几种典型区块链共识机制的安全性分析

摘要/Abstract

摘要： 区块链技术源于比特币的出现，随着比特币和其他数字货币在金融市场的火爆，区块链技术得到了各界的广泛关注。共识机制是区块链技术的核心，区块链上的账本和数据都是共识机制的产物，一旦共识机制的安全性出现问题，区块链的可用性和信用度都将受到严重的打击。本文从共识机制的安全性出发，首先介绍区块链和共识机制的概念，然后对3种典型的区块链共识机制进行对比分析：通过逐一研究针对3种共识机制的攻击方法，对它们的一致性和敌手模型进行对比。最后，指出了目前区块链共识机制安全性分析上的局限性，并明确了未来研究共识机制安全性的方向。

关键词: 区块链, 共识机制, 安全性分析

Abstract: Blockchain technology originated from the emergence of bitcoin. With the popularity of bitcoin and other digital currencies in the financial market, blockchain technology has attracted wide attention from all circles. The consensus mechanism is the core of blockchain technology, and the ledger and data on the blockchain are the products of the consensus mechanism. Once the safety of the consensus mechanism is in question, the availability and credibility of blockchain will be seriously hit. Starting from the security of the consensus mechanism, this paper first introduces the concepts of blockchain and consensus mechanism, and then makes a comparative analysis of three classic blockchain consensus mechanisms. By studying the attack methods of the three consensus mechanisms one by one, their consistency and adversary models are compared. Finally, the limitations of current consensus mechanism safety analysis are pointed out, and the direction of future research on consensus mechanism safety is determined.

Key words: blockchain, consensus mechanism, safety analysis

中图分类号:

TP309

邓铭巍, 欧嵬, 杨杰. 几种典型区块链共识机制的安全性分析[J]. 计算机与现代化, 2020, 0(06): 34-.

DENG Ming-wei, OU Wei, YANG Jie. Safety Analysis of Three Classic Blockchain Consensus Mechanisms[J]. Computer and Modernization, 2020, 0(06): 34-.

参考文献

［1］ NAKAMOTO S. Bitcoin: A Peer-to-Peer Electronic Cash System［DB/OL］. (2008-12-10)［2019-07-25］. https://bitcoin.org/bitcoin.pdf.
［2］杨宇光,张树新. 区块链共识机制综述［J］. 信息安全研究, 2018,4(4):369-379.
［3］ BEN SASSON E, CHIESA A, TROMER E, et al. Succinct non-interactive zero knowledge for a von Neumann architecture［C］// Proceedings of the 23rd USENIX Security Symposium. 2014:781-796.
［4］ LUU L, NARAYANAN V, ZHENG C D, et al. A secure sharding protocol for open blockchains［C］// Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security. 2016:17-30.
［5］ BEN SASSON E, CHIESA A, GARMAN C, et al. Zerocash: Decentralized anonymous payments from bitcoin［C］// Proceedings of the 2014 IEEE Symposium on Security and Privacy. 2014:459-474.
［6］ EYAL I, GENCER A E, SIRER E G, et al. Bitcoin-NG: A scalable blockchain protocol［C］// Proceedings of the 13th Usenix Conference on Networked Systems Design and Implementation. 2016:45-59.
［7］朱建明,丁庆洋,高胜. 基于许可链的SWIFT系统分布式架构［J］. 软件学报, 2019,30(6):1594-1613.
［8］史锦山,李茹. 物联网下的区块链访问控制综述［J］. 软件学报, 2019,30(6):1632-1648.
［9］范贤丽,范春晓,吴岳辛. 基于区块链和IPFS技术实现粮食供应链隐私信息保护［J］. 应用科学学报, 2019,37(2):179-190.
［10］余益民,陈韬伟,段正泰,等. 基于区块链的政务信息资源共享模型研究［J］. 电子政务, 2019(4):58-67.
［11］TokenClub研究院. 区块链安全研究报告［DB/OL］. (2018-08-20)［2019-07-25］. https://max.book118.com/html/2018/0925/5201103323001314.shtm.
［12］舒航,张高煜,赵厚宝,等. 区块链技术研究综述［J］. 福建电脑, 2019,35(1):1-3.
［13］GARAY J, KIAYIAS A, LEONARDOS N. The bitcoin backbone protocol: Analysis and applications［C］// Proceedings of the 34th Annual International Conference on the Theory and Applications of Cryptographic Techniques. 2015:281-310.
［14］LAMPORT L, SHOSTAK R, PEASE M. The Byzantine generals problem［J］. ACM Transactions on Programming Languages and Systems, 1982,4(3):382-401.

［15］CASTRO M, LISKOV B. Practical Byzantine fault tolerance［C］// Proceedings of the 3rd Symposium on Operating Systems Design and Implementation. 1999.

［16］韩璇,刘亚敏. 区块链技术中的共识机制研究［J］. 信息网络安全, 2017(9):147-152.
［17］袁勇,王飞跃. 区块链技术发展现状与展望［J］. 自动化学报, 2016,42(4):481-494.
［18］张偲. 区块链技术原理、应用及建议［J］. 软件, 2016,37(11):51-54.
［19］唐长兵,杨珍,郑忠龙,等. PoW共识算法中的博弈困境分析与优化［J］. 自动化学报, 2017,43(9):1520-1531.
［20］SALEH F. Blockchain Without Waste: Proof-of-Stake［DB/OL］. (2018-06-07)［2019-07-25］. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3183935.
［21］夏清,张凤军,左春. 加密数字货币系统共识机制综述［J］. 计算机系统应用, 2017,26(4):1-8.
［22］刘懿中,刘建伟,张宗洋,等. 区块链共识机制研究综述［J］. 密码学报, 2019,6(4):395-432.
［23］DOUCEUR J R. The sybil attack［C］// Proceedings of the 1st International Workshop on Peer-to-Peer Systems. 2002:251-260.
［24］ROWAIHY H, ENCK W, MCDANIEL P, et al. Limiting sybil attacks in structured P2P networks［C］// Proceedings of the 26th IEEE International Conference on Computer Communications. 2007:2596-2600.
［25］BORISOV N. Computational puzzles as sybil defenses［C］// Proceedings of the 6th IEEE International Conference on Peer-to-peer Computing. 2006:171-176.
［26］TOSH D K, SHETTY S, LIANG X P, et al. Security implications of blockchain cloud with analysis of block withholding attack［C］// Proceedings of the 17th IEEE/ACM International Symposium on Cluster, Cloud and Grid Computing. 2017:458-467.
［27］ROSENFELD M. Analysis of hashrate-based double spending［J］. arXiv preprint arXiv:1402.2009, 2014.
［28］EYAL I, SIRER E G. Majority is not enough: Bitcoin mining is vulnerable［C］// Proceedings of 2014 International Conference on Financial Cryptography and Data Security. 2014:436-454.
［29］斯雪明,徐蜜雪,苑超. 区块链安全研究综述［J］. 密码学报, 2018,5(5):458-469.

[1]	李俊晓1, 张小琳1, 石静2. 基于区块链增强的车辆边缘计算网络安全数据存储和共享[J]. 计算机与现代化, 2024, 0(07): 69-75.
[2]	朱克1, 玄佳兴2, 薛文昊2. 一种基于聚合与关联智能合约的电子证照访问控制方法[J]. 计算机与现代化, 2024, 0(06): 103-108.
[3]	柴荔, 王萧, 龚嘉豪, 汪洋, 吉顺慧, 张鹏程. 面向供应链的共识算法研究综述[J]. 计算机与现代化, 2023, 0(11): 22-27.
[4]	杨波, 徐胜超. 基于SRv6服务链的云网专线场景安全防护方法[J]. 计算机与现代化, 2023, 0(08): 107-111.
[5]	吕志星, 于晖, 康凯, 李腾昌, 杜国利. 基于节点特征模型的电力区块链竞价交易机制[J]. 计算机与现代化, 2023, 0(08): 112-118.
[6]	钟林峰, 李彦锋, 张桂鹏, 刘文印. 基于区块链的去中心化网络购物数据共享方案[J]. 计算机与现代化, 2023, 0(07): 61-68.
[7]	查凯金, 王志波, 何月顺, 徐洪珍. 区块链安全保护研究综述[J]. 计算机与现代化, 2023, 0(06): 110-117.
[8]	姜宇航, 张新有. 基于以太坊的医疗健康数据共享系统[J]. 计算机与现代化, 2023, 0(02): 110-115.
[9]	冯云霞, 陈泓达, 牛云鹤. 基于中继的联盟链跨链通信系统[J]. 计算机与现代化, 2023, 0(02): 121-126.
[10]	王煊, 王志伟, . 基于SM9盲签名的OpenID协议[J]. 计算机与现代化, 2022, 0(12): 111-117.
[11]	张斌, 李大鹏, 蒋锐, 王小明. 面向区块链溯源的链下扩展存储方案[J]. 计算机与现代化, 2022, 0(10): 106-112.
[12]	张天喜, 王利朋, 周春天, 杨艳艳, 李晓冲. 物联网中基于区块链的密态内容审计方案[J]. 计算机与现代化, 2022, 0(03): 30-36.
[13]	张天喜, 王利朋, 付俊俊, 崔驰, 靳梦璐. 基于区块链的无证书签密方案[J]. 计算机与现代化, 2022, 0(01): 120-126.
[14]	段鹏飞, 兰茹. 基于区块链的网络级移动目标防御系统设计[J]. 计算机与现代化, 2021, 0(08): 121-126.
[15]	张艳, 杨芳, 杨蕾, 韩奎国, 李辉. 基于知识图谱的区块链技术及电力行业应用分析[J]. 计算机与现代化, 2020, 0(12): 55-60.