IP Library › Granted Patent US 11,616,636
Granted Patent B2
US 11,616,636 · App. 17/362,639 · Granted Mar 28, 2023

Hash updating methods and apparatuses of blockchain integrated station

Inventors: Changzheng Wei (Hangzhou, CN); Ying Yan (Hangzhou, CN); Peng Wu (Hangzhou, CN); Hui Zhang (Hangzhou, CN); Changhua He (Hangzhou, CN)
Assignee: Alipay (Hangzhou) Information Technology Co., Ltd.
H04L9/008G06F21/53H04L9/0869H04L9/30H04L9/3236G06F2221/033
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,616,636
App. No.
17/362,639
Granted
Mar 28, 2023
Kind
B2
Abstract

A cryptographic acceleration card included in a blockchain integrated station sends negotiation information to a provider of a new disk image, where the negotiation information is used by the provider to determine a deployment key, and where the new disk image is used to update an old disk image included in the blockchain integrated station. The cryptographic acceleration card receives a new hash value encrypted by the provider using the deployment key, where the new hash value corresponds to the new disk image. The cryptographic acceleration card replaces an old hash value corresponding to the old disk image with the new hash value, where the new hash value is compared with a current hash value of a disk image included in the blockchain integrated station to determine whether the disk image matches the new disk image.

Claims (72)

1. A cryptographic acceleration card comprising:

at least one processor; and

one or more memories coupled to the at least one processor and storing programming instructions for execution by the at least one processor to perform one or more operations comprising:

sending, by the cryptographic acceleration card comprised in a blockchain integrated station, negotiation information to a provider of a new disk image, wherein the negotiation information is used by the provider to determine a deployment key, and wherein the new disk image is used to update an old disk image comprised in the blockchain integrated station;

receiving, by the cryptographic acceleration card, a new hash value encrypted by the provider using the deployment key, wherein the new hash value corresponds to the new disk image; and

replacing, by the cryptographic acceleration card, an old hash value corresponding to the old disk image with the new hash value, wherein the new hash value is compared with a current hash value of a disk image comprised in the blockchain integrated station to determine whether the disk image matches the new disk image.

2. The cryptographic acceleration card of claim 1 , wherein the disk image comprises at least one of:

a binary disk image, wherein when the binary disk image is executed, one or more functions of a blockchain node are added to the blockchain integrated station; or

a platform disk image comprising the binary disk image, wherein when the platform disk image is executed, one or more functions of a blockchain node and one or more additional functions different than the one or more functions of the blockchain node are added to the blockchain integrated station.

3. The cryptographic acceleration card of claim 1 , the operations comprising:

generating, by the cryptographic acceleration card, a first random number;

performing, based on the first random number, an operation of modular exponentiation to generate a public key; and

including the public key and one or more parameters associated with the operation of modular exponentiation in the negotiation information.

4. The cryptographic acceleration card of claim 1 , wherein the replacing comprises:

determining, by the cryptographic acceleration card, an additional deployment key that is same as the deployment key; and

decrypting, by the cryptographic acceleration card, the new hash value using the additional deployment key.

5. The cryptographic acceleration card of claim 1 , the operations comprising:

signing, by the cryptographic acceleration card, the negotiation information using a root-of-trust key pre-stored in the cryptographic acceleration card to generate a signature, wherein the signature is verified by the provider using a public key corresponding to the root-of-trust key.

6. The cryptographic acceleration card of claim 1 , the operations comprising, before the sending:

sending, by the cryptographic acceleration card, an inquiry message to the provider;

receiving, by the cryptographic acceleration card and from the provider, a confirmation message in response to the inquiry message; and

determining, by the cryptographic acceleration card and based on the confirmation message, that the old hash value needs to be updated.

7. The cryptographic acceleration card of claim 6 , wherein sending the inquiry message comprises at least one of:

sending the inquiry message when the blockchain integrated station is started;

sending the inquiry message before the new disk image is executed; or

sending the inquiry message according to a predetermined period.

8. A computer-implemented method comprising:

sending, by a cryptographic acceleration card comprised in a blockchain integrated station, negotiation information to a provider of a new disk image, wherein the negotiation information is used by the provider to determine a deployment key, and wherein the new disk image is used to update an old disk image comprised in the blockchain integrated station;

receiving, by the cryptographic acceleration card, a new hash value encrypted by the provider using the deployment key, wherein the new hash value corresponds to the new disk image; and

replacing, by the cryptographic acceleration card, an old hash value corresponding to the old disk image with the new hash value, wherein the new hash value is compared with a current hash value of a disk image comprised in the blockchain integrated station to determine whether the disk image matches the new disk image.

9. The computer-implemented method of claim 8 , wherein the disk image comprises at least one of:

a binary disk image, wherein when the binary disk image is executed, one or more functions of a blockchain node are added to the blockchain integrated station; or

a platform disk image comprising the binary disk image, wherein when the platform disk image is executed, one or more functions of a blockchain node and one or more additional functions different than the one or more functions of the blockchain node are added to the blockchain integrated station.

10. The computer-implemented method of claim 8 , comprising:

generating, by the cryptographic acceleration card, a first random number;

performing, based on the first random number, an operation of modular exponentiation to generate a public key; and

including the public key and one or more parameters associated with the operation of modular exponentiation in the negotiation information.

11. The computer-implemented method of claim 8 , wherein the replacing comprises:

determining, by the cryptographic acceleration card, an additional deployment key that is same as the deployment key; and

decrypting, by the cryptographic acceleration card, the new hash value using the additional deployment key.

12. The computer-implemented method according to claim 8 , comprising:

signing, by the cryptographic acceleration card, the negotiation information using a root-of-trust key pre-stored in the cryptographic acceleration card to generate a signature, wherein the signature is verified by the provider using a public key corresponding to the root-of-trust key.

13. The computer-implemented method of claim 8 , comprising, before the sending:

sending, by the cryptographic acceleration card, an inquiry message to the provider;

receiving, by the cryptographic acceleration card and from the provider, a confirmation message in response to the inquiry message; and

determining, by the cryptographic acceleration card and based on the confirmation message, that the old hash value needs to be updated.

14. The computer-implemented method of claim 13 , wherein sending the inquiry message comprises at least one of:

sending the inquiry message when the blockchain integrated station is started;

sending the inquiry message before the new disk image is executed; or

sending the inquiry message according to a predetermined period.

15. A computer-implemented system comprising:

one or more blockchain integrated stations; and

one or more computer memory devices coupled with the one or more blockchain integrated stations and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more blockchain integrated stations, perform one or more operations comprising:

sending, by a cryptographic acceleration card comprised in a blockchain integrated station, negotiation information to a provider of a new disk image, wherein the negotiation information is used by the provider to determine a deployment key, and wherein the new disk image is used to update an old disk image comprised in the blockchain integrated station;

receiving, by the cryptographic acceleration card, a new hash value encrypted by the provider using the deployment key, wherein the new hash value corresponds to the new disk image; and

replacing, by the cryptographic acceleration card, an old hash value corresponding to the old disk image with the new hash value, wherein the new hash value is compared with a current hash value of a disk image comprised in the blockchain integrated station to determine whether the disk image matches the new disk image.

16. The computer-implemented system of claim 15 , wherein the disk image comprises at least one of:

a binary disk image, wherein when the binary disk image is executed, one or more functions of a blockchain node are added to the blockchain integrated station; or

a platform disk image comprising the binary disk image, wherein when the platform disk image is executed, one or more functions of a blockchain node and one or more additional functions different than the one or more functions of the blockchain node are added to the blockchain integrated station.

17. The computer-implemented system of claim 15 , the operations comprising:

generating, by the cryptographic acceleration card, a first random number;

performing, based on the first random number, an operation of modular exponentiation to generate a public key; and

including the public key and one or more parameters associated with the operation of modular exponentiation in the negotiation information.

18. The computer-implemented system of claim 15 , wherein the replacing comprises:

determining, by the cryptographic acceleration card, an additional deployment key that is same as the deployment key; and

decrypting, by the cryptographic acceleration card, the new hash value using the additional deployment key.

19. The computer-implemented system of claim 15 , the operations comprising:

signing, by the cryptographic acceleration card, the negotiation information using a root-of-trust key pre-stored in the cryptographic acceleration card to generate a signature, wherein the signature is verified by the provider using a public key corresponding to the root-of-trust key.

20. The computer-implemented system of claim 15 , the operations comprising, before the sending:

sending, by the cryptographic acceleration card, an inquiry message to the provider;

receiving, by the cryptographic acceleration card and from the provider, a confirmation message in response to the inquiry message; and

determining, by the cryptographic acceleration card and based on the confirmation message, that the old hash value needs to be updated.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 20, 2025
From: ALIPAY (HANGZHOU) INFORMATION TECHNOLOGY CO., LTD.
To: ANT BLOCKCHAIN TECHNOLOGY (SHANGHAI) CO., LTD.
Reel/Frame 070578/0163 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 10, 2022
From: WEI, CHANGZHENG; YAN, YING; WU, PENG; ZHANG, HUI; HE, CHANGHUA
To: ALIPAY (HANGZHOU) INFORMATION TECHNOLOGY CO., LTD.
Reel/Frame 058588/0498 →
Priority Claims (1)
CN 202010653793.2 · Jul 8, 2020 · national
Continuity (1)
Related Publication 20210328767A1 · Oct 21, 2021