Advanced New Technologies Co., Ltd.

Alipay (hangzhou) Information Technology Co., Ltd.

Alibaba Group Holding Limited

Alipay Information Technology Co., Ltd.

Changzheng Wei

Ying Yan

Boran Zhao

Hui Zhang

Xuyang Song

Qi Liu

Huabing Du

Yujun Peng

Xuepeng Guo

Changhua He

Peng Wu

Guozhen Pan

Lei Wang

Lei Zhang

Fuxi Deng

Yuqi Lin

Zongru Zhan

Jianguo Xu

Yubo Guo

Zhijian Chen

Yichen Tu

Ni Zhou

Ren Guo

Haiyuan Gao

Qibin Ren

Zucheng Huang

Yongqiang Li

Kuan Zhao

Yan Liu

Disclosed herein are methods, systems, and apparatus, including computer programs encoded on computer storage media, for providing blockchain-based data authorization. One of the methods includes receiving, by a blockchain node, a data acquisition transaction submitted by a data user for obtaining target data possessed by a data owner, determining, by the blockchain node, that the data user has obtained authorization of the target data, and executing, by the blockchain node, a smart contract invoked by the data acquisition transaction to issue an authorization token to the data user in response to determining that the data user has authorization of the target data, where the authorization token is sent to a privacy computing platform.

Providing data authorization based on blockchain

A cryptographic acceleration card generates, using an attribute unique to a blockchain integrated station that comprises the cryptographic acceleration card, an identity private key for the blockchain integrated station. The cryptographic acceleration card generates a private key ciphertext by encrypting the identity private key. The cryptographic acceleration card stores the private key ciphertext.

Blockchain integrated station and cryptographic acceleration card, key management methods and apparatuses

A cryptographic acceleration card included in a blockchain integrated station sends negotiation information to a provider of a new disk image, where the negotiation information is used by the provider to determine a deployment key, and where the new disk image is used to update an old disk image included in the blockchain integrated station. The cryptographic acceleration card receives a new hash value encrypted by the provider using the deployment key, where the new hash value corresponds to the new disk image. The cryptographic acceleration card replaces an old hash value corresponding to the old disk image with the new hash value, where the new hash value is compared with a current hash value of a disk image included in the blockchain integrated station to determine whether the disk image matches the new disk image.

Hash updating methods and apparatuses of blockchain integrated station

A blockchain integrated station receives a startup instruction. The blockchain integrated station sends a signature verification request for a disk image stored in the blockchain integrated station to a cryptographic acceleration card included in the blockchain integrated station. The blockchain integrated station receives a signature verification result from the cryptographic acceleration card, where the signature verification result indicates whether a signature of the disk image passes a verification. In response to determining that the signature verification result indicates that the signature of the disk image passes the verification, the blockchain integrated station executes the disk image.

Trusted startup methods and apparatuses of blockchain integrated station

A blockchain integrated station initiates a ciphertext request to a server, where the ciphertext request includes first information associated with input data of an off-chain contract. The blockchain integrated station obtains, from the server, an execution result, where the execution result is obtained by the server by executing the off-chain contract using the input data.

Blockchain data processing methods and apparatuses based on cloud computing

One or more implementations of the present specification provide a method and apparatus for starting a smart contract, an electronic device, and a storage medium. The method is applied in a blockchain node, and can include: running a timing start logic defined in a chain code, the timing start logic configured to determine a start moment of a target smart contract, and start the target smart contract when a current moment reaches the start moment.

Method and apparatus for starting smart contract, electronic device, and storage medium

A blockchain integrated station receives a configuration instruction after accessing a blockchain network. The blockchain integrated station configures, based on the configuration instruction, a first network address corresponding to a certificate authority center and a second network address corresponding to a first blockchain node in the blockchain network. The blockchain integrated station initiates an authentication request to the certificate authority center based on the first network address. The blockchain integrated station receives, from the certificate authority center, a digital certificate after the certificate authority center determines that the authentication request passes verification. The blockchain integrated station sends, based on the second network address, the digital certificate to the first blockchain node, where the digital certificate is used by the first blockchain node to add the blockchain integrated station as a new blockchain node in the blockchain network.

Blockchain integrated stations and automatic node adding methods and apparatuses

A blockchain integrated station receives a first configuration instruction after accessing a certificate authority network. The blockchain integrated station initiates an authentication application to a certificate authority center of the certificate authority network based on a first network address indicated in the first configuration instruction. The blockchain integrated station receives a digital certificate from the certificate authority center after the certificate authority center determines that the authentication application passes verification. The blockchain integrated station receives a second configuration instruction after accessing a blockchain network. The blockchain integrated station sends the digital certificate to a first blockchain node in the blockchain network based on a second network address indicated in the second configuration instruction, where the digital certificate is used to trigger the first blockchain node to add the blockchain integrated station as a new blockchain node in the blockchain network.

One or more implementations of the present specification provide a blockchain-based data authorization method and apparatus. The method can include receiving, by a blockchain node, an authentication transaction submitted by a privacy computing platform, where the authentication transaction queries whether a data user has obtained authorization of target data possessed by a data owner, and in response to determining that the data user has obtained authorization of the target data, executing, by the blockchain node, a smart contract invoked by the authentication transaction to provide an authorization token to the privacy computing platform that instructs the privacy computing platform to obtain the target data, and send a computational result of one or more predetermined computational operations based on the target data to the data user.

Blockchain-based data authorization method and apparatus

The present specification provides a method for executing a smart contract, a blockchain node, and a storage medium. An implementation of a method for executing a smart contract includes: receiving, by a blockchain node, a request for creating a smart contract, the request including a bytecode of the smart contract; starting, by the blockchain node after completing deployment of the smart contract, to compile the bytecode of the smart contract into a first machine code by using ahead-of-time compilation and storing the machine code; and performing, by the blockchain node in execution of the deployed smart contract and in response to the first machine code of the smart contract not being locally stored, JIT compilation on the bytecode of the smart contract to obtain a second machine code and storing the second machine code, and executing the second machine code.

Method for executing smart contract, blockchain node, and storage medium

Computer-implemented methods, non-transitory, computer-readable media, and computer-implemented systems are provided for executing a smart contract in a blockchain network. The computer-implemented method includes: compiling, by a blockchain node in a blockchain network, code of a smart contract into machine code through Just-In-Time (JIT) compilation after deploying the smart contract, wherein the code of the smart contract comprises hotspot code marked by a hotspot identifier; storing, by the blockchain node, the hotspot code marked by the hotspot identifier; and when executing the smart contract, in response to determining that the machine code corresponding to the code of the smart contract is locally stored, executing, by the blockchain node, the machine code.

Methods, blockchain nodes, and node devices for executing smart contract

Disclosed herein are methods, systems, and apparatus, for securely executing smart contract operations in a trusted execution environment (TEE). One of the methods includes establishing, by a key management (KM) TEE of a KM node, a trust relationship with a plurality of KM TEEs in a plurality of KM nodes based on performing mutual attestations with the plurality of KM TEEs; initiating a consensus process with the plurality of KM TEEs for reaching consensus on providing one or more encryption keys to a service TEE of the KM node; in response to reaching the consensus with the plurality of KM TEEs, initiating a local attestation process with a service TEE in the KM node; determining that the local attestation process is successful; and in response to determining that the local attestation process is successful, providing one or more encryption keys to the TEE executing on the computing device.

Distributed key management for trusted execution environments

The present specification provides a method for executing a smart contract, a blockchain node, and a storage medium. An implementation of a method for executing a smart contract includes: receiving, by a blockchain node, a request for creating a smart contract, the request including a bytecode of the smart contract; starting, by the blockchain node after completing deployment of the smart contract, to compile the bytecode of the smart contract into a machine code by using ahead of time (AoT) compilation and storing the machine code; and during execution of a smart contract that has been deployed, interpreting and executing, by the blockchain node, a bytecode of the smart contract in response to that a machine code of the smart contract is not locally stored.

A first logic circuit included in a processor receives a first digital signal, where the first logic circuit includes a special purpose register, a comparator, and an adder, where the special purpose register stores a first resource balance for executing a smart contract, where the first digital signal includes a resource deduction quota corresponding to a code set in the smart contract. The first logic circuit reads the first resource balance from the special purpose register. The first logic circuit compares, using the comparator, the first resource balance with the resource deduction quota. In response to the first resource balance being greater than or equal to the resource deduction quota, the first logic circuit subtracts, using the adder, the resource deduction quota from the first resource balance to obtain a second resource balance. The first logic circuit stores the second resource balance in the special purpose register.

Growing community of inventors

Hangzhou, China

Changzheng Wei