Login| Sign Up| Help| Contact|

Patent Searching and Data


Title:
BLOCKCHAIN-BASED TRANSACTION PROCESSING METHOD, APPARATUS, AND ELECTRONIC DEVICE
Document Type and Number:
WIPO Patent Application WO/2020/086231
Kind Code:
A1
Abstract:
A method for processing blockchain-based transactions, comprising: acquiring a Nonce record from a Nonce list for a transaction initiated by a user account, wherein the Nonce list is maintained in a blockchain and is associated with the user account, the Nonce list comprises a plurality of Nonce records, and a Nonce record comprises a Nonce value; adding the acquired Nonce record to the transaction; and submitting the transaction to the blockchain, for a node in the blockchain to compare the Nonce record in the transaction with the plurality of Nonce records in the Nonce list, and to accept the transaction in response to the Nonce record matching any Nonce record in the Nonce list, wherein the Nonce value in the matching Nonce record in the Nonce list is monotonically increased based on a preset increment in response to that the transaction is accepted.

Inventors:
WANG JIYUAN (CN)
YAN XUEBING (CN)
Application Number:
PCT/US2019/054399
Publication Date:
April 30, 2020
Filing Date:
October 03, 2019
Export Citation:
Click for automatic bibliography generation   Help
Assignee:
ALIBABA GROUP HOLDING LTD (US)
International Classes:
G06Q20/38; G06F16/23; G06F21/64; G06Q20/40; H04L9/08
Foreign References:
US20170149819A12017-05-25
US20070101412A12007-05-03
Other References:
"Handbook of Applied Cryptography", 1 January 1997, CRC PRESS, BOCA RATON, FL, US, ISBN: 978-0-8493-8523-0, article MENEZES A J ET AL: "Handbook of Applied Cryptography, Chapter 10: Identification and Entity Authentication", pages: 385 - 440, XP055401652, 022821
GONG L: "Variations on the themes of message freshness and replay-or the difficulty in devising formal methods to analyze cryptographic protocols", COMPUTER SECURITY FOUNDATIONS WORKSHOP VI, 1993. PROCEEDINGS FRANCONIA, NH, USA 15-17 JUNE 1993, LOS ALAMITOS, CA, USA,IEEE COMPUT. SOC, US, 15 June 1993 (1993-06-15), pages 131 - 136, XP010032659, ISBN: 978-0-8186-3950-0, DOI: 10.1109/CSFW.1993.246633
Attorney, Agent or Firm:
CHEN, Weiguo (US)
Download PDF:
Claims:
CLAIMS

What is claimed is:

1. A computer-implemented method for processing blockchain-based transactions, the method comprising:

acquiring a Nonce record from a Nonce list for a transaction initiated by a user account, wherein the Nonce list is maintained in a blockchain and is associated with the user account, the Nonce list comprises a plurality of Nonce records, and a Nonce record comprises a Nonce value;

adding the acquired Nonce record to the transaction; and

submitting the transaction to the blockchain, for a node in the blockchain to compare the Nonce record in the transaction with the plurality of Nonce records in the Nonce list, and to accept the transaction in response to the Nonce record matching any Nonce record in the Nonce list,

wherein the Nonce value in the matching Nonce record in the Nonce list is

monotonically increased based on a preset increment in response to that the transaction is accepted.

2. The method according to claim 1, wherein the method is implementable by a client, and before acquiring a Nonce record from a Nonce list for a transaction initiated by a user account, the method further comprises:

acquiring the Nonce list maintained in the blockchain in response to an initialization instruction for the client; and

maintaining the acquired Nonce list at the client.

3. The method according to claim 2, wherein acquiring a Nonce record from a Nonce list for a transaction initiated by a user account comprises:

acquiring a Nonce record from a Nonce list maintained at the client for the transaction initiated by the user account.

4. The method according to any of the claims 2-3, wherein the Nonce records in the Nonce list maintained at the client is marked as available by default; and wherein acquiring a Nonce record from a Nonce list for a transaction initiated by a user account comprises: acquiring a Nonce record marked as available from the Nonce list maintained at the client for the transaction initiated by the user account; and

after acquiring the Nonce record marked as available from the Nonce list maintained at the client for the transaction, marking the acquired Nonce record as unavailable in the Nonce list.

5. The method according to any of the claims 2-4, further comprising:

determining whether a prompt message returned by the node is received that the transaction is accepted; and

in response to receiving the prompt message that the transaction is accepted, monotonically increasing the Nonce value in the acquired Nonce record by the preset increment, and re-marking the acquired Nonce record as available in the Nonce list after the Nonce value is monotonically increased.

6. The method according to any preceding claim, wherein the method is implementable by a client, and the client is a multi-threaded client.

7. The method according to any preceding claim, wherein the number of Nonce records in the Nonce list indicates a transaction concurrency capacity of the user account.

8. The method according to any preceding claim, wherein the Nonce record further comprises a version identifier of the Nonce list.

9. The method according to any preceding claim, wherein the Nonce record further comprises an index identifier of the Nonce record.

10. A computer-implemented method for processing blockchain-based transactions, the method comprising:

receiving a transaction initiated by a user account, wherein the transaction comprises a Nonce record acquired from a Nonce list maintained in a blockchain and associated with the user account, the Nonce list comprises a plurality of Nonce records, and the Nonce record comprises a Nonce value; comparing the acquired Nonce record with the plurality of Nonce records in the Nonce list maintained in the blockchain and associated with the user account;

accepting the transaction in response to that the acquired Nonce record matches any Nonce record in the Nonce list; and

monotonically increasing the Nonce value of the matching Nonce record in the Nonce list based on a preset increment in response to that the acquired Nonce record matches any Nonce record in the Nonce list.

11. The method according to claim 10, wherein the method is implementable by a node of blockchain and a client submits the transaction to the blockchain, and the method further comprises:

returning a notification message to the client that the transaction is accepted.

12. The method according to any of the claims 10-11, wherein the Nonce record comprises a version identifier of the Nonce list.

13. A system for processing blockchain-based transactions, comprising:

one or more processors; and

one or more computer-readable memories coupled to the one or more processors and having instructions stored thereon that are executable by the one or more processors to perform the computer-implemented method of any of claims 1 to 12.

14. An apparatus for processing blockchain-based transactions, comprising a plurality of modules for performing the computer-implemented method of any of claims 1 to 12.

15. A non-transitory computer-readable storage medium configured with instructions executable by one or more processors to cause the one or more processors to perform the computer-implemented method of any of claims 1 to 12.

Description:
BLOCKCHAIN-BASED TRANSACTION PROCESSING METHOD, APPARATUS,

AND ELECTRONIC DEVICE

CROSS REFERENCE TO RELATED APPLICATION

[0001] The present application is based on and claims priority to Chinese Patent

Application No. 201811251778.4, filed on October 25, 2018, which is incorporated herein by reference in its entirety.

TECHNICAL FIELD

[0002] One or more embodiments of the application relate to the field of blockchain technology, and in particular, to a method, apparatus, and electronic device for processing blockchain-based transactions.

BACKGROUND

[0003] Blockchain, also known as a distributed ledger technology, is an emerging technology in which multiple computing devices participate in "accounting" to maintain a complete distributed database. The blockchain technology is decentralized and transparent, each computing device can participate in maintaining records in the database, and data can be quickly synchronized among the computing devices. Therefore, the blockchain technology, which is used for constructing a decentralized system and recording various executive programs in the distributed database of the blockchain for automatic execution, has been widely applied in many fields.

SUMMARY

[0004] The specification provides a method for processing blockchain-based transactions, comprising: acquiring a Nonce record from a Nonce list for a transaction initiated by a user account, wherein the Nonce list is maintained in a blockchain and is associated with the user account, the Nonce list comprises a plurality of Nonce records, and a Nonce record comprises a Nonce value; adding the acquired Nonce record to the transaction; and submitting the transaction to the blockchain, for a node in the blockchain to compare the Nonce record in the transaction with the plurality of Nonce records in the Nonce list, and to accept the transaction in response to the Nonce record matching any Nonce record in the Nonce list, wherein the Nonce value in the matching Nonce record in the Nonce list is monotonically increased based on a preset increment in response to that the transaction is accepted.

[0005] In some embodiments, the method is implementable by a client, and before acquiring a Nonce record from a Nonce list for a transaction initiated by a user account, the method further comprises: acquiring the Nonce list maintained in the blockchain in response to an initialization instruction for the client; and maintaining the acquired Nonce list at the client.

[0006] In some embodiments, acquiring a Nonce record from a Nonce list for a transaction initiated by a user account comprises: acquiring a Nonce record from a Nonce list maintained at the client for the transaction initiated by the user account.

[0007] In some embodiments, the Nonce records in the Nonce list maintained at the client is marked as available by default; and wherein acquiring a Nonce record from a Nonce list for a transaction initiated by a user account comprises: acquiring a Nonce record marked as available from the Nonce list maintained at the client for the transaction initiated by the user account; and after acquiring the Nonce record marked as available from the Nonce list maintained at the client for the transaction, marking the acquired Nonce record as unavailable in the Nonce list.

[0008] In some embodiments, the method further comprises: determining whether a prompt message returned by the node is received that the transaction is accepted; and in response to receiving the prompt message that the transaction is accepted, monotonically increasing the Nonce value in the acquired Nonce record by the preset increment, and re-marking the acquired Nonce record as available in the Nonce list after the Nonce value is monotonically increased.

[0009] In some embodiments, the method is implementable by a client, and the client is a multi-threaded client. In some embodiments, the number of Nonce records in the Nonce list indicates a transaction concurrency capacity of the user account.

[0010] In some embodiments, the Nonce record further comprises a version identifier of the Nonce list. In some embodiments, the Nonce record further comprises an index identifier of the Nonce record.

[0011] The specification further provides another method for processing blockchain-based transactions, and the method comprises: receiving a transaction initiated by a user account, wherein the transaction comprises a Nonce record acquired from a Nonce list maintained in a blockchain and associated with the user account, the Nonce list comprises a plurality of Nonce records, and the Nonce record comprises a Nonce value; comparing the acquired Nonce record with the plurality of Nonce records in the Nonce list maintained in the blockchain and associated with the user account; accepting the transaction in response to that the acquired Nonce record matches any Nonce record in the Nonce list; and monotonically increasing the Nonce value of the matching Nonce record in the Nonce list based on a preset increment in response to that the acquired Nonce record matches any Nonce record in the Nonce list.

[0012] In some embodiments, the method is implementable by a node of blockchain and a client submits the transaction to the blockchain, and the method further comprises: returning a notification message to the client that the transaction is accepted.

[0013] In some embodiments, the Nonce record comprises a version identifier of the Nonce list. In some embodiments, the Nonce record comprises an index identifier of the Nonce record.

[0014] The specification further provides an apparatus for processing blockchain-based transactions, and the apparatus comprises: one or more processors and one or more non-transitory computer-readable memories coupled to the one or more processors and configured with instructions executable by the one or more processors to cause the apparatus to perform operations comprising: acquiring a Nonce record from a Nonce list for a transaction initiated by a user account, wherein the Nonce list is maintained in a blockchain and is associated with the user account, the Nonce list comprises a plurality of Nonce records, and a Nonce record comprises a Nonce value; adding the acquired Nonce record to the transaction; and submitting the transaction to the blockchain, for a node in the blockchain to compare the Nonce record in the transaction with the plurality of Nonce records in the Nonce list, and to accept the transaction in response to the Nonce record matching any Nonce record in the Nonce list; wherein the Nonce value in the matching Nonce record in the Nonce list is monotonically increased based on a preset increment in response to that the transaction is accepted.

[0015] Through the above embodiments, not only can replay attacks initiated by submitting repeated transactions to the blockchain be effectively prevented, but also can the transaction concurrency capability of an individual account be improved on the basis of the effective prevention of the replay attacks.

BRIEF DESCRIPTION OF THE DRAWINGS

[0016] FIG. 1 is a schematic diagram of a replay attack detection for a transaction according to some embodiments.

[0017] FIG. 2 is a flow diagram of a method for processing blockchain-based transactions according to some embodiments.

[0018] FIG. 3 is a structure diagram of a Nonce list set maintained in a blockchain according to some embodiments.

[0019] FIG. 4 is a schematic diagram of a replay attack detection for a transaction according to other embodiments.

[0020] FIG. 5 is a structure diagram of a Nonce list maintained at a client according to some embodiments.

[0021] FIG. 6 is a structure diagram of an electronic device for processing

blockchain-based transactions according to some embodiments.

[0022] FIG. 7 is a block diagram of an apparatus for processing blockchain-based transactions according to some embodiments.

[0023] FIG. 8 is a block diagram of an apparatus for processing blockchain-based transactions according to other embodiments.

DETAILED DESCRIPTION

[0024] A replay attack in the field of blockchains refers to an attack that causes a loss to a user by submitting repeated transactions in a blockchain and thus causing the same transaction to be executed multiple times.

[0025] For example, the classic“double spending” problem in a Bitcoin network is a typical replay attack. If a transfer transaction is intercepted by an invalid node after obtaining a signature permission based on a user's private key, the invalid node initiates a replay attack based on the intercepted transaction after the transaction is executed, and repeatedly submits and executes the transaction in a blockchain, so that the transfer transaction is executed multiple times to cause financial losses to the user. [0026] In some embodiments, a progressively increasing Nonce value (e.g., a progressively increasing integer) is usually included in a transaction to eliminate or reduce the risk of replay attack against the transaction.

[0027] Referring to FIG. 1, a schematic diagram of a replay attack detection for a transaction is provided according to the specification. As shown in FIG. 1, for each transaction initiated by a user on a client through a personal account, a Nonce value is specified, and a transaction body and the specified Nonce value of the transaction may be signed by using a private key held by the user. The signature may be an overall signature of [transaction body, Nonce value], which can guarantee that the Nonce in the transaction cannot be tampered with.

[0028] When the signature is generated, the client can submit the transaction to a blockchain. For example, the client may broadcast the transaction to the nodes of the blockchain. After receiving the transaction, a node in the blockchain may verify whether the signature of the transaction is valid, and also may check whether the Nonce value in the transaction is strictly progressively increased from the Nonce value in the latest transaction that has been successfully accepted. If the Nonce value in the transaction is strictly progressively increased from the Nonce value in the latest transaction that has been successfully accepted, the transaction can be accepted; otherwise, the transaction can be determined as an invalid transaction.

[0029] For example, a user initiates a first transaction with a Nonce value of 1 on the client through a personal user account Accountl. After the first transaction is successfully accepted by the blockchain and when the user initiates a second transaction on the client through the Accountl, if the Nonce value in the second transaction is specified as 2, then the transaction can be determined as a valid transaction for acceptance by the node in the blockchain.

[0030] In some embodiments, a blockchain system maintains the state of the Nonce in the personal user account of the user. For example, once a transaction initiated through the Accountl is successfully accepted, the blockchain system increases the Nonce value of the user account by 1. After receiving a transaction submitted by the client, the node in the blockchain compares the Nonce value in the transaction with the Nonce value in the maintained state of the Nonce to determine whether the Nonce value in the transaction is strictly progressively increased by 1 from the Nonce value in the latest transaction that has been successfully accepted; and if so, the transaction can be accepted. [0031] In this way, the risk of replay attack of the transaction can be reduced to some extent. However, the next transaction can be initiated for the user account after the previous transaction is accepted. Therefore, the transaction concurrence capability of an individual account is insufficient, and the above-described method cannot be applied in high concurrent scenarios.

[0032] To solve the problem, the specification provides a replay attack protection scheme capable of being applied in high concurrent scenarios. During implementation, a Nonce list set is maintained in a blockchain. The Nonce list set includes multiple Nonce lists associated with multiples user accounts. A Nonce list includes multiple Nonce records, and each Nonce record includes an auxiliary parameter and a Nonce value.

[0033] After the user initiates a target transaction on the client through the personal user account, the client acquires a Nonce record from the Nonce list for the target transaction, adds the acquired Nonce record to the target transaction, and then submits the target transaction to the blockchain. In some embodiments, the client may acquire a Nonce record available to be used or not occupied by other entities or transactions from the Nonce list.

[0034] After receiving the target transaction, a node in the blockchain compares the available Nonce record included in the transaction with the Nonce records in the Nonce list maintained in the blockchain and associated with the user account to perform a replay attack detection on the target transaction.

[0035] If the available Nonce record included in the transaction matches any Nonce record in the Nonce list maintained in the blockchain and associated with the user account, the transaction is determined to pass the replay attack detection, and the node accepts and executes the target transaction. The Nonce record in the Nonce list, which matches the Nonce record included in the target transaction, is referred to as a target Nonce record for ease of description. After the target transaction is successfully accepted, the Nonce value in the target Nonce record is monotonically increased according to a preset increment or rate. For example, the Nonce value in the target Nonce record is increased by an integer such as 1, 2, 3, etc.

[0036] Through the above embodiments, on the one hand, after each transaction initiated by the user on the client through the user account is successfully accepted, the Nonce value in the Nonce record used by the transaction is monotonically increased, and thus if the transaction is resubmitted to the blockchain, the transaction cannot pass the validity detection by the blockchain system, and the replay attacks initiated by submitting repeated transactions to the blockchain can be effectively prevented. On the other hand, the Nonce list maintained in the blockchain and associated with the user account includes multiple available Nonce records. Therefore, the user can initiate multiple valid transactions including available Nonce records on the client through the user account, and the multiple valid transactions can pass the replay attack detection of the blockchain system. Accordingly, the transaction concurrency capability of the user account can be significantly improved.

[0037] The specification will be described below through embodiments in conjunction with different application scenarios. Referring to FIG. 2, a method for processing

blockchain-based transaction according to some embodiments of the specification. The method comprises the following steps.

[0038] Step 202: a client acquires a Nonce record for a transaction initiated by a user through a user account from a Nonce list maintained in a blockchain and associated with the user account, where the Nonce list includes multiple Nonce records, and the Nonce record includes an auxiliary parameter and a Nonce value;

[0039] Step 204: the client adds the acquired Nonce record to the transaction;

[0040] Step 206: the client submits the transaction to the blockchain; and

[0041] Step 208: a node in the blockchain receives the transaction sent by the client, and compares the Nonce record with the Nonce records in the Nonce list; if the Nonce record matches any Nonce record in the Nonce list, the node accepts the transaction, where the Nonce value in the matching Nonce record in the Nonce list is monotonically increased based on a preset increment when the transaction is accepted.

[0042] The blockchain described in the specification includes a private chain, a shared chain, an alliance chain, and the like, and is not limited by the embodiments of the specification.

[0043] For example, in a scenario, the foregoing blockchain is an alliance chain including a server of a third-party payment platform, a domestic bank server, an overseas bank server, and multiple user nodes as member devices. An entity operating the alliance chain can rely on the alliance chain to deploy on-line businesses such as cross-border transfer and asset transfer based on the alliance chain on line.

[0044] In some embodiments, the transaction described in the specification refers to data in a distributed database created by a user through a client of the blockchain and finally submitted to the blockchain. Transactions in blockchain are usually divided into narrow transactions and generalized transactions. The narrow transaction refers to a value transfer submitted by the user to the blockchain. For example, in a Bitcoin blockchain network, the transaction can be a transfer initiated by the user in the blockchain. The generalized transaction refers to business data submitted by the user to the blockchain. For example, the operator can build an alliance chain based on actual business needs and rely on the alliance chain to deploy some other on-line businesses that may not be related to value transfer (e.g., an anti-counterfeiting check business, a rental business, a vehicle dispatching business, an insurance claims business, a credit business, a medical business, and the like), and in this alliance chain, the transaction can be a business message or business request for a business purpose submitted by the user in the alliance chain.

[0045] In some embodiments, a Nonce list set can be maintained in a blockchain. The Nonce list set includes Nonce lists associated with multiple user accounts. Each Nonce list includes multiple Nonce records. Each Nonce record includes an auxiliary parameter and a Nonce value. For example, the Nonce record is a composite structure including multiple fields including the Nonce value.

[0046] During implementation, the entity operating the blockchain may allocate an available Nonce value for each user account in advance, set a corresponding auxiliary field for each Nonce value based on the allocated available Nonce value, and construct multiple Nonce records based on each available Nonce value and the corresponding auxiliary field.

[0047] In some embodiments, a Nonce list may be constructed for a user account based on the multiple generated Nonce records. The Nonce list set may be created based on the Nonce lists constructed for respective user accounts. The Nonce list set is submitted to the blockchain, and is subjected to consensus processing by the nodes in the blockchain. After passing the consensus processing, the Nonce list set is stored in the distributed data of the blockchain for maintenance.

[0048] In some embodiments, the auxiliary parameter may include parameters of any forms extended from the available Nonce values of the user account by an entity operating the blockchain based on actual needs, or a combination of such parameters.

[0049] That is, the number and type of parameters included in the auxiliary parameters are not fixed. Any parameter extended based on the Nonce value can be used as an auxiliary parameter. Alternatively, a variety of parameters extended based on the Nonce value can be combined as the auxiliary parameter.

[0050] In some embodiments, the auxiliary parameter in the Nonce record of the Nonce list includes a version identifier (e.g., a version number) of the Nonce list, where the version identifier is configured to represent the current version of the Nonce list. For the Nonce lists associated with the respective user accounts in the Nonce list set, their version identifiers can be the same or different.

[0051] In some embodiments, the version identifier of the Nonce list is modified or updated by the entity operating the blockchain when the Nonce list satisfies a version change condition. Alternatively, the version identifier of the Nonce list may be manually updated by the user submitting a transaction to the blockchain through the client.

[0052] In some embodiments, if the version identifier of the Nonce list is updated, a transaction, which has been submitted to the blockchain but has not been accepted and includes a version identifier before the update of the Nonce list, is not to be accepted by the blockchain system because the included version identifier of the Nonce list (i.e., the old version identifier before the update) does not match the updated version identifier of the Nonce list.

[0053] In this way, the entity operating the blockchain or the user can set some

transactions that have been submitted but have not been accepted to be in an invalid state by updating the version identifiers of the Nonce lists, so that some transactions that cannot be accepted for a long time can be terminated in time.

[0054] In some embodiment, the auxiliary parameter in the Nonce record of the Nonce list further includes an index identifier (such as an index number) of the Nonce record besides the version identifier of the Nonce list. The index identifier is configured for indicating the order and location of the Nonce record in the Nonce list.

[0055] For example, referring to FIG. 3, taking the auxiliary parameter in the Nonce record of the Nonce list that simultaneously includes a version identifier of the Nonce list and an index identifier of the Nonce record as an example, the Nonce record may be a composite structure including Version (version identifier), Index (index identifier), Value (Nonce value), and other fields. For example, the Nonce list set maintained in the blockchain may be in the form shown in FIG. 3.

[0056] The byte lengths of the Nonce record, the Nonce value in the Nonce record, and the auxiliary parameter can be any values, and can be flexibly set in practical applications based on the actual needs of the entity operating the blockchain (e.g., the operating entity can control the value ranges of the Nonce value and the auxiliary parameter through their occupied byte lengths). For example, the Nonce record is a 16-byte composite structure, where 4 bytes represent Version (version identifier), 4 bytes represent Index (index identifier), and 8 bytes represent Value (Nonce value).

[0057] By combining a variety of parameters extended on the basis of the Nonce value into the auxiliary parameter, the Nonce record in the Nonce list can cover a rich value field, thereby reducing the probability that multiple Nonce records in the Nonce list conflict due to the same value. For example, the probability that two l2-byte Nonce records including Versions (version identifiers) and Values (Nonce values) are completely the same and thus conflict is much lower than the probability that two 16-byte Nonce records including

Versions (version identifiers), Indexes (index identifiers), and Values (Nonce values) are completely the same and therefore conflict.

[0058] In the specification, the client may be a multi-threaded client. For example, the client can enable multiple threads at the same time, and each thread can be executed independently, so that the user can simultaneously initiate multiple transactions through the personal user account by calling the multiple threads of the client.

[0059] Referring to FIG. 4, after the user calls a thread enabled by the client on the client to initiate a target transaction through the personal user account, the thread, when executed, can cause the client to acquire an available Nonce record for the target transaction from the Nonce list maintained on the blockchain and associated with the user account.

[0060] Since the Nonce list includes multiple Nonce records, multiple threads enabled by the client can all acquire available Nonce records from the Nonce list for initiated

transactions, and the user can use the personal user account to simultaneously initiate multiple transactions through the client. Therefore, the number of Nonce records in the Nonce list can indicate the transaction concurrency capability of the personal user account.

For example, if the Nonce list includes four Nonce records, the user can simultaneously initiate four transactions through the user account.

[0061] Accordingly, in practical applications, the entity operating the blockchain can flexibly specify the number of Nonce records included in the Nonce list based on the performance of the client. Alternatively, the client can actively report the performance thereof to the blockchain system, and the entity operating the blockchain can flexibly specify the number of Nonce records included in the Nonce list based on the client’s report. For example, if the performance of the client indicates that the client can simultaneously enable four threads to initiate transactions, when the Nonce list is created for the user account logging in the client, four available Nonce records can be added to the Nonce list.

[0062] In some embodiments, the client can“download” the Nonce list maintained on the blockchain to the local in advance for maintenance during an initialization phase of the client. For example, when the client is started, or is disconnected from a node in the blockchain and is to be reconnected, an initialization operation is required. In such situations, when the client receives an initialization instruction (e.g., a start instruction, a reconnection instruction, and the like) triggered by the user for the client, the client can establish a connection with a node in the blockchain in response to the initialization instruction, access a distributed database of the blockchain based on the connection to acquire the Nonce list maintained in the blockchain, and then store and maintain the acquired Nonce list locally. When the thread on the client acquires an available Nonce record for the target transaction, the available Nonce record can be acquired from the Nonce list maintained locally.

[0063] In this way, the client can avoid subsequent data exchange with the node on the blockchain. For example, the client can avoid reading data from the Nonce list maintained in the blockchain to acquire the available Nonce record for the target transaction, thereby improving the processing performance.

[0064] In some embodiments, for the Nonce list maintained locally at the client, the client adds an“available” mark to each Nonce record in the Nonce list. For example, referring to FIG. 5, still taking the l6-byte composite structure of the Nonce record shown in FIG. 4 as an example, a l-byte Available field is added to the Nonce record in the Nonce list. When the Available field is T, the Nonce record is“available”; and when the Available field is F, the Nonce record is“unavailable”.

[0065] In some embodiments, when the thread on the client acquires the available Nonce record for the target transaction initiated by the user from the Nonce list maintained locally at the client, a Nonce record can be randomly selected from all the Nonce records marked as “available” in the Nonce list to serve as the available Nonce record.

[0066] In some embodiments, after the thread on the client acquires the available Nonce record for the target transaction initiated by the user from the Nonce list maintained locally at the client, the mark included in the available Nonce record can be modified and updated to be an“unavailable” mark, so as to mark the available Nonce record as unavailable.

[0067] In some embodiments, after the thread on the client acquires the available Nonce record for the target transaction, the acquired available Nonce record can be added to the target transaction. For example, referring back to FIG. 4, after acquiring the available Nonce record for the target transaction, the client can package the transaction body of the target transaction and the available Nonce record, and then prompt the user to sign the entire packaged data [transaction body, Nonce record] based on the held private key, such that the Nonce record in this transaction cannot be tampered with.

[0068] Further, after the thread on the client adds the acquired available Nonce record to the target transaction, the client can submit the target transaction to the blockchain. For example, the target transaction is submitted to a node accessed by the client, or the target transaction is broadcast to some or all nodes of the blockchain. The way through which the client submits the target transaction to the blockchain usually depends on a consensus mechanism used by the blockchain, and is not limited in the specification.

[0069] After receiving the target transaction submitted by the client, a node in the blockchain can first initiate a consensus processing for the target transaction based on a consensus algorithm used in the blockchain. The consensus algorithm used in the blockchain and the consensus processing for the target transaction based on the consensus algorithm are not described in detail in the specification.

[0070] After a consensus is passed with respect to the target transaction, the node in the blockchain further initiates a validity detection for the target transaction. In some

embodiments, the validity detection for the target transaction may include at least a validity detection of a signature included in the target transaction, and/or a replay attack detection for the target transaction.

[0071] In some embodiments, the node in the blockchain first verifies the signature of the target transaction based on a public key associated with the private key held by the user. If the signature verification of the target transaction fails, the target transaction is determined as an invalid transaction, and the node returns a prompt message of the transaction failure to the user through the client. If the signature of the target transaction passes the verification, the node performs the replay attack detection on the target transaction based on the available Nonce record included in the target transaction and the Nonce list maintained in the blockchain and associated with the personal user account.

[0072] In some embodiments, still referring to FIG. 4, the node compares the Nonce record included in the target transaction with the Nonce records in the Nonce list maintained in the blockchain and associated with the user account to determine whether the Nonce record included in the target transaction matches any Nonce record in the Nonce list. For example, the node compares the Nonce record included in the target transaction with the Nonce records in the Nonce list one by one. If the Nonce record included in the target transaction matches any Nonce record in the Nonce list, the target transaction is determined to pass the replay attack detection, and the node can accept the target transaction. The Nonce record in the Nonce list, which matches the Nonce record included in the target transaction is referred to as a target Nonce record for ease of description.

[0073] In some embodiments, after the target transaction is accepted, the node

monotonically increases the Nonce value in the target Nonce record based on a preset increment, where the preset increment is customized based on actual requirements. For example, the preset increment is an integer such as 1, 2, 3, etc., and the node increases the Nonce value in the matched target Nonce record in the Nonce list by the integer after the target transaction is accepted.

[0074] In this way, if the target transaction is resubmitted to the blockchain after being accepted, since the Nonce value in the target Nonce record (matching the available Nonce record included in the target transaction) in the Nonce list has been updated, the available Nonce record in the resubmitted target transaction cannot match the Nonce record in the Nonce list during the replay attack detection. Therefore, the resubmitted target transaction cannot be accepted again, thus effectively avoiding replay attacks caused by resubmitting same target transactions to the blockchain.

[0075] In some embodiments, after the target transaction is accepted, a prompt message that the target transaction is accepted is returned to the client. The client determines whether the prompt message returned by the node that the target transaction is accepted is received after submitting the target transaction to the blockchain.

[0076] If the prompt message that the target transaction is accepted is determined to be received, in some embodiments, the Nonce value in the available Nonce record acquired for the target transaction from the Nonce list maintained locally at the client is monotonically increased based on the preset increment. For example, the Nonce value in the available Nonce record is also increased by the integer to synchronize with the content in the Nonce list maintained in the blockchain.

[0077] Further, if the prompt message that the target transaction is accepted is determined to be received, since the available Nonce record has previously been marked as“unavailable,” the value of the Available field of the available Nonce record can be set to“T” after the Nonce value in the available Nonce record is monotonically increased based on the preset increment.

[0078] Through the above embodiments, after each transaction initiated by the user on the client through the user account is successfully accepted, the Nonce value in the Nonce record used by the transaction is monotonically increased. Therefore, if the transaction is

resubmitted to the blockchain, the transaction cannot pass a validity detection by the blockchain system. Accordingly, replay attacks initiated by submitting repeated transactions to the blockchain can be effectively avoided.

[0079] In addition, the Nonce list maintained in the blockchain and associated with the user account includes multiple available Nonce records. So the user can initiate multiple valid transactions including available Nonce records on the client through the user account, and the multiple transactions can pass the replay attack detection conducted by the blockchain system. Accordingly, the transaction concurrency capability of the user account can be significantly improved.

[0080] Similar to the above method embodiments, the specification also provides an apparatus for processing blockchain-based transactions according to some embodiments. The embodiments of the apparatus for processing blockchain-based transactions can be

implemented by an electronic device. The apparatus embodiments may be implemented by software, hardware, or a combination of hardware and software. Taking the software implementation as an example, a logical apparatus is formed by reading corresponding computer program instructions in a non-volatile storage into a memory through one or more processors of the electronic device. In a hardware implementation, FIG. 6 shows a hardware structure of an electronic device where the apparatus for processing blockchain-based transactions is located. The electronic device where the apparatus in the embodiment is located may include other hardware according to the actual functions thereof, besides a processor, a memory, a network interface and a non-volatile storage shown in FIG. 6, and descriptions are omitted herein. [0081] FIG. 7 is a block diagram of an apparatus for processing blockchain-based transactions according to some embodiments. Referring to FIG. 7, the blockchain-based transaction processing apparatus 70 can be implemented by the electronic device shown in FIG. 6, and includes an acquisition module 701, an adding module 702, and a submitting module 703.

[0082] The acquisition module 701 may be configured to acquire an available Nonce record for a target transaction initiated by a user through a user account from a Nonce list maintained in a blockchain and associated with the user account, where the Nonce list includes multiple Nonce records, and a Nonce record includes an auxiliary parameter and a Nonce value.

[0083] The adding module 702 may be configured to add the acquired available Nonce record to the target transaction.

[0084] The submitting module 703 may be configured to submit the target transaction to the blockchain, for a node in the blockchain to compare the available Nonce record in the target transaction with the Nonce records in the Nonce list, and accept the target transaction in response to that the available Nonce record matches any target Nonce record in the Nonce list.

[0085] In some embodiments, the Nonce value in the target Nonce record is monotonically increased based on a preset increment in response to that the target transaction is accepted.

[0086] In some embodiments, the acquisition module 701 is further configured to: before acquiring an available Nonce record from a Nonce list for a target transaction initiated by a user through a user account, acquire the Nonce list maintained in the blockchain in response to an initialization instruction for the client, and maintain the acquired Nonce list locally at the client.

[0087] In some embodiments, the acquisition module 701 is configured to: acquire an available Nonce record from the Nonce list maintained locally at the client for a target transaction initiated by a user through a user account.

[0088] In some embodiments, the Nonce records in the Nonce list maintained locally at the client are marked as available by default. The acquisition module 701 is further configured to: after acquiring the available Nonce record from the Nonce list maintained locally at the client for the target transaction, mark the available Nonce record as unavailable in the Nonce list. [0089] In some embodiments, the acquisition module 701 is further configured to:

determine whether a prompt message returned by the node is received that the target transaction is accepted; if so, monotonically increase the Nonce value in the available Nonce record based on a preset increment, and re-mark the available Nonce record as available in the Nonce list after the Nonce value is monotonically increased.

[0090] In some embodiments, the client is a multi-threaded client. In some embodiments, the number of Nonce records in the Nonce list indicates a transaction concurrency capability of the user account.

[0091] In some embodiments, the auxiliary parameter includes a version identifier of the Nonce list. In some embodiments, the auxiliary parameter further includes an index identifier of the Nonce record.

[0092] FIG. 8 is a block diagram of an apparatus for processing blockchain-based transactions according to other embodiments. Referring to FIG. 8, the blockchain-based transaction processing apparatus 80 can also be implemented by the electronic device shown in FIG. 6, and includes a receiving module 801, a matching module 802, and an accepting module 803.

[0093] The receiving module 801 may be configured to receive a target transaction initiated by a user through a user account and sent by a client, where the target transaction comprises an available Nonce record acquired from a Nonce list maintained in a blockchain and associated with the user account, the Nonce list includes multiple Nonce records, and a Nonce record includes an auxiliary parameter and a Nonce value.

[0094] The matching module 802 may be configured to compare the available Nonce record with the Nonce records in the Nonce list maintained in the blockchain and associated with the user account to determine whether the available Nonce record matches any target Nonce record in the Nonce list.

[0095] The accepting module 803 may be configured to accept the target transaction in response to that the available Nonce record matches any target Nonce record in the Nonce list.

[0096] In some embodiments, the Nonce value in the target Nonce record is monotonically increased based on a preset increment when the target transaction is accepted.

[0097] In some embodiments, the accepting module 803 is further configured to: monotonically increase the Nonce value of the target Nonce record based on the preset increment in response to that the available Nonce record matches any target Nonce record in the Nonce list; and return a notification message to the client that the target transaction is accepted.

[0098] In some embodiments, the auxiliary parameter includes a version identifier of the Nonce list. In some embodiments, the auxiliary parameter further includes an index identifier of the Nonce record.

[0099] For details of the implementation process of the functions and actions of the modules in the foregoing apparatus, reference is made to the implementation process of the corresponding steps in the foregoing methods, and the details are omitted herein.

[00100] The apparatus embodiments substantially correspond to the method embodiments, and reference may be made to the descriptions of the method embodiments. The apparatus embodiments described above are merely schematic, where the modules illustrated as separate components may be or may not be physically separated, and the components displayed as modules may be or may not be physical modules, that is, the components may be positioned at one place or may be distributed on multiple network modules. The objectives of the embodiments of the specification may be fulfilled by selecting part or all of the modules according to actual needs. Those of ordinary skill in the art can understand and implement the apparatus without any creative effort.

[00101] The systems, apparatus, or modules illustrated in the above embodiments may be implemented by a computer chip, an entity, or a product having some functions. An implementation of an apparatus is a computer, and examples of the computer may include a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an E-mail transceiver, a game console, a tablet computer, a wearable device, or a combination thereof.

[00102] Similar to the above method embodiments, the specification further provides an electronic device according to some embodiments. The electronic device includes a processor, and a memory storing machine executable instructions, where the processor is usually connected with the memory by an internal bus. In some embodiments, the electronic device further includes an external interface to communicate with other devices or components.

[00103] In some embodiments, by reading and executing the machine executable instructions stored in the memory and associated with control logics for processing blockchain-based transactions, the processor is configured to: acquire an available Nonce record for a target transaction initiated by a user through a user account from a Nonce list maintained in a blockchain and associated with the user account, where the Nonce list includes multiple Nonce records, and a Nonce record includes an auxiliary parameter and a Nonce value; add the acquired available Nonce record to the target transaction; and submit the target transaction to the blockchain, for a node in the blockchain to compare the available Nonce record in the target transaction with the Nonce records in the Nonce list, and accept the target transaction in response to that the available Nonce record matches any target Nonce record in the Nonce list. In some embodiments, the Nonce value in the target Nonce record is monotonically increased based on a preset increment in response to that the target transaction is accepted.

[00104] In some embodiments, by reading and executing the machine executable instructions stored in the memory and associated with control logics for processing blockchain-based transactions, the processor is configured to: before acquiring an available Nonce record from a Nonce list for a target transaction initiated by a user through a user account, acquire the Nonce list maintained in the blockchain in response to an initialization instruction for a client, and maintain the acquired Nonce list locally at the client.

[00105] In some embodiments, by reading and executing the machine executable instructions stored in the memory and associated with the control logics for processing the blockchain-based transactions, the processor is configured to: acquire an available Nonce record for a target transaction initiated by a user through a user account from a Nonce list maintained locally at the client.

[00106] In some embodiments, the Nonce records in the Nonce list maintained locally at the client are marked as available by default. By reading and executing the machine executable instructions stored in the memory and associated with the control logics for processing the blockchain-based transactions, the processor is configured to: after acquiring the available Nonce record for the target transaction from the Nonce list maintained locally at the client, mark the available Nonce record as unavailable in the Nonce list.

[00107] In some embodiments, by reading and executing the machine executable instructions stored in the memory and associated with the control logics for processing the blockchain-based transactions, the processor is configured to: determine whether a prompt message returned by the node is received that the target transaction is accepted; and if so, monotonically increase the Nonce value in the available Nonce record based on a preset increment, and re-mark the available Nonce record as available in the Nonce list after the Nonce value is monotonically increased.

[00108] Similar to the above method embodiments, the specification further provides an electronic device according to other embodiments. The electronic device includes a processor, and a memory storing machine executable instructions, where the processor is usually connected with the memory by an internal bus. In some embodiments, the electronic device further includes an external interface to communicate with other devices or components.

[00109] In some embodiments, by reading and executing the machine executable

instructions stored in the memory and associated with control logics for processing

blockchain-based transactions, the processor is configured to: receive a target transaction initiated by a user through a user account and sent by a client, where the target transaction comprises an available Nonce record acquired from a Nonce list maintained in a blockchain and associated with the user account, the Nonce list includes multiple Nonce records, and a Nonce record includes an auxiliary parameter and a Nonce value; compare the available Nonce record with the Nonce records in the Nonce list maintained in the blockchain and associated with the user account; and accept the target transaction in response to that the available Nonce record matches any target Nonce record in the Nonce list. In some

embodiments, the Nonce value in the target Nonce record is monotonically increased based on a preset increment in response to that the target transaction is accepted.

[00110] In some embodiments, by reading and executing the machine executable

instructions stored in the memory and associated with the control logics for processing the blockchain-based transactions, the processor is configured to: monotonically increase the Nonce value of the target Nonce record based on the preset increment in response to that the available Nonce record matches any target Nonce record in the Nonce list; and return a notification message to the client that the target transaction is accepted.

[00111] Other embodiments of the specification can be obvious to those skilled in the art based on the specification and embodiments of the specification disclosed herein. The specification is intended to cover any variations, uses, or adaptations of the embodiments following the general principles and including such departures from the specification as come within known or customary practice in the art. It is intended that the specification and examples be considered as exemplary only, with a scope and spirit of the specification being indicated by the following claims.

[00112] It will be appreciated that the specification is not limited to the exact construction that has been described above and illustrated in the accompanying drawings, and that various modifications and changes can be made without departing from the scope thereof. It is intended that the scope of the specification be limited by the appended claims.

[00113] The foregoing descriptions are merely some embodiments of the specification, but are not intended to limit the specification. Any modification, equivalent replacement, or improvement made without departing from the spirit and principle of the specification should fall within the protection scope of the specification.