摘要
区块链是综合运用密码学、共识机制、分布式网络和智能合约等技术所构建的具有安全和可信特征的新型分布式计算范式,在社会、生产、生活等众多领域都得到了广泛应用,对人民生活产生了重大影响.然而,随着区块链技术及应用的蓬勃发展,各种安全问题频发,严重阻碍了区块链的应用和推广.同时,由于区块链技术、框架仍在不断演进之中,研究人员对区块链安全内涵的核心认知和关键特征理解还未统一,存在较大差异,尚未形成一致的区块链安全框架与体系.当前亟需对区块链系统安全技术发展现状进行梳理,为区块链系统所面临的重点安全问题的研究和突破提供参考.本文结合区块链系统技术框架、围绕区块链安全需求,构建了区块链安全技术框架.在此框架下,从区块链密码支撑技术、区块链平台安全技术和区块链风险评估与安全监管3个方面系统梳理区块链安全关键技术研究现状,囊括了区块链业务流程和区块链系统技术框架所涉及的主要安全机制.最后总结了区块链系统安全技术有待解决的核心问题和发展趋势.
Blockchain is a new distributed computing paradigm that integrates cryptography,consensus mechanism,distributed network and smart contract technologies with security and trust characteristics.It has been widely used in many fields such as society,production and life,and has a great impact on people’s lives.However,with the vigorous development of blockchain technology and applications,various security problems have seriously hindered the application and promotion of blockchain.Different from traditional information systems,blockchain has distributed,decentralized,high value and other characteristics,but also brings the characteristics of a wide range of security protection and many risk links,which brings new challenges to the application of security technology in the blockchain scenario.Because the blockchain technology and framework are still evolving,researchers’core cognition and key feature understanding of the security connotation of blockchain have not been unified,and there are great differences.A consistent blockchain security framework and system has not yet been formed.At present,it is urgent to sort out the development status of the security technology of the blockchain system and provide reference for the research and breakthrough of the key security issues faced by the blockchain system.Based on the technical framework of the blockchain system and the security requirements of the blockchain,this paper constructs the technical framework of the blockchain security.Under this framework,the research status of key technologies of blockchain security is systematically reviewed from three aspects:blockchain cryptographic support technology,blockchain platform security technology,and blockchain risk assessment and security supervision,including the main security mechanisms involved in the blockchain business process and blockchain system technology framework.Blockchain cryptographic support technology is mainly to provide cryptographic technology services and call interfaces for blockchain system components,blockchain system users,and blockchain application services.Blockchain cryptographic support technology is the cornerstone of blockchain system security,which mainly solves the security function components in the operation process of the blockchain system and provides confidentiality,integrity,privacy,authentication,and non-repudiation protection for the relevant functional components of the security management operation.It includes the cryptographic algorithm,cryptographic protocol,and cryptographic infrastructure.In addition,in view of the great security threats and challenges brought by quantum computing to cryptography technology,it is also necessary to consider the use of post-quantum cryptography technology in the blockchain to resist quantum attacks.The blockchain platform security technology provides basic blockchain service support for all types of users of blockchain services and is responsible for the actual operation of blockchain system data storage,calculation,transmission,and access.Blockchain platform security technology is the core of blockchain security,which mainly includes five levels of security:storage security,network security,consensus security,application security,and common security services.The first four levels correspond to the data layer,network layer,consensus layer,and application layer of the blockchain basic framework,while common security services run through each layer,and different security services are taken according to different blockchain system types and security needs.Blockchain risk assessment and security supervision are important guarantees for blockchain security.It is mainly responsible for solving the blockchain system itself,blockchain application service security assessment,supervision,governance,norms.Specifically include security risk assessment,security supervision and governance,technical standards and norms.Finally,it summarizes the core problems and development trends of blockchain system security technology.
作者
刘敖迪
杜学绘
王娜
吴翔宇
单棣斌
乔蕊
LIU Ao-Di;DU Xue-Hui;WANG Na;WU Xiang-Yu;SHAN Di-Bin;QIAO Rui(Strategic Support Force Information Engineering University,Zhengzhou450001;He’nan Province Key Laboratory of Information Security,Zhengzhou450001;Zhoukou Normal University,Zhoukou,Henan466001)
出处
《计算机学报》
EI
CAS
CSCD
北大核心
2024年第3期608-646,共39页
Chinese Journal of Computers
基金
河南省重点研发与推广专项(222102210069)
中原科技创新领军人才项目(224200510003)
国家自然科学基金(62102449)
河南省高校科技创新人才支持计划(23HASTIT029)资助.
关键词
区块链安全
安全技术框架
密码支撑
平台安全
安全监管
blockchain security
security technology framework
cryptography support
platform security
security supervision
