Light wallet transaction tracing method and device for wave field encryption cryptocurrency network

Abstract

This invention discloses a method and apparatus for tracing light wallet transactions on the Tron cryptocurrency network. The method includes: determining the on-chain time of a light wallet transaction to be traced on the Tron cryptocurrency network; constructing an observation time window based on the on-chain time; filtering session records within the observation time window from acquired session records of communication between the light wallet user and the light wallet backend service platform; for the filtered session records, if the target address belongs to the Tron node address set of the backend service, adding the source address of the session record to the source address candidate set; and determining the tracing result of the light wallet transaction based on the source address candidate set; wherein the Tron node address set of the backend service is predetermined. Applying this invention allows for the tracing of light wallet transactions on the Tron network, enabling the supervision of light wallet transactions related to the Tron cryptocurrency.

Description

Technical Field

[0001] This invention relates to the field of computer technology, and in particular to a method and apparatus for tracing transactions in a light wallet for the Tron cryptocurrency network. Background Technology

[0002] With the rapid development of blockchain technology, the TRON crypto network, due to its fast transaction confirmation speed and low transaction fees, is widely used in scenarios such as digital asset transfer and stablecoin trading. Currently, a large number of users access the TRON crypto network to complete transactions through light wallets. Light wallets typically do not run a full blockchain node directly, but instead use preset or dynamically selected blockchain service nodes (such as remote full nodes or third-party service nodes) to complete functions such as account inquiries and transaction submissions, thereby reducing local resource consumption and improving ease of use.

[0003] Currently, light wallets on the Tron crypto network generally employ a relay interaction mode: after a user generates and signs a transaction on their local device, the light wallet application sends the transaction request to its light wallet backend service platform, which then forwards the transaction to a specific Tron network node for broadcasting and processing. During this process, the light wallet backend service platform typically connects to multiple blockchain nodes simultaneously and selects nodes to forward user transaction requests using load balancing or random methods.

[0004] Light wallets based on the Tron cryptographic network offer users ample anonymity, but lack an identity authentication system, making it difficult to regulate illicit transactions.

[0005] Anonymity is primarily reflected in the fact that the mapping relationship between the light wallet backend service platform and specific backend blockchain nodes is usually not publicly disclosed. It is difficult for outsiders to determine which blockchain service node a particular light wallet transaction was actually submitted to the network through. This makes it impossible to determine whether a transaction originated from a light wallet user, let alone further analyze its network origin characteristics, when only on-chain transaction information or the originating node of the transaction is available.

[0006] Secondly, existing communication between light wallet users and the light wallet backend service platform uses encrypted transmission, meaning transaction request content and user identity information cannot be directly identified at the network layer. While the confirmation time of a transaction on the blockchain can be obtained, this time only reflects the point in time when the transaction was packaged and uploaded to the chain, and cannot accurately correspond to the network activity window when the user actually initiated the transaction request. Therefore, relying solely on on-chain timestamps or transaction hashes is insufficient to effectively correlate the network traffic generated when a user accesses the backend service. In contrast, Tron light wallets do not require any identity information for user registration.

[0007] In conclusion, while light wallet transaction technology based on the Tron encrypted network offers advantages in ease of use, it also provides an ideal breeding ground for illicit transactions. Furthermore, research on methods for tracing the origins of light wallet transactions on the Tron encrypted network is currently almost nonexistent. Summary of the Invention

[0008] In view of this, the purpose of this invention is to propose a method and apparatus for tracing transactions of light wallets on the TRON cryptocurrency network, which can trace the transactions of light wallets based on the TRON cryptocurrency network and realize the supervision of light wallet transactions.

[0009] To achieve the above objectives, this invention provides a method for tracing transactions in a light wallet for the Tron cryptocurrency network, comprising: For light wallet transactions in the Tron cryptocurrency network that require traceability, determine their on-chain transaction time. Construct an observation time window based on the transaction chain time; From the obtained conversation records between light wallet users and the light wallet backend service platform, filter out the conversation records within the observation time window; For the selected session records, if their target address belongs to the set of backend service Tron node addresses, then the source address of the session record is added to the source address candidate set. Based on the candidate source address set, the tracing result of the light wallet transaction is determined; The set of background service Tron node addresses is predetermined.

[0010] Preferably, the set of background service Tron node addresses is predetermined according to the following method: For each Tron node connected to the light wallet backend service platform, at least one round of neighbor node queries is performed; the process of one round of neighbor node queries is as follows: Identify the neighboring nodes of the Tron node connected to the light wallet backend service platform; For a neighbor node that has passed the availability test, further obtain the set of neighbor nodes of that neighbor node; The address of the Tron node is determined by the intersection of the neighbor node sets of each neighbor node, and this address is added to the background service Tron node address set.

[0011] Preferably, determining the neighboring nodes of the Tron node connected to the light wallet backend service platform specifically includes: Send an HTTP GET request to the node information query endpoint of the light wallet backend service platform; Obtain the node identifier of the wave field node and the set of neighboring nodes of the wave field node from the received response information.

[0012] Preferably, determining the address of the wave field node based on the intersection of the neighbor node sets of each obtained neighbor node specifically includes: For a wave field node with the same node identifier, take the intersection of the sets of neighbor nodes of each neighbor node; If the intersection result contains only one IP address, then that IP address is confirmed as the IP address of the wave field node.

[0013] Preferably, the Tron nodes connected to the light wallet backend service platform are multiple, each with a different node identifier, and the method further includes: If the intersection result contains multiple IP addresses, then the intersection of the candidate IP address sets obtained from the multiple rounds of neighbor node queries performed on the Tron node identified by that node will be taken to obtain the IP address of that Tron node.

[0014] Preferably, determining the source tracing result of the light wallet transaction based on the candidate source address set specifically includes: Based on the candidate source address set and combined with the behavioral patterns of light wallet users over a certain period, the traceability result of the light wallet transactions is determined.

[0015] This invention also provides a lightweight wallet transaction tracing device for the Tron cryptocurrency network, comprising: The transaction time analysis module is used to determine the on-chain transaction time of light wallet transactions that need to be traced in the Tron cryptocurrency network; and to construct an observation time window based on the on-chain transaction time. The session extraction module is used to filter out the session records within the observation time window from the obtained session records of communication between the light wallet user and the light wallet backend service platform. The candidate set generation module is used to add the source address of the selected session record to the source address candidate set if the target address belongs to the backend service Tron node address set. The tracing result determination module is used to determine the tracing result of the light wallet transaction based on the source address candidate set; The set of background service Tron node addresses is predetermined.

[0016] Preferably, the device further includes: The node information query module is used to determine the neighboring nodes of the Tron node connected to the light wallet backend service platform; The neighbor node availability detection module is used to further obtain the set of neighbor nodes of a neighbor node that has passed the availability detection. The service node location module is used to determine the address of the Tron node based on the intersection of the neighbor node sets of each neighbor node, and add the address to the background service Tron node address set. The candidate set reduction module is used to reduce the candidate set of source addresses based on the behavioral patterns of light wallet users over a certain period; and The source tracing result determination module is specifically used to determine the source tracing result of the light wallet transaction based on the source address candidate set reduced by the candidate set reduction module.

[0017] The present invention also provides a computer device, the computer device including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the above-described light wallet transaction tracing method for the Tron cryptocurrency network.

[0018] The present invention also provides a computer-readable storage medium storing a computer program that can be executed by at least one processor to perform the steps of the above-described method for tracing transactions in a light wallet for the Tron cryptocurrency network.

[0019] In this invention, for light wallet transactions to be traced in the Tron cryptocurrency network, the on-chain time of the transaction is determined; based on the on-chain time, an observation time window is constructed; from the obtained session records of communication between light wallet users and the light wallet backend service platform, session records within the observation time window are selected; for the selected session records, if their target address belongs to the Tron node address set of the backend service, the source address of the session record is added to the source address candidate set; based on the source address candidate set, the tracing result of the light wallet transaction is determined; wherein, the Tron node address set of the backend service is predetermined. Thus, without changing the existing light wallet system architecture, the blockchain service nodes actually used by the light wallet backend service platform are determined, and on this basis, the user network source related to light wallet transactions is analyzed, realizing the tracing of light wallet transactions on the Tron network and the supervision of light wallet transactions of Tron cryptocurrency. Compared with existing technologies that rely solely on on-chain ledger information, this significantly enhances the traceability of light wallet transactions. Attached Figure Description

[0020] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0021] Figure 1 , 2 This is a flowchart of a method for determining the Tron node connected to a light wallet backend service platform, provided in Embodiment 1 of the present invention. Figure 3 This is a flowchart of a light wallet transaction tracing method for the Tron cryptocurrency network provided in Embodiment 2 of the present invention; Figure 4 This is a flowchart illustrating a method for further refining the traceability results of light wallet transactions, as provided in Embodiment 2 of the present invention. Figure 5 This is a flowchart of a method for denoising a reduced set of source address candidates according to Embodiment 2 of the present invention; Figure 6 This is an internal structural block diagram of a lightweight wallet transaction tracing device for the Tron cryptocurrency network provided in Embodiment 3 of the present invention; Figure 7 This is a schematic diagram of a computer device hardware structure provided in Embodiment 4 of the present invention. Detailed Implementation

[0022] To make the objectives, technical solutions, and advantages of the present invention clearer, the present invention will be further described in detail below with reference to specific embodiments and accompanying drawings.

[0023] It should be noted that, unless otherwise defined, the technical or scientific terms used in the embodiments of this invention should have the ordinary meaning understood by one of ordinary skill in the art to which this disclosure pertains. The terms "first," "second," and similar terms used in this disclosure do not indicate any order, quantity, or importance, but are merely used to distinguish different components. Terms such as "comprising" or "including" mean that the element or object preceding the word encompasses the elements or objects listed following the word and their equivalents, without excluding other elements or objects. Terms such as "connected" or "linked" are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. Terms such as "upper," "lower," "left," and "right" are used only to indicate relative positional relationships; when the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0024] The inventors of this invention have considered the aforementioned problems existing in the supervision of existing Tron network light wallets, and this invention aims to provide a method for tracing transactions in Tron network light wallets to overcome the shortcomings of existing technologies in the supervision of light wallet transactions.

[0025] Specifically, in existing technologies, light wallet transactions are usually forwarded to the blockchain network via backend service nodes. Because the correspondence between backend service nodes and specific blockchain service nodes is opaque and the node connection relationship changes dynamically, it is difficult to determine the actual blockchain service node used by a light wallet transaction. As a result, it is impossible to distinguish whether the transaction originated from a light wallet user or from which light wallet, which restricts the basic conditions for transaction traceability.

[0026] Meanwhile, under current technological conditions, communication between light wallet users and backend services is mostly encrypted. Transaction requests cannot be directly parsed at the network layer, relying solely on transaction confirmation times recorded in the blockchain ledger, making it difficult to accurately reflect the network behavior characteristics of users when initiating transactions. This results in the user's true network origin being submerged in the large amount of ordinary traffic simultaneously accessing the backend service, forming a large anonymous set of network addresses, making it difficult to effectively narrow down the scope of analysis.

[0027] Based on this, the technical task to be solved by the present invention is to provide a transaction tracing method that can locate the blockchain service node used by the light wallet backend service platform and effectively reduce the anonymous set of network addresses of light wallet transaction users by combining transaction time characteristics and user access behavior, without changing the existing Tron network light wallet system architecture and communication encryption mechanism, thereby improving the analyzability and traceability of light wallet transaction behavior.

[0028] By solving the above-mentioned technical problems, this invention can improve the technical status of "unidentifiable nodes and excessively large user range" in the process of light wallet transaction traceability based on the existing technology, and provide more feasible technical support for subsequent risk analysis, compliance audit and regulatory applications.

[0029] Based on this, the present invention proposes a method for tracing transactions in a Tron network light wallet. The method consists of two main sub-solutions: 1) Locating the blockchain service node used by the backend service: By utilizing the neighbor node information leaked by the wallet / getnodeinfo interface in the HTTPAPI (Hypertext Transfer Protocol Application Programming Interface) of the TRON full node, the "Internet Protocol address (IP address) of the service node" that actually carries the transaction request in the wallet backend is located through multiple rounds of neighbor set intersection and aggregation based on stable identifiers.

[0030] 2) Reduction of the anonymous set of network addresses of users in light wallet transactions: Given that "a certain transaction is forwarded by the backend of the light wallet" and the backend service domain name / address is known, a set of anonymous suspicious source IPs is constructed based on the on-chain time and network session time window. In combination with user behavior patterns (time period consistency, network consistency), the intersection operation and network merging of multiple anonymous sets are performed, thereby significantly reducing the range of candidate user network addresses.

[0031] The Chinese annotations of key terms and abbreviations in this article are as follows: TRON: Tron blockchain network; Light wallet: A wallet that does not run a full blockchain node directly and relies on remote service nodes to submit transactions; HTTP: Hypertext Transfer Protocol; API: Application Programming Interface; RPC: Remote Procedure Call; IP address: Internet Protocol address; TLS: Transport Layer Security Protocol (used for encrypted transmission); gRPC: A remote procedure call framework based on HTTP / 2 (an implementation system proposed by Google); JSON: JavaScript Object Notation (a common data exchange format); nodeId: Node identifier: An identifier field that remains unchanged after the node starts, and can be used to distinguish different backend node instances.

[0032] The technical solutions of the embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

[0033] Example 1 The inventors of this invention considered that by utilizing the neighbor node information leaked by the wallet / getnodeinfo interface in the HTTP API (Hypertext Transfer Protocol Application Programming Interface) of the TRON full node, and through multiple rounds of neighbor set intersection and aggregation based on stable identifiers, the IP address (Internet Protocol address) of the service node that actually carries the transaction request in the wallet backend can be located. Specifically, Tron nodes in the Tron cryptocurrency network provide interfaces such as HTTP API and gRPC. The HTTP API is enabled by default and transmits data in plaintext, and provides the wallet / getnodeinfo interface, which can return information about the neighboring nodes of the queried node and their node identifiers (nodeId).

[0034] In the light wallet scenario, the light wallet backend service platform provides access endpoints (e.g., in the form of a domain name), but typically does not disclose the IP addresses of the Tron nodes actually connected internally. To locate the actual Tron nodes connected to the light wallet backend service platform, the technical solution of Embodiment 1 of this invention utilizes the following facts: 1) When the light wallet backend service platform processes the query information of wallet / getnodeinfo (wallet node information acquisition interface), it will forward the query information to a certain Tron service node, which will actually respond. The response includes its set of neighboring nodes; where wallet / getnodeinfo represents the interface for obtaining node information in the wallet interface. 2) Some nodes in the neighbor node set also have an HTTP API available, allowing users to query their neighbor set again; 3) Since the IP addresses of the Tron nodes connected to the light wallet backend service platform appear in the neighbor set of their neighbors, finding the intersection of multiple neighbor sets can reduce interfering nodes and shrink the anonymity set, ultimately determining the set of IP addresses of the Tron nodes connected to the light wallet backend service platform. For ease of description, the Tron nodes connected to the light wallet backend service platform will be referred to as backend service Tron nodes in this article.

[0035] Based on the above analysis, the technical solution of Embodiment 1 of the present invention provides a method for determining the Tron nodes connected to the light wallet backend service platform: performing at least one round of neighbor node queries on the Tron nodes connected to the light wallet backend service platform; wherein, the specific process of one round of neighbor node queries is as follows: Figure 1 As shown, it includes the following steps: Step S101: Determine the neighboring nodes of the Tron node connected to the light wallet backend service platform; In this step, after sending an HTTP GET (Hypertext Transfer Protocol Retrieve Information) request to the node information query endpoint of the light wallet backend service platform, the light wallet backend service platform will forward the request to a Tron node connected to it for processing and return the response information from the Tron node. Upon receiving the returned response information, the node identifier of the Tron node and the set of neighboring nodes of the Tron node are obtained from the received response information. Specifically, the set of neighboring nodes refers to the set of IP addresses of all neighboring nodes of the Tron node. For example, for a Tron node with nodeId_0, the obtained set of neighboring nodes can be denoted as Neighbors_0, which records the IP addresses of each neighboring node of the Tron node, denoted as ip1, ip2, …, ipn.

[0036] Among them, the node information query endpoint of the light wallet backend service platform is BackendRPC=https: / / backenddomain / wallet / getnodeinfo (example format), and the probe port is 8090 (example: 8090, used for HTTP API).

[0037] Step S102: For a neighbor node that has passed the availability test, further obtain the set of neighbor nodes of that neighbor node; In this step, for each neighboring node of the Tron node, an availability check is performed based on the IP address of the neighboring node to check whether the neighboring node is reachable via http: / / ipi:8090 / wallet / getnodeinfo (the wallet node information retrieval interface on the default port). If it is unreachable, the neighboring node is discarded; if it is reachable, it means that the neighboring node has passed the availability check. For neighboring nodes that have passed the availability check, the set of neighboring nodes returned by the neighboring node is recorded.

[0038] For example, for the neighbor node with IP address ip1 in Neighbors_0, the set of its neighbor nodes is denoted as Neighbors_1; for the neighbor node with IP address ip2 in Neighbors_0, the set of its neighbor nodes is denoted as Neighbors_2; ... for the neighbor node with IP address ipn in Neighbors_0, the set of its neighbor nodes is denoted as Neighbors_n.

[0039] Step S103: Determine the address of the Tron node based on the intersection of the obtained neighbor node sets, and add the address to the background service Tron node address set; The inventors of this invention considered that, since there is an adjacency relationship between the background service Tron node and these queryable neighbor nodes, the IP address of the background service Tron node tends to appear in multiple neighbor node sets at the same time; the intersection operation can eliminate a large number of non-common nodes, thereby forming a candidate set containing the IP addresses of the real background service Tron node.

[0040] Therefore, in this step, the IP address of the TRON node is determined based on the intersection of the neighbor node sets returned by each of the TRON node's neighbor nodes: the intersection of the neighbor node sets returned by each of the TRON node's neighbor nodes is taken; if the intersection result contains only one IP address, then that IP address is confirmed as the IP address of the TRON node, and that address is added to the background service TRON node address set; if the intersection result contains multiple IP addresses, then that intersection set is used as the candidate set of IP addresses for the TRON node.

[0041] For example, the sets Neighbors_1, Neighbors_2, ..., Neighbors_n obtained above are grouped into a family of sets NeighborIPSets; the intersection of NeighborIPSets is then calculated: CandidateSet = NeighborIPSets; If the intersection result CandidateSet contains only one IP address, then that IP address is confirmed as the IP address of the Tron node; if the intersection result CandidateSet contains multiple IP addresses, then CandidateSet is used as the candidate set of IP addresses for the Tron node with nodeId_0, denoted as<nodeId_0, CandidateSet> .

[0042] Furthermore, the inventors of this invention have considered that, since the backend service Tron nodes may consist of multiple instance nodes and queries are randomly routed by load balancing, the node identifiers obtained in each round of querying may be different; and the CandidateSet of the intersection in a single round may not converge to a single IP address. Therefore, this invention further groups nodes by node identifier and iterates continuously. The specific method flow is as follows: Figure 2 As shown, it includes the following steps: Step S201: For Tron nodes with different node identifiers connected to the light wallet backend service platform, perform multiple rounds of neighbor node queries; Specifically, the light wallet backend service platform typically connects to multiple Tron nodes, each with a different node identifier; the specific process of a neighbor node query performed on one of the Tron nodes is as described above. Figure 1 As shown in each step, the final set of candidate IP addresses for this wave field node is obtained in this round.

[0043] For example, the IP address candidate sets obtained from the n rounds of neighbor node query process for the Tron node with nodeId_0 are denoted as CandidateSet1, CandidateSet2, ..., CandidateSetn, respectively.

[0044] Step S202: Take the intersection of the candidate IP addresses obtained from the multiple rounds of neighbor node query process for the same node identifier of the Tron node to obtain the IP address of the Tron node; Specifically, if for a Tron node with the same node identifier, the intersection result of the intersection of the neighbor node sets of its neighbor nodes obtained in a round of neighbor node querying contains multiple IP addresses, then the intersection of the candidate IP address sets obtained in the multiple rounds of neighbor node querying for the Tron node with that node identifier will be used to obtain the IP address of the Tron node.

[0045] For example, if the candidate IP address set CandidateSet1 obtained during the first round of neighbor node queries for the Tron node with nodeId_0 contains multiple IP addresses, then: For the Tron node with nodeId_0, the n rounds of neighbor node query process will result in the IP address candidate sets CandidateSet1, CandidateSet2, ..., CandidateSetn. The intersection of these sets will yield a set RefinedSet(nodeId_0). If RefinedSet(nodeId_0) contains only one IP address, that IP address will be confirmed as the IP address of the Tron node and added to the background service Tron node address set. If RefinedSet(nodeId_0) contains multiple IP addresses, then multiple rounds of neighbor node query can continue.

[0046] Example 2 The inventors of this invention considered that, given that "a certain transaction is forwarded by the backend of a light wallet" and the backend service domain name / address is known, a suspicious source IP anonymous set is constructed based on the on-chain time and network session time window, and multiple anonymous sets are intersected and merged by combining user behavior patterns (time period consistency, network consistency), thereby significantly reducing the range of candidate user network addresses; Based on this, and using the set of Tron node addresses for backend services pre-determined through the above method, Embodiment 2 of this invention proposes a light wallet transaction tracing method for the Tron cryptocurrency network, the process of which is as follows: Figure 3 As shown, it includes the following steps: Step S301: For light wallet transactions in the TRON cryptocurrency network that need to be traced, determine their on-chain transaction time; In this step, for the target transaction set TX = {tx1, tx2, …} of the TRON cryptocurrency network, information on each light wallet transaction to be traced is obtained from the blockchain explorer / node. This information includes at least its transaction on-chain time T_onchain(tx) (e.g., block time or transaction confirmation time).

[0047] Step S302: Construct an observation time window based on the transaction chain time; In this step, based on the on-chain transaction time T_onchain(tx) of the light wallet transaction to be traced, and the set time window parameter Δt (seconds or minutes), an observation time window W(tx) = [T_onchain(tx)] is constructed. [Δt]; For example, the time window parameter Δt can be set to a value between 3s and 10s.

[0048] The time window parameter Δt is crucial; if it's too small, it may miss genuine transaction initiators (reducing recall); if it's too large, it will introduce more irrelevant access source IPs (reducing precision). Therefore, considering the trade-off between "false positives" and "false negatives," the following rule can be adopted: 1) When network congestion and transaction confirmation delays increase, appropriately increase Δt; 2) When transaction confirmation is fast, reduce Δt to reduce noise; 3) On-chain transaction volume / congestion indicators can be used as the basis for dynamic adjustment of Δt.

[0049] In one specific implementation, when the Tron cryptocurrency network is functioning normally and transactions propagate smoothly, Δt can be set between 3 and 10 seconds. When the network is congested or the wallet server has a large transaction volume, Δt can be set to 1 minute or even longer. In most cases, the Tron cryptocurrency network has a large transaction throughput and processing capacity, meaning Δt is set between 3 and 10 seconds. Setting it to 10 seconds ensures that genuine transaction initiators are not missed in most situations.

[0050] Step S303: Filter out the session records within the observation time window from the obtained session records of communication between the light wallet user and the light wallet backend service platform; Specifically, the network session metadata of the communication between the light wallet user and the light wallet backend service platform is obtained, thereby obtaining the session records of the communication between the light wallet user and the light wallet backend service platform, which at least include:<srcIP,dst, sessionStart, sessionEnd> Where srcIP is the session source address; dst is the session destination address; and sessionStart and sessionEnd are the session start and end times, respectively.

[0051] From the acquired session records, filter out the session records that fall within the observation time window, either sessionStart or sessionEnd.

[0052] Step S304: For the selected session records, if their target address belongs to the set of backend service Tron node addresses, then add the source address of the session record to the source address candidate set. In this step, for the selected session records, if their dst belongs to the Tron node address set of the backend service, it indicates that the session is a light wallet transaction session within the observation time window. It can be used as a candidate light wallet transaction session for the light wallet transaction to be traced. The srcIP of the session, that is, the source address of the session record, can be used as a candidate source address of the light wallet user of the light wallet transaction to be traced. And the candidate source address is added to the source address candidate set.

[0053] Step S305: Based on the source address candidate set, determine the tracing result of the light wallet transaction; Specifically, if the candidate source address set S(tx) contains only one source address, the tracing result of the light wallet transaction is determined as follows: the source address is the source address of the light wallet user of the light wallet transaction to be traced. If the candidate source address set S(tx) contains multiple source addresses, then the tracing results of the light wallet transactions can be further refined based on the candidate source address set and the behavioral patterns of light wallet users within a certain period. For the target transaction set TX, transactions that exhibit behavior patterns consistent with the light wallet transaction tx to be traced are identified and formed into a transaction candidate group Gk; Gk also includes the light wallet transaction tx to be traced; for each light wallet transaction in Gk, its source address candidate set is determined according to the methods described in steps S401-S404 above; the intersection of the source address candidate sets of each light wallet transaction in Gk is calculated to obtain a reduced source address candidate set, thereby further refining the tracing results of the light wallet transactions.

[0054] The aforementioned behavioral patterns include, but are not limited to: 1) Users tend to operate at fixed times (such as noon or evening each day); 2) When users use the same network (home broadband / office network) in the same scenario, the source IP or its network segment is stable.

[0055] Furthermore, by combining transactions from light wallet users within the same network segment, the traceability results of light wallet transactions can be further refined. The specific process is as follows: Figure 4 As shown, it includes the following steps: Step S401: For light wallet transactions in the target transaction set TX, group them according to behavioral patterns; In this step, light wallet transactions in the target transaction set TX are grouped according to their behavioral patterns: light wallet transactions with consistent behavioral patterns are grouped into the same transaction group; among them, transactions whose behavioral patterns are consistent with the light wallet transaction tx to be traced are formed into transaction candidate group Gk; Gk also includes the light wallet transaction tx to be traced. For example, light wallet transactions from the same Tron account address (same sender address) can be grouped into the same transaction group; or light wallet transactions from similar time periods within the same day (e.g., 11:00–13:00 is considered the “midday window”, and 18:00–23:00 is considered the “evening window”) can be grouped into the same transaction group.

[0056] A group of transactions whose behavior patterns are consistent with those of the light wallet transactions to be traced is selected as the transaction candidate group Gk.

[0057] Step S402: For each light wallet transaction in the target transaction set TX, perform network merging on the candidate source addresses of that light wallet transaction; Specifically, for each light wallet transaction in the target transaction set TX, after determining the candidate set of source addresses for the light wallet transaction according to the methods of steps S301-S304 above, multiple IP addresses in the same network segment in the candidate set of source addresses are merged into the source address under the same "network identifier". Step S403: Find the intersection of the source address candidate sets for each light wallet transaction in Gk to obtain the reduced source address candidate set; Specifically, the intersection of the candidate source addresses for each light wallet transaction in Gk after network merging is calculated to obtain the intersection result under the same "network identifier". After the intersection operation, the size of the set is significantly reduced, that is, the reduced candidate source address set of the light wallet transaction tx to be traced is obtained. .

[0058] Furthermore, the inventors of this invention have considered that in real-world networks, there may be "non-target entities" that continuously communicate with the backend service, such as idle wallets, monitoring probes, and institutional accounts, which may prevent the intersection results from converging further. The experiments also observed the presence of "long-term active IPs," resulting in a batch of stable addresses remaining after multiple intersections.

[0059] Based on this, the technical solution of the present invention can also target the reduced source address candidate set of light wallet transactions (tx) to be traced. Noise reduction, the specific process is as follows Figure 5 As shown, it includes the following steps: Step S501: Identify the source addresses of long-term active sources and generate a whitelist; Specifically, the frequency of access to the light wallet backend service platform by each source IP address is counted over a relatively long period of time. For source IP addresses that meet the preset long-term active conditions (such as continuous appearance at fixed time periods every day, appearance for multiple consecutive days, and significantly higher access volume than regular users), they are identified as source addresses of long-term active sources and marked as "long-term active sources".

[0060] Source addresses identified as long-term active sources that are not the target will be added to the whitelist.

[0061] Step S502: ... Remove addresses from the whitelist; Specifically, the reduced candidate set of source addresses for the light wallet transactions (tx) to be traced. After removing whitelisted addresses, a denoised candidate set of source addresses, S_final, is obtained, which serves as the final tracing result for the light wallet transaction tx to be traced. The basis for its formation (the set of transactions involved in the intersection, the time period, the Δt parameter, etc.) is recorded to facilitate auditing and record keeping.

[0062] Example 3 Based on the aforementioned method for tracing transactions in light wallets for the TRON cryptocurrency network, this invention proposes a device for tracing transactions in light wallets for the TRON cryptocurrency network, with the following internal structure: Figure 6 As shown, it specifically includes the following modules: transaction time parsing module 601, session extraction module 602, candidate set generation module 603, and source tracing result determination module 604; The transaction time analysis module 601 is used to determine the on-chain transaction time of light wallet transactions to be traced in the Tron cryptocurrency network; and to construct an observation time window based on the on-chain transaction time. The session extraction module 602 is used to filter out the session records within the observation time window from the acquired session records of communication between the light wallet user and the light wallet backend service platform; The candidate set generation module 603 is used to add the source address of the selected session record to the source address candidate set if the target address belongs to the background service Tron node address set; wherein the background service Tron node address set is predetermined.

[0063] The tracing result determination module 604 is used to determine the tracing result of the light wallet transaction based on the source address candidate set.

[0064] For details on the specific implementation methods of each module, please refer to the above. Figure 1 , 2 The steps and methods of the process shown are not repeated here.

[0065] Furthermore, the lightweight wallet transaction tracing device for the Tron cryptocurrency network proposed in this embodiment of the invention may also include the following modules: node information query module 605, neighbor node availability detection module 606, service node positioning module 607, and candidate set reduction module 608; Among them, the node information query module 605 is used to determine the neighboring nodes of the Tron node connected to the light wallet backend service platform; The neighbor node availability detection module 606 is used to further obtain the set of neighbor nodes of a neighbor node that has undergone availability detection. The service node positioning module 607 is used to determine the address of the Tron node based on the intersection of the neighbor node sets of each neighbor node, and add the address to the background service Tron node address set. For details on the specific implementation methods of the node information query module 605, the neighbor node availability detection module 606, and the service node location module 607, please refer to the above. Figure 3 The steps and methods shown in the flowchart will not be repeated here.

[0066] The candidate set reduction module 608 is used to reduce the source address candidate set based on the behavioral patterns of light wallet users within a certain period. Furthermore, the candidate set reduction module 608 can also further reduce the source address candidate set based on transactions of light wallet users within the same network segment; specific methods can be found above. Figure 4 The steps and methods of the process shown are not repeated here. Furthermore, the candidate set reduction module 608 can also denoise the reduced source address candidate set and output the denoised source address candidate set S_final. For details, please refer to the above. Figure 5 The steps and methods of the process shown are not repeated here.

[0067] Accordingly, the source tracing result determination module 604 is specifically used to determine the source tracing result of the light wallet transaction based on the source address candidate set reduced and denoised by the candidate set reduction module 608.

[0068] In this invention, for light wallet transactions to be traced in the Tron cryptocurrency network, the on-chain time of the transaction is determined; based on the on-chain time, an observation time window is constructed; from the obtained session records of communication between light wallet users and the light wallet backend service platform, session records within the observation time window are selected; for the selected session records, if their target address belongs to the Tron node address set of the backend service, the source address of the session record is added to the source address candidate set; based on the source address candidate set, the tracing result of the light wallet transaction is determined; wherein, the Tron node address set of the backend service is predetermined. Thus, without changing the existing light wallet system architecture, the blockchain service nodes actually used by the light wallet backend service platform are determined, and on this basis, the user network source related to light wallet transactions is analyzed, realizing the tracing of light wallet transactions on the Tron network and the supervision of light wallet transactions of Tron cryptocurrency. Compared with existing technologies that rely solely on on-chain ledger information, this significantly enhances the traceability of light wallet transactions.

[0069] Moreover, this invention analyzes node information interfaces, transaction time characteristics, and network session metadata, without relying on the parsing of encrypted communication content, thus avoiding impact on existing transport layer security mechanisms. It can achieve transaction traceability while maintaining system compatibility and is suitable for existing mainstream light wallet deployment environments.

[0070] Furthermore, by constructing a transaction time window and combining it with the consistency of user behavior to perform intersection operations on multiple anonymous sets, this invention can significantly reduce the originally large set of anonymous user network addresses, which helps to reduce interference and improve positioning efficiency in actual analysis.

[0071] The method of this invention has a clear process and configurable parameters, which can be adjusted according to the network environment and transaction load. It is applicable to light wallet transaction analysis scenarios of different scales and has good engineering promotion value.

[0072] Example 4 Figure 7 This illustration schematically depicts the hardware architecture of a computer device 1300 for a light wallet transaction tracing method for the Tron cryptocurrency network according to an embodiment of this application. In this embodiment, the computer device 1300 is a device capable of automatically performing numerical calculations and / or information processing according to pre-set or stored instructions. For example, it may be a smartphone, tablet, laptop, desktop computer, rack server, blade server, tower server, or cabinet server (including standalone servers or server clusters composed of multiple servers), etc. Figure 7 As shown, the computer device 1300 includes, but is not limited to, at least: a memory 1310, a processor 1320, and a network interface 1330 that can communicate with each other via a system bus. Wherein: The memory 1310 includes at least one type of computer-readable storage medium, including flash memory, hard disk, multimedia card, card-type memory (e.g., SD or DX memory), random access memory (RAM), static random access memory (SRAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), programmable read-only memory (PROM), magnetic memory, magnetic disk, optical disk, etc. In some embodiments, the memory 1310 may be an internal storage module of the computer device 1300, such as the hard disk or memory of the computer device 1300. In other embodiments, the memory 1310 may also be an external storage device of the computer device 1300, such as a plug-in hard disk, smart media card (SMC), secure digital (SD) card, flash card, etc. Of course, the memory 1310 may also include both the internal storage module and the external storage device of the computer device 1300. In this embodiment, the memory 1310 is typically used to store the operating system and various application software installed on the computer device 1300, such as program code for a light wallet transaction tracing method for the Tron cryptocurrency network. In addition, the memory 1310 can also be used to temporarily store various types of data that have been output or will be output.

[0073] In some embodiments, processor 1320 may be a central processing unit (CPU), controller, microcontroller, microprocessor, or other data processing chip. Processor 1320 is typically used to control the overall operation of computer device 1300, such as performing control and processing related to data interaction or communication with computer device 1300. In this embodiment, processor 1320 is used to run program code stored in memory 1310 or process data.

[0074] Network interface 1330 may include a wireless network interface or a wired network interface, which is typically used to establish a communication link between computer device 1300 and other computer devices. For example, network interface 1330 is used to connect computer device 1300 to an external terminal via a network, establishing a data transmission channel and communication link between computer device 1300 and the external terminal. The network may be an intranet, the Internet, Global System for Mobile Communication (GSM), Wideband Code Division Multiple Access (WCDMA), 4G network, 5G network, Bluetooth, Wi-Fi, or other wireless or wired networks.

[0075] It should be pointed out that, Figure 7 Only a computer device with components 1310-1330 is shown; however, it should be understood that it is not required to implement all of the components shown, and more or fewer components may be implemented instead.

[0076] In this embodiment, the light wallet transaction tracing method for the Tron cryptocurrency network stored in memory 1310 can be further divided into one or more program modules and executed by one or more processors (processor 1320 in this embodiment) to complete the embodiment of this application.

[0077] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transfer medium that can be used to store information accessible by a computing device.

[0078] Those skilled in the art should understand that the discussion of any of the above embodiments is merely exemplary and is not intended to imply that the scope of this disclosure (including the claims) is limited to these examples; within the framework of this invention, the technical features of the above embodiments or different embodiments can also be combined, the steps can be implemented in any order, and there are many other variations of the different aspects of the invention as described above, which are not provided in the details for the sake of brevity.

[0079] Additionally, to simplify the description and discussion, and to avoid obscuring the invention, the well-known power / ground connections to integrated circuit (IC) chips and other components may or may not be shown in the provided drawings. Furthermore, the apparatus may be shown in block diagram form to avoid obscuring the invention, and this also takes into account the fact that the details of implementation of these block diagram apparatuses are highly dependent on the platform on which the invention will be implemented (i.e., these details should be fully understood by those skilled in the art). While specific details (e.g., circuits) are set forth to describe exemplary embodiments of the invention, it will be apparent to those skilled in the art that the invention may be practiced without these specific details or with variations thereof. Therefore, these descriptions should be considered illustrative rather than restrictive.

[0080] Although the invention has been described in conjunction with specific embodiments thereof, many substitutions, modifications, and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may be used with the embodiments discussed.

[0081] The embodiments of this invention are intended to cover all such substitutions, modifications, and variations falling within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A method for tracing transactions in a light wallet for the Tron cryptocurrency network, characterized in that, include: For light wallet transactions in the Tron cryptocurrency network that require traceability, determine their on-chain transaction time. Construct an observation time window based on the transaction chain time; From the obtained conversation records between light wallet users and the light wallet backend service platform, filter out the conversation records within the observation time window; For the selected session records, if their target address belongs to the set of backend service Tron node addresses, then the source address of the session record is added to the source address candidate set. Based on the candidate source address set, the tracing result of the light wallet transaction is determined; The set of background service Tron node addresses is predetermined.

2. The method according to claim 1, characterized in that, The set of background service Tron node addresses is predetermined according to the following method: For each Tron node connected to the light wallet backend service platform, at least one round of neighbor node queries is performed; the process of one round of neighbor node queries is as follows: Identify the neighboring nodes of the Tron node connected to the light wallet backend service platform; For a neighbor node that has passed the availability test, further obtain the set of neighbor nodes of that neighbor node; The address of the Tron node is determined by the intersection of the neighbor node sets of each neighbor node, and this address is added to the background service Tron node address set.

3. The method according to claim 2, characterized in that, The process of determining the neighboring nodes of the Tron node connected to the light wallet backend service platform specifically includes: Send an HTTP GET request to the node information query endpoint of the light wallet backend service platform; Obtain the node identifier of the wave field node and the set of neighboring nodes of the wave field node from the received response information.

4. The method according to claim 3, characterized in that, The step of determining the address of the wave field node based on the intersection of the neighbor node sets of each obtained neighbor node specifically includes: For a wave field node with the same node identifier, take the intersection of the sets of neighbor nodes of each neighbor node; If the intersection result contains only one IP address, then that IP address is confirmed as the IP address of the wave field node.

5. The method according to claim 4, characterized in that, The Tron nodes connected to the light wallet backend service platform are multiple, each with a different node identifier, and the method also includes: If the intersection result contains multiple IP addresses, then the intersection of the candidate IP address sets obtained from the multiple rounds of neighbor node queries performed on the Tron node identified by that node will be taken to obtain the IP address of that Tron node.

6. The method according to claim 1, characterized in that, The determination of the source wallet transaction tracing result based on the source address candidate set specifically includes: Based on the candidate source address set and combined with the behavioral patterns of light wallet users over a certain period, the traceability result of the light wallet transactions is determined.

7. A lightweight wallet transaction tracing device for the Tron cryptocurrency network, characterized in that, include: The transaction time analysis module is used to determine the on-chain time of light wallet transactions that need to be traced in the Tron cryptocurrency network. Construct an observation time window based on the transaction chain time; The session extraction module is used to filter out the session records within the observation time window from the obtained session records of communication between the light wallet user and the light wallet backend service platform. The candidate set generation module is used to add the source address of the selected session record to the source address candidate set if the target address belongs to the backend service Tron node address set. The tracing result determination module is used to determine the tracing result of the light wallet transaction based on the source address candidate set; The set of background service Tron node addresses is predetermined.

8. The apparatus according to claim 7, characterized in that, Also includes: The node information query module is used to determine the neighboring nodes of the Tron node connected to the light wallet backend service platform; The neighbor node availability detection module is used to further obtain the set of neighbor nodes of a neighbor node that has passed the availability detection. The service node location module is used to determine the address of the Tron node based on the intersection of the neighbor node sets of each neighbor node, and add the address to the background service Tron node address set. The candidate set reduction module is used to reduce the candidate set of source addresses based on the behavioral patterns of light wallet users over a certain period; and The source tracing result determination module is specifically used to determine the source tracing result of the light wallet transaction based on the source address candidate set reduced by the candidate set reduction module.

9. A computer device, the computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the light wallet transaction tracing method for the Tron cryptocurrency network as described in any one of claims 1 to 8.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that can be executed by at least one processor to cause the at least one processor to perform the steps of the light wallet transaction tracing method for the Tron cryptocurrency network as described in any one of claims 1 to 8.

Images