Blockchain Authentication Modules for Multi-Server Data Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain systems face security risks when data is written or read across multiple service layers, as the tamper-proof mechanism does not effectively cover application scenarios involving blockchain nodes, leading to potential data tampering and integrity issues during service processing.
Innovation Solution
Implementing a data processing method and apparatus for blockchain member nodes with multiple service servers, where each server runs an authentication module with a public key authenticated by the blockchain, enabling digital signature verification and signing to ensure data integrity and security. This involves obtaining, verifying, and signing service processing results across servers, and storing and transmitting these results securely using distributed storage and consensus mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is transmitted across multiple service layers in blockchain systems, then service processing capability is improved, but data security and integrity are compromised due to potential tampering
Solution Approach 1:
The patent introduces authentication modules as intermediary components between service layers. These modules act as mediators that verify data integrity through digital signatures, ensuring that data transmitted across multiple service layers cannot be tampered with. The authentication module receives data from upstream services, verifies its authenticity, and passes verified data to downstream services, thus maintaining both service processing capability and data security.
Solution Approach 2:
The patent implements preliminary authentication actions before data is processed by downstream services. The authentication module performs digital signature verification in advance, checking the integrity and authenticity of incoming data before it enters the service processing pipeline. This preliminary action prevents tampered data from affecting subsequent processing, thereby maintaining data security while enabling multi-layer service processing.
2Reliability
If authentication modules are deployed on each service server, then data integrity verification is improved, but system complexity increases
Solution Approach 1:
The patent designs authentication modules with multi-functionality to reduce system complexity. Each authentication module not only verifies digital signatures but also manages cryptographic keys, validates data formats, and coordinates with blockchain nodes. By consolidating multiple functions into a single universal component, the patent avoids the need for separate specialized components for each function, thereby reducing overall system complexity while maintaining comprehensive data integrity verification.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
One or more implementations of the present specification provide a data processing method and apparatus for a blockchain member node, where the blockchain member node includes a plurality of service servers, and at least one authentication module runs on each service server; and a public key of an authentication module of the at least one authentication module is authenticated by the blockchain. The method includes: obtaining, by a downstream service server of the plurality of service servers, a first service processing result and a first digital signature that are generated by an upstream service server of the plurality of service servers; verifying the first digital signature based on a public key of an authentication module running on the upstream service server; performing service processing based on the first service processing result after the verification succeeds, thereby generating a second service processing result; and generating a second digital signature by performing digital signing based on at least the second service processing result using an authentication module running on the downstream service server.