with their "small steps, quick iterations" strategy.

[0009] Ecosystem closure: Privately deployed consortium blockchains are difficult to interconnect with external systems, which limits the value release of blockchain in cross-institutional collaboration scenarios and further weakens the adoption willingness of SMEs. Summary of the Invention

[0010] The technical problem solved by this invention is to provide a blockchain public service system based on a layered architecture, which can solve the problems of complex deployment, long development cycle and high cost of traditional blockchain systems.

[0011] The basic solution provided by this invention is a blockchain public service system based on a layered architecture, comprising: The access layer is configured to receive external requests and perform load balancing and security encryption. The access layer includes a load balancing module and a national cryptographic encryption module. The load balancing module is used to perform load balancing through an Nginx load balancer, and the national cryptographic encryption module is used to encrypt data during network transmission. The business layer, which communicates with the access layer, includes multiple decoupled microservice modules. The microservice modules include a transaction service module and a certificate service module, which are used to handle blockchain transactions and digital certificate management, respectively. The data layer, which communicates with the business layer, is used to store data. The data layer includes a relational database cluster, a cache database cluster, and blockchain nodes. The system encapsulates the underlying blockchain nodes through the business layer and provides a unified application programming interface (API) to the outside world, enabling business systems to interact with the blockchain by calling the API.

[0012] The principles and advantages of this invention are as follows: Through the collaborative design of the access layer, business layer, and data layer, the complex underlying blockchain technology is encapsulated into a standardized and scalable public service. The access layer is responsible for traffic scheduling and security encryption, using a load balancing module to ensure efficient request distribution and a national cryptographic encryption module to guarantee the confidentiality and integrity of data transmission. The business layer adopts a microservice architecture, modularizing core functions such as transaction services and certificate management, giving the system high cohesion and low coupling characteristics, facilitating independent development, testing, and deployment. The data layer integrates relational databases, cache databases, and blockchain nodes to achieve unified management and persistent storage of structured data, frequently accessed data, and raw on-chain data.

[0013] By abstracting and encapsulating the underlying blockchain nodes at the business layer, a unified application programming interface (API) is provided to external business systems. This eliminates the need for users to directly deploy and maintain blockchain nodes, significantly reducing the barrier to entry and operational costs of blockchain technology. It also significantly improves system maintainability and scalability. Furthermore, through national cryptographic algorithms and layered security design, a comprehensive security protection system from transmission to storage is constructed, effectively solving the problems of complex deployment, long development cycles, and high costs associated with traditional blockchain systems. This makes it particularly suitable for rapid adoption and business innovation by small and medium-sized enterprises (SMEs).

[0014] Furthermore, the load balancing module includes a traffic distribution module, a health monitoring module, and an expansion module; The traffic distribution module is used to distribute incoming business requests evenly to healthy service nodes in the business layer using a preset load balancing strategy. The health monitoring module is used to monitor the health status of service nodes in the business layer in real time. When a service node is detected to be faulty, it is removed from the list of available services and switched to another normal service node. The extension module is used so that when a new service node is connected, the load balancer can automatically include it in the scheduling scope and distribute traffic according to the preset strategy.

[0015] The traffic distribution module intelligently distributes external requests to healthy service instances in the business layer using a pre-defined load balancing strategy, avoiding single points of overload and improving system concurrency and resource utilization. The health monitoring module continuously probes the operational status of business layer nodes; upon detecting a faulty node, it immediately removes it from the service list and seamlessly switches traffic to healthy nodes, thus achieving high availability and self-healing. The expansion module ensures the system's elastic scaling capability; when a new service node joins the cluster, the load balancer automatically identifies it and includes it in the scheduling scope, allocating traffic according to a pre-defined strategy to achieve dynamic resource expansion and load balancing. This allows the system to flexibly respond to fluctuations in business traffic, ensuring continuous and stable service operation while reducing manual intervention and operational complexity, providing a solid performance and availability foundation for blockchain public services.

[0016] Furthermore, the national cryptographic encryption module includes a transport layer encryption module and a storage layer encryption module; The transport layer encryption module is used to encrypt transmitted data and additional information using the SM4 symmetric encryption algorithm, and the storage layer encryption module uses the SM3 hash algorithm to calculate the digest of the data and stores the digest and the original data separately.

[0017] The transport layer encryption module uses the SM4 symmetric encryption algorithm to encrypt the business data and additional information transmitted in the network, ensuring that the data is not stolen or tampered with during transmission, and effectively resisting the risk of man-in-the-middle attacks and data leakage. The storage layer encryption module uses the SM3 hash algorithm to calculate the digest of sensitive data and stores the digest value separately from the original data. By comparing the digest value, the integrity of the data can be quickly verified, preventing the data from being maliciously destroyed or tampered with.

[0018] Furthermore, the transaction service module includes a transaction receiving module, a smart contract module, a transaction module, and a transaction monitoring module; The transaction receiving module is used to receive external transaction requests forwarded by the access layer and to perform pre-verification of the format, signature, and business logic of the external transaction requests. The smart contract module is used to handle the deployment, upgrade, and invocation of smart contracts, and integrates national cryptographic algorithms to encrypt and verify the digest of contract invocation data. The transaction module uses a pre-configured health algorithm to dynamically select the optimal node from multiple blockchain nodes in the data layer to submit transactions. The transaction monitoring module is used to listen to the processing status of transactions on the blockchain network and send asynchronous notifications to the business system after the transaction is finalized.

[0019] The transaction receiving module receives external transaction requests and performs pre-verification of their format, signature, and business logic to ensure the legality and validity of the requests, intercepting malicious attacks at the source. The smart contract module integrates national cryptographic algorithms to encrypt and verify data during contract deployment, upgrades, and invocation, ensuring the security and trustworthiness of on-chain code and data. The transaction module dynamically selects the optimal blockchain node in the data layer to submit transactions through a pre-built health algorithm, improving transaction success rate and processing efficiency. The transaction monitoring module continuously monitors the blockchain network, tracks changes in transaction status, and sends asynchronous notifications to the business system after the transaction is finalized, achieving transparency and traceability of the transaction process. By encapsulating complex blockchain transaction processing into standardized services, the integration difficulty of business systems is reduced, while multi-stage security verification and intelligent scheduling are implemented.

[0020] Furthermore, the certificate service module includes a certificate generation module, a certificate verification module, and a key management module; The certificate generation module is used to generate digital certificates for users accessing the system based on the SM2 asymmetric encryption algorithm and store them locally. The certificate verification module is used to check the validity and authenticity of digital certificates; The key management module is used for the secure generation, storage, and access control of certificate-related private keys.

[0021] The certificate generation module, based on the SM2 asymmetric encryption algorithm, generates and issues digital certificates for system users and securely stores copies of the certificates locally to ensure reliable issuance and backup of identity credentials. The certificate verification module is responsible for verifying the validity, authenticity, and revocation status of digital certificates. By querying the certificate status in real time, it prevents expired or revoked certificates from being used illegally. The key management module focuses on the secure generation, storage, and access control of certificate-related private keys. Through integration with the hardware security module, it ensures that private keys are always under the highest level of protection, eliminating the risk of leakage.

[0022] Furthermore, it also includes an intelligent operation and maintenance module, which includes a monitoring and alarm module, a fault location module, and an automated deployment module; The monitoring and alarm module is used to collect and display the operational status indicators of system infrastructure, blockchain nodes and business applications in real time, and trigger alarms when the indicators are abnormal. The fault location module integrates distributed tracing tools to perform full-link tracing of a single request across multiple microservices, record and visualize its execution path and performance bottlenecks to quickly locate the fault point; The automated deployment module, based on containerization technology and a canary release and rolling upgrade strategy, completes the update and release of system services.

[0023] The present invention also discloses a blockchain public service method based on a layered architecture, which is applied to the aforementioned blockchain public service system based on a layered architecture. Attached Figure Description

[0024] Figure 1 This is a schematic diagram of an embodiment of a blockchain public service system based on a layered architecture according to the present invention. Detailed Implementation

[0025] The following detailed description illustrates the specific implementation method: The basic implementation examples are as follows: Figure 1 As shown: A blockchain public service system based on a layered architecture includes: The access layer is configured to receive external requests and perform load balancing and security encryption. The access layer includes a load balancing module and a national cryptographic encryption module. The load balancing module is used to perform load balancing through an Nginx load balancer, and the national cryptographic encryption module is used to encrypt data during network transmission. The business layer, which communicates with the access layer, includes multiple decoupled microservice modules. The microservice modules include a transaction service module and a certificate service module, which are used to handle blockchain transactions and digital certificate management, respectively. The data layer, which communicates with the business layer, is used to store data. The data layer includes a relational database cluster, a cache database cluster, and blockchain nodes. The system encapsulates the underlying blockchain nodes through the business layer and provides a unified application programming interface (API) to the outside world, enabling business systems to interact with the blockchain by calling the API.

[0026] Through the collaborative design of the access layer, business layer, and data layer, the complex underlying blockchain technology is encapsulated into standardized and scalable public services. The access layer is responsible for traffic scheduling and security encryption, using a load balancing module to ensure efficient request distribution and a national cryptographic encryption module to guarantee the confidentiality and integrity of data transmission. The business layer adopts a microservice architecture, modularizing core functions such as transaction services and certificate management, giving the system high cohesion and low coupling characteristics, facilitating independent development, testing, and deployment. The data layer integrates relational databases, cache databases, and blockchain nodes to achieve unified management and persistent storage of structured data, frequently accessed data, and raw on-chain data.

[0027] By abstracting and encapsulating the underlying blockchain nodes at the business layer, a unified application programming interface (API) is provided to external business systems. This eliminates the need for users to directly deploy and maintain blockchain nodes, significantly reducing the barrier to entry and operational costs of blockchain technology. It also significantly improves system maintainability and scalability. Furthermore, through national cryptographic algorithms and layered security design, a comprehensive security protection system from transmission to storage is constructed, effectively solving the problems of complex deployment, long development cycles, and high costs associated with traditional blockchain systems. This makes it particularly suitable for rapid adoption and business innovation by small and medium-sized enterprises (SMEs).

[0028] The load balancing module includes a traffic distribution module, a health monitoring module, and an expansion module; The traffic distribution module is used to distribute incoming business requests evenly to healthy service nodes in the business layer using a preset load balancing strategy. The health monitoring module is used to monitor the health status of service nodes in the business layer in real time. When a service node is detected to be faulty, it is removed from the list of available services and switched to another normal service node. The extension module is used so that when a new service node is connected, the load balancer can automatically include it in the scheduling scope and distribute traffic according to the preset strategy.

[0029] The traffic distribution module intelligently distributes external requests to healthy service instances in the business layer using a pre-defined load balancing strategy, avoiding single points of overload and improving system concurrency and resource utilization. The health monitoring module continuously probes the operational status of business layer nodes; upon detecting a faulty node, it immediately removes it from the service list and seamlessly switches traffic to healthy nodes, thus achieving high availability and self-healing. The expansion module ensures the system's elastic scaling capability; when a new service node joins the cluster, the load balancer automatically identifies it and includes it in the scheduling scope, allocating traffic according to a pre-defined strategy to achieve dynamic resource expansion and load balancing. This allows the system to flexibly respond to fluctuations in business traffic, ensuring continuous and stable service operation while reducing manual intervention and operational complexity, providing a solid performance and availability foundation for blockchain public services.

[0030] The national cryptographic encryption module includes a transport layer encryption module and a storage layer encryption module; The transport layer encryption module is used to encrypt transmitted data and additional information using the SM4 symmetric encryption algorithm, and the storage layer encryption module uses the SM3 hash algorithm to calculate the digest of the data and stores the digest and the original data separately.

[0031] The transport layer encryption module uses the SM4 symmetric encryption algorithm to encrypt the business data and additional information transmitted in the network, ensuring that the data is not stolen or tampered with during transmission, and effectively resisting the risk of man-in-the-middle attacks and data leakage. The storage layer encryption module uses the SM3 hash algorithm to calculate the digest of sensitive data and stores the digest value separately from the original data. By comparing the digest value, the integrity of the data can be quickly verified, preventing the data from being maliciously destroyed or tampered with.

[0032] The transaction service module includes a transaction receiving module, a smart contract module, a transaction module, and a transaction monitoring module; The transaction receiving module is used to receive external transaction requests forwarded by the access layer and to perform pre-verification of the format, signature, and business logic of the external transaction requests. The smart contract module is used to handle the deployment, upgrade, and invocation of smart contracts, and integrates national cryptographic algorithms to encrypt and verify the digest of contract invocation data. The transaction module uses a pre-configured health algorithm to dynamically select the optimal node from multiple blockchain nodes in the data layer to submit transactions. The transaction monitoring module is used to listen to the processing status of transactions on the blockchain network and send asynchronous notifications to the business system after the transaction is finalized.

[0033] The transaction receiving module receives external transaction requests and performs pre-verification of their format, signature, and business logic to ensure the legality and validity of the requests, intercepting malicious attacks at the source. The smart contract module integrates national cryptographic algorithms to encrypt and verify data during contract deployment, upgrades, and invocation, ensuring the security and trustworthiness of on-chain code and data. The transaction module dynamically selects the optimal blockchain node in the data layer to submit transactions through a pre-built health algorithm, improving transaction success rate and processing efficiency. The transaction monitoring module continuously monitors the blockchain network, tracks changes in transaction status, and sends asynchronous notifications to the business system after the transaction is finalized, achieving transparency and traceability of the transaction process. By encapsulating complex blockchain transaction processing into standardized services, the integration difficulty of business systems is reduced, while multi-stage security verification and intelligent scheduling are implemented.

[0034] The certificate service module includes a certificate generation module, a certificate verification module, and a key management module; The certificate generation module is used to generate digital certificates for users accessing the system based on the SM2 asymmetric encryption algorithm and store them locally. The certificate verification module is used to check the validity and authenticity of digital certificates; The key management module is used for the secure generation, storage, and access control of certificate-related private keys.

[0035] The certificate generation module, based on the SM2 asymmetric encryption algorithm, generates and issues digital certificates for system users and securely stores copies of the certificates locally to ensure reliable issuance and backup of identity credentials. The certificate verification module is responsible for verifying the validity, authenticity, and revocation status of digital certificates. By querying the certificate status in real time, it prevents expired or revoked certificates from being used illegally. The key management module focuses on the secure generation, storage, and access control of certificate-related private keys. Through integration with the hardware security module, it ensures that private keys are always under the highest level of protection, eliminating the risk of leakage.

[0036] It also includes an intelligent operation and maintenance module, which includes a monitoring and alarm module, a fault location module, and an automated deployment module; The monitoring and alarm module is used to collect and display the operational status indicators of system infrastructure, blockchain nodes and business applications in real time, and trigger alarms when the indicators are abnormal. The fault location module integrates distributed tracing tools to perform full-link tracing of a single request across multiple microservices, record and visualize its execution path and performance bottlenecks to quickly locate the fault point; The automated deployment module, based on containerization technology and a canary release and rolling upgrade strategy, completes the update and release of system services.

[0037] The present invention also discloses a blockchain public service method based on a layered architecture, which is applied to the aforementioned blockchain public service system based on a layered architecture.

[0038] The above are merely embodiments of the present invention. Commonly known structures and characteristics are not described in detail here. Those skilled in the art are aware of all common technical knowledge in the field prior to the application date or priority date, are aware of all existing technologies in that field, and have the ability to apply conventional experimental methods prior to that date. Those skilled in the art can, under the guidance of this application, improve and implement this solution in combination with their own capabilities. Some typical known structures or methods should not be obstacles for those skilled in the art to implement this application. It should be noted that those skilled in the art can make several modifications and improvements without departing from the structure of the present invention. These should also be considered within the scope of protection of the present invention, and will not affect the effectiveness of the implementation of the present invention or the practicality of the patent. The scope of protection claimed in this application should be determined by the content of its claims, and the specific embodiments described in the specification can be used to interpret the content of the claims.

Claims

1. A blockchain public service system based on a layered architecture, characterized in that: include: The access layer is configured to receive external requests and perform load balancing and security encryption. The access layer includes a load balancing module and a national cryptographic encryption module. The load balancing module is used to perform load balancing through an Nginx load balancer, and the national cryptographic encryption module is used to encrypt data during network transmission. The business layer, which communicates with the access layer, includes multiple decoupled microservice modules. The microservice modules include a transaction service module and a certificate service module, which are used to handle blockchain transactions and digital certificate management, respectively. The data layer, which communicates with the business layer, is used to store data. The data layer includes a relational database cluster, a cache database cluster, and blockchain nodes. The system encapsulates the underlying blockchain nodes through the business layer and provides a unified application programming interface (API) to the outside world, enabling business systems to interact with the blockchain by calling the API.

2. The blockchain public service system based on a layered architecture according to claim 1, characterized in that: The load balancing module includes a traffic distribution module, a health monitoring module, and an expansion module; The traffic distribution module is used to distribute incoming business requests evenly to healthy service nodes in the business layer using a preset load balancing strategy. The health monitoring module is used to monitor the health status of service nodes in the business layer in real time. When a service node is detected to be faulty, it is removed from the list of available services and switched to another normal service node. The extension module is used so that when a new service node is connected, the load balancer can automatically include it in the scheduling scope and distribute traffic according to the preset strategy.

3. A blockchain public service system based on a layered architecture according to claim 2, characterized in that: The national cryptographic encryption module includes a transport layer encryption module and a storage layer encryption module; The transport layer encryption module is used to encrypt transmitted data and additional information using the SM4 symmetric encryption algorithm, and the storage layer encryption module uses the SM3 hash algorithm to calculate the digest of the data and stores the digest and the original data separately.

4. A blockchain public service system based on a layered architecture according to claim 3, characterized in that: The transaction service module includes a transaction receiving module, a smart contract module, a transaction module, and a transaction monitoring module; The transaction receiving module is used to receive external transaction requests forwarded by the access layer and to perform pre-verification of the format, signature, and business logic of the external transaction requests. The smart contract module is used to handle the deployment, upgrade, and invocation of smart contracts, and integrates national cryptographic algorithms to encrypt and verify the digest of contract invocation data. The transaction module uses a pre-configured health algorithm to dynamically select the optimal node from multiple blockchain nodes in the data layer to submit transactions. The transaction monitoring module is used to listen to the processing status of transactions on the blockchain network and send asynchronous notifications to the business system after the transaction is finalized.

5. A blockchain public service system based on a layered architecture according to claim 4, characterized in that: The certificate service module includes a certificate generation module, a certificate verification module, and a key management module; The certificate generation module is used to generate digital certificates for users accessing the system based on the SM2 asymmetric encryption algorithm and store them locally. The certificate verification module is used to check the validity and authenticity of digital certificates; The key management module is used for the secure generation, storage, and access control of certificate-related private keys.

6. A blockchain public service system based on a layered architecture according to claim 5, characterized in that: It also includes an intelligent operation and maintenance module, which includes a monitoring and alarm module, a fault location module, and an automated deployment module; The monitoring and alarm module is used to collect and display the operational status indicators of system infrastructure, blockchain nodes and business applications in real time, and trigger alarms when the indicators are abnormal. The fault location module integrates distributed tracing tools to perform full-link tracing of a single request across multiple microservices, record and visualize its execution path and performance bottlenecks to quickly locate the fault point; The automated deployment module, based on containerization technology and a canary release and rolling upgrade strategy, completes the update and release of system services.

7. A blockchain public service method based on a layered architecture, characterized in that: Applied to a blockchain public service system based on a layered architecture as described in any one of claims 1-6.

Images