Block chain transaction processing method and device, equipment and storage medium
By generating CSR files and achieving node identity consensus, user credentials are issued, enabling access control and business data isolation for blockchain transaction interfaces. This solves the problem of low transaction processing efficiency, improves transaction processing efficiency, and ensures data security.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-06
- Publication Date
- 2026-03-10
AI Technical Summary
Existing blockchain transaction interfaces have limited functionality, lack access control and business data segmentation, resulting in low transaction processing efficiency.
By generating the first public and private keys, generating a CSR file and uploading it to the partition management platform, node identity consensus is achieved, user credentials are issued, and transaction results are written to the corresponding ledger according to the configured node ledger permissions, thereby realizing access control of the transaction interface and isolation of business data.
It improves the efficiency of node transaction processing, ensures the identity security of the transaction initiating node, isolates node data, and guarantees data privacy.
Smart Images
Figure CN121637574A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of transaction processing technology, and in particular to a blockchain transaction processing method, apparatus, device, and storage medium. Background Technology
[0002] Blockchain is a distributed consensus network that broadcasts transactions among network nodes in a peer-to-peer (P2P) manner, achieving consensus across the blockchain network to maintain the consistency, reliability, and immutability of the node ledger. The blockchain transaction process is a decentralized transaction method. First, the two parties create a transaction and provide detailed information; then, the transaction is broadcast to nodes in the network for verification; after successful verification, the transaction is packaged into a block; subsequently, the block is confirmed and added to the blockchain, ensuring the legality and authenticity of the transaction.
[0003] Currently, in blockchain transaction processing, some nodes typically invoke nodes that provide transaction interfaces to initiate transaction requests in order to improve transaction processing efficiency. However, the existing transaction process suffers from relatively limited transaction interface functionality and a lack of corresponding access control and business data partitioning for nodes that invoke the interface, resulting in low transaction processing efficiency and requiring further improvement. Summary of the Invention
[0004] The purpose of this invention is to provide a blockchain transaction processing method, apparatus, device, and storage medium to solve the problem that the existing blockchain transaction interface has relatively limited functionality.
[0005] The specific technical solution of this invention is as follows: In a first aspect of the present invention, a blockchain transaction processing method is provided, comprising: The transaction initiating node generates a first public key and a first private key, and generates a CSR file based on the first private key and the node certificate, and sends the CSR file to the partition management platform; The partition management platform receives the CSR file, generates an identity consensus request based on the CSR file, and uploads the identity consensus request to the blockchain network for node identity consensus. Obtain the node identity consensus result, and issue user credentials to the transaction initiating node based on the node identity consensus result; The transaction initiating node accesses the partition management platform based on the user credentials and generates a transaction request based on the transaction data; The partition management platform executes transaction requests on the blockchain and writes the execution results of the transactions into the corresponding ledger according to the configured node ledger permissions.
[0006] Further, the transaction initiating node generates a first public key and a first private key, and generates a CSR file based on the first private key and the node certificate, including: The transaction initiating node uses an SSL certificate to generate a first private key, and then generates a first public key based on the first private key; The initiating node uploads its node information to the certificate authority in the blockchain network for node authentication; After the certificate authority verifies the node information, it generates a node certificate on the blockchain and sends the node certificate to the blockchain network for storage. At the same time, the node certificate is distributed to the node that initiated the transaction. The transaction initiating node generates a CSR file based on its node certificate and first private key, signs the CSR file using a second private key, and sends the signed CSR file to the partition management platform. The partition management platform is used to provide transaction interfaces to the outside world and issue user credentials to nodes within the partition. The transaction initiating node pre-generates a second private key and a second public key for file signing.
[0007] Further, the partition management platform receives the CSR file, generates an identity consensus request based on the CSR file, and uploads the identity consensus request to the blockchain network for node identity consensus, including: After receiving the CSR file, the partition management platform obtains the second public key of the transaction initiating node and uses the second public key to verify the signature of the CSR file. After successful verification, the node certificate is obtained from the CSR file. Based on the node certificate, a corresponding identity consensus request is generated, and the operation is performed to upload the identity consensus request to the blockchain network so that the nodes in the blockchain network can verify the node certificate for the identity consensus request.
[0008] Furthermore, the step of obtaining the node identity consensus result and issuing user credentials for the transaction initiating node based on the node identity consensus result includes: The partition management platform obtains the verification results of node certificates from each node in the blockchain network. If the node certificate verification results reach a consensus, the platform issues user credentials to the transaction initiating node. If the node certificate verification results do not reach a consensus, the platform reports identity verification failure to the transaction initiating node.
[0009] Furthermore, the transaction initiating node accesses the partition management platform based on the user credentials and generates a transaction request based on the transaction data, including: After obtaining the user credentials, the transaction initiating node accesses the partition management platform through the user credentials and establishes a communication connection with the partition management platform; The transaction initiating node categorizes and packages transaction data according to transaction type, generates corresponding transaction requests, and uses a second private key to sign the transaction requests before sending the signed transaction requests to the partition management platform; transaction types include configuration type and business type.
[0010] Furthermore, the partition management platform executes transaction requests on the blockchain and writes the execution results of the transactions into the corresponding ledger according to the configured node ledger permissions, including: After receiving a transaction request, the partition management platform uses the second public key to verify the request signature of the transaction request. Once the request signature verification is successful, the transaction type of the transaction request is parsed. If the transaction type of the transaction request is configuration type, then the corresponding configuration operation will be executed based on the transaction data in the transaction request; If the transaction type of the transaction request is business-related, the transaction request will be uploaded to the blockchain network for execution, and the corresponding transaction execution result will be obtained. At the same time, the node certificate of the transaction initiating node will be used to match the node ledger permissions in the platform's permission management table. Based on the node ledger permissions, the transaction execution result will be written into the blockchain ledger, which includes a global ledger and partition ledgers.
[0011] In a second aspect, the present invention provides a blockchain transaction processing device, comprising: The certificate request module is used by the transaction initiating node to generate the first public key and the first private key, and to generate a CSR file based on the first private key and the node certificate, and send the CSR file to the partition management platform; The request verification module is used by the partition management platform to receive the CSR file, generate an identity consensus request based on the CSR file, and upload the identity consensus request to the blockchain network for node identity consensus. The credential issuance module is used to obtain the node identity consensus result and issue user credentials to the transaction initiating node based on the node identity consensus result; The transaction initiation module is used by the transaction initiation node to access the partition management platform based on the user credentials and generate a transaction request based on the transaction data. The data writing module is used by the partition management platform to execute transaction requests on the blockchain and write the execution results of the transactions into the corresponding ledger according to the configured node ledger permissions.
[0012] Thirdly, the present invention provides an electronic device, comprising: One or more processors; A storage device for storing one or more programs, which, when executed by one or more processors, cause the one or more processors to implement the blockchain transaction processing method as described in the first aspect.
[0013] Fourthly, the present invention provides a computer-readable medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the blockchain transaction processing method of the first aspect.
[0014] The beneficial effects of this invention are as follows: This invention provides a blockchain transaction processing method in which the transaction initiating node generates a first public key and a first private key, and generates a CSR file based on the first private key and node certificate. The CSR file is then sent to a partition management platform for review. Upon receiving the CSR file, the partition management platform generates an identity consensus request and uploads it to the blockchain network for node identity consensus, ensuring the security and reliability of the transaction initiating node's identity. Simultaneously, based on the node identity consensus result, a user credential is issued to the transaction initiating node, enabling the node to access the partition management platform and complete the node's transaction processing. Finally, according to the configured node ledger permissions, the transaction execution result is written to the corresponding ledger. By implementing partitioned writing of node transaction processing results to the ledger through the partition management platform, the business data of each node is isolated, ensuring node data privacy while improving the processing efficiency of node transaction processing. Attached Figure Description
[0015] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0016] Figure 1 This is a schematic diagram of the blockchain transaction processing method of the present invention; Figure 2 This is a schematic diagram of the blockchain transaction processing device module structure of the present invention. Detailed Implementation
[0017] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention.
[0018] Example 1: Figure 1 This is a schematic diagram of a blockchain transaction processing method according to an embodiment of the present invention, referred to as follows. Figure 1 As shown, the method of this embodiment of the invention includes: The transaction initiating node generates a first public key and a first private key, and generates a CSR file based on the first private key and the node certificate, and sends the CSR file to the partition management platform; The partition management platform receives the CSR file, generates an identity consensus request based on the CSR file, and uploads the identity consensus request to the blockchain network for node identity consensus. Obtain the node identity consensus result, and issue user credentials to the transaction initiating node based on the node identity consensus result; The transaction initiating node accesses the partition management platform based on the user credentials and generates a transaction request based on the transaction data; The partition management platform executes transaction requests on the blockchain and writes the execution results of the transactions into the corresponding ledger according to the configured node ledger permissions.
[0019] Furthermore, in this embodiment of the invention, the transaction initiating node generates a first public key and a first private key, and generates a CSR file based on the first private key and the node certificate, including: The transaction initiating node uses an SSL certificate to generate a first private key, and then generates a first public key based on the first private key.
[0020] The initiating node uploads its node information to a certificate authority in the blockchain network for node authentication.
[0021] After the certificate authority verifies the node information, it generates a node certificate on the blockchain and sends the node certificate to the blockchain network for storage. At the same time, the node certificate is distributed to the node that initiated the transaction.
[0022] The transaction initiating node generates a CSR file based on its node certificate and first private key, signs the CSR file using a second private key, and sends the signed CSR file to the partition management platform.
[0023] Specifically, in a blockchain network, node certificates are issued by the chain certificate authority. A node generates and saves its private key file (node.key) and sends a request file (node.csr) to the chain management authority (i.e., the certificate authority). After review and approval, the chain management authority issues a node certificate (node.crt). The node certificate serves as the node's identity credential; a node with a node certificate can establish SSL connections with other nodes in the blockchain network, enabling encrypted communication between nodes.
[0024] The partition management platform provides transaction interfaces to the outside world and issues user credentials to nodes within the partition; the transaction initiating node pre-generates a second private key and a second public key for file signing.
[0025] In this embodiment of the invention, the partition management platform can provide transaction interfaces for nodes within a partition. Functionally, these transaction interfaces can be divided into configuration-type and business-type interfaces, handling configuration-type transaction requests and business-type transaction requests respectively. Furthermore, in terms of transaction data writing functionality, the transaction interfaces are divided into a global ledger interface and a partitioned ledger interface, used to write the transaction results to the global ledger or the partitioned ledger respectively.
[0026] The second public and private keys pre-generated by the transaction initiating node can be generated using asymmetric encryption algorithms, such as RSA. Alternatively, message digests can be used to sign the CSR file to enhance the security of file transmission.
[0027] Furthermore, in this embodiment of the invention, the partition management platform receives the CSR file, generates an identity consensus request based on the CSR file, and uploads the identity consensus request to the blockchain network for node identity consensus, including: After receiving the CSR file, the partition management platform obtains the second public key of the transaction initiating node and uses the second public key to verify the signature of the CSR file. After successful verification, the node certificate is obtained from the CSR file. Based on the node certificate, a corresponding identity consensus request is generated, and the operation is performed to upload the identity consensus request to the blockchain network so that the nodes in the blockchain network can verify the node certificate for the identity consensus request.
[0028] This invention uploads the node certificate of the transaction initiating node to a blockchain network, where each blockchain node verifies the authenticity of the node certificate to ensure it has not been tampered with. The node certificate verification can be performed by all nodes or by a consensus node within the blockchain network.
[0029] Furthermore, in this invention, obtaining the node identity consensus result and issuing user credentials for the transaction initiating node based on the node identity consensus result includes: The partition management platform obtains the verification results of node certificates from each node in the blockchain network. If the node certificate verification results reach a consensus, the platform issues user credentials to the transaction initiating node. If the node certificate verification results do not reach a consensus, the platform reports identity verification failure to the transaction initiating node.
[0030] This invention employs blockchain nodes to perform consensus verification of node certificates, which ensures the authenticity of node certificate verification and reduces the resource consumption of the partition management platform. This allows the partition management platform to handle certificate issuance requests from multiple transaction initiating nodes, thereby improving the platform's request processing efficiency.
[0031] Furthermore, in this embodiment of the invention, the transaction initiating node accesses the partition management platform based on the user credentials and generates a transaction request based on the transaction data, including: After obtaining the user credentials, the transaction initiating node accesses the partition management platform through the user credentials and establishes a communication connection with the partition management platform; The transaction initiating node categorizes and packages transaction data according to transaction type, generates corresponding transaction requests, and uses a second private key to sign the transaction requests before sending the signed transaction requests to the partition management platform; transaction types include configuration type and business type.
[0032] Among them, the transaction initiating node can set different types of transaction requests according to transaction needs, such as configuring parameters for a certain node, or conducting product transactions with nodes in other partitions.
[0033] Furthermore, in this embodiment of the invention, the partition management platform executes the transaction request on the blockchain and writes the execution result of the transaction into the corresponding ledger according to the configured node ledger permissions, including: After receiving a transaction request, the partition management platform uses the second public key to verify the request signature of the transaction request. Once the request signature verification is successful, the transaction type of the transaction request is parsed. If the transaction type of the transaction request is configuration type, then the corresponding configuration operation will be executed based on the transaction data in the transaction request; If the transaction type of the transaction request is business-related, the transaction request will be uploaded to the blockchain network for execution, and the corresponding transaction execution result will be obtained. At the same time, the node certificate of the transaction initiating node will be used to match the node ledger permissions in the platform's permission management table. Based on the node ledger permissions, the transaction execution result will be written into the blockchain ledger, which includes a global ledger and partition ledgers.
[0034] Specifically, in this embodiment of the invention, the ledger partitioning of node transaction processing results is implemented through a partition management platform, which isolates the business data of each node, ensuring the privacy of node data while improving the processing efficiency of node transaction processing.
[0035] Example 2: Refer to Figure 2 As shown, this embodiment of the invention provides a blockchain transaction processing device, comprising: The certificate request module is used by the transaction initiating node to generate the first public key and the first private key, and to generate a CSR file based on the first private key and the node certificate, and send the CSR file to the partition management platform; The request verification module is used by the partition management platform to receive the CSR file, generate an identity consensus request based on the CSR file, and upload the identity consensus request to the blockchain network for node identity consensus. The credential issuance module is used to obtain the node identity consensus result and issue user credentials to the transaction initiating node based on the node identity consensus result; The transaction initiation module is used by the transaction initiation node to access the partition management platform based on the user credentials and generate a transaction request based on the transaction data. The data writing module is used by the partition management platform to execute transaction requests on the blockchain and write the execution results of the transactions into the corresponding ledger according to the configured node ledger permissions.
[0036] This invention also provides an electronic device, comprising: One or more processors; A storage device for storing one or more programs, which, when executed by one or more processors, cause the one or more processors to implement the blockchain transaction processing method of Embodiment 1.
[0037] This invention also provides a computer-readable medium storing a computer program thereon, which, when executed by a processor, implements the blockchain transaction processing method of Embodiment 1.
[0038] The various embodiments in this specification are described in a related manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the system embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the descriptions of the method embodiments.
[0039] The above description is merely a preferred embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention are included within the scope of protection of the present invention.
Claims
1. A method for processing a blockchain transaction, characterized in that, The method comprises the following steps: The transaction initiating node generates a first public key and a first private key, generates a CSR file based on the first private key and a node certificate, and sends the CSR file to the partition management platform; The partition management platform receives the CSR file, generates an identity consensus request based on the CSR file, uploads the identity consensus request to the blockchain network for node identity consensus; Obtain the node identity consensus result, and issue a user certificate for the transaction initiating node according to the node identity consensus result; The transaction initiating node accesses the partition management platform according to the user certificate, and generates a transaction request according to the transaction data; The partition management platform uploads the transaction request to the chain for execution, and writes the execution result of the transaction into the corresponding ledger according to the configured node ledger permission. 2.The blockchain transaction processing method of claim 1, wherein, The transaction initiating node generates a first public key and a first private key, and generates a CSR file based on the first private key and a node certificate, which comprises: The transaction initiating node generates a first private key using an SSL certificate, and then generates a first public key based on the first private key; The transaction initiating node uploads node information to a certificate authority in the blockchain network for node authentication; After the certificate authority authenticates the node information, it generates a node certificate on the blockchain and sends it to the blockchain network for storage, and also issues the node certificate to the transaction initiating node; The transaction initiating node generates a CSR file according to the node certificate and the first private key, and signs the CSR file with a second private key, and sends the signed CSR file to the partition management platform; wherein the partition management platform is configured to provide a transaction interface to the outside and issue a user certificate for nodes within the partition; the transaction initiating node pre-generates a second private key and a second public key for file signing. 3.The method of claim 1, wherein, The partition management platform receives the CSR file, generates an identity consensus request based on the CSR file, uploads the identity consensus request to the blockchain network for node identity consensus, which comprises: After receiving the CSR file, the partition management platform obtains the second public key of the transaction initiating node and verifies the signature of the CSR file using the second public key, and obtains the node certificate from the CSR file after verification; Generate a corresponding identity consensus request based on the node certificate, and upload the identity consensus request to the blockchain network to enable nodes in the blockchain network to verify the node certificate based on the identity consensus request. 4.The method of Claim 1, wherein, The partition management platform obtains the verification result of the node certificate by each node in the blockchain network, and if the node certificate verification result is consensus, issues a user certificate for the transaction initiating node; if the node certificate verification result is not consensus, feeds back the identity authentication failure to the transaction initiating node. The transaction initiating node accesses the partition management platform according to the user certificate, and generates a transaction request according to the transaction data, which comprises: 5.The method of Claim 1, wherein, After obtaining the user certificate, the transaction initiating node accesses the partition management platform through the user certificate and establishes a communication connection with the partition management platform; The transaction initiation node classifies and packages the transaction data according to the transaction type, generates a transaction request of the corresponding type, and performs request signature on the transaction request by using a second private key, and sends the signed transaction request to the partition management platform; the transaction type includes a configuration type and a business type. 6.The method of Claim 1, wherein, The partition management platform chains the transaction request and writes the execution result of the transaction into the corresponding ledger according to the configured node ledger permission, including: After receiving the transaction request, the partition management platform verifies the request signature of the transaction request by using the second public key, and after the request signature verification is passed, the transaction type of the transaction request is parsed; If the transaction type of the transaction request is the configuration type, the corresponding configuration operation is performed according to the transaction data in the transaction request; If the transaction type of the transaction request is the business type, the transaction request is uploaded to the blockchain network for execution, and the corresponding transaction execution result is obtained, and the node ledger permission is matched in the permission management table of the platform by using the node certificate of the transaction initiation node, and the transaction execution result is written into the blockchain ledger according to the node ledger permission, the blockchain ledger includes a global ledger and a partition ledger. 7.A blockchain transaction processing apparatus characterized by comprising: Including: The certificate request module is configured to generate a first public key and a first private key by the transaction initiation node, and generate a CSR file based on the first private key and the node certificate, and send the CSR file to the partition management platform; The request verification module is configured to receive the CSR file by the partition management platform, and generate an identity consensus request according to the CSR file, and upload the identity consensus request to the blockchain network for node identity consensus; The credential issuing module is configured to obtain the node identity consensus result, and issue a user credential for the transaction initiation node according to the node identity consensus result; The transaction initiation module is configured to access the partition management platform by the transaction initiation node according to the user credential, and generate a transaction request according to the transaction data; The data writing module is configured to chain the transaction request by the partition management platform, and write the execution result of the transaction into the corresponding ledger according to the configured node ledger permission.
8. An electronic device, comprising: Including: One or more processors; Storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, so that the one or more processors implement the blockchain file transmission method in any one of claims 1 to 6.
9. A computer readable medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the blockchain file transmission method in any one of claims 1 to 6.