Block chain driven IPv6 address management and traceability system and method

Abstract

The invention provides a blockchain-driven IPv6 address management and traceability system and method, and the system and method achieve the automatic management and credible traceability of an IPv6 address in a full life cycle through a three-layer architecture of a blockchain core layer, an address management layer and a terminal interaction layer in combination with an intelligent contract. The credible storage of the full-life-cycle data of the IPv6 address from distribution to logout can be realized, and tampering is prevented; the unique binding relation between the address and the terminal equipment can be established, and the credibility of the address, namely the identity, is ensured; automatic collaboration and data sharing of a cross-domain address management system can be supported, and the management efficiency is improved; and the fast tracing capability of the address flow track can be provided, and the network security auditing requirement is met.

Description

Technical Field

[0001] This invention relates to the field of blockchain technology, and in particular to a blockchain-driven IPv6 address management and traceability system and method. Background Technology

[0002] Currently, IPv6, as the core protocol of the next-generation Internet, can provide a massive number of addresses (2^6) with its 128-bit address space. 128 (This section appears to be incomplete and requires further context.) It supports large-scale device access in scenarios such as the Internet of Things (IoT) and the Industrial Internet. However, as the application scope of IPv6 addresses expands, traditional management models are gradually exposing shortcomings such as centralized management risks, lack of traceability throughout the entire lifecycle, low efficiency of cross-domain collaboration, and weak binding between terminal identity and address. Summary of the Invention

[0003] In view of this, the purpose of this invention is to provide a blockchain-driven IPv6 address management and traceability system and method to achieve trusted management and efficient traceability of the entire address lifecycle.

[0004] In a first aspect, embodiments of the present invention provide a blockchain-driven IPv6 address management and traceability system. This system includes: a blockchain core layer, an address management layer, a terminal interaction layer, and a traceability engine. The blockchain core layer adopts a consortium blockchain architecture, including multiple address management-related node nodes. The blockchain core layer is used to store IPv6 address lifecycle data and execute smart contracts. The address management layer includes an address allocation module, a terminal binding module, a permission management module, and a recycling / cancellation module. The address management layer handles IPv6 address allocation, binding, permission changes, and recycling operations, and submits the operation results to the blockchain core layer for storage. The terminal interaction layer is deployed on terminal devices or edge gateways. It is used for interaction between terminal devices and the address management layer, generating terminal identifiers and IPv6 address binding information and uploading it to the blockchain. The traceability engine is used to query the IPv6 address lifecycle data stored in the blockchain core layer and generate an address transfer trajectory report.

[0005] In an optional embodiment of this application, the address allocation module is configured to: receive an address range allocation instruction from an upper-layer address allocation authority, generate an allocation transaction containing the address range, the public key of the allocation object, the validity period, and the permission level; submit the allocation transaction to the blockchain core layer, and after consensus among the consortium blockchain nodes, store it on the blockchain to generate an immutable address range allocation certificate.

[0006] In an optional embodiment of this application, the terminal binding module is configured to: receive binding information sent by the terminal interaction layer; wherein the binding information is binding information between the terminal's unique identifier and the IPv6 address, and the binding information includes the terminal's MAC address, hardware fingerprint, and terminal private key signature; verify the legality of the terminal private key signature; if the verification is successful, call the terminal binding smart contract to store the binding information on the blockchain, and establish a unique mapping relationship between the terminal and the IPv6 address.

[0007] In an optional embodiment of this application, the above-mentioned permission management module implements address permission management through a permission change smart contract.

[0008] In an optional embodiment of this application, the above-mentioned permission management module implements address permission management through a permission change smart contract, including: the permission management module receiving a permission change request; wherein the request includes the target IPv6 address, permission scope, validity period and requester signature; after verifying the requester's permission based on the smart contract, the permission management module performs the permission change operation and stores the change log on the blockchain for evidence.

[0009] In optional embodiments of this application, the aforementioned tracing engine is used to: receive a query request containing an IPv6 address, terminal identifier, or allocated object; retrieve allocation records, binding records, permission change logs, and revocation status associated with the query request from the blockchain core layer; and generate a tracing report containing data from each stage and corresponding blockchain hash values, so as to verify the authenticity of the report through hash values.

[0010] Secondly, embodiments of the present invention also provide a blockchain-driven IPv6 address management and traceability method, applied to a blockchain-driven IPv6 address management and traceability system. The method includes: an address allocation agency allocates IPv6 address segments to target objects through an address allocation module, generates allocation transactions, and stores them on the blockchain; after a terminal device obtains an IPv6 address, it generates binding information through a terminal interaction layer, verifies the signature, and stores it on the blockchain; wherein, the binding information is the binding information between the terminal's unique identifier and the IPv6 address; when address permissions are changed, a request is initiated through the permission management module, the smart contract automatically executes the change, and the recorded log is stored on the blockchain; when a terminal goes offline or an address expires, a recycling request is initiated through a recycling and cancellation module, and after consensus, the address status is marked as recycled and the address status is stored on the blockchain; when tracing is performed, the blockchain is queried through a traceability engine to obtain the full lifecycle trajectory of the address and verify its authenticity.

[0011] In an optional embodiment of this application, the aforementioned unique terminal identifier includes the terminal MAC address and hardware fingerprint; the binding information is sent to the address management layer after being signed by the terminal private key to ensure the non-repudiation of the binding relationship.

[0012] In an optional embodiment of this application, the above-mentioned authenticity verification is achieved by comparing the data hash in the traceability report with the hash value stored in the blockchain; if the data hash in the traceability report is consistent with the hash value stored in the blockchain, it is confirmed that the data has not been tampered with.

[0013] Thirdly, embodiments of the present invention also provide a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements the aforementioned blockchain-driven IPv6 address management and tracing method.

[0014] The embodiments of the present invention bring the following beneficial effects: This invention provides a blockchain-driven IPv6 address management and traceability system and method. Through a three-layer architecture of "blockchain core layer + address management layer + terminal interaction layer," combined with smart contracts, it achieves automated management and trusted traceability of the entire IPv6 address lifecycle. It can achieve trusted data storage and notarization throughout the entire lifecycle of IPv6 addresses, from allocation to cancellation, preventing tampering; it can establish a unique binding relationship between addresses and terminal devices, ensuring the credibility of "address as identity"; it can support automatic collaboration and data sharing across domain address management systems, improving management efficiency; and it can provide rapid traceability of address transfer trajectories, meeting network security auditing requirements.

[0015] Other features and advantages of this disclosure will be set forth in the following description, or some features and advantages may be inferred from the description or determined without doubt, or may be learned by practicing the techniques described above.

[0016] To make the above-mentioned objects, features and advantages of this disclosure more apparent and understandable, preferred embodiments are described below in detail with reference to the accompanying drawings. Attached Figure Description

[0017] To more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the specific embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0018] Figure 1 A schematic diagram of the architecture of a blockchain-driven IPv6 address management and traceability system provided in an embodiment of the present invention; Figure 2 This is a schematic diagram illustrating the IPv6 address lifecycle management process provided in an embodiment of the present invention; Figure 3 A flowchart illustrating a blockchain-driven IPv6 address management and tracing method provided in an embodiment of the present invention; Figure 4 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0019] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0020] Currently, IPv6, as the core protocol of the next-generation Internet, can provide a massive number of addresses (2^6) with its 128-bit address space. 128 (Number of IPv6 addresses), supporting large-scale device access in scenarios such as the Internet of Things and the Industrial Internet. However, as the application scope of IPv6 addresses expands, the traditional management model is gradually revealing the following shortcomings: 1. Centralized Management Risks: Existing IPv6 address management relies on centralized servers (such as DHCPv6 (Dynamic Host Configuration Protocol) servers and regional address allocation centers), which poses risks such as single points of failure, data tampering, and abuse of privileges. For example, malicious attackers can forge address allocation records, leading to disputes over address ownership. 2. Untraceable throughout the entire lifecycle: The entire process of IPv6 addresses, from "address range allocation → terminal binding → permission change → recycling and deregistration", is stored in various network devices (routers, terminals) and lacks unified evidence storage. When address abuse occurs (such as DDoS (Distributed Denial of Service) attack tracing), it is difficult to trace the address flow. 3. Low efficiency of cross-domain collaboration: The IPv6 address management systems of different network operators and enterprises operate independently, and the data formats are not uniform. When sharing addresses across domains (such as address communication between government private networks and public networks), manual verification is required, which is inefficient and prone to errors. 4. Weak binding between terminal identity and address: The binding relationship between traditional IPv6 addresses and terminal devices is stored on the local device, which is easily tampered with and cannot ensure the uniqueness of "address is identity", leading to security problems such as device forgery and identity impersonation.

[0021] The immutability, distributed notarization, and automated execution of smart contracts inherent in blockchain technology offer new insights into solving the trust and traceability issues in IPv6 address management. Therefore, there is an urgent need to build a blockchain-driven IPv6 address management and traceability system to achieve trusted management and efficient traceability throughout the entire address lifecycle.

[0022] Based on this, the present invention provides a blockchain-driven IPv6 address management and traceability system and method, which aims to solve the problems of centralization risk, traceability difficulty, inefficient cross-domain collaboration, and weak identity binding in the existing IPv6 address management. It involves the intersection of network communication technology and blockchain technology, and specifically involves a blockchain-based IPv6 address full lifecycle management and traceability system and method, which is applicable to trusted management in scenarios such as IPv6 address allocation, terminal binding, permission change, and recycling / cancellation.

[0023] To facilitate understanding of this embodiment, a detailed description of a blockchain-driven IPv6 address management and traceability system disclosed in this embodiment of the invention will be provided first.

[0024] Example 1: This invention provides a blockchain-driven IPv6 address management and traceability system, see [link to relevant documentation]. Figure 1 The diagram shows an architecture of a blockchain-driven IPv6 address management and traceability system, which includes: a blockchain core layer, an address management layer, a terminal interaction layer, and a traceability engine. I. The core layer of the blockchain adopts a consortium blockchain architecture, which includes multiple address management related party nodes; the core layer of the blockchain is used to store the full life cycle data of IPv6 addresses and execute smart contracts.

[0025] In this embodiment, the blockchain core layer serves as the underlying trusted infrastructure. It adopts a consortium blockchain architecture (such as the enterprise-level blockchain framework Hyperledger Fabric), and consists of a consensus network composed of nodes such as address allocation agencies, network operators, and enterprise users to ensure that the data is immutable.

[0026] In this embodiment, the blockchain core layer can store key data such as IPv6 address range allocation records, terminal address binding information, address permission change logs, and revocation / cancellation certificates.

[0027] II. The address management layer includes an address allocation module, a terminal binding module, a permission management module, and a recycling and deregistration module. The address management layer is used to handle the allocation, binding, permission change, and recycling of IPv6 addresses, and submits the operation results to the blockchain core layer for evidence storage.

[0028] (1) Address allocation module: In some embodiments, the address allocation module described above is used to: receive an address range allocation instruction from an upper-level address allocation authority, generate an allocation transaction containing the address range, the public key of the allocation object, the validity period, and the permission level; submit the allocation transaction to the blockchain core layer, and after consensus among the consortium blockchain nodes, store it on the blockchain to generate an immutable address range allocation certificate.

[0029] In this embodiment, it can receive address range allocation instructions from upper-level address allocation agencies (such as CNNIC), generate allocation transactions containing "address range, allocation target, validity period, and permission level," and submit them to the blockchain for evidence storage. It supports hierarchical allocation (e.g., backbone network → metropolitan area network → enterprise network).

[0030] (2) Terminal binding module: In some embodiments, the terminal binding module is configured to: receive binding information sent by the terminal interaction layer; wherein the binding information is binding information between the terminal's unique identifier and the IPv6 address, and the binding information includes the terminal's MAC address, hardware fingerprint, and terminal private key signature; verify the legality of the terminal private key signature; if the verification is successful, call the terminal binding smart contract to store the binding information on the blockchain and establish a unique mapping relationship between the terminal and the IPv6 address.

[0031] In this embodiment, when a terminal device (such as a sensor or server) accesses the network, it obtains an IPv6 address through the DHCPv6 protocol and automatically generates a binding relationship of "device unique identifier (such as MAC address + hardware fingerprint) - IPv6 address". After being signed by the device's private key, the binding is stored on the blockchain to ensure that it cannot be tampered with.

[0032] (3) Access Control Module: In some embodiments, the above-mentioned permission management module implements address permission management through permission change smart contracts.

[0033] In some embodiments, the permission management module receives a permission change request; wherein the request includes the target IPv6 address, permission scope, validity period and requester signature; after verifying the requester's permissions based on the smart contract, the permission management module performs the permission change operation and stores the change log on the blockchain for evidence.

[0034] In this embodiment, address usage permissions (such as access range and port opening permissions) can be defined based on smart contracts. When permissions change (such as temporarily authorizing external devices to access), the contract execution is automatically triggered and the change log is recorded on the blockchain.

[0035] (4) Recycling and deregistration module: In this embodiment, when a terminal goes offline or its address expires, a recycling request is initiated. After consensus among the administrator nodes, the address status is marked as "recycled" and uploaded to the blockchain. At the same time, the binding relationship with the terminal is released, and status verification is supported during address re-allocation.

[0036] 3. The terminal interaction layer is deployed on the terminal device or edge gateway. The terminal interaction layer is used for the interaction between the terminal device and the address management layer, generating the binding information between the terminal identifier and the IPv6 address and uploading it to the blockchain.

[0037] In this embodiment, the terminal interaction layer can be deployed on terminal devices or edge gateways to provide lightweight blockchain clients (such as Fabric Gateway) and support interaction between terminal devices and the blockchain core layer (such as address binding and permission application).

[0038] In this embodiment, the terminal interaction layer can have a built-in address verification tool that automatically queries the blockchain to verify the address's legality (such as whether it has been allocated or whether it is within its validity period) when the terminal connects.

[0039] IV. The traceability engine is used to query the full lifecycle data of IPv6 addresses stored in the core layer of the blockchain and generate an address transfer trajectory report.

[0040] In some embodiments, the aforementioned tracing engine is configured to: receive a query request containing an IPv6 address, terminal identifier, or allocated object; retrieve allocation records, binding records, permission change logs, and revocation status associated with the query request from the blockchain core layer; and generate a tracing report containing data from each stage and corresponding blockchain hash values ​​to verify the authenticity of the report through the hash values.

[0041] The tracing engine in this embodiment can provide an interface for querying the entire lifecycle of an address. It supports inputting an IPv6 address, terminal identifier, or allocation object to query the allocation record, binding history, permission changes, and recycling status of the corresponding address. The query results are accompanied by a blockchain hash value for verifying authenticity.

[0042] This invention provides a blockchain-driven IPv6 address management and traceability system. Through a three-layer architecture of "blockchain core layer + address management layer + terminal interaction layer," combined with smart contracts, it achieves automated management and trusted traceability of the entire IPv6 address lifecycle. It can achieve trusted data storage and notarization throughout the entire lifecycle of IPv6 addresses, from allocation to cancellation, preventing tampering; it can establish a unique binding relationship between addresses and terminal devices, ensuring the credibility of "address as identity"; it can support automatic collaboration and data sharing across domain address management systems, improving management efficiency; and it can provide rapid traceability of address transfer trajectories, meeting network security auditing requirements.

[0043] Example 2: This embodiment provides another blockchain-driven IPv6 address management and traceability system, implemented based on the above embodiment. It focuses on describing the entire lifecycle management process of IPv6 addresses, which can be found in [reference needed]. Figure 2 The diagram shown illustrates the entire lifecycle management process for IPv6 addresses, primarily describing the specific methods for managing the entire lifecycle of IPv6 addresses.

[0044] The IPv6 address lifecycle management process in this embodiment consists of 5 steps: Step 1, Address Range Allocation: (1) The upper-level allocation agency (such as operator A) allocates an IPv6 address range (2001:db8:1:: / 48) to enterprise B and generates an allocation transaction containing the allocation object (enterprise B's public key), validity period (2024-2029), and permission level (level 1, sub-allocation is possible); (2) After the transaction is agreed upon by the consortium chain nodes, it is stored on the chain and an allocation certificate (including blockchain hash H1) is generated.

[0045] Step 2, Terminal Address Binding: (1) Enterprise B’s terminal equipment (MAC: 00:1B:44:11:3A:B7) obtains the address 2001:db8:1::100 via DHCPv6; (2) The terminal interaction layer generates “MAC + hardware fingerprint + IPv6 address” binding information, signs it with the device private key and sends it to the address management layer; (3) After the binding information is verified by the enterprise B administrator node, it is stored on the blockchain to generate a binding certificate (hash H2).

[0046] Step 3, Permission Change: (1) Enterprise B needs to temporarily authorize an external device (address 2001:db8:2::200) to access port 8080 of terminal 2001:db8:1::100; (2) The administrator triggers the “Permission Change Smart Contract”, enters the authorization scope and validity period (24 hours), and the contract is automatically executed and the change log is recorded on the chain (hash H3).

[0047] Step 4, Recycling and Deregistration: (1) When the terminal device is taken offline, Enterprise B initiates an address reclamation request; (2) After the recycling request is reached through consensus among the consortium chain nodes, the status of address 2001:db8:1::100 is marked as "recycled", the binding relationship with the terminal is released, and the evidence is stored on the chain (hash H4).

[0048] Step 5, Source Tracing Inquiry: (1) During network security audit, enter address 2001:db8:1::100. The tracing engine queries the blockchain to find the complete trajectory of H1 (allocation), H2 (binding), H3 (permission change), and H4 (recycling). After verifying the hash consistency, the data is confirmed to be true.

[0049] The blockchain-driven IPv6 address management and tracing system provided in this embodiment of the invention has the following main advantages: 1. Tamper-proof and trustworthy: Based on the immutable nature of blockchain, the entire lifecycle of address data is traceable and cannot be forged, solving the risk of data tampering in centralized management; 2. Unique Identity Binding: The binding relationship between terminal devices and IPv6 addresses is signed and uploaded to the blockchain to ensure that "address is identity", effectively preventing device forgery and identity impersonation; 3. High efficiency in cross-domain collaboration: The consortium blockchain architecture supports the joint participation of multiple institutional nodes in management, with unified address data format and cross-domain sharing without manual verification, improving efficiency by more than 80%; 4. Rapid source tracing capability: The source tracing engine can query the address flow trajectory in real time with a response time of less than 1 second, meeting the needs of network attack source tracing, compliance auditing, etc. 5. Automated Management: Smart contracts automatically execute processes such as address allocation and permission changes, reducing manual intervention and lowering the error rate.

[0050] Example 3: This embodiment provides another blockchain-driven IPv6 address management and traceability system, which is implemented based on the above embodiment. It focuses on describing the specific process in the industrial Internet IPv6 address management scenario. The scenario background is: an industrial park deploys an industrial Internet, which includes 1,000 industrial sensors (such as temperature and pressure sensors) and 50 edge servers. It needs to realize the trusted allocation of IPv6 addresses, device identity binding and anomaly traceability (such as locating abnormal devices when sensor data is tampered with).

[0051] The specific process for industrial internet IPv6 address management in this embodiment consists of four steps: Step 1, System Deployment: (1) Consortium blockchain nodes: Four consensus nodes are composed of the park management, network operator and three enterprises, and the PBFT consensus algorithm is adopted (confirmation time < 500ms). (2) The address management layer is deployed on the park cloud platform, and the terminal interaction layer is integrated into the embedded system of sensors and edge servers; (3) Smart contract pre-deployment: address allocation contract, terminal binding contract, permission change contract, and recycling / cancellation contract.

[0052] Step 2, Address Range Allocation: (1) The operator allocates an IPv6 address range (2001:db8:AB:: / 40) to the park management, and generates an allocation transaction through the address allocation module, which includes: Address range: 2001:db8:AB:: / 40; Assignment recipient: Park management (public key PK_park); Valid until: 2024-2030; Permissions: Allow sub-assignments to enterprise nodes.

[0053] (2) After the transaction is agreed upon by 4 nodes, it is uploaded to the chain and an allocation certificate is generated (block height 10086, hash H_park).

[0054] Step 3, Terminal Address Binding and Access: (1) The sensor of Company A (MAC: 00:0A:95:9D:68:16, hardware fingerprint: sensor_001) starts up and obtains the address 2001:db8:AB:0001::1 from the campus server via DHCPv6; (2) The terminal interaction layer generates binding information: {MAC:00:0A:95:9D:68:16, hardware fingerprint:sensor_001, IPv6:2001:db8:AB:0001::1, timestamp: 2024-06-01 08:00:00}, signs it with the sensor private key SK_sensor, and sends it to the address management layer; (3) After the park management node verifies the legality of the signature, it calls the "terminal binding contract" to put the information on the chain (block height 10090, hash H_sensor1). (4) When the sensor accesses the network, the terminal interaction layer automatically queries the blockchain to verify the legality of the address, and allows access after confirming its validity.

[0055] Step 4, Anomaly Tracing Scenario: (1) The park monitoring system detected abnormal sensor data (frequently sending incorrect temperature values) at address 2001:db8:AB:0001::1 and initiated the source tracing process; (2) The administrator inputs the IPv6 address through the tracing engine, and the system returns the full lifecycle trajectory: Allocation record: Assigned to company A (hash H_park) by the park management on 2024-05-01; Binding record: 2024-06-01 bound to sensor_001 (hash H_sensor1); Permission change: Temporary authorization granted for edge server access on 2024-06-10 (hash H_perm).

[0056] (3) By combining the MAC address and hardware fingerprint, the physical location of the specific sensor is located, and the device is found to have been maliciously tampered with. The device is replaced in time and the binding status on the blockchain is updated.

[0057] In summary, the blockchain-driven IPv6 address management and tracing system provided in the embodiments of the present invention mainly provides the following: 1. Full lifecycle data of blockchain-based evidence storage addresses; 2. Terminal identifiers and addresses are bound to the blockchain; 3. Smart contract-driven permission management.

[0058] The blockchain-driven IPv6 address management and tracing system provided in this embodiment of the invention differs from the traditional centralized management model and has the following main advantages: 1. It can achieve trusted data storage and verification throughout the entire lifecycle of IPv6 addresses, from allocation to cancellation, preventing tampering; 2. It can establish a unique binding relationship between an address and a terminal device, ensuring the credibility of "address as identity"; 3. It can support automatic collaboration and data sharing in cross-domain address management systems, improving management efficiency; 4. It can also provide rapid traceability of address flow, meeting the needs of network security auditing.

[0059] Example 4: This embodiment provides a blockchain-driven IPv6 address management and tracing method, applied to the blockchain-driven IPv6 address management and tracing system provided in the aforementioned embodiment. See [link to previous embodiment]. Figure 3 The flowchart shown illustrates a blockchain-driven IPv6 address management and tracing method, which includes the following steps: In step S302, the address allocation agency allocates IPv6 address ranges to the target object through the address allocation module, generates allocation transactions, and stores them on the blockchain.

[0060] In step S304, after obtaining the IPv6 address, the terminal device generates binding information through the terminal interaction layer, and uploads it to the blockchain for evidence storage after signature verification; wherein, the binding information is the binding information between the terminal's unique identifier and the IPv6 address.

[0061] In some embodiments, the unique identifier of the terminal includes the terminal MAC address and hardware fingerprint; the binding information is sent to the address management layer after being signed by the terminal private key to ensure the non-repudiation of the binding relationship.

[0062] Step S306: When address permissions are changed, a request is initiated through the permission management module, and the smart contract automatically executes the change and records the log on the blockchain for evidence storage.

[0063] Step S308: When the terminal goes offline or the address expires, a recycling request is initiated through the recycling and cancellation module. After consensus is reached, the address status is marked as recycled and the address status is stored on the blockchain.

[0064] Step S310: When tracing the source, query the blockchain through the tracing engine to obtain the full lifecycle trajectory of the address and verify its authenticity.

[0065] In some embodiments, the above-mentioned authenticity verification is achieved by comparing the data hash in the traceability report with the hash value stored on the blockchain.

[0066] This invention provides a blockchain-driven method for IPv6 address management and traceability. Through a three-layer architecture of "blockchain core layer + address management layer + terminal interaction layer," combined with smart contracts, it achieves automated management and trusted traceability of the entire IPv6 address lifecycle. It enables trusted data storage and verification throughout the entire IPv6 address lifecycle, from allocation to cancellation, preventing tampering; it establishes a unique binding relationship between addresses and terminal devices, ensuring the credibility of "address as identity"; it supports automatic collaboration and data sharing across domain address management systems, improving management efficiency; and it provides rapid traceability of address transfer paths, meeting network security auditing requirements.

[0067] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working process of the blockchain-driven IPv6 address management and traceability device described above can be referred to the corresponding process in the aforementioned embodiments of the blockchain-driven IPv6 address management and traceability method, and will not be repeated here.

[0068] Example 5: This invention also provides an electronic device for running the aforementioned blockchain-driven IPv6 address management and tracing method; see also Figure 4 The diagram shows the structure of an electronic device, which includes a memory 100 and a processor 101. The memory 100 stores one or more computer instructions, which are executed by the processor 101 to implement the aforementioned blockchain-driven IPv6 address management and traceability method.

[0069] Furthermore, Figure 4 The electronic device shown also includes a bus 102 and a communication interface 103, with the processor 101, the communication interface 103 and the memory 100 connected via the bus 102.

[0070] The memory 100 may include high-speed random access memory (RAM) and may also include non-volatile memory, such as at least one disk storage device. Communication between this system network element and at least one other network element is achieved through at least one communication interface 103 (which can be wired or wireless), such as the Internet, wide area network, local area network, metropolitan area network, etc. The bus 102 may be an ISA bus, PCI bus, or EISA bus, etc. The bus can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 4The symbol is represented by a single double-headed arrow, but this does not mean that there is only one bus or one type of bus.

[0071] Processor 101 may be an integrated circuit chip with signal processing capabilities. In implementation, each step of the above method can be completed by the integrated logic circuitry in the hardware of processor 101 or by instructions in software form. Processor 101 can be a general-purpose processor, including a Central Processing Unit (CPU), a Network Processor (NP), etc.; it can also be a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. It can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this invention. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this invention can be directly manifested as execution by a hardware decoding processor, or execution by a combination of hardware and software modules in the decoding processor. The software module can reside in a readily available storage medium in the art, such as random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, or registers. This storage medium is located in memory 100, and processor 101 reads information from memory 100 and, in conjunction with its hardware, completes the steps of the method described in the foregoing embodiments.

[0072] This invention also provides a computer-readable storage medium storing computer-executable instructions. When these computer-executable instructions are called and executed by a processor, they cause the processor to implement the aforementioned blockchain-driven IPv6 address management and tracing method. For specific implementation details, please refer to the method embodiments, which will not be repeated here.

[0073] The computer program product of the blockchain-driven IPv6 address management and tracing system and method provided in the embodiments of the present invention includes a computer-readable storage medium storing program code. The instructions included in the program code can be used to execute the methods in the preceding method embodiments. For specific implementation, please refer to the method embodiments, which will not be repeated here.

[0074] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working process of the system and / or device described above can be referred to the corresponding process in the foregoing method embodiments, and will not be repeated here.

[0075] Furthermore, in the description of the embodiments of the present invention, unless otherwise explicitly specified and limited, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in the present invention based on the specific circumstances.

[0076] If a function is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0077] In the description of this invention, it should be noted that the terms "center," "upper," "lower," "left," "right," "vertical," "horizontal," "inner," and "outer," etc., indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings. They are used only for the convenience of describing the invention and for simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limitations on the invention. Furthermore, the terms "first," "second," and "third" are used for descriptive purposes only and should not be construed as indicating or implying relative importance.

[0078] Finally, it should be noted that the above-described embodiments are merely specific implementations of the present invention, used to illustrate the technical solutions of the present invention, and not to limit it. The scope of protection of the present invention is not limited thereto. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that any person skilled in the art can still modify or easily conceive of changes to the technical solutions described in the foregoing embodiments within the technical scope disclosed in the present invention, or make equivalent substitutions for some of the technical features; and these modifications, changes, or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be covered within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A blockchain-driven IPv6 address management and traceability system, characterized in that, The blockchain-driven IPv6 address management and traceability system includes: a blockchain core layer, an address management layer, a terminal interaction layer, and a traceability engine; The core layer of the blockchain adopts a consortium blockchain architecture, including multiple address management related party nodes; the core layer of the blockchain is used to store IPv6 address lifecycle data and execute smart contracts; The address management layer includes an address allocation module, a terminal binding module, a permission management module, and a recycling and deregistration module; the address management layer is used to process the allocation, binding, permission change, and recycling of IPv6 addresses, and submits the operation results to the blockchain core layer for evidence storage; The terminal interaction layer is deployed on the terminal device or edge gateway; the terminal interaction layer is used for the interaction between the terminal device and the address management layer to generate the binding information between the terminal identifier and the IPv6 address and upload it to the blockchain; The tracing engine is used to query the full lifecycle data of IPv6 addresses stored in the core layer of the blockchain and generate an address transfer trajectory report.

2. The blockchain-driven IPv6 address management and traceability system according to claim 1, characterized in that, The address allocation module is used for: Receive address range allocation instructions from the upper-level address allocation authority and generate an allocation transaction that includes the address range, the public key of the allocation target, the validity period, and the permission level; The allocation transaction is submitted to the core layer of the blockchain, and after consensus among the consortium blockchain nodes, it is stored on the blockchain to generate an immutable address range allocation certificate.

3. The blockchain-driven IPv6 address management and traceability system according to claim 1, characterized in that, The terminal binding module is used for: Receive binding information sent by the terminal interaction layer; wherein, the binding information is the binding information between the terminal's unique identifier and the IPv6 address, and the binding information includes the terminal's MAC address, hardware fingerprint, and terminal private key signature; Verify the legality of the terminal's private key signature; if the verification passes, invoke the terminal binding smart contract to store the binding information on the blockchain and establish a unique mapping relationship between the terminal and the IPv6 address.

4. The blockchain-driven IPv6 address management and traceability system according to claim 1, characterized in that, The permission management module implements address permission management through permission change smart contracts.

5. The blockchain-driven IPv6 address management and traceability system according to claim 4, characterized in that, The permission management module implements address permission management through permission change smart contracts, including: The permission management module receives permission change requests; wherein, the request includes the target IPv6 address, permission scope, validity period, and requester signature; After verifying the requester's permissions based on the smart contract, the permission management module performs a permission change operation and stores the change log on the blockchain for evidence.

6. The blockchain-driven IPv6 address management and traceability system according to claim 1, characterized in that, The source tracing engine is used for: Receive query requests containing IPv6 addresses, terminal identifiers, or assigned objects; Retrieve allocation records, binding records, permission change logs, and recycling status associated with the query request from the core layer of the blockchain; Generate a traceability report containing data from each stage and the corresponding blockchain hash value, and verify the authenticity of the report through the hash value.

7. A blockchain-driven method for IPv6 address management and tracing, characterized in that, A method for managing and tracing IPv6 addresses applied to a blockchain-driven system includes: The address allocation agency allocates IPv6 address ranges to target objects through the address allocation module, generates allocation transactions, and stores them on the blockchain for evidence. After obtaining the IPv6 address, the terminal device generates binding information through the terminal interaction layer, and after signature verification, it is stored on the blockchain; wherein, the binding information is the binding information between the terminal's unique identifier and the IPv6 address; When address permissions are changed, a request is initiated through the permission management module, and the smart contract automatically executes the change and records the log on the blockchain for evidence storage. When a terminal goes offline or an address expires, a recycling request is initiated through the recycling and cancellation module. After consensus is reached, the address status is marked as recycled and the address status is recorded on the blockchain for evidence. When tracing the source, the blockchain is queried through the source tracing engine to obtain the full lifecycle trajectory of the address and verify its authenticity.

8. The blockchain-driven IPv6 address management and traceability method according to claim 7, characterized in that, The unique identifier of the terminal includes the terminal MAC address and hardware fingerprint; The binding information is sent to the address management layer after being signed by the terminal's private key to ensure the non-repudiation of the binding relationship.

9. The blockchain-driven IPv6 address management and tracing method according to claim 7, characterized in that, Authenticity verification is achieved by comparing the data hash in the traceability report with the hash value stored on the blockchain; If the data hash in the traceability report matches the hash value stored on the blockchain, it confirms that the data has not been tampered with.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the blockchain-driven IPv6 address management and tracing method according to any one of claims 7-9.

Images