Blockchain data processing methods, apparatuses, devices, and systems
Implementations of the present specification disclose blockchain data processing methods, apparatuses, devices, and systems, including a computer-implemented method for blockchain data processing. Blockchain transaction data of a plurality of transaction participants is received. Each of the plurality of transaction participants provides a respective certificate indicating a respective legal membership in a blockchain. The respective legal membership enables processing of the blockchain transaction data. A mutual identity querying is performed to confirm whether each of the plurality of transaction participants has the respective legal membership in the blockchain. Supervision keys of a supervision node in the blockchain are determined, where the supervision node corresponds to a supervisor, and where the supervision keys are dynamically updated based on a predetermined rule. The blockchain transaction data is encrypted by using the supervision keys. The blockchain transaction data is stored.
1. A computer-implemented method for blockchain data processing, comprising:
receiving, by a first blockchain node device of a blockchain, from a supervision node device of the blockchain, a first supervision public key, wherein the first supervision public key is generated by a bank or by a regulatory institution;
locally storing, by the first blockchain node device, the first supervision public key;
obtaining, by the first blockchain node device, blockchain transaction data of a plurality of transaction participants participating in a transaction, each transaction participant of the plurality of transaction participants providing a respective certificate indicating a respective contractual membership in the blockchain, each respective contractual membership enabling processing of the blockchain transaction data by a corresponding transaction participant of the plurality of transaction participants, wherein the blockchain transaction data is distributed among blockchain nodes in the blockchain, and
wherein the blockchain transaction data comprises an agreement specifying that the supervision node device, distinct from the plurality of transaction participants, has authority to supervise processing of the blockchain transaction data;
performing, by the first blockchain node device, identity querying of a first transaction participant of the plurality of transaction participants, comprising submitting the certificate of the first transaction participant to a platform of the blockchain;
receiving, by the first blockchain node device, from the supervision node device through the blockchain, a new supervision public key, wherein the new supervision public key is signed by a first supervision private key paired with the first supervision public key, and wherein the first supervision private key and the new supervision public key are generated by the bank or by the regulatory institution;
performing, by the first blockchain node device, signature verification on the new supervision public key by using the first supervision public key;
determining, by the first blockchain node device, that the signature verification has succeeded;
updating, by the first blockchain node device, the first supervision public key to the new supervision public key;
encrypting, by the first blockchain node device, the blockchain transaction data by using the new supervision public key;
storing, by the first blockchain node device, the blockchain transaction data encrypted with the new supervision public key to the blockchain; and
receiving, by the first blockchain node device, from the supervision node device, a supervision message subsequent to the supervision node device placing at least one transaction participant of the plurality of transaction participants on a blacklist or subsequent to the supervision node device preventing the transaction, wherein the supervision node device is configured to perform steps comprising
retrieving, by the supervision node device, from the blockchain, the blockchain transaction data encrypted with the new supervision public key;
decrypting, by the supervision node device, using a new supervision private key generated by the bank or by the regulatory institution, the blockchain transaction data encrypted with the new supervision public key, to generate decrypted blockchain transaction data, wherein the new supervision private key is generated by the supervision node device and paired with the new supervision public key;
performing, by the supervision node device, supervision processing on the decrypted blockchain transaction data, wherein performing supervision processing comprises placing the at least one transaction participant of the plurality of transaction participants on the blacklist or preventing the transaction; and
initiating the supervision message.
2. The computer-implemented method of claim 1 , wherein the first supervision private key and the first supervision public key are generated by the bank or by the regulatory institution using the supervision node device based on an asymmetric encryption algorithm.
3. The computer-implemented method of claim 2 , wherein the asymmetric encryption algorithm comprises one of a Rivest-Shamir-Adleman algorithm, an Elgamal algorithm, a knapsack algorithm, a Rabin algorithm, a Diffie-Hellman key exchange algorithm, or an elliptic curve cryptographic algorithm.
4. The computer-implemented method of claim 1 , wherein encrypting the blockchain transaction data by using the new supervision public key comprises
encrypting, by using the new supervision public key, a public key of the first blockchain node device, wherein a private key of the first blockchain node device, paired with the public key of the first blockchain node device, is used by the first blockchain node device to sign the blockchain transaction data.
5. The computer-implemented method of claim 1 , comprising:
verifying the supervision message using the new supervision public key.
6. A non-transitory, computer-readable medium storing one or more instructions that, when executed by a computer system of a first blockchain node device, cause the computer system to perform operations comprising:
receiving, from a supervision node device of a blockchain, a first supervision public key, wherein the first supervision public key is generated by a bank or by a regulatory institution;
locally storing, to the first blockchain node device, the first supervision public key;
obtaining blockchain transaction data of a plurality of transaction participants participating in a transaction, each transaction participant of the plurality of transaction participants providing a respective certificate indicating a respective contractual membership in the blockchain, each respective contractual membership enabling processing of the blockchain transaction data by a corresponding transaction participant of the plurality of transaction participants, wherein the blockchain transaction data is distributed among blockchain nodes in the blockchain, and
wherein the blockchain transaction data comprises an agreement specifying that the supervision node device, distinct from the plurality of transaction participants, has authority to supervise processing of the blockchain transaction data;
performing identity querying of a first transaction participant of the plurality of transaction participants, comprising submitting the certificate of the first transaction participant to a platform of the blockchain;
receiving, from the supervision node device through the blockchain, a new supervision public key, wherein the new supervision public key is signed by a first supervision private key paired with the first supervision public key, and wherein the first supervision private key and the new supervision public key are generated by the bank or by the regulatory institution;
performing signature verification on the new supervision public key by using the first supervision public key;
determining that the signature verification has succeeded;
updating the first supervision public key to the new supervision public key;
encrypting the blockchain transaction data by using the new supervision public key;
storing the blockchain transaction data encrypted with the new supervision public key to the blockchain; and
receiving from the supervision node device, a supervision message subsequent to the supervision node device placing at least one transaction participant of the plurality of transaction participants on a blacklist or subsequent to the supervision node device preventing the transaction, wherein the supervision node device is configured to perform steps comprising
retrieving, by the supervision node device, from the blockchain, the blockchain transaction data encrypted with the new supervision public key;
decrypting, by the supervision node device, using a new supervision private key generated by the bank or by the regulatory institution, the blockchain transaction data encrypted with the new supervision public key, to generate decrypted blockchain transaction data, wherein the new supervision private key is generated by the supervision node device and paired with the new supervision public key;
performing, by the supervision node device, supervision processing on the decrypted blockchain transaction data, wherein performing supervision processing comprises placing the at least one transaction participant of the plurality of transaction participants on the blacklist or preventing the transaction; and
initiating the supervision message.
7. The non-transitory, computer-readable medium of claim 6 , wherein the first supervision private key and the first supervision public key are generated by the bank or by the regulatory institution using the supervision node device based on an asymmetric encryption algorithm.
8. The non-transitory, computer-readable medium of claim 7 , wherein the asymmetric encryption algorithm comprises one of a Rivest-Shamir-Adleman algorithm, an Elgamal algorithm, a knapsack algorithm, a Rabin algorithm, a Diffie-Hellman key exchange algorithm, or an elliptic curve cryptographic algorithm.
9. The non-transitory, computer-readable medium of claim 6 , wherein encrypting the blockchain transaction data by using the new supervision public key comprises
encrypting, by using the new supervision public key, a public key of the first blockchain node device, wherein a private key of the first blockchain node device, paired with the public key of the first blockchain node device, is used by the first blockchain node device to sign the blockchain transaction data.
10. A computer-implemented system, comprising:
one or more computers of a first blockchain node device; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, cause the one or more computers to perform one or more operations comprising:
receiving, from a supervision node device of a blockchain, a first supervision public key, wherein the first supervision public key is generated by a bank or by a regulatory institution;
locally storing the first supervision public key;
obtaining blockchain transaction data of a plurality of transaction participants participating in a transaction, each transaction participant of the plurality of transaction participants providing a respective certificate indicating a respective contractual membership in the blockchain, each respective contractual membership enabling processing of the blockchain transaction data by a corresponding transaction participant of the plurality of transaction participants, wherein the blockchain transaction data is distributed among blockchain nodes in the blockchain, and
wherein the blockchain transaction data comprises an agreement specifying that the supervision node device, distinct from the plurality of transaction participants, has authority to supervise processing of the blockchain transaction data;
performing identity querying of a first transaction participant of the plurality of transaction participants, comprising submitting the certificate of the first transaction participant to a platform of the blockchain;
receiving, from the supervision node device through the blockchain, a new supervision public key, wherein the new supervision public key is signed by a first supervision private key paired with the first supervision public key, and wherein the first supervision private key and the new supervision public key are generated by the bank or by the regulatory institution;
performing signature verification on the new supervision public key by using the first supervision public key;
determining that the signature verification has succeeded;
updating the first supervision public key to the new supervision public key;
encrypting the blockchain transaction data by using the new supervision public key;
storing the blockchain transaction data encrypted with the new supervision public key to the blockchain; and
receiving from the supervision node device, a supervision message subsequent to the supervision node device placing at least one transaction participant of the plurality of transaction participants on a blacklist or subsequent to the supervision node device preventing the transaction, wherein the supervision node device is configured to perform steps comprising
retrieving, by the supervision node device, from the blockchain, the blockchain transaction data encrypted with the new supervision public key;
decrypting, by the supervision node device, using a new supervision private key generated by the bank or by the regulatory institution, the blockchain transaction data encrypted with the new supervision public key, to generate decrypted blockchain transaction data, wherein the new supervision private key is generated by the supervision node device and paired with the new supervision public key;
performing, by the supervision node device, supervision processing on the decrypted blockchain transaction data, wherein performing supervision processing comprises placing the at least one transaction participant of the plurality of transaction participants on the blacklist or preventing the transaction; and
initiating the supervision message.
11. The computer-implemented system of claim 10 , wherein the first supervision private key and the first supervision public key are generated by the bank or by the regulatory institution using the supervision node device based on an asymmetric encryption algorithm.
12. The computer-implemented system of claim 11 , wherein the asymmetric encryption algorithm comprises one of a Rivest-Shamir-Adleman algorithm, an Elgamal algorithm, a knapsack algorithm, a Rabin algorithm, a Diffie-Hellman key exchange algorithm, or an elliptic curve cryptographic algorithm.
13. The computer-implemented system of claim 10 , wherein encrypting the blockchain transaction data by using the new supervision public key comprises
encrypting, by using the new supervision public key, a public key of the first blockchain node device, wherein a private key of the first blockchain node device, paired with the public key of the first blockchain node device, is used by the first blockchain node device to sign the blockchain transaction data.