为广大币圈朋友提供币圈基础入门专业知识!
当前位置首页 > 比特币基础> 正文

政策解读区块链征集意见稿怎么写,政策解读区块链征集意见稿范文

发布时间:2023-12-08-20:30:00 来源:网络 比特币基础 区块   意见   政策

政策解读区块链征集意见稿怎么写,政策解读区块链征集意见稿范文

近年来,区块链技术发展迅速,受到了世界各国的广泛关注。为了更好地推动区块链技术的发展,政府发布了《政策解读区块链征集意见稿》,引起了社会各界的广泛关注。本文将从三个关键词:区块链发展、政策解读、征集意见稿,来深入剖析政策解读区块链征集意见稿的相关内容,为政策解读区块链征集意见稿提供更多的参考。

一、区块链发展

区块链技术是一种分布式账本技术,它通过一种分散的、可信的和去中心化的方式来管理和记录交易信息,可以有效地解决传统交易中的信任问题。区块链技术的发展给社会带来了巨大的变革,在金融、物流、政府管理等领域都发挥着重要作用。政府非常重视区块链技术的发展,不断推出相关的政策,以推动区块链的发展。

二、政策解读

政策解读是政府政策的重要组成部分,它负责将政策解释给社会各界,使政策能够更好地落实到社会实践中。政府发布的《政策解读区块链征集意见稿》,旨在解释区块链技术发展的相关政策,更好地推动区块链技术的发展。具体而言,政策解读包括对区块链技术发展的法律法规、政策和规范的解释,以及对区块链技术发展的相关问题的解答等。

三、征集意见稿

征集意见稿是政府政策的重要组成部分,它是政府政策的重要参考依据。政府发布的《政策解读区块链征集意见稿》,就是希望通过征集社会各界的意见,以便更好地推动区块链技术的发展。社会各界可以提出对区块链技术发展的相关建议,比如发展趋势、发展难点、发展模式等,以便政府能够更好地推动区块链技术的发展。

以上就是本文关于政策解读区块链征集意见稿的相关内容,通过介绍区块链发展、政策解读和征集意见稿,可以更好地了解政策解读区块链征集意见稿的相关内容,为政策解读区块链征集意见稿提供更多的参考。


请查看相关英文文档

1. Blockchain Policy

The full text of the 14th Five-Year Plan for National Economic and Social Development of the People's Republic of China and the Outline of Long-term Goals for 2035 were officially released on the 5th The second section of Chapter 15 of the chapter shows that emerging digital industries such as artificial intelligence, big data, blockchain, cloud computing, and network security should be cultivated and strengthened, and the industrial level of communication equipment, core electronic components, and key software should be improved. Promote blockchain technology innovation such as smart contracts, consensus algorithms, encryption algorithms, and distributed systems. Legal basis: Article 15 of the "The Fourteenth Five-Year Plan for National Economic and Social Development of the People's Republic of China and the Outline of Long-term Goals for 2035" focuses on key areas such as high-end chips, operating systems, key algorithms for artificial intelligence, and sensors. Accelerate the advancement of research and development breakthroughs and iterative applications of basic theories, basic algorithms, equipment and materials. Strengthen the integrated research and development of general-purpose processors, cloud computing systems and software core technologies. Accelerate the deployment of cutting-edge technologies such as quantum computing, quantum communications, neural chips, and storage, strengthen cross-innovation in basic disciplines such as information science, life sciences, and materials, support the development of innovation consortiums such as digital technology open source communities, and improve open source intellectual property and legal systems. Encourage enterprises to open up software source code, hardware design and application services. Cultivate and expand emerging digital industries such as artificial intelligence, big data, blockchain, cloud computing, and network security, and improve the level of communications equipment, core electronic components, key software, and other industries. Build an ecosystem based on application scenarios and industry, and carry out pilot demonstrations in key areas such as smart transportation, smart logistics, smart energy, and smart medical care. Encourage enterprises to open search, e-commerce, social and other data and develop third-party big data service industries. Promote the healthy development of the sharing economy and platform economy.

2. What is the country’s policy on blockchain?

Currently, the country has a recognized attitude towards blockchain technology and supports and encourages the research and development of independent blockchain technology. Yes, the country’s expectation for the blockchain industry is to be supported by specific implementation and application value. The future expectation for blockchain is that blockchain will become a breakthrough for independent innovation of core technologies. And blockchain is legal. Blockchain is a term in the field of information technology. In essence, it is a shared database, and the data or information stored in it has the characteristics of being unforgeable, leaving traces throughout the process, traceable, open and transparent, and collectively maintained.
1. The composition of the blockchain system:
1. Data layer
2. Network layer
3. Consensus layer
4. Incentive layer
5. Contract layer
6. Application layer
2. Types of blockchain
1. Public blockchain
2. Industry blockchain
3. Private blockchain
3. Blockchain Features
1. Decentralization. Blockchain technology does not rely on additional third-party management agencies or hardware facilities, and there is no central control. In addition to the self-contained blockchain itself, each node realizes self-verification, transmission and management of information through distributed accounting and storage. Decentralization is the most prominent and essential feature of blockchainfeature.
2. Openness. The foundation of blockchain technology is open source. In addition to the private information of the transaction parties being encrypted, the data of the blockchain is open to everyone. Anyone can query the blockchain data and develop related applications through the public interface. Therefore, the entire System information is highly transparent.
Legal basis:
"Civil Code of the People's Republic of China"
Article 123 Civil subjects enjoy intellectual property rights in accordance with the law. Intellectual property rights are the exclusive rights enjoyed by obligees in accordance with the law with respect to the following objects:
(1) Works;
(2) Inventions, utility models, and designs;
(3) Trademarks;
( 4) Geographical indications;
(5) Trade secrets;
(6) Integrated circuit layout designs;
(7) New plant varieties;
(8) Other objects specified by law

3. Is there any relevant law that recognizes the authenticity of blockchain evidence?

On January 21, the Supreme People’s Court issued the “Regulations on Several Issues Concerning the Online Handling of Cases by People’s Courts (Solicitation "Opinion Draft", which provides detailed explanations on the effectiveness of blockchain evidence, blockchain evidence review rules, authenticity review of data before being uploaded to the chain, and blockchain evidence enhancement identification.

The regulations have 36 articles in total and clearly state that the electronic materials and electronic data submitted by the parties as evidence shall be determined by the People’s Court to be authentic in accordance with relevant laws and judicial interpretations after the parties have presented evidence and cross-examined them. , relevance and legitimacy.

Article 14 [Effectiveness of Blockchain Evidence] If the evidence submitted by the party is stored through blockchain technology and is consistent after technical verification, it is presumed that the evidence material has not been tampered with after being uploaded to the chain. , the People's Court may confirm the authenticity of the evidence, unless there is contrary evidence sufficient to overturn it.

Article 15 [Blockchain Evidence Review Rules] If a party objects to blockchain evidence and has reasonable grounds, the People’s Court shall mainly review the following content:

(1) Whether the certificate deposit platform complies with the relevant regulations of the relevant national departments on providing blockchain certificate deposit services;

(2) Whether the parties have an interest in the certificate deposit platform and use technical means to improperly interfere with evidence collection , certificate storage process;

(3) Whether the information system of the certificate storage platform meets national or industry standards for cleanliness, safety, and availability;

(4) Certificate storage technology and whether the process complies with the requirements of the "Technical Specifications for Electronic Data Storage" regarding system environment, technical security, encryption methods, data transmission, information verification, etc.

Article 16 [Authenticity review of data before uploading to the chain] If a party proposes that the data is no longer authentic when it is uploaded to the chain and provides evidence to prove it or explains the reasons, the people's court shall review it. .

Based on the circumstances of the case, the people's court may require the party that provides the blockchain evidence to provide evidence to prove the authenticity of the on-chain evidence data, or to explain the specific source and generation machine of the on-chain evidence data.Production, storage process, third-party notarization and witnessing, associated verification data, etc. If the party concerned cannot provide evidence or make a reasonable explanation, and the blockchain evidence cannot be mutually corroborated with other evidence, the people's court will not confirm the authenticity of the evidence.

Article 17 [Reinforcement and Identification of Blockchain Evidence] The parties may apply for a person with specialized knowledge to provide opinions on technical issues related to the storage of evidence on the blockchain platform. The People's Court may, based on the application of the parties or ex officio, entrust the identification of the authenticity of the evidence stored in the blockchain or obtain other relevant evidence for verification.

Yibaoquan has been deeply involved in the underlying R&D and application innovation of blockchain technology since 2014, and through the integration of judicial channels, it has launched application scenarios such as preservation chain, gentleman signature, micro-copyright, and Zhongzhengbao. . And with its professional, legal, compliant and safe one-stop service, it has won many national honors. Under the wave of digitalization, data security may become the core competitiveness. With the country's vigorous development of blockchain, blockchain certificates to ensure data security will become the general trend. Yibaoquan Blockchain Certificate Deposit and Preservation Center will help more companies and institutions effectively protect data security through blockchain certificate deposit, in terms of blockchain certificate deposit, electronic contracts, Internet justice, intellectual property protection, etc., completely subverting the traditional model. , leading the comprehensive upgrade of digital office.

4. What are the policies to promote the development of blockchain?

Legal analysis: On October 25, national leaders presided over a collective study meeting of the Political Bureau of the Central Committee and listed blockchain as An important breakthrough for independent innovation technology.

In the 19 days since then, local governments have issued a total of 44 related policies to encourage the development of blockchain, involving 20 provinces.

Government affairs, medical care, finance and smart cities have become the areas where local governments value blockchain implementation most.

In the process of actively promoting the implementation of blockchain, local governments are also trying to combine their own advantages and local characteristics. For example, in Shanxi, energy has become a key area for blockchain implementation.

Legal basis: "The Fourteenth Five-Year Plan for National Economic and Social Development of the People's Republic of China and the Outline of Long-term Goals for 2035" Article 3 Strategic Orientation: Promote high-quality development during the "14th Five-Year Plan" period , we must base ourselves on the new development stage, implement new development concepts, and build a new development pattern. Grasping the new development stage is the realistic basis for implementing the new development concept and building a new development pattern. Implementing the new development concept provides an action guide for grasping the new development stage and building a new development pattern. Building a new development pattern is to respond to the opportunities and challenges of the new development stage. , strategic choices to implement new development concepts. We must persist in deepening supply-side structural reforms, lead and create new demands with innovation-driven, high-quality supply, and improve the resilience of the supply system and its adaptability to domestic demand. We must establish an effective system to expand domestic demand, accelerate the cultivation of a complete domestic demand system, strengthen demand-side management, and build a strong domestic market. We must unswervingly advance reforms, remove institutional obstacles that restrict economic circulation, and promote the circulation of production factors and production, distribution, and circulation., All aspects of consumption are organically connected. We must unswervingly expand opening up, continue to deepen openness based on the flow of factors, steadily expand openness based on institutions, and rely on the domestic economic cycle system to form a strong gravitational field for global factor resources. It is necessary to strengthen the leading role of the domestic general cycle, improve the efficiency and level of the domestic general cycle with the international cycle, and realize the mutual promotion and advancement of the domestic and international dual cycles.

5. What is the website address of the Blockchain Information Service Registration Management System of the State Internet Information Office

Number of reads: 324; 1 comment source: Internet
October 19, National Internet Information The Office (hereinafter referred to as the "Network Information Office") issued a notice for public comment on the "Blockchain Information Service Management Regulations (Draft for Comments)" (hereinafter referred to as the "Draft for Comments"). In order to regulate blockchain information service activities, promote the healthy and orderly development of blockchain information services, protect the legitimate rights and interests of citizens, legal persons and other organizations, and safeguard national security and public interests, our office has formulated the "Draft for Comments" and is now submitting it to Public opinion solicitation.

The "Draft for Comments" has a total of twenty-three articles. Defines blockchain information services, which refers to “providing information services to the public through Internet websites, applications, etc. based on blockchain technology or systems”; implements the regulatory body “National Internet Information Office, in accordance with its responsibilities, is responsible for the national regional "Supervision, Management and Law Enforcement of Blockchain Information Services"; clarified the filing mechanism: "Registered blockchain information service providers shall fill in the report through the State Internet Information Office's blockchain information service filing management system within ten working days from the date of provision of services. "Blockchain Information Service Registration Form".

6. The collection of typical blockchain application cases in Shishi in 2022 is open

It was learned from the Shishi Industrial Information and Technology Bureau to accelerate the implementation of blockchain technology and promote the implementation of blockchain technology. With the deep integration of blockchain and economic and social development, the Ministry of Industry and Information Technology has recently launched the collection of typical blockchain application cases in 2022. Qualified enterprises in our city are required to submit the blockchain typical application case application form and electronic mail before September 22. Submit the materials to the Information Technology Department of the Municipal Industry and Information Technology Bureau.

It is understood that the collection directions for typical blockchain application cases in 2022 include: innovative technologies and products, blockchain + real economy, blockchain + people’s livelihood services, blockchain + smart cities, districts Blockchain + government services. The case reporting entity must be registered in the territory of the People's Republic of China, have independent legal person status, have good financial status in the past three years, and have no bad records in terms of quality, safety, credibility, and social responsibility. The typical blockchain application cases of the applicant should comply with the relevant national laws and regulations and relevant industrial policy requirements, must have been implemented and achieved results, have a high technical level, obvious industry or regional characteristics and mature business models, and have strong Representative, demonstrative, innovative and generalizable, it can fully reflect the technical characteristics and applicable scenarios of blockchain, and has strong reference significance and promotion value for related industries or enterprises.

Among them: innovative technologies and products focus on key blockchain technologies such as smart contracts, consensus algorithms, encryption algorithms, and distributed systems. We are soliciting blockchain underlying technology platforms and blocks focusing on alliance chains. Chain-as-a-service platform, cross-chain advertising platform and other products, as well as typical cases of integration and innovation of new generation information technology such as privacy computing, artificial intelligence, Internet of Things, big data and so on. Blockchain + Real Economy focuses on manufacturing, agriculture, commerce and other fields, and solicits applications for blockchain in industrial Internet, supply chain management, agricultural product traceability, cross-border trade and other fields to promote the effective connection between supply and demand in various industries and reduce loan financing for small and medium-sized enterprises. Threshold, explore typical cases of innovative development of digital economy. Blockchain + people's livelihood services focus on education, employment, elderly care, targeted poverty alleviation, medical health, commodity anti-counterfeiting, food safety, public welfare, social assistance and other fields, and solicit applications for blockchain in degree certificate management, medical data sharing, cold chain traceability Typical cases of such scenarios. Blockchain + Smart City focuses on the field of smart cities and collects typical cases that apply blockchain to smart governance, urban brain, digital epidemic prevention, urban emergency management, grassroots community services and other scenarios to effectively improve the level of intelligent and precise urban management. . Blockchain + Government Services focuses on the field of government services and collects typical cases of applying blockchain to government data sharing, electronic certificates and other scenarios to help build smart governments. Focusing on the judicial field, we collect typical cases that apply blockchain to electronic evidence preservation, judgment document execution and other scenarios to assist the construction of smart justice.

7. Interpretation of the "Blockchain Information Service Management Regulations" | "Tourism" laws can be followed

On January 10, 2019, the State Internet Information Office issued the "Blockchain Information Service Management Regulations" Regulations" (hereinafter referred to as the "Regulations"), and will come into effect on February 15, 2019. In order to help readers understand the content of the "Regulations" more clearly and straightforwardly, we have conducted a professional interpretation of this new regulation and compiled several highlights of the "Regulations": 1. It is clarified that the competent department of blockchain information services shall be responsible for Article 3: The supervision, management and law enforcement departments of blockchain information services are Internet Information Offices at all levels. 2. Clarify the definition of blockchain information service providers. According to Article 2 of the "Regulations", the so-called blockchain information services refer to the services provided to the public through Internet websites, applications, etc. based on blockchain technology or systems. Provide information services. Blockchain information service providers refer to entities or nodes that provide blockchain information services to the public, as well as institutions or organizations that provide technical support to entities that provide blockchain information services. According to the above definition, it can be seen that only information services such as news reports about blockchain and Bitcoin are provided to the public, such as mobile APPs such as Mars Finance and Bikuaibao, as long as the underlying technology for providing services is not based on blockchain technology or systems. It does not belong to the blockchain information services mentioned in the "Regulations" and is not subject to the "Regulations". And mobile apps or games such as "NetEase Planet", "Ni Shui Han", "A Chinese Ghost Story" and other mobile apps or games, in view of the fact that some of them make use of regionalBlockchain technology or systems are used to provide services to users, so their operators should be blockchain information service providers. In addition, in view of the above definition, even if an organization or institution itself does not provide blockchain information services to the public, as long as it provides technical support to blockchain information service subjects, it still belongs to blockchain information services. Providers are bound by the Regulations. This means that the more popular model of "overseas establishment of entities to issue coins on the chain + domestic companies to provide technical services" may come to an end. 3. Clarify the security management responsibilities of blockchain information service providers. The "Regulations" clearly stipulate the responsibilities of blockchain information service providers. Mainly include: 4. Clarify the filing responsibilities and related procedures of blockchain information service providers. In addition to the above responsibilities, blockchain information service providers should also perform filing responsibilities: 1. Within ten working days from the date of provision of services. Fill in the name, service category, service form, application field, server address and other information of the service provider through the Blockchain Information Service Registration Management System of the Cyberspace Administration of China and perform the registration procedures. 2. If the service items, platform address and other matters are changed, the change procedures shall be completed within five working days from the date of change. 3. If the service is terminated, the cancellation procedures should be completed thirty working days before the service is terminated, and proper arrangements should be made. 4. Those who engage in blockchain information services before the "Regulations" are promulgated (i.e. before January 10, 2019) shall comply with the regulations within twenty working days from the date when the "Regulations" come into effect (i.e. February 15, 2019). Complete relevant procedures. 5. Blockchain information service providers should log in to the blockchain information service filing management system within the specified time and provide relevant information to cooperate with the Internet Information Office in conducting regular inspections of filing information. Registration agencies: Internet information offices at all levels. Filing procedures: After the blockchain information service provider submits materials, the Internet Information Source Information Office shall file the materials within twenty working days, issue a filing number, and report to the State Internet Information Office through the Blockchain Information Service Filing Management System. The public publishes the filing information; if the materials are incomplete, the filing will not be granted, but the filing person shall be notified within twenty working days and the reasons shall be explained. The promulgation of the "Regulations" clarified the subject boundaries of blockchain information service providers, stipulated in detail the subject responsibilities of blockchain information service providers, and filled the current domestic regulatory gap in the field of blockchain information services. , marking the arrival of the "regulatory era" in the field of blockchain information services. For the blockchain information service industry, it means more orderly and healthy development; for practitioners who are currently engaged in or are interested in providing blockchain information services in the future, it means higher compliance requirements. .

8. How to detect the risk level of blockchain smart contracts

With the acceleration of digital transformation in Shanghai, blockchain technology has been deeply used in many fields such as government affairs, finance, logistics, and justice. application. In the process of application, not only new business forms and business models have been born, but also many security issues have arisen.Safety supervision is particularly important. As one of the important means of supervision, security evaluation has become a focus of many blockchain R&D manufacturers and application companies. This article talks about some of our exploration and practice on the blockchain compliance security assessment that everyone is concerned about.
1. Blockchain technology evaluation
Blockchain technology evaluation is generally divided into functional testing, performance testing and security evaluation.
1. Functional testing
Functional testing is a test of the basic functions supported by the underlying blockchain system, with the purpose of measuring the capabilities of the underlying blockchain system.
Blockchain functional testing is mainly based on GB/T 25000.10-2016 "System and Software Quality Requirements and Evaluation (SQuaRE) Part 10: System and Software Quality Model", GB/T 25000.51-2016 "System and Software Quality" Requirements and Evaluation (SQuaRE) Part 51: Quality Requirements and Testing Details for Ready to Use Software Products (RUSP)" and other standards to verify whether the software under test meets the requirements of relevant test standards.
Blockchain function testing specifically includes networking methods and communication, data storage and transmission, encryption module availability, consensus function and fault tolerance, smart contract function, system management stability, chain stability, privacy protection, and interoperability , account and transaction types, private key management solutions, audit management and other modules.
2. Performance testing
Performance testing is a type of test implemented and executed to describe the performance-related characteristics of the test object and evaluate it. Most of them are used in project acceptance evaluation to verify the established Whether the technical indicators are completed.
Blockchain performance testing specifically includes high-concurrency stress test scenarios, peak impact test scenarios, long-term stable operation test scenarios, query test scenarios and other modules.
3. Security Assessment
Blockchain security assessment mainly conducts security testing and evaluation of account data, cryptography mechanisms, consensus mechanisms, smart contracts, etc.
The main basis for blockchain security evaluation is "DB31/T 1331-2021 General Requirements for Blockchain Technology Security". You can also refer to standards such as "JR/T 0193-2020 Blockchain Technology Financial Application Assessment Rules" and "JR/T 0184-2020 Financial Distributed Ledger Technology Security Specifications" based on actual testing needs.
Blockchain security assessment specifically includes storage, network, computing, consensus mechanism, cryptography mechanism, timing mechanism, personal information protection, networking mechanism, smart contracts, services and access, etc.
2. Blockchain Compliance Security Assessment
Blockchain compliance security assessment generally includes “Blockchain Information Service Security Assessment”, “Network Security Level Protection Assessment” and “Special Funding Projects” "Acceptance Evaluation" three categories.
1. Blockchain Information Service Security Assessment
Blockchain Information Service Security Assessment is mainly based on the "Blockchain Information Service" issued by the State Internet Information Office on January 10, 2019.Information Service Management Regulations (hereinafter referred to as the "Regulations") and the national blockchain standard "Blockchain Information Service Security Specifications (Draft for Comments)".
The "Regulations" aim to clarify the information security management responsibilities of blockchain information service providers, standardize and promote the healthy development of blockchain technology and related services, avoid blockchain information service security risks, and provide blockchain Provide effective legal basis for the provision, use and management of information services. Article 9 of the "Regulations" states: Blockchain information service providers that develop and launch new products, new applications, and new functions must report to the national and provincial, autonomous region, and municipality Internet Information Offices for security assessment in accordance with relevant regulations.
The "Blockchain Information Service Security Specification" is a construction and preparation project led by the Institute of Information Engineering of the Chinese Academy of Sciences and jointly participated by Zhejiang University, China Electronics Technology Standardization Institute, Shanghai Information Security Evaluation and Certification Center and other units. National standards for evaluating the security capabilities of blockchain information services. The "Blockchain Information Service Security Specification" stipulates the security requirements that blockchain information service providers of alliance chains and private chains should meet, including security technical requirements and security assurance requirements as well as corresponding test and evaluation methods, and is suitable for guiding blockchain Chain information service security assessment and blockchain information service security construction. The security technical requirements and guarantee requirements framework proposed by the standard are as follows:
Figure 1 Blockchain information service security requirements model
2. Network security level protection evaluation
The main basis for network security level protection evaluation includes "GB/T 22239-2019 Basic Requirements for Network Security Level Protection" and "GB/T 28448-2019 Network Security Level Protection Evaluation Requirements".
As an emerging information technology, the application system built by blockchain is also an object of level protection and needs to be evaluated for level protection in accordance with regulations. The general requirements for level protection security evaluation are applicable to the evaluation of the infrastructure part of the blockchain, but currently there are no blockchain-specific security requirements. Therefore, the expansion requirements for blockchain security evaluation still need to be further explored and studied.
3. Special fund project acceptance evaluation
According to the relevant regulations of the Municipal Economic and Information Technology Commission, information technology special fund projects are required to issue a safety evaluation report during project acceptance. The acceptance evaluation of blockchain application projects will be carried out in accordance with Shanghai’s latest blockchain local standard "DB31/T 1331-2021 General Requirements for Blockchain Technology Security".
3. Exploration and practice of blockchain security assessment
1. Standard preparation
Shanghai Assessment Center actively participates in the preparation of blockchain standards. Led by the Shanghai Evaluation Center, Suzhou Tongji Blockchain Research Institute Co., Ltd., Shanghai Qiyin Information Technology Co., Ltd., Shanghai Moheng Network Technology Co., Ltd., the First Research Institute of Telecommunications Science and Technology and other units participated in the preparation of the blockchain local standard " DB31/T 1331-2021 General Requirements for Blockchain Technology Security" was officially released in December 2021. In March this yearIt will be officially implemented on the 1st. The blockchain national standard "Blockchain Information Service Security Specification", which the Shanghai Assessment Center participated in the preparation of, is in the stage of soliciting opinions.
At the same time, the assessment center also participated in the compilation of primary and intermediate textbooks for blockchain engineering technicians organized by the Ministry of Human Resources and Social Security and led by Tongji University, and was responsible for compiling the chapter "Testing the Blockchain System".
2. Project Practice
In recent years, the Shanghai Assessment Center has conducted a large number of blockchain security assessment practices based on relevant technical standards, including grade protection assessment, information service security assessment, project security assessment, etc. In the evaluation practice, the main security issues discovered are as follows:
Table 1 Blockchain is mainly a security issue
Serial number
Evaluation items
Problem description
1
Consensus Algorithm
The consensus algorithm uses Kafka or Raft consensus and does not support Byzantine fault tolerance or tolerate malicious node behavior.
2
On-chain data
On-chain sensitive information is not encrypted, and all data on the chain can be accessed through the query interface or blockchain browser.
3
Cryptographic Algorithm
The random numbers used in the cryptographic algorithm do not meet the randomness requirements of GB/T 32915-2016.
4
Node Protection
For the alliance chain, security protection measures failed to be configured for the area where the node server is located.
5
Communication transmission
When communicating between nodes, the blockchain and upper-layer applications, no secure information transmission channel has been established.
6
Consensus Algorithm
The number of nodes deployed in the system is small, and sometimes the number of fault-tolerant nodes required by the consensus algorithm is not even reached.
7
Smart Contract
The operation of the smart contract is not monitored, and problems that arise during the operation of the smart contract cannot be discovered and dealt with in a timely manner.
8
Services and Access
Upper-layer applications have access control flaws such as unauthorized and unauthorized access, leading to business confusion and data leakage.
9
Smart Contract
Smart contract coding is not standardized. When an error occurs in the smart contract, the smart contract freezing function is not provided.
10
Smart Contract
The running environment of smart contracts is not isolated from the outside, and there is a risk of external attacks.
3. Tool Application
When the evaluation center organized and compiled the "DB31/T 1331-2021 General Requirements for Blockchain Technology Security", it has considered the connection needs with the graded protection evaluation. The "infrastructure layer" security in DB31/T 1331 is consistent with the relevant requirements of the secure physical environment, secure communication network, security area boundary, secure computing environment, security management center, etc. of level protection, "protocol layer security", "extension layer" "Safety" is moreReflect the unique security protection requirements of blockchain.
Based on the relevant security requirements of DB31/T 1331, the assessment center is organizing and compiling extended blockchain assessment requirements. The relevant results will be applied to the network security level protection assessment tool - Assessment Expert. By then, evaluation institutions using the "Evaluation Expert" software will be able to carry out blockchain security evaluations accurately, standardly and efficiently, discover blockchain security risks, and put forward corresponding rectification suggestions

9. Various places have successively After banning Bitcoin and Ethereum "mining", NFT blockchain will be the next step

Although China bans cryptocurrency transactions and "mining", the exploration of blockchain technology continues . At the just-concluded World Artificial Intelligence Conference, Da Hongfei, founder and CEO of Distribution Technology, said in an interview with China Business News that “the manageability of blockchain” is a recent focus. The current scale and growth rate of the global public chain market is much higher than that of the alliance chain business. However, public chains have many limitations, such as illegal crimes, hacker theft, network risks, regulatory obstruction, etc., and cause huge irreparable losses. Therefore, how to increase the manageability of blockchain will be an important issue for blockchain to become mainstream.

The currency circle has been very unstable in the past two months. On May 21, the Financial Stability and Development Committee of the State Council issued a document stating "Crack down on Bitcoin mining and trading activities." On May 25, the Inner Mongolia Development and Reform Commission issued eight measures (draft for comments) to combat and punish virtual currency “mining”. On June 9, the Qinghai Provincial Department of Industry and Information Technology issued the “About Mining of Virtual Currencies” "Notice on Cleaning Up and Rectifying the Project", and cleaning up and rectifying the relevant virtual currency mining/mining activities.

On June 18, the Sichuan Provincial Development and Reform Commission issued the "Notice of the Energy Bureau on Cleaning up and Shutting Down Virtual Currency "Mining" Projects. For virtual currency mining/mining, the relevant power in Sichuan Enterprises need to complete the screening, cleaning and shutdown work before June 20.

#BTC[超话]# #digital currency# #欧易OKEx#

博客主人唯心底涂
男,单身,无聊上班族,闲着没事喜欢研究股票,无时无刻分享股票入门基础知识,资深技术宅。
  • 37528 文章总数
  • 3637284访问次数
  • 3080建站天数