Advanced New Technologies Co., Ltd.

Alipay (Hangzhou) Information Technology Co., Ltd.

Alibaba Group Holding Limited

Alipay Information Technology Co., Ltd.

Antchain Technology Pte. Ltd.

Ying Yan

Changzheng Wei

Boran Zhao

Hui Zhang

Xuyang Song

Qi Liu

Huabing Du

Yujun Peng

Xuepeng Guo

Honglin Qiu

Renhui Yang

Yuan Chen

Shubo Li

Wenyu Yang

Qin Liu

Hanghang Wu

Peng Wu

Changhua He

Guozhen Pan

Lei Wang

Lei Zhang

Yirong Yu

Li Lin

Zongru Zhan

Jianguo Xu

Yubo Guo

Ni Zhou

Zhijian Chen

Yichen Tu

Ren Guo

Kuan Zhao

Haiyuan Gao

Qibin Ren

Zucheng Huang

Disclosed herein are methods, systems, and apparatus, including computer programs encoded on computer storage media, for providing blockchain-based data authorization. One of the methods includes receiving, by a blockchain node, a data acquisition transaction submitted by a data user for obtaining target data possessed by a data owner, determining, by the blockchain node, that the data user has obtained authorization of the target data, and executing, by the blockchain node, a smart contract invoked by the data acquisition transaction to issue an authorization token to the data user in response to determining that the data user has authorization of the target data, where the authorization token is sent to a privacy computing platform.

Providing data authorization based on blockchain

A cryptographic acceleration card generates, using an attribute unique to a blockchain integrated station that comprises the cryptographic acceleration card, an identity private key for the blockchain integrated station. The cryptographic acceleration card generates a private key ciphertext by encrypting the identity private key. The cryptographic acceleration card stores the private key ciphertext.

Blockchain integrated station and cryptographic acceleration card, key management methods and apparatuses

A cryptographic acceleration card included in a blockchain integrated station sends negotiation information to a provider of a new disk image, where the negotiation information is used by the provider to determine a deployment key, and where the new disk image is used to update an old disk image included in the blockchain integrated station. The cryptographic acceleration card receives a new hash value encrypted by the provider using the deployment key, where the new hash value corresponds to the new disk image. The cryptographic acceleration card replaces an old hash value corresponding to the old disk image with the new hash value, where the new hash value is compared with a current hash value of a disk image included in the blockchain integrated station to determine whether the disk image matches the new disk image.

Hash updating methods and apparatuses of blockchain integrated station

A blockchain integrated station receives a startup instruction. The blockchain integrated station sends a signature verification request for a disk image stored in the blockchain integrated station to a cryptographic acceleration card included in the blockchain integrated station. The blockchain integrated station receives a signature verification result from the cryptographic acceleration card, where the signature verification result indicates whether a signature of the disk image passes a verification. In response to determining that the signature verification result indicates that the signature of the disk image passes the verification, the blockchain integrated station executes the disk image.

Trusted startup methods and apparatuses of blockchain integrated station

A blockchain integrated station initiates a ciphertext request to a server, where the ciphertext request includes first information associated with input data of an off-chain contract. The blockchain integrated station obtains, from the server, an execution result, where the execution result is obtained by the server by executing the off-chain contract using the input data.

Blockchain data processing methods and apparatuses based on cloud computing

A blockchain integrated station receives a configuration instruction after accessing a blockchain network. The blockchain integrated station configures, based on the configuration instruction, a first network address corresponding to a certificate authority center and a second network address corresponding to a first blockchain node in the blockchain network. The blockchain integrated station initiates an authentication request to the certificate authority center based on the first network address. The blockchain integrated station receives, from the certificate authority center, a digital certificate after the certificate authority center determines that the authentication request passes verification. The blockchain integrated station sends, based on the second network address, the digital certificate to the first blockchain node, where the digital certificate is used by the first blockchain node to add the blockchain integrated station as a new blockchain node in the blockchain network.

Blockchain integrated stations and automatic node adding methods and apparatuses

A blockchain integrated station receives a first configuration instruction after accessing a certificate authority network. The blockchain integrated station initiates an authentication application to a certificate authority center of the certificate authority network based on a first network address indicated in the first configuration instruction. The blockchain integrated station receives a digital certificate from the certificate authority center after the certificate authority center determines that the authentication application passes verification. The blockchain integrated station receives a second configuration instruction after accessing a blockchain network. The blockchain integrated station sends the digital certificate to a first blockchain node in the blockchain network based on a second network address indicated in the second configuration instruction, where the digital certificate is used to trigger the first blockchain node to add the blockchain integrated station as a new blockchain node in the blockchain network.

One or more implementations of the present specification provide a blockchain-based data authorization method and apparatus. The method can include receiving, by a blockchain node, an authentication transaction submitted by a privacy computing platform, where the authentication transaction queries whether a data user has obtained authorization of target data possessed by a data owner, and in response to determining that the data user has obtained authorization of the target data, executing, by the blockchain node, a smart contract invoked by the authentication transaction to provide an authorization token to the privacy computing platform that instructs the privacy computing platform to obtain the target data, and send a computational result of one or more predetermined computational operations based on the target data to the data user.

Blockchain-based data authorization method and apparatus

The present specification provides a method for executing a smart contract and a blockchain node. An implementation of a method for executing a smart contract includes: receiving, by a blockchain node, a request for creating a smart contract, the request including a bytecode of the smart contract; starting, by the blockchain node after completing deployment of the smart contract, to compile the bytecode of the smart contract into a machine code by using just-in-time and storing the machine code; and in execution of the deployed smart contract, executing, by the blockchain node, the machine code corresponding to a bytecode of the smart contract in response to the machine code being locally stored. According to the above implementations of the present application, the blockchain node can greatly increase a speed of executing a smart contract.

Method for executing smart contract and blockchain node

The present specification provides a method for executing a smart contract, a blockchain node, and a storage medium. An implementation of a method for executing a smart contract includes: receiving, by a blockchain node, a request for creating a smart contract, the request including a bytecode of the smart contract; starting, by the blockchain node after completing deployment of the smart contract, to compile the bytecode of the smart contract into a first machine code by using ahead-of-time compilation and storing the machine code; and performing, by the blockchain node in execution of the deployed smart contract and in response to the first machine code of the smart contract not being locally stored, JIT compilation on the bytecode of the smart contract to obtain a second machine code and storing the second machine code, and executing the second machine code.

Method for executing smart contract, blockchain node, and storage medium

Computer-implemented methods, non-transitory, computer-readable media, and computer-implemented systems are provided for executing a smart contract in a blockchain network. The computer-implemented method includes: compiling, by a blockchain node in a blockchain network, code of a smart contract into machine code through Just-In-Time (JIT) compilation after deploying the smart contract, wherein the code of the smart contract comprises hotspot code marked by a hotspot identifier; storing, by the blockchain node, the hotspot code marked by the hotspot identifier; and when executing the smart contract, in response to determining that the machine code corresponding to the code of the smart contract is locally stored, executing, by the blockchain node, the machine code.

Methods, blockchain nodes, and node devices for executing smart contract

Disclosed herein are methods, systems, and apparatus, for securely executing smart contract operations in a trusted execution environment (TEE). One of the methods includes establishing, by a key management (KM) TEE of a KM node, a trust relationship with a plurality of KM TEEs in a plurality of KM nodes based on performing mutual attestations with the plurality of KM TEEs; initiating a consensus process with the plurality of KM TEEs for reaching consensus on providing one or more encryption keys to a service TEE of the KM node; in response to reaching the consensus with the plurality of KM TEEs, initiating a local attestation process with a service TEE in the KM node; determining that the local attestation process is successful; and in response to determining that the local attestation process is successful, providing one or more encryption keys to the TEE executing on the computing device.

Distributed key management for trusted execution environments

A blockchain data processing method includes: receiving a read request for target data stored in a blockchain; acquiring read permission index information of the target data from the blockchain, and acquiring a data read rule corresponding to the target data based on the read permission index information, the data read rule being configured to determine readable content in the target data; determining, in a predetermined trusted environment, the readable content in the target data based on the data read rule; and providing the readable content in the target data for a sender of the read request.

Blockchain data processing method, apparatus, and device

The present specification provides a method for executing a smart contract, a blockchain node, and a storage medium. An implementation of a method for executing a smart contract includes: receiving, by a blockchain node, a request for creating a smart contract, the request including a bytecode of the smart contract; starting, by the blockchain node after completing deployment of the smart contract, to compile the bytecode of the smart contract into a machine code by using ahead of time (AoT) compilation and storing the machine code; and during execution of a smart contract that has been deployed, interpreting and executing, by the blockchain node, a bytecode of the smart contract in response to that a machine code of the smart contract is not locally stored.

A first logic circuit included in a processor receives a first digital signal, where the first logic circuit includes a special purpose register, a comparator, and an adder, where the special purpose register stores a first resource balance for executing a smart contract, where the first digital signal includes a resource deduction quota corresponding to a code set in the smart contract. The first logic circuit reads the first resource balance from the special purpose register. The first logic circuit compares, using the comparator, the first resource balance with the resource deduction quota. In response to the first resource balance being greater than or equal to the resource deduction quota, the first logic circuit subtracts, using the adder, the resource deduction quota from the first resource balance to obtain a second resource balance. The first logic circuit stores the second resource balance in the special purpose register.

Growing community of inventors

Hangzhou, China

Ying Yan