CN113783949A - Cross-chain decentralized method based on contract management - Google Patents
Cross-chain decentralized method based on contract management Download PDFInfo
- Publication number
- CN113783949A CN113783949A CN202110991218.8A CN202110991218A CN113783949A CN 113783949 A CN113783949 A CN 113783949A CN 202110991218 A CN202110991218 A CN 202110991218A CN 113783949 A CN113783949 A CN 113783949A
- Authority
- CN
- China
- Prior art keywords
- chain
- cross
- decentralized
- strategy
- transaction
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1097—Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/27—Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- G06Q40/04—Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0884—Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
- H04L9/3268—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/76—Proxy, i.e. using intermediary entity to perform cryptographic operations
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- General Engineering & Computer Science (AREA)
- Computing Systems (AREA)
- Computer Hardware Design (AREA)
- Business, Economics & Management (AREA)
- Theoretical Computer Science (AREA)
- Databases & Information Systems (AREA)
- Physics & Mathematics (AREA)
- Finance (AREA)
- General Physics & Mathematics (AREA)
- Accounting & Taxation (AREA)
- Economics (AREA)
- General Business, Economics & Management (AREA)
- Technology Law (AREA)
- Strategic Management (AREA)
- Data Mining & Analysis (AREA)
- Marketing (AREA)
- Development Economics (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention discloses a cross-chain decentralized method based on contract management, wherein a cross-chain communication part comprises three links: the source link point communicates with the agent nodes, the agent nodes communicate with each other, and the agent nodes communicate with the destination link point; the cross-chain agent node is responsible for cross-chain registration, cross-chain identity management, cross-chain verification, cross-chain routing, cross-chain decentralized strategy management and the like; the cross-link management contract is deployed on the block chain link points and is responsible for commonly identifying a decentralized strategy of communication between the verification agent node and the block chain nodes; the method comprises the steps that a decentralized strategy is included during cross-chain registration, and when cross-chain transaction is sent, the next transaction can be carried out only when the decentralized strategy is met; communication between agent nodes, and between agent nodes and blockchain nodes, all need to satisfy a decentralized strategy. The method can realize decentralized cross-chain transaction, prevent the risk of single-point operation, ensure the high availability and the high safety of cross-chain, and has important significance for the ecological construction of block chains.
Description
Technical Field
The invention relates to the technical field of block chains, in particular to a cross-chain decentralized method based on contract management.
Background
The maximum value of the blockchain is to realize the transfer of information value, but a large multi-blockchain platform has strong exclusivity, so that in the blockchain network of the present day, a plurality of value islands exist, and the blockchains cannot be interconnected with each other in value. The inter-chain technology can open barriers between block chains, but currently existing inter-chain technologies, such as relay chains, notaries and other technical solutions, have centralized risks. When a relay chain scheme is adopted, a source chain carries out cross-chain transaction to a destination chain, a node of a common source chain sends a cross-chain message to the relay chain, the relay chain carries out identity verification, cross-chain routing and sends the cross-chain transaction to the destination chain, in the process, the problem of centralization of single-node communication exists when the cross-chain transaction is sent from the source chain to the relay chain, and the problem of centralization of single-point communication also exists when the relay chain to the destination chain is treated in a similar way. This may result in asset loss due to malicious attack by the communication node during the cross-link value exchange, and the whole cross-link scheme loses the characteristics of high availability, high security and malicious prevention. A scheme capable of realizing the block chain cross-chain decentralized has great significance for cross-chain.
Disclosure of Invention
Aiming at the technical problems, the invention provides a block chain cross-chain decentralized method based on contract management, which can realize the decentralized of cross-chain transaction, prevent the risk of single-point operation and ensure the high availability and the high safety of cross-chain and has important significance for the ecological construction of block chains.
The purpose of the invention is realized by the following technical scheme: a cross-chain decentralized method based on contract management, the method comprising:
block chain inter-chain communication includes three links: the method comprises the following steps that communication is carried out between a source chain link and an agent node, communication is carried out between the source chain agent node and a destination chain agent node, communication is carried out between the agent node and the destination chain node, and each cross-chain link can be configured with a plurality of communication connections according to a decentralized strategy;
the cross-chain agent node is responsible for cross-chain registration, cross-chain identity management, cross-chain verification, cross-chain routing, cross-chain standardized communication and cross-chain decentralized strategy management;
the cross-chain management contract is deployed on the block chain node and used for cross-chain communication between the block chain node and the agent node, cross-chain transaction verification, decentralized strategy verification, submission of cross-chain transaction to a target chain service contract, reception of a service contract execution result of the cross-chain transaction and transmission of the execution result to the agent node;
the cross-link management contract is responsible for identifying a decentralization strategy of communication between the verification agent node and the block link node; the method comprises the steps that a decentralized strategy is included during cross-chain registration, and when cross-chain transaction is sent, the next transaction can be carried out only when the decentralized strategy is met; communication between agent nodes, and between agent nodes and blockchain nodes, all need to satisfy a decentralized strategy.
Further, the cross-chain flow comprises the following steps:
(1) the source chain initiates cross-chain registration: signing according to a cross-chain certificate signed by an opposite terminal, registering identity information, a verification rule and a decentralization strategy to a destination chain, verifying and signing by a source chain proxy node, sending the signature to the destination chain proxy node for verifying and signing, verifying according to the cross-chain certificate, performing cross-chain authorization after the verification is passed, and performing uplink storage on the registration information and local storage on the proxy node;
(2) the destination chain registers to the source chain;
(3) the source chain sends cross-chain transaction, communication message standardization processing is carried out through the agent node, and the signature is sent to the opposite-end agent node;
(4) the target chain agent node receives the cross-chain transaction, performs signature verification, identity verification, authority verification and decentralized strategy verification, converts the standard message into a target chain message format after the verification is passed, and submits the cross-chain transaction to a target chain;
(5) the target chain cross-chain management contract processes cross-chain transaction, verifies the identity and the decentralized strategy of the transaction, and submits the cross-chain transaction to a target chain business contract after the verification is passed;
(6) the destination chain returns the cross-chain transaction result executed by the service contract.
Further, the decentralization strategy includes: ANY, MAJORITY, ALL, noutton;
ANY: the message sent by any agent node is received and can be verified;
MAJORITY: the message sent by most agent nodes is received and can be verified;
ALL: the messages sent by all the agent nodes are received and can pass the verification;
NOUTOF: the messages sent by the designated N agent nodes are received and can pass the verification.
Further, the structure of the registration information when the source chain performs cross-chain registration to the destination chain is as follows:
| field(s) | Means of |
| Version | Chain registration information version |
| ChainID | ID of source chain |
| P2CPolicy | Decentralized strategy between block chain node and proxy node |
| C2CPolicy | Depocentralization strategy between agent nodes |
| Validators | Validating rule information |
| ConsensuType | Consensus types for source chains |
| Status | Status information |
| ChainType | Type of Source chain |
| PublicKey | Public key information |
| Description | Description information |
| Extra | Custom extension field |
Further, when cross-link registration is carried out, decentralized strategies of the two links are obtained, and persistent storage is carried out in a cross-link management contract account book and a proxy node; acquiring a decentralized strategy between the blockchain nodes and the agent nodes in the registration message through a cross-chain management contract and recording the decentralized strategy into a blockchain account book; the strategy between the agent nodes is obtained through the registration message and is recorded in the agent nodes.
Further, the source chain carries out cross-chain registration to the destination chain, the cross-chain registration mainly comprises identity information, a verification rule and a decentralization strategy of the source chain, after the registration is successful, a verification engine of the destination chain generates the verification rule of the chain, and then the legality of the cross-chain transaction is verified according to the verification rule and the decentralization strategy is verified; generating different verification rules aiming at block chains with different architectures, and generating different decentralization strategies according to different registration information; the identity information and the registration information of the source chain are stored persistently; and the verification engine of the destination chain agent node checks the registration information of the source chain, verifies the transaction according to the generated verification rule and ensures the correctness of the transaction according to a decentralized strategy.
Further, when cross-link transaction is carried out, the agent node firstly receives the cross-link transaction sent by the opposite agent node, the target link agent node carries out verification according to a decentralization strategy during registration, if the strategy is met, the cross-link transaction is submitted to a target link cross-link management contract, the cross-link management contract carries out verification according to the decentralization strategy during registration, if the strategy is met, verification is passed, cross-link transaction consensus in the link is carried out, and after the consensus is finished, the write-in of an account book is carried out; the destination chain executes the cross-chain transaction, returns the result, and is sent to the destination chain agent node and then to the source chain agent node through the cross-chain management contract.
Further, the decentralized policy validation between the agent nodes specifically includes: the target chain agent node collects cross-chain transactions sent by the opposite end chain; verifying the cross-link message digest and the signature information, and if the message digest is the same and the signature passes, considering that messages endorsed by different agent nodes are received; and verifying endorsement messages of different agent nodes and a decentralization strategy aiming at the same cross-link transaction within a limited time T, and submitting the endorsement messages to a cross-link management contract of a destination chain if the verification is passed.
Further, the decentralized policy verification between the agent node and the block chain node specifically includes: receiving a cross-chain transaction sent by an agent node by a cross-chain management contract; verifying the cross-link message digest and the signature information, and if the message digest is the same and the signature passes, considering that messages endorsed by different agent nodes are received; and verifying endorsement messages of different agent nodes and a decentralization strategy aiming at the same cross-link transaction within a limited time T, and if the endorsement messages pass the verification, performing consensus execution.
Furthermore, the method supports decentralized strategy upgrading, sends decentralized strategy upgrading transaction on the premise of meeting the current decentralized strategy, then upgrades and updates the decentralized strategy, and carries out persistent storage.
The invention has the beneficial effects that: the invention designs a cross-chain management contract and a decentralization strategy, wherein the cross-chain management contract is deployed on a block chain link point and is responsible for identifying and verifying the decentralization strategy of communication between an agent node and the block chain node; the method comprises the steps that a decentralized strategy is included during cross-chain registration, and when cross-chain transaction is sent, the next transaction can be carried out only when the decentralized strategy is met; the entire cross-link communication link: communication between crossgenes, crossgenes and block link points all need to satisfy decentralization strategies. The method can realize decentralized cross-chain transaction, prevent the risk of single-point operation, ensure the high availability and the high safety of cross-chain, and has important significance for the ecological construction of block chains.
Drawings
Fig. 1 is an overall architecture diagram of a block chain cross-chain decentralized method according to an embodiment of the present invention;
FIG. 2 is a cross-chain flow diagram provided by an embodiment of the present invention;
FIG. 3 is a flowchart of decentralized policy validation between crossgenes provided by an embodiment of the present invention;
FIG. 4 is a flow chart of verification of a decentralized strategy between cross and block link points according to an embodiment of the present invention;
FIG. 5 is a flowchart of a cross-chain registration process provided by an embodiment of the invention;
FIG. 6 is a flow diagram of a cross-chain transaction provided by an embodiment of the invention;
FIG. 7 is a flow chart of policy upgrade provided by an embodiment of the present invention;
FIG. 8 is a cross-chain management contract design flow diagram provided by an embodiment of the invention.
Detailed Description
For better understanding of the technical solutions of the present application, the following detailed descriptions of the embodiments of the present application are provided with reference to the accompanying drawings.
It should be understood that the embodiments described are only a few embodiments of the present application, and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
The terminology used in the embodiments of the present application is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. As used in the examples of this application and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.
The overall architecture of the cross-chain decentralized method based on contract management provided by the invention is shown in figure 1.
The cross-link communication section includes three links: the communication between the cross-link 1, namely the source link block link node and the proxy node, the communication between the cross-link 2, namely the source link proxy node and the destination link block link node, and the communication between the cross-link 3, namely the proxy node and the destination link block link node are realized, and each cross-link can be configured with a plurality of communication connections according to a decentralized strategy.
The cross-chain agent node cross is responsible for cross-chain registration, cross-chain identity management, cross-chain verification, cross-chain routing, cross-chain standardized communication, cross-chain decentralized policy management and the like.
The cross-chain management contract is deployed on the blockchain nodes and is mainly used for cross-chain communication between the blockchain nodes and the cross-chain agent nodes, cross-chain transaction verification, decentralized strategy verification, submission of cross-chain transactions to target chain service contracts, reception of service contract execution results of the cross-chain transactions, transmission of the execution results to the cross-chain agent nodes and the like.
The cross-chain management contract is responsible for identifying and verifying a decentralized strategy of communication between the cross and block chain nodes; the decentralized strategy is included in the cross-chain registration, when the cross-chain transaction is sent, the decentralized strategy is required to be met for the next transaction, for example, when the source chain registers to the cross-chain transaction, the decentralized strategy is required to be met by meeting two nodes and more cross-chain transaction endorsements. The communication between the cross messages also needs to satisfy a decentralized strategy, the communication from the cross messages to the destination chain also needs to satisfy the decentralized strategy, and according to the strategy at the time of registration, the cross messages can verify the number of messages sent to the cross messages of the end chain, for example, when the decentralized strategy is the messages satisfying two or more cross messages, the messages of the same abstract of two or more endorsements of the cross messages of the end chain need to be received to consider the transaction to be effective. Thus the entire cross-link communication link: according to the method, decentralized strategies are realized among cross genes, and between the cross genes and block link points, so that the possibility of single-point action is prevented, and the high availability and the high safety of cross-chain are improved.
The cross-chain process of the invention is shown in FIG. 2, and comprises the following steps:
1. the method comprises the steps that cross-chain registration is initiated by a source chain, signing is carried out according to cross-chain certificates issued by certificate management modules, information such as identity information, verification rules and decentralized strategies is registered to a target chain, cross-gene of the source chain is verified and signed, the signature is sent to cross-gene of the target chain to verify the signature and sign, verification is carried out according to the cross-chain certificates, cross-chain authorization is carried out after verification is passed, and uplink storage and cross-gene local database storage are carried out on registration information.
2. And the destination chain registers to the source chain, and the flow is consistent with the forward flow.
3. And sending the cross-chain transaction, carrying out communication message standardization processing through the cross agent, and sending the signature to the opposite end cross agent.
4. And the destination chain cross agent receives the cross chain transaction, performs signature verification, identity verification, authority verification and decentralized strategy verification, namely receives the cross chain transaction sent by a plurality of opposite-end cross agents, passes the verification if the strategy is met within a threshold time, otherwise fails the verification, converts the standard message into a destination chain message format after passing the verification, and submits the cross chain transaction to the destination chain. The specific decentralized strategy verification process comprises the following steps: verification between crossgenes, verification between crossgenes and block link points.
The verification flow between crossgenes is shown in fig. 3, and includes: collecting cross-chain transactions sent from the opposite end chain by the destination chain cross agent; verifying the cross-chain message digest and the signature information, and if the message digest is the same and the signature passes, considering that the messages of different cross endorsements are received; and verifying different cross-link endorsement messages and a decentralization strategy for the same cross-link transaction within a limited time T, submitting the cross-link endorsement messages to a cross-link management contract of a target chain if the verification is passed, otherwise, judging whether the time is out, returning overtime information if the time is out, and otherwise, continuously collecting the cross-link transaction sent by the opposite end chain by the target chain cross-link transaction.
The verification process between crossgene and block link point is shown in fig. 4, and includes: receiving a cross-chain transaction sent by cross contract; verifying the cross-chain message digest and the signature information, and if the message digest is the same and the signature passes, considering that the messages of different cross endorsements are received; and verifying different cross-link endorsement messages and the decentralized strategy aiming at the same cross-link transaction within a limited time T, if the verification is passed, carrying out consensus execution, otherwise, judging whether the verification is overtime, if the verification is overtime, returning overtime information, and otherwise, continuously receiving the cross-link transaction sent by the cross-link transaction by a cross-link management contract.
5. And the target chain cross-chain management contract processes the cross-chain transaction, verifies the identity and the decentralized strategy of the transaction, and submits the cross-chain transaction to the target chain business contract if the verification is passed.
6. And the destination chain returns the cross-chain transaction result executed by the service contract, and the return flow is consistent with the forward flow.
The flow of each part of the cross-chain is described in detail below.
(1) Certificate issuance
And the certificate management module issues a cross-chain root certificate and a public and private key pair to the cross-chain agent node. The specific issuing rule is as follows: assuming that the chain A and the chain B are communicated with each other, the chain root certificate of the chain A issues a cross-chain certificate to the chain B by adopting a chain public key of the chain B; the B chain root certificate issues a cross-chain certificate to the A chain by using an A chain public key, and deploys the certificate and a public and private key pair on a cross-chain proxy node cross. Then the B chain can use the root certificate to verify the cross-chain certificate of the message sent by the a chain, and similarly, the a chain can use the root certificate to verify the cross-chain certificate of the message sent by the B chain; meanwhile, the message digest signature is verified, so that identity verification and communication safety are guaranteed.
(2) Cross-chain registration
The source chain can carry out cross-chain registration to the destination chain, the cross-chain registration mainly comprises identity information, a verification rule, a decentralization strategy and the like of the source chain, after the registration is successful, a verification engine of the destination chain can generate the verification rule of the chain, and then the legality of cross-chain transaction is verified according to the verification rule, the decentralization strategy is verified and the like. Different verification rules are generated aiming at block chains with different architectures, and different decentralization strategies are generated according to different registration information. And the identity information and the registration information of the source chain are stored persistently. The verification engine of the destination chain cross checks the registration information of the source chain, verifies the transaction according to the generated verification rule, and ensures the correctness of the transaction according to the decentralized strategy.
(3) Identity and rights management
The authority control module provides functions of certificate issuing, multi-chain registration, authority control and the like. Specifically, when a source chain and a destination chain need intercommunication communication, cross-chain certificates need to be mutually issued, then registration is carried out according to authority management requirements, such as access authority of the chain, intelligent contract access authority, contract method authority, related field access authority, data read-write authority and the like, then the other side can carry out verification, if the registration is successful, authority verification can be carried out on communication information during communication, authorization verification of other chains is required for access of other chains, and isolation and protection of data are met.
(4) Cross-chain standardized communication
The cross-chain communication standard bus mainly comprises a cross-chain communication interface and a cross-chain standard communication protocol, wherein the communication protocol is CSCP (Cross station standard communication protocol), and the cross-chain communication standard bus is mainly used for inter-block chain cross-chain network communication, standardizes different block chain platform messages, and can realize communication at the bottom layer of a heterogeneous platform block chain. The bus defines a standard interface for information interaction between block chains, and the standard interface mainly comprises:
the transaction conversion interface can convert the transaction message and the bus standard protocol CSCP into each other, and can utilize a unified standard interface on a bus in the communication process;
the transaction sending interface is used for sending information to the destination chain by the source chain;
a transaction receiving interface for receiving a cross-chain transaction by a destination chain;
a transaction verification interface for verifying transaction information;
a registration chain interface for identity registration;
an update chain interface for updating the chain identity information;
and the injection and sales chain interface is used for logging out the chain identity information.
(5) Decentralized policy management
(a) And (3) cross-chain registration: and acquiring decentralized strategies of the two links, and performing persistent storage in the cross-link management contract book and cross agent.
The decentralization strategy mainly comprises the following steps: ANY, MAJORITY, ALL, noutton;
ANY: the verification can be passed after any message sent by cross is received;
MAJORITY: the message sent by most crosssangent can be verified;
ALL: the message sent by all crossmessages can pass the verification only after being received;
NOUTOF: the message sent by the specified N crossmessages is received and can be verified.
The decentralized strategy includes the whole cross-link: block chain nodes to crossgene, crossgene to crossgene. Acquiring a strategy from a node to a cross agent in a registration message through a cross-link management contract and recording the strategy to an account book; the policy between crossgene and crossgene is obtained through the registration message and recorded in crossgene. The cross-chain registration flow is shown in fig. 5.
When a chain initiates a cross-chain transaction, registration information of the chain needs to be constructed, and the structure of the registration information is shown in the following table, and the information is used for an information structure when a source chain performs cross-chain registration to a destination chain:
| field(s) | Means of |
| Version | Chain registration information version |
| ChainID | ID of source chain |
| P2CPolicy | Decentralized strategy between block chain node and cross |
| C2CPolicy | Decentralized strategy between crossgene and crossgene |
| Validators | Validating rule information |
| ConsensuType | Consensus types for source chains |
| Status | Status information |
| ChainType | Type of Source chain |
| PublicKey | Public key information |
| Description | Description information |
| Extra | Custom extension field |
(b) Cross-chain transactions
When cross-chain transaction is carried out, the cross agent firstly receives the cross-chain transaction sent by the cross agent at the opposite end, the cross agent of the target chain verifies the number of the cross-chain transactions according to a decentralization strategy during registration, and if the strategy is met, the cross-chain transaction is submitted to a cross-chain management contract of the target chain; and when the cross-chain transaction with the same abstract of enough cross endorsements is received, the verification is passed, the cross-chain transaction consensus in the chain is carried out, and the writing of the account book is carried out after the consensus is completed. The destination chain executes the cross-chain transaction and returns the result, which is sent to cross-chain and then to cross-chain through the cross-chain management contract, and the decentralized strategy is consistent with the forward flow. The cross-chain transaction flow is shown in fig. 6.
(c) Policy upgrade
And the upgrading of the decentralized strategy is supported, the upgrading process is to send decentralized strategy upgrading transaction on the premise of meeting the current decentralized strategy, and then the decentralized strategy is upgraded and updated. For example, to upgrade the policies between the cross, a policy upgrade transaction is sent to the cross at the opposite end, and when the decentralized policy between the cross is satisfied, the decentralized policy of the cross is updated and the persistent storage is performed. The policy upgrade flow is shown in fig. 7.
(6) Cross-chain management contract design
The method is mainly used for cross-chain communication between the block chain node and the cross-chain agent node, cross-chain transaction verification, decentralized strategy verification, submission of cross-chain transaction to a target chain business contract, reception of a business contract execution result of the cross-chain transaction, transmission of the execution result to the cross-chain agent node and the like. The cross-chain management contract design flow is shown in FIG. 8.
The design of the cross-chain management contract interface mainly comprises the following steps:
init: for cross-chain management contract initialization;
recvCrossTx: for receiving a cross-chain transaction;
verifyCrossTx: for validating cross-chain transactions;
CommitCrossTx: for submitting a cross-chain transaction to a destination chain;
recvccrosstxresponse: for receiving a cross-chain transaction execution result;
SendCrossTxResponse: for sending a cross-chain transaction receipt;
query: for querying cross-chain transactions.
The above description is only for the purpose of illustrating the preferred embodiments of the one or more embodiments of the present disclosure, and is not intended to limit the scope of the one or more embodiments of the present disclosure, and any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the one or more embodiments of the present disclosure should be included in the scope of the one or more embodiments of the present disclosure.
Claims (10)
1. A cross-chain decentralized method based on contract management is characterized by comprising the following steps:
block chain inter-chain communication includes three links: the method comprises the following steps that communication is carried out between a source chain link and an agent node, communication is carried out between the source chain agent node and a destination chain agent node, communication is carried out between the agent node and the destination chain node, and each cross-chain link can be configured with a plurality of communication connections according to a decentralized strategy;
the cross-chain agent node is responsible for cross-chain registration, cross-chain identity management, cross-chain verification, cross-chain routing, cross-chain standardized communication and cross-chain decentralized strategy management;
the cross-chain management contract is deployed on the block chain node and used for cross-chain communication between the block chain node and the agent node, cross-chain transaction verification, decentralized strategy verification, submission of cross-chain transaction to a target chain service contract, reception of a service contract execution result of the cross-chain transaction and transmission of the execution result to the agent node;
the cross-link management contract is responsible for identifying a decentralization strategy of communication between the verification agent node and the block link node; the method comprises the steps that a decentralized strategy is included during cross-chain registration, and when cross-chain transaction is sent, the next transaction can be carried out only when the decentralized strategy is met; communication between agent nodes, and between agent nodes and blockchain nodes, all need to satisfy a decentralized strategy.
2. The method of claim 1, wherein the cross-chaining procedure comprises the steps of:
(1) the source chain initiates cross-chain registration: signing according to a cross-chain certificate signed by an opposite terminal, registering identity information, a verification rule and a decentralization strategy to a destination chain, verifying and signing by a source chain proxy node, sending the signature to the destination chain proxy node for verifying and signing, verifying according to the cross-chain certificate, performing cross-chain authorization after the verification is passed, and performing uplink storage on the registration information and local storage on the proxy node;
(2) the destination chain registers to the source chain;
(3) the source chain sends cross-chain transaction, communication message standardization processing is carried out through the agent node, and the signature is sent to the opposite-end agent node;
(4) the target chain agent node receives the cross-chain transaction, performs signature verification, identity verification, authority verification and decentralized strategy verification, converts the standard message into a target chain message format after the verification is passed, and submits the cross-chain transaction to a target chain;
(5) the target chain cross-chain management contract processes cross-chain transaction, verifies the identity and the decentralized strategy of the transaction, and submits the cross-chain transaction to a target chain business contract after the verification is passed;
(6) the destination chain returns the cross-chain transaction result executed by the service contract.
3. The method of claim 1, wherein the decentralization strategy comprises: ANY, MAJORITY, ALL, noutton;
ANY: the message sent by any agent node is received and can be verified;
MAJORITY: the message sent by most agent nodes is received and can be verified;
ALL: the messages sent by all the agent nodes are received and can pass the verification;
NOUTOF: the messages sent by the designated N agent nodes are received and can pass the verification.
4. The method of claim 1, wherein the registration information structure when the source chain performs cross-chain registration with the destination chain is as follows:
5. The method of claim 1, wherein upon cross-link registration, decentralized policies for both links are obtained and persisted in cross-link management contract ledgers and proxy nodes; acquiring a decentralized strategy between the blockchain nodes and the agent nodes in the registration message through a cross-chain management contract and recording the decentralized strategy into a blockchain account book; the strategy between the agent nodes is obtained through the registration message and is recorded in the agent nodes.
6. The method according to claim 1, wherein the source chain performs a cross-chain registration with the destination chain, and mainly includes the identity information of the source chain, the verification rule, and the decentralized strategy, after the registration is successful, the verification engine of the destination chain generates the verification rule for the chain, and then verifies the legitimacy of the cross-chain transaction and verifies the decentralized strategy according to the verification rule; generating different verification rules aiming at block chains with different architectures, and generating different decentralization strategies according to different registration information; the identity information and the registration information of the source chain are stored persistently; and the verification engine of the destination chain agent node checks the registration information of the source chain, verifies the transaction according to the generated verification rule and ensures the correctness of the transaction according to a decentralized strategy.
7. The method of claim 1, wherein when performing a cross-chain transaction, the agent node first receives a cross-chain transaction sent from the opposite agent node, the destination chain agent node verifies according to a decentralization policy during registration, if the policy is satisfied, the cross-chain transaction is submitted to a destination chain cross-chain management contract, the cross-chain management contract verifies according to the decentralization policy during registration, if the policy is satisfied, the verification is passed, a cross-chain transaction consensus in the chain is performed, and after the consensus is completed, the writing into the account book is performed; the destination chain executes the cross-chain transaction, returns the result, and is sent to the destination chain agent node and then to the source chain agent node through the cross-chain management contract.
8. The method according to claim 1, wherein the decentralized policy validation between the agent nodes is specifically: the target chain agent node collects cross-chain transactions sent by the opposite end chain; verifying the cross-link message digest and the signature information, and if the message digest is the same and the signature passes, considering that messages endorsed by different agent nodes are received; and verifying endorsement messages of different agent nodes and a decentralization strategy aiming at the same cross-link transaction within a limited time T, and submitting the endorsement messages to a cross-link management contract of a destination chain if the verification is passed.
9. The method according to claim 1, wherein the decentralized policy validation between the proxy node and the blockchain node is specifically: receiving a cross-chain transaction sent by an agent node by a cross-chain management contract; verifying the cross-link message digest and the signature information, and if the message digest is the same and the signature passes, considering that messages endorsed by different agent nodes are received; and verifying endorsement messages of different agent nodes and a decentralization strategy aiming at the same cross-link transaction within a limited time T, and if the endorsement messages pass the verification, performing consensus execution.
10. The method of claim 1, wherein the method supports decentralized policy upgrade, wherein a decentralized policy upgrade transaction is sent on the premise that the current decentralized policy is satisfied, and then the decentralized policy is upgraded and updated, and persistent storage is performed.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110991218.8A CN113783949A (en) | 2021-08-26 | 2021-08-26 | Cross-chain decentralized method based on contract management |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110991218.8A CN113783949A (en) | 2021-08-26 | 2021-08-26 | Cross-chain decentralized method based on contract management |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN113783949A true CN113783949A (en) | 2021-12-10 |
Family
ID=78839648
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110991218.8A Pending CN113783949A (en) | 2021-08-26 | 2021-08-26 | Cross-chain decentralized method based on contract management |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113783949A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114448646A (en) * | 2022-03-22 | 2022-05-06 | 深圳壹账通智能科技有限公司 | Method, system, equipment and medium for managing authority of cross-chain transaction |
| CN114531305A (en) * | 2022-04-23 | 2022-05-24 | 东南大学 | Block chain cross-chain supervision method for chain management |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110266655A (en) * | 2019-05-30 | 2019-09-20 | 中国工商银行股份有限公司 | A kind of across chain interconnected method, equipment and system based on block chain |
| WO2019211225A1 (en) * | 2018-05-01 | 2019-11-07 | International Business Machines Corporation | Blockchain implementing cross-chain transactions |
| CN111080449A (en) * | 2019-12-03 | 2020-04-28 | 深圳前海微众银行股份有限公司 | Block chain cross-chain transaction method, management node and block chain network |
| CN112003889A (en) * | 2020-07-10 | 2020-11-27 | 南京邮电大学 | Distributed cross-chain system and cross-chain information interaction and system access control mechanism |
| CN112507393A (en) * | 2020-12-10 | 2021-03-16 | 浙商银行股份有限公司 | Method for guaranteeing consistency of cross-chain transactions of block chain |
| CN112529706A (en) * | 2020-12-10 | 2021-03-19 | 浙商银行股份有限公司 | Decentralized heterogeneous public chain asset exchange method |
| CN112583917A (en) * | 2020-12-10 | 2021-03-30 | 浙商银行股份有限公司 | CSCP-based hybrid chain construction method |
| CN112615915A (en) * | 2020-12-10 | 2021-04-06 | 浙商银行股份有限公司 | Method for constructing alliance chain between private chains |
-
2021
- 2021-08-26 CN CN202110991218.8A patent/CN113783949A/en active Pending
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2019211225A1 (en) * | 2018-05-01 | 2019-11-07 | International Business Machines Corporation | Blockchain implementing cross-chain transactions |
| CN112005264A (en) * | 2018-05-01 | 2020-11-27 | 国际商业机器公司 | Blockchain implementing cross-chain transactions |
| CN110266655A (en) * | 2019-05-30 | 2019-09-20 | 中国工商银行股份有限公司 | A kind of across chain interconnected method, equipment and system based on block chain |
| CN111080449A (en) * | 2019-12-03 | 2020-04-28 | 深圳前海微众银行股份有限公司 | Block chain cross-chain transaction method, management node and block chain network |
| CN112003889A (en) * | 2020-07-10 | 2020-11-27 | 南京邮电大学 | Distributed cross-chain system and cross-chain information interaction and system access control mechanism |
| CN112507393A (en) * | 2020-12-10 | 2021-03-16 | 浙商银行股份有限公司 | Method for guaranteeing consistency of cross-chain transactions of block chain |
| CN112529706A (en) * | 2020-12-10 | 2021-03-19 | 浙商银行股份有限公司 | Decentralized heterogeneous public chain asset exchange method |
| CN112583917A (en) * | 2020-12-10 | 2021-03-30 | 浙商银行股份有限公司 | CSCP-based hybrid chain construction method |
| CN112615915A (en) * | 2020-12-10 | 2021-04-06 | 浙商银行股份有限公司 | Method for constructing alliance chain between private chains |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114448646A (en) * | 2022-03-22 | 2022-05-06 | 深圳壹账通智能科技有限公司 | Method, system, equipment and medium for managing authority of cross-chain transaction |
| CN114531305A (en) * | 2022-04-23 | 2022-05-24 | 东南大学 | Block chain cross-chain supervision method for chain management |
| WO2023201927A1 (en) * | 2022-04-23 | 2023-10-26 | 东南大学 | Blockchain cross-chain regulation method for governance of chain by chain |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109151013B (en) | Logistics industry information platform based on alliance block chain | |
| CN113783949A (en) | Cross-chain decentralized method based on contract management | |
| CN112583917B (en) | CSCP-based hybrid chain construction method | |
| CN113239382A (en) | Credible identity model based on block chain intelligent contract | |
| CN109934593B (en) | Design method and device for realizing block chain system supporting multiple signatures | |
| CN111052253B (en) | Layered recording network | |
| CN111010376A (en) | Master-slave chain-based Internet of things authentication system and method | |
| CN110519085B (en) | Configuration change method and block chain platform | |
| CN111262860A (en) | Identity authentication method and device in cross-link mode | |
| US20080052388A1 (en) | Substitutable domain management system and method for substituting the system | |
| CN109756889A (en) | Group's number number of taking based on block chain turns the method and system of net | |
| CN113360861B (en) | Mortgage loan oriented decentralized identity method based on repeater cross-chain | |
| CN110990879B (en) | Data evidence storing method based on block chain | |
| CN113726665B (en) | Updating method of border gateway route based on block chain | |
| CN113556234A (en) | Block chain cross-chain communication method and system | |
| CN111597228A (en) | Multi-chain system and method for improving block chain expansibility | |
| CN114503146A (en) | Method and apparatus for registration and authentication of miner identity in a blockchain network | |
| CN114978638A (en) | Block chain cross-chain supervision method based on shared nodes | |
| CN113452701B (en) | Cross-chain system and distributed user identity authentication method facing cross-chain system | |
| CN114219487A (en) | Distributed certificate management method for alliance chain | |
| CN113992406A (en) | Authority access control method for alliance chain cross-chain | |
| CN111563744B (en) | Method for verifying Fabric complex endorsement policy in cross-chain | |
| CN109213806A (en) | Pollutant discharge of enterprise data processing method and system based on block chain | |
| CN116761148A (en) | V2X identity management system and authentication method based on blockchain | |
| CN112527913A (en) | Block chain cross-chain integral sharing method, device, electronic equipment and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |