Blockchain Node Connection Security via Autonomous System Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Blockchain nodes are vulnerable to attack nodes that send repeated connection requests, leading to low communication security as they become surrounded by malicious nodes, compromising control and connectivity.
Innovation Solution
A method and apparatus for establishing blockchain node connections by obtaining address information of non-attack nodes from neighboring autonomous systems using extended BGP or RTR messages, ensuring connections are made to trusted nodes within the same autonomous system, thereby enhancing communication security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If nodes add recently contacted nodes to the node table and establish connections, then the node can maintain active connections, but attack nodes can repeatedly send connection requests to surround and control the node
Solution Approach 1:
The patent introduces autonomous system (AS) number as an intermediary filtering mechanism. Nodes check the AS numbers of contacted nodes and preferentially establish connections with nodes in different AS numbers. This intermediary criterion prevents attack nodes from the same AS from surrounding the node, while still allowing reliable connections with nodes from different AS numbers.
Solution Approach 2:
The patent applies local quality by making the connection selection criterion specific to the autonomous system boundary. Instead of uniform random selection, nodes apply a special rule: prioritize nodes in different AS numbers. This localized quality check at the AS boundary effectively blocks attack nodes while maintaining connection reliability with legitimate nodes.
2Productivity
If nodes establish connections with recently contacted nodes, then connection establishment is simple and efficient, but communication security deteriorates as nodes become surrounded by attack nodes
Solution Approach 1:
The patent applies preliminary action by checking the autonomous system number of contacted nodes before establishing connections. Nodes perform this AS number verification in advance during the node contact process, and only establish connections with nodes from different AS numbers. This preliminary check ensures communication security is maintained while preserving connection establishment efficiency.
3Quantity of substance
If nodes accept connection requests from any node, then the node table is easily populated, but attack nodes can repeatedly infiltrate and control the node
Solution Approach 1:
The patent changes the selection parameter from random or first-come-first-served to autonomous system number differentiation. Nodes modify their connection selection criteria to require different AS numbers, which changes the parameter space of acceptable connections. This parameter change allows the node table to be populated while filtering out attack nodes that share the same AS number.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
Embodiments of this application provide a method and an apparatus for establishing a blockchain node connection, and a device. The method is applied to a blockchain system, and includes: A first node obtains address information of a second node from a first router. The first router and the first node are located in a first autonomous system. The second node is located in a second autonomous system. The first autonomous system and the second autonomous system are neighboring autonomous systems. The first node establishes a connection to the second node based on the address information of the second node. This improves blockchain communication security.