Block chain file transmission method and device, equipment and storage medium
By generating a first private key and public key during blockchain file transfer, establishing a trusted transmission channel, and conducting key negotiation, the security problem caused by key leakage is solved, achieving higher file transfer security and privacy.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-06
- Publication Date
- 2026-03-10
AI Technical Summary
In existing blockchain file transfer processes, key leakage makes files vulnerable to theft by other nodes in the network, resulting in low security.
The file sending node randomly generates a first private key, calculates a first public key using algorithm parameters and adds it to a CA certificate, establishes a trusted transmission channel, performs key negotiation, generates a session key, and then encrypts and transmits the file.
It improves the security of blockchain file transfer, ensures that the key is not obtained by outsiders, and enhances the privacy and security of file transfer.
Smart Images
Figure CN121644550A_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of file transmission, in particular to a blockchain file transmission method, device, equipment and storage medium. BACKGROUND
[0002] How to ensure the integrity and confidentiality of electronic files during transmission is a security problem faced by file circulation. Blockchain is a new application mode that uses distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm and other computer technologies. Its peer-to-peer data transmission method can build a relatively secure transmission channel between the file transmission party and the file receiving party. Therefore, the existing file transmission process can also establish a file transmission function through the blockchain network to transmit electronic files.
[0003] At present, in the transmission process of blockchain files, the files can be encrypted and transmitted and access controlled based on keys. However, once the key is compromised, the file is easy to be stolen by other nodes in the network, so it is necessary to further improve the security of file transmission in the blockchain network. SUMMARY
[0004] The purpose of the present application is to provide a blockchain file transmission method, device, equipment and storage medium to solve the problem of low security of existing blockchain network transmission of blockchain files.
[0005] The specific technical solutions of the present application are as follows: In the first aspect of the present application, a blockchain file transmission method is provided, comprising: The file sending node sends a node connection request to the file receiving node, and establishes a trusted transmission channel with the file receiving node after the node connection request is verified; The file sending node randomly generates a first private key and calculates a first public key through an algorithm parameter, and adds the first public key to the CA certificate; The CA certificate is sent to the file receiving node through the trusted transmission channel for key negotiation to obtain a session key; The session key is used to encrypt the to-be-transmitted file, and the encrypted to-be-transmitted file is transmitted to the file receiving node through the trusted transmission channel.
[0006] Further, the file sending node sends a node connection request to the file receiving node, and establishes a trusted transmission channel with the file receiving node after the node connection request is verified, comprising: The file sending node generates a node connection request according to its own IP address, and sends the node connection request to the file receiving node in the blockchain network; The file receiving node receives the node connection request, and replies to the file sending node and provides the network address and port number of the file receiving node according to the IP address in the node connection request. The file sending node establishes a trusted transmission channel with the file receiving node according to the network address and port number of the file receiving node, and stores the network address and port number of the file receiving node.
[0007] Further, the file sending node randomly generates a first private key, and calculates a first public key through algorithm parameters, and adds the first public key to the CA certificate, including: The file sending node generates a random number A as a first private key, and calculates a first public key based on the first private key and using modulus p and base g in the algorithm parameters; The file sending node initiates a CA certificate application to the certificate authority based on the node identity information, and obtains a CA certificate signed by the certificate authority using a CA private key after the certificate authority verifies the node identity information. The CA public key is used to sign and authenticate the CA certificate, and after the signature authentication is passed, the first public key and the algorithm parameters are added to the CA certificate.
[0008] Further, the CA certificate is sent to the file receiving node through the trusted transmission channel for key agreement to obtain a session key, including: The file sending node sends the CA certificate to the file receiving node through the trusted transmission channel; After the file receiving node receives the CA certificate, the digital signature of the CA certificate is authenticated using the CA public key, and after the digital signature authentication is passed, the first public key and the algorithm parameters are taken out from the data CA certificate; The file receiving node generates a random number B as a second private key, and calculates a second public key based on the second private key and using the algorithm parameters; The file receiving node performs key calculation on the first public key and the second private key using the algorithm parameters to obtain a session key, and sends the second public key to the file sending node through the trusted transmission channel, so that the file sending node performs key calculation on the first private key and the second public key through the algorithm parameters to obtain the same session key.
[0009] Further, the file sending node detects whether the file size of the to-be-transmitted file exceeds the file fragmentation threshold, and if the file size of the to-be-transmitted file exceeds the file fragmentation threshold, the to-be-transmitted file is divided into a plurality of file blocks with sequence, and the plurality of file blocks are encrypted using the session key and transmitted to the file receiving node through the trusted transmission channel. Further, the file sending node detects whether the file size of the to-be-transmitted file exceeds the file fragmentation threshold, and if the file size of the to-be-transmitted file exceeds the file fragmentation threshold, the to-be-transmitted file is divided into a plurality of file blocks with sequence, and the plurality of file blocks are encrypted using the session key and transmitted to the file receiving node through the trusted transmission channel. If the file size of the to-be-transmitted file does not exceed the file chunk threshold, the to-be-transmitted file is encrypted by using the session key, and the encrypted to-be-transmitted file is sent to the file receiving node through the trusted transmission channel.
[0010] Further, the method further comprises: if the file receiving node receives a plurality of encrypted file chunks, the encrypted file chunks are decrypted by using the session key, and the decrypted file chunks are assembled into a complete to-be-transmitted file; if the file receiving node receives an encrypted to-be-transmitted file, the encrypted to-be-transmitted file is directly decrypted by using the session key to obtain the corresponding to-be-transmitted file.
[0011] Further, the method further comprises: if the file receiving node receives a plurality of encrypted file chunks, the encrypted file chunks are decrypted by using the session key, and the decrypted file chunks are assembled into a complete to-be-transmitted file; if the file receiving node receives an encrypted to-be-transmitted file, the encrypted to-be-transmitted file is directly decrypted by using the session key to obtain the corresponding to-be-transmitted file. The file sending node divides the to-be-transmitted file into a plurality of file chunks with the same size, and generates a corresponding file chunk serial number and a file chunk unique identifier for each file chunk. The file sending node divides the to-be-transmitted file into a plurality of file chunks with the same size, and generates a corresponding file chunk serial number and a file chunk unique identifier for each file chunk. The file sending node respectively encrypts the plurality of file chunks, and sends the encrypted file chunks to the file receiving node through the trusted transmission channel by using a preset transmission mode.
[0012] In a second aspect, the present application provides a blockchain file transmission device, comprising: The connection request module is configured to send a node connection request from the file sending node to the file receiving node, and establish a trusted transmission channel with the file receiving node after the node connection request is verified. The first key generation module is configured to randomly generate a first private key by the file sending node, and calculate a first public key by an algorithm parameter, and add the first public key to a CA certificate. The key negotiation module is configured to send the CA certificate to the file receiving node through the trusted transmission channel for key negotiation to obtain a session key. The file transmission module is configured to encrypt a to-be-transmitted file by using the session key, and transmit the encrypted to-be-transmitted file to the file receiving node through the trusted transmission channel.
[0013] In a third aspect, the present application provides an electronic device, comprising: One or more processors; A storage device configured to store one or more programs, which, when executed by the one or more processors, cause the one or more processors to implement the blockchain file transmission method of the first aspect.
[0014] In a fourth aspect, the present application provides a computer readable medium, which stores a computer program, and the computer program is executed by a processor to implement the blockchain file transmission method of the first aspect.
[0015] The present application has the following beneficial effects: The blockchain file transmission method provided by the present application, before transmitting the file, the file sending node establishes a trusted transmission channel with the file receiving node through a node connection request, improving the privacy of file transmission. Then the file sending node randomly generates a first private key, and calculates a first public key through an algorithm parameter, and adds the first public key to the CA certificate; sends the CA certificate to the file receiving node for key negotiation to obtain a session key, which is only generated locally in the file sending node and the file receiving node, so that the key can be ensured not to be obtained by the outside world. Finally, the session key is used to encrypt the to-be-transmitted file and transmit it to the file receiving node, realizing the blockchain file transmission based on key negotiation and improving the security of the blockchain file transmission. BRIEF DESCRIPTION OF DRAWINGS
[0016] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiment or prior art description. Obviously, the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other drawings can also be obtained without creative labor on the basis of these drawings.
[0017] Figure 1 is a flowchart of the blockchain file transmission method of the present application; Figure 2 is a schematic diagram of the module structure of the blockchain file transmission device of the present application. DETAILED DESCRIPTION
[0018] The technical solutions in the embodiments of the present application will be described clearly and completely in the following with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor are within the scope of protection of the present application.
[0019] Embodiment 1: Figure 1 is a flowchart of the blockchain file transmission method of an embodiment of the present application, referring to Figure 1 The method of the embodiment of the present application includes: The file sending node sends a node connection request to the file receiving node, and establishes a trusted transmission channel with the file receiving node after the node connection request is verified; The file sending node randomly generates a first private key, calculates a first public key through algorithm parameters, and adds the first public key to a CA certificate; The CA certificate is sent to the file receiving node through a trusted transmission channel for key negotiation to obtain a session key; The file sending node encrypts the to-be-transmitted file by using the session key, and transmits the encrypted to-be-transmitted file to the file receiving node through the trusted transmission channel.
[0020] Further, in the embodiment of the present application, the file sending node sends a node connection request to the file receiving node, and establishes a trusted transmission channel with the file receiving node after the node connection request is verified, specifically comprising: The file sending node generates a node connection request according to its own IP address, and sends the node connection request to the file receiving node in the blockchain network; After receiving the node connection request, the file receiving node replies to the file sending node according to the IP address in the node connection request and provides the network address and port number of the file receiving node; The file sending node establishes a trusted transmission channel with the file receiving node according to the network address and port number of the file receiving node, and stores the network address and port number of the file receiving node.
[0021] In some other embodiments of the present application, in the process of constructing the trusted transmission channel, the SSL / TLS protocol is used to construct the HTTPS interaction channel as the trusted transmission channel, so as to ensure the security in the process of data or file transmission.
[0022] Further, in the embodiment of the present application, the file sending node randomly generates a first private key, and calculates a first public key through algorithm parameters, and adds the first public key to a CA certificate, specifically comprising: The file sending node generates a random number A as a first private key, and calculates a first public key based on the first private key by using modulus p and base g in the algorithm parameters.
[0023] Wherein, when calculating the first public key, the first private key is represented as a, and the modulus p and the base g are used to calculate the first public key A = ga mod p as the public key of the file sending node, the first public key A is public, and the first private key a is not public.
[0024] The file sending node initiates a CA certificate application to the certificate authority based on the node identity information, and obtains the CA certificate signed by the certificate authority by using the CA private key after the certificate authority verifies the node identity information.
[0025] Specifically, the CA certificate is a digital certificate, which is a string of numbers indicating the identity information of each party in the Internet communication. The certificate provides a way to verify the identity of the communication entity on the Internet. The certificate contains the identity information of the certificate owner, the signature of the CA agency, the public key and the private key.
[0026] The CA certificate is signed and authenticated by using the CA public key. After the signature authentication is passed, the first public key and the algorithm parameters are added to the CA certificate. The CA public key has been pre-installed in the browser or operating system, and can be loaded from the browser or operating system when used.
[0027] The first public key A is added to the CA certificate for transmission in the embodiment of the application, and the CA certificate is used to realize the verifiable transmission of the first public key A, thereby improving the security of the key in the transmission process.
[0028] In addition, in some other embodiments of the application, the asymmetrically encrypted encryption public key and encryption private key can also be generated by the file receiving node, and the encryption public key is sent to the file sending node through a trusted transmission channel. The file sending node receives the encryption public key and encrypts the first public key A and the algorithm parameters by using the encryption public key to obtain the public key ciphertext. The file sending node sends the public key ciphertext to the file receiving node through the trusted transmission channel. After receiving the public key ciphertext, the file receiving node decrypts the public key ciphertext by using the encryption private key to obtain the first public key A and the corresponding algorithm parameters, realizes the encrypted transmission of the first public key A, and can prevent the first A and the algorithm parameters from being tampered with in the transmission process, thereby further improving the security of the key transmission.
[0029] Further, in the embodiment of the application, the CA certificate is sent to the file receiving node through a trusted transmission channel for key agreement to obtain a session key, comprising: The file sending node sends the CA certificate to the file receiving node through a trusted transmission channel; After receiving the CA certificate, the file receiving node authenticates the digital signature of the CA certificate by using the CA public key. After the digital signature authentication is passed, the first public key and the algorithm parameters are taken out from the data CA certificate.
[0030] The file receiving node generates a random number B as a second private key, and calculates a second public key based on the second private key by using the algorithm parameters. When calculating the second public key, the file receiving node represents the second private key as b, calculates the second public key B = gb mod p as its own public key by using the modulus p and the base g, and the second public key B is publicly disclosed, and the second private key b is not publicly disclosed.
[0031] The file receiving node performs key calculation on the first public key and the second private key by using the algorithm parameter to obtain a session key, and sends the second public key to the file sender through a trusted transmission channel, so that the file sender performs key calculation on the first private key and the second public key by using the algorithm parameter to obtain the same session key.
[0032] Wherein, after the file receiver and the file sender respectively receive the public key of the other party, they respectively perform session key calculation on their own private key and the public key of the other party locally. For example, the file sender calculates the session key k = Ba mod p, and the file receiver calculates k = Ab mod p, and the session keys k calculated by the two are the same.
[0033] The embodiment of the application determines the session key for encrypting the file to be transmitted through the key agreement mechanism, so that the session key cannot be known by other nodes, and the transmission security of the blockchain file is improved.
[0034] Further, in the embodiment of the application, the session key is used to encrypt the file to be transmitted, and the encrypted file to be transmitted is transmitted to the file receiving node through a trusted transmission channel, comprising: The file sending node detects whether the file size of the file to be transmitted exceeds the file fragmentation threshold, if the file size of the file to be transmitted exceeds the file fragmentation threshold, the file to be transmitted is divided into a plurality of file blocks with sequence, and the plurality of file blocks are encrypted by using the session key and then transmitted to the file receiving node through the trusted transmission channel; If the file size of the file to be transmitted does not exceed the file fragmentation threshold, the file to be transmitted is encrypted by using the session key, and the encrypted file to be transmitted is sent to the file receiving node through the trusted transmission channel.
[0035] Specifically, the embodiment of the application divides the file by judging the file size, so that the blockchain node can support large file transmission and improve the transmission efficiency of the file.
[0036] Wherein, the file to be transmitted is divided into a plurality of file blocks with sequence, and the plurality of file blocks are encrypted by using the session key and then transmitted to the file receiving node through the trusted transmission channel, specifically comprising: The file sending node divides the file to be transmitted into a plurality of file blocks with the same size, and generates a corresponding file block serial number and a file block unique identifier for each file block.
[0037] The file uploading task is initialized, and the plurality of file block serial numbers and file block unique identifiers are sent to the file receiving node through the trusted transmission channel, so that the file receiving node can determine the sequence of the file blocks according to the serial numbers after obtaining the file block serial numbers and file block identifiers, so as to subsequently merge the file blocks, and determine whether the file blocks are tampered with in the transmission process according to the unique identifiers.
[0038] The file sending node respectively encrypts a plurality of file blocks, and sends the encrypted file blocks to the file receiving node through a trusted transmission channel by using a preset transmission mode.
[0039] Further, the method of the embodiment of the present application further comprises: if the file receiving node receives a plurality of encrypted file blocks, the encrypted file blocks are decrypted by using the session key, and the decrypted file blocks are assembled into a complete to-be-transmitted file; if the file receiving node receives an encrypted to-be-transmitted file, the encrypted to-be-transmitted file is directly decrypted by using the session key, and the corresponding to-be-transmitted file is obtained.
[0040] The blockchain file transmission method of the embodiment of the present application, before transmitting a file, a file sending node establishes a trusted transmission channel with a file receiving node through a node connection request, thereby improving the privacy of file transmission. Then the file sending node randomly generates a first private key, calculates a first public key through an algorithm parameter, and simultaneously adds the first public key to a CA certificate; the CA certificate is sent to the file receiving node for key negotiation, and a session key is obtained. The session key is only generated in the local of the file sending party and the local of the file receiving party, and thus it can be ensured that the key is not acquired by the outside world. Finally, the to-be-transmitted file is encrypted by using the session key and transmitted to the file receiving node, thereby realizing the blockchain file transmission based on key negotiation and improving the security of the blockchain file transmission.
[0041] Embodiment 2: Refer to Figure 2 The embodiment of the present application also provides a blockchain file transmission device, which comprises: A connection request module is configured to send a node connection request from a file sending node to a file receiving node, and establish a trusted transmission channel with the file receiving node after the node connection request is verified. A first key generation module is configured to randomly generate a first private key by the file sending node, calculate a first public key through an algorithm parameter, and simultaneously add the first public key to a CA certificate. A key negotiation module is configured to send the CA certificate to the file receiving node through the trusted transmission channel for key negotiation, and obtain a session key. A file transmission module is configured to encrypt a to-be-transmitted file by using the session key, and transmit the encrypted to-be-transmitted file to the file receiving node through the trusted transmission channel.
[0042] Specifically, the embodiment of the present application further comprises a file decryption module, which is configured to, when a plurality of encrypted file blocks are received by the file receiving node, decrypt the encrypted file blocks by using the session key, and assemble the decrypted file blocks into a complete to-be-transmitted file; and when an encrypted to-be-transmitted file is received by the file receiving node, directly decrypt the encrypted to-be-transmitted file by using the session key, and obtain the corresponding to-be-transmitted file.
[0043] The embodiment of the present application also provides an electronic device, comprising: one or more processors; a storage device, configured to store one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement the blockchain file transmission method of the embodiment 1.
[0044] The embodiment of the present application also provides a computer readable medium, which stores a computer program, when the computer program is executed by a processor, the blockchain file transmission method of the embodiment 1 is implemented.
[0045] Each of the embodiments in the specification is described in a related manner, and the same or similar parts of each of the embodiments can be referred to each other. Each of the embodiments mainly describes the difference from other embodiments. Especially, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the related parts can be referred to the part of the method embodiment.
[0046] The above only describes the preferred embodiment of the present application, and is not used to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.
Claims
1. A blockchain file transfer method, characterized in that, The method comprises the following steps: The file sending node sends a node connection request to the file receiving node, and establishes a trusted transmission channel with the file receiving node after the node connection request is verified; The file sending node randomly generates a first private key, and calculates a first public key through algorithm parameters, and adds the first public key to the CA certificate; The CA certificate is sent to the file receiving node through the trusted transmission channel for key negotiation to obtain a session key; The session key is used to encrypt the to-be-transmitted file, and the encrypted to-be-transmitted file is transmitted to the file receiving node through the trusted transmission channel.
2. The blockchain file transfer method of claim 1, wherein, The file sending node sends a node connection request to the file receiving node, and establishes a trusted transmission channel with the file receiving node after the node connection request is verified, comprising: The file sending node generates a node connection request according to its own IP address, and sends the node connection request to the file receiving node in the blockchain network; After receiving the node connection request, the file receiving node replies to the file sending node according to the IP address in the node connection request and provides the network address and port number of the file receiving node; The file sending node establishes a trusted transmission channel with the file receiving node according to the network address and port number of the file receiving node, and stores the network address and port number of the file receiving node. 3.The blockchain file transfer method of claim 1, wherein, The file sending node generates a random number A as a first private key, and calculates a first public key based on the first private key and modulus p and base g in the algorithm parameters; The file sending node initiates a CA certificate application to the certificate authority based on the node identity information, and obtains the CA certificate signed by the certificate authority using the CA private key after the certificate authority verifies the node identity information; The CA public key is used for signature authentication of the CA certificate, and after the signature authentication is passed, the first public key and the algorithm parameters are added to the CA certificate. The file sending node sends the CA certificate to the file receiving node through the trusted transmission channel; 4. The blockchain file transfer method of claim 1, wherein, After receiving the CA certificate, the file receiving node authenticates the digital signature of the CA certificate using the CA public key, and after the digital signature authentication is passed, the first public key and the algorithm parameters are taken out from the data CA certificate; The file receiving node generates a random number B as a second private key, and calculates a second public key based on the second private key and the algorithm parameters; The file receiving node calculates the session key by using the algorithm parameters to calculate the first public key and the second private key, and sends the second public key to the file sending node through the trusted transmission channel, so that the file sending node calculates the same session key by using the algorithm parameters to calculate the first private key and the second public key. The session key is used to encrypt the to-be-transmitted file, and the encrypted to-be-transmitted file is transmitted to the file receiving node through the trusted transmission channel. 5. The blockchain file transfer method of claim 1, wherein, The file sending node detects whether the file size of the to-be-transmitted file exceeds a file fragmentation threshold value. If the file size of the to-be-transmitted file exceeds the file fragmentation threshold value, the to-be-transmitted file is divided into a plurality of file blocks with sequence, and the plurality of file blocks are encrypted by using a session key and then transmitted to a file receiving node through a trusted transmission channel. If the file size of the to-be-transmitted file does not exceed the file fragmentation threshold value, the to-be-transmitted file is encrypted by using the session key, and the encrypted to-be-transmitted file is transmitted to the file receiving node through the trusted transmission channel.
6. The blockchain file transfer method of claim 1, wherein, Further comprising: If the file receiving node receives the plurality of encrypted file blocks, the encrypted file blocks are decrypted by using the session key, and the decrypted file blocks are assembled into a complete to-be-transmitted file. If the file receiving node receives the encrypted to-be-transmitted file, the encrypted to-be-transmitted file is directly decrypted by using the session key to obtain the corresponding to-be-transmitted file.
7. The blockchain file transfer method of claim 5, wherein, The division of the to-be-transmitted file into a plurality of file blocks with sequence and the encryption of the plurality of file blocks by using a session key and then the transmission of the encrypted plurality of file blocks to a file receiving node through a trusted transmission channel comprise: The file sending node divides the to-be-transmitted file into a plurality of file blocks with the same size, and generates a corresponding file block serial number and a file block unique identifier for each file block. The file uploading task is initialized, and the plurality of file block serial numbers and the file block unique identifiers are transmitted to the file receiving node through a trusted transmission channel. The file sending node respectively encrypts the plurality of file blocks, and transmits the encrypted file blocks to the file receiving node through a trusted transmission channel by using a preset transmission mode. 8.A blockchain file transmission device, characterized in that, Comprise: A connection request module is configured to send a node connection request from a file sending node to a file receiving node, and establish a trusted transmission channel with the file receiving node after the node connection request is verified. A first key generation module is configured to randomly generate a first private key, calculate a first public key through an algorithm parameter, and add the first public key to a CA certificate. A key negotiation module is configured to send the CA certificate to the file receiving node through a trusted transmission channel for key negotiation to obtain a session key. A file transmission module is configured to encrypt a to-be-transmitted file by using the session key, and transmit the encrypted to-be-transmitted file to the file receiving node through a trusted transmission channel.
9. An electronic device, comprising: Comprise: One or more processors; A storage device is configured to store one or more programs, which, when executed by the one or more processors, cause the one or more processors to implement the blockchain file transmission method according to any one of claims 1 to 7.
10. A computer readable medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the blockchain file transmission method according to any one of claims 1 to 7.