Consortium Blockchain Node Discovery via Proxy Mediator Architecture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current consortium blockchain technologies face challenges in secure cross-domain communication and node discovery, particularly when using proxy communication, as they lack effective methods for node identity verification and are vulnerable to attacks like Eclipse and Sybil attacks.
Innovation Solution
The proposed method enables self-discovery of nodes in a consortium blockchain through a PUSH-based node discovery technique, which involves a first node transmitting its address to other nodes within a target network domain, allowing secure connection establishment while ensuring partition isolation and enhanced security by stringent node identity verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If NAT penetration technology is used for cross-domain communication, then communication capability is improved, but security deteriorates
Solution Approach 1:
The patent introduces a proxy node as an intermediary between nodes in different network domains. The proxy node receives messages from one domain and forwards them to the target domain, enabling cross-domain communication without direct peer-to-peer connections. This mediator architecture maintains security by isolating domains while still allowing controlled communication through the proxy.
2Reliability
If proxy communication is used to enhance security, then security is improved, but node discovery capability deteriorates
Solution Approach 1:
The patent implements preliminary action by having nodes proactively push their address information to proxy nodes before actual communication needs arise. When a node joins the network or needs to communicate with new domains, it proactively registers its address with relevant proxy nodes, enabling future communication without complex discovery processes.
Solution Approach 2:
The patent employs feedback mechanisms where proxy nodes store and manage address information of nodes in their respective domains. When communication is needed, the system queries the proxy node for address information, receives feedback, and establishes connections accordingly. This feedback loop enables automated node discovery through the proxy infrastructure.
3Reliability
If stringent node identity verification is implemented, then security against attacks is improved, but system complexity deteriorates
Solution Approach 1:
The patent applies preliminary action by performing node identity verification in advance during the node joining process. When a new node joins the network, its identity is verified and registered with proxy nodes before it can participate in communication. This pre-verification approach prevents attacks like Eclipse and Sybil attacks while maintaining relatively simple ongoing communication processes.
Data Source
AI summary
Provided is a method for communication, which includes steps of: receiving a first information from a first node via a first connection with the first node; and transmitting a first information to at least one other node. A connection initiator of the first connection is the first node. The first information includes an address of the first node within a target network domain, the target network domain is a network domain in which the at least one other node is located, and the at least one other node is a node other than a second node in a network partition to be joined by the first node. The address of the first node within the target network domain is used by the first node to establish a connection with the at least one other node.