Blockchain network control system and methods
A blockchain network control system and method is disclosed. The system includes a processor coupled to a storage comprising a plurality of network entity definitions each defining a different network entity that make up a target network architecture for a permissioned blockchain network. The system also includes a control object communicatively coupled to an ordering service and a plurality of organizations. The plurality of organizations was established by the blockchain network control system by instantiating the organizational membership service provider, registering and enrolling each peer node within each organization, storing the cryptographic identity generated for the peer node, and then instantiating the plurality of peer nodes. The ordering service was established by the blockchain network control system by instantiating the ordering membership service provider, registering and enrolling each orderer node belonging to the ordering service, storing the cryptographic identity generated for the orderer node, and then instantiating the orderer nodes.
1 . A blockchain network control system, comprising:
a processor communicatively coupled to a memory and a network interface, the network interface communicatively coupled to a physical network;
a storage communicatively coupled to the processor, the storage comprising a plurality of network entity definitions (NEDs) each defining a different network entity of a plurality of network entities that make up a target network architecture for a permissioned blockchain network, each network entity of the plurality of network entities being one of:
an ordering service comprising a plurality of orderer nodes and an ordering membership service provider configured to verify that signatures were generated by a valid cryptographic identity and issued by the ordering service; and
one of a plurality of organizations, each organization of the plurality of organizations comprising a plurality of peer nodes and an organizational membership service provider configured to verify that signatures were generated by a valid cryptographic identity within the organization and issued by the organization; and
at least one control object instantiated within the permissioned blockchain network and communicatively coupled, through the permissioned blockchain network, to an ordering service and a plurality of organizations,
wherein the processor is configured to:
detect a deviation between the permissioned blockchain network and the target network architecture based on a comparison of the permissioned blockchain network with the target network architecture as defined by the plurality of NEDs; and
in response to detecting the deviation between the permissioned blockchain network and the target network architecture:
destroy at least a portion of the permissioned blockchain network, and
regenerate the permissioned blockchain network by instantiating the portion of the target network architecture that was destroyed, using at least one NED describing the destroyed portion, thereby reconciling the permissioned blockchain network with the target network architecture.
2 . The system of claim 1 , wherein the plurality of organizations was established by the blockchain network control system using the plurality of NEDs, and wherein the ordering service was established by the blockchain network control system.
3 . The system of claim 1 , wherein the processor is further configured to instantiate at least one of additional peer nodes and additional orderer nodes in response to an increase in demand for at least one of the ordering service and at least one of the plurality of organizations.
4 . The system of claim 1 , wherein at least one NED defines a portion of the target network architecture as having an unbounded number of nodes.
5 . A blockchain network control system, comprising:
a processor communicatively coupled to a memory and a network interface, the network interface communicatively coupled to a physical network;
a storage communicatively coupled to the processor, the storage comprising a plurality of network entity definitions (NEDs) each defining a different network entity of a plurality of network entities that make up a target network architecture for a permissioned blockchain network; and
at least one control object instantiated within the permissioned blockchain network and communicatively coupled, through the permissioned blockchain network, to an ordering service and a plurality of organizations,
wherein the processor is configured to monitor the permissioned blockchain network and maintain the target network architecture, the monitoring including:
detecting a deviation between the permissioned blockchain network and the target network architecture based on a comparison of the permissioned blockchain network with the target network architecture as defined by the plurality of NEDs; and
in response to detecting the deviation between the permissioned blockchain network and the target network architecture:
destroying at least a portion of the permissioned blockchain network, and
regenerating the permissioned blockchain network by instantiating the portion of the target network architecture that was destroyed, using at least one NED describing the destroyed portion, thereby reconciling the permissioned blockchain network with the target network architecture.
6 . The system of claim 5 , wherein the control object comprises an orderer node of the permissioned blockchain network.
7 . The system of claim 5 , wherein the control object comprises a peer node of the permissioned blockchain network.
8 . The system of claim 5 , wherein the permissioned blockchain network is hosted on a plurality of computing devices under the control of multiple parties.
9 . The system of claim 5 :
wherein the permissioned blockchain network further comprises a plurality of channels established by the blockchain network control system, each channel comprising the at least one control object of the blockchain network control system and at least one network entity,
wherein each NED of the plurality of NEDs defines channel membership for the network entity defined by the NED; and
wherein the processor of the blockchain network control system is configured to monitor each channel and maintain the target network architecture for each channel.
10 . The system of claim 5 , wherein the processor is further configured to instantiate at least one of peer nodes and orderer nodes in response to an increase in demand for at least one of the ordering service and at least one of the plurality of organizations.
11 . The system of claim 5 , wherein at least one NED defines a portion of the target network architecture as having an unbounded number of nodes.
12 . A method for controlling a permissioned blockchain network, comprising:
storing a plurality of network entity definitions (NEDs) in a blockchain network control (BNC) system, each NED defining a different network entity of a plurality of network entities that make up a target network architecture for the permissioned blockchain network, each network entity of the plurality of network entities is one of
an ordering service comprising a plurality of orderer nodes and an ordering membership service provider configured to verify that signatures were generated by a valid cryptographic identity and issued by the ordering service; and
one of a plurality of organizations, each organization of the plurality of organizations comprising a plurality of peer nodes and an organizational membership service provider configured to verify that signatures were generated by a valid cryptographic identity within the organization and issued by the organization;
detecting a deviation between the permissioned blockchain network and the target network architecture based on a comparison of the permissioned blockchain network with the target network architecture as defined by the plurality of NEDs; and
in response to detecting the deviation between the permissioned blockchain network and the target network architecture:
destroying at least a portion of the permissioned blockchain network, and
regenerating the permissioned blockchain network by instantiating the portion of the target network architecture that was destroyed, using at least one NED describing the destroyed portion, thereby reconciling the permissioned blockchain network with the target network architecture.
13 . The method of claim 12 , further comprising establishing the plurality of organizations of the permissioned blockchain network and the ordering service using the plurality of NEDs.
14 . The method of claim 12 , further comprising instantiating at least one of additional peer nodes and additional orderer nodes in response to an increase in demand for at least one of the ordering service and at least one of the plurality of organizations.
15 . The method of claim 12 , further comprising:
establishing a plurality of channels, each channel comprising the BNC system and at least one network entity,
wherein each NED of the plurality of NEDs defines channel membership for the network entity defined by the NED, and
wherein the BNC system monitors each channel and maintains the target network architecture for each channel.
16 . The method of claim 12 , wherein at least one NED comprises cryptographic material that permits access to cryptographic identities stored within a cloud storage.
17 . The method of claim 16 , wherein the cryptographic identities are created for nodes within the network entity defined by the at least one NED.
18 . The method of claim 12 , wherein at least one NED defines a portion of the target network architecture as having an unbounded number of nodes.
19 . The method of claim 12 , further comprising instantiating an additional peer node in response to an increase in demand for at least one of the plurality of organizations.
20 . The method of claim 12 , further comprising instantiating additional orderer nodes in response to an increase in demand for the ordering service.