摘要
随着大数据时代的到来,数据的产生和流转速度获得空前增长。区块链技术的出现为数据的真实性验证提供了新的解决思路。随着区块链技术的发展,不同区块链间数据流转需求逐渐增加,而不同区块链间数据流转又带来了新的安全性问题,如跨链数据传递易泄露、非法访问造成数据泄露不易发现等。针对上述问题,提出一种基于联盟链的数据溯源机制。设计了跨区块链的数据溯源模型,引入私有数据管道来实现跨链数据传递的安全性,通过授权与访问日志实现对用户行为的记录,保证非法越权访问的可追溯性。为提高数据溯源查询效率,采用链上链下同步存储机制,将每次交易前的数据流转状态经加密存储至数据库,并将其索引存储在区块链交易中,从而实现链上链下数据的一一对应,同时在区块体中引入Merkel山脉存储区块摘要,提高区块合法性检验效率。根据数据存储形式及跨链数据交互机制,设计了数据溯源算法,并将溯源结果以有序树的形式展示。针对电商行业的跨域数据溯源场景,基于Fabric搭建了联盟链溯源实验环境,并采用Go语言模拟测试了区块数量较大、交易数量较多情况下的数据溯源性能。结果显示,随着区块高度及数据流转次数增加,数据验证及溯源效率具有显著优势。
With the unprecedented growth in the speed of data generation and circulation in the era of big data,the emergence of blockchain technology provides a new solution for data authenticity verification.However,with the increasing demand for data flow between different blockchains,new security issues arise.Cross-chain data transmission can lead to data leakage,and detecting data leakage caused by illegal access becomes challenging.To address these problems,a data traceability mechanism based on a consortium chain was proposed.A cross-blockchain data traceability model was designed,incorporating private data pipelines to ensure the security of cross-chain data transmission.User behaviors were recorded through authorization and access logs,ensuring the traceability of illegal unauthorized access.To improve the efficiency of data traceability and query,an on-chain and off-chain synchronous storage mechanism was adopted.The state of data flow before each transaction was encrypted and stored in the database,and its index was stored in the blockchain transaction.This enables a one-to-one correspondence between on-chain and off-chain data.Additionally,Merkle trees were introduced into the block body to store block summaries,enhancing the efficiency of block legitimacy verification.Based on the data storage form and cross-chain data interaction mechanism,a data traceability algorithm was designed.The traceability results were displayed in the form of an ordered tree.An experimental environment for consortium chain traceability was built using fabric,targeting the cross-domain data traceability scenario in the e-commerce industry.The GO language was used to simulate and test the data traceability performance with a large number of blocks and transactions.The results demonstrate that with the increasing number of blocks and transactions,the proposed data traceability mechanism maintains satisfactory performance.
作者
赵守才
曹利峰
杜学绘
ZHAO Shoucai;CAO Lifeng;DU Xuehui(Information Engineering University,Zhengzhou 450001,Chin)
出处
《网络与信息安全学报》
2023年第5期92-105,共14页
Chinese Journal of Network and Information Security
基金
中原英才计划豫组通[2021]44号。
关键词
区块链
数据溯源
跨链
联盟链
block chain
data traceability
across chain
consortium chain