区块链技术应用评估报告,区块链技术应用评估论文

区块链技术是一种分布式的数据存储技术，可以让用户安全地存储和管理数据。它的评估报告和论文是对该技术的全面评估，以更好地了解它的优势和可能的应用。本文将拓展三个相关关键词，分别是去中心化、安全性和智能合约。

去中心化是区块链技术的核心特性之一，它指的是在不依赖中心化的第三方机构的情况下，用户之间可以进行交易。在区块链技术的应用中，用户可以在网络上完成交易，而无需依赖中心化的机构来审核和确认交易。因此，去中心化可以提高交易的效率，减少中心化机构的成本，并且可以更好地保护用户的隐私。

安全性是区块链技术的另一个重要特性，它可以保护用户的数据，防止黑客攻击。区块链技术的安全性主要体现在数据存储和加密方面。数据存储使用分布式的数据库，将数据存储在多个节点上，而不是存储在单一节点上，从而减少了数据被破坏的风险。而加密技术则使用加密算法，来保护数据的安全性，防止黑客攻击和数据泄露。

智能合约是区块链技术的一种应用，它是一种自动执行的合约，可以在区块链上运行。智能合约是一种可编程的计算机程序，可以根据约定的条件自动执行，从而实现自动化的交易处理。智能合约可以大大提高交易的效率，减少人工干预的需要，并且可以更好地保护用户的隐私。

以上就是区块链技术评估报告和论文拓展的三个相关关键词：去中心化、安全性和智能合约的介绍。这三个关键词是区块链技术的核心特性，也是区块链技术可能的应用，可以为用户提供更安全、更高效的交易服务。

1. Blockchain Entrepreneurship Project Evaluation Guide: How to judge whether a project is reliable

The key to the implementation of blockchain technology in the real economy should be based on the pain points of an industry , there must be a foundation and application scenarios, rather than artificially creating a new application scenario. In fact, issuing a currency and upgrading a main chain cannot be called implementation. The real implementation should be integrated with the real economy, creating added value, moving away from the virtual to the real, serving the real economy, and improving the efficiency of various social activities. Efficiency is the right thing.
So, how to judge whether blockchain technology is reliable or not depends on two main points.
First, there must be a real application scenario. It doesn’t matter how small the application scenario is, but it must be valuable.
Whether blockchain technology can finally be implemented depends on many complex factors, and one of the key points is the application scenarios. To find the corresponding application scenarios, we must start from the technical characteristics of the blockchain itself, distinguish Blockchain technology can provide decentralized, non-tamperable, safe and reliable features without introducing third-party intermediaries.
Second, the application of blockchain technology must be able to solve problems rather than create them.
There are real application scenarios and the pain points in the industry have been hit, but these are not enough for blockchain technology to truly land in the real economy and achieve integration with the real economy. Because the most critical point depends on whether the problem can be solved after applying blockchain technology.
After using blockchain technology, combined with the assistance of some Internet of Things devices, investors can query the real-time and dynamic data of the project at any time, and can directly monitor the progress of the project remotely even without leaving home.
Using blockchain technology to solve problems that were originally difficult to solve, combined with real application scenarios, it has become a natural thing for blockchain technology to be implemented in the real economy.

2. What are the application prospects of blockchain technology?

Blockchain classification:

1 Private chain

refers to the existence of A certain centralized control of the blockchain. Just using the general ledger technology of the blockchain for accounting, it can be a company or an individual, with exclusive write permission to the blockchain. This chain is not much different from other distributed storage solutions. The only participating nodes are the users themselves, and data access and use are subject to strict permission management. Since the alliance chain has certain centralized control, it can also be considered to belong to the category of private chain.

Features: Since the user has the final say, the data inside has no characteristics that cannot be changed, and there is not much protection for third parties. Generally used for internal audit. The vice president of technology at Huobi Network believes that private chains do have a large number of scenarios that can meet the needs of the real world. Limited decentralization makes it easier to reach consensus, can make transactions faster and more efficient, and can provide more controlled function. Decentralization is the core value of blockchain technology. If private chains do not work in practiceIf we can make full use of the decentralized trust foundation constructed by the public chain, its development space will be limited.

2 Public Chain

Public blockchain is the earliest blockchain and the most widely used blockchain at present. It refers to a blockchain like the Bitcoin blockchain that is completely decentralized and not controlled by any institution. Any individual or group in the world can send transactions, and the transactions can be effectively confirmed by the blockchain, and anyone can participate in its consensus process. Participants in the consensus process maintain the security of the database through cryptography and built-in economic incentives.

Features: Completely open, uncontrolled, relying on encryption technology to ensure security.

3 Alliance Chain

A certain group designates multiple pre-selected nodes as bookkeepers. The generation of each block is jointly decided by all pre-selected nodes. Other access nodes You can participate in transactions, but you are not involved in the accounting process (it is essentially still managed accounting, but it becomes distributed accounting. How many pre-selected nodes and how to decide the accountant of each block becomes the main risk point of the blockchain) , anyone else can make limited queries through the blockchain’s open API.

The nodes participating in the blockchain are selected in advance, and there are likely to be good network connections between the nodes. Other consensus algorithms other than proof of work can be used on such a blockchain. For example, a certain blockchain has been established among 100 financial institutions, and it is stipulated that more than 67 institutions must agree to reach a consensus.

Prospects:

The development of blockchain technology has also brought about changes in the operational concepts of various industries. New technologies and new concepts have promoted new developments in various industries. This kind of The impact of the driving force on society and the promotion of economic activities are also huge. Many new industry phenomena will occur one after another, and the public is also waiting and watching, expecting this brand-new technology to be used by various industries and better benefit all industries.

3. How to apply blockchain technology and what role it can play

Take buying a house as an example: Buying a house is a complex transaction process, and the participants include sellers, buyers, and intermediary companies. , housing authority, bank, appraisal company, tax bureau, etc. Throughout the transaction process, all participants must record their own ledgers separately. Checking these ledgers is a very time-consuming and laborious task, and the verification cost is very high. That's why the entire process of buying a home now takes an average of two months.

In addition to being time-consuming and labor-intensive, since there is very little information that can be verified by a single participant, there is a risk of being "cheated at both ends" by the intermediary company, or "sold for more than one house". However, blockchain provides a solution: integrating all participants' ledgers into a trustworthy and non-tamperable digital ledger, which can be queried by all participants. In this way, every aspect of the home buying process is clearly visible, and everyone can conduct transactions with less time and effort.

Bitcoin is the first application of blockchain technology. Bitcoin does not have anyWith centralized institutional operation and management, it has maintained stable operation for many years without any problems. Through this case, everyone saw the potential of blockchain technology.

In order to prevent single points of failure and systemic risks, the current financial industry requires strict supervision and layer-by-layer audits to control risks, which also results in high internal costs. The traditional cross-border settlement method is through intermediaries like SWIFT, so the settlement speed is very slow. However, Bitcoin has been running perfectly for many years without the operation of a centralized institution. It can not only realize settlement and clearing in real time, but also There was not a single accounting error.

According to a report released by Santander, Spain’s largest bank, if all banks around the world use blockchain technology internally around 2020, they will save approximately US$20 billion in costs per year. Such data is enough to illustrate the tremendous changes and breakthroughs that "blockchain" has brought to the traditional financial field.

4. How to detect the risk level of blockchain smart contracts

With the acceleration of digital transformation in Shanghai, blockchain technology has been widely used in government affairs, finance, logistics, justice, etc. It has been widely used in many fields. During the application process, not only new business forms and business models have been born, but also many security issues have arisen, so security supervision is particularly important. As one of the important means of supervision, security evaluation has become a focus of many blockchain R&D manufacturers and application companies. This article talks about some of our exploration and practice on the blockchain compliance security assessment that everyone is concerned about.
1. Blockchain technology evaluation
Blockchain technology evaluation is generally divided into functional testing, performance testing and security evaluation.
1. Functional testing
Functional testing is a test of the basic functions supported by the underlying blockchain system, with the purpose of measuring the capabilities of the underlying blockchain system.
Blockchain functional testing is mainly based on GB/T 25000.10-2016 "System and Software Quality Requirements and Evaluation (SQuaRE) Part 10: System and Software Quality Model", GB/T 25000.51-2016 "System and Software Quality" Requirements and Evaluation (SQuaRE) Part 51: Quality Requirements and Testing Details for Ready to Use Software Products (RUSP)" and other standards to verify whether the software under test meets the requirements of relevant test standards.
Blockchain function testing specifically includes networking methods and communication, data storage and transmission, encryption module availability, consensus function and fault tolerance, smart contract function, system management stability, chain stability, privacy protection, and interoperability , account and transaction types, private key management solutions, audit management and other modules.
2. Performance testing
Performance testing is a type of test implemented and executed to describe the performance-related characteristics of the test object and evaluate it. Most of them are used in project acceptance evaluation to verify the established Whether the technical indicators are completed.
Blockchain natureThe specific tests that can be performed include high-concurrency stress test scenarios, peak impact test scenarios, long-term stable operation test scenarios, query test scenarios and other modules.
3. Security Assessment
Blockchain security assessment mainly conducts security testing and evaluation of account data, cryptography mechanisms, consensus mechanisms, smart contracts, etc.
The main basis for blockchain security evaluation is "DB31/T 1331-2021 General Requirements for Blockchain Technology Security". You can also refer to standards such as "JR/T 0193-2020 Blockchain Technology Financial Application Assessment Rules" and "JR/T 0184-2020 Financial Distributed Ledger Technology Security Specifications" based on actual testing needs.
Blockchain security assessment specifically includes storage, network, computing, consensus mechanism, cryptography mechanism, timing mechanism, personal information protection, networking mechanism, smart contracts, services and access, etc.
2. Blockchain Compliance Security Assessment
Blockchain compliance security assessment generally includes “Blockchain Information Service Security Assessment”, “Network Security Level Protection Assessment” and “Special Funding Projects” "Acceptance Evaluation" three categories.
1. Blockchain information service security assessment
Blockchain information service security assessment is mainly based on the "Blockchain Information Service Management Regulations" issued by the Cyberspace Administration of China on January 10, 2019 (hereinafter referred to as "Regulations") and refer to the national blockchain standard "Blockchain Information Service Security Specification (Draft for Comments)".
The "Regulations" aim to clarify the information security management responsibilities of blockchain information service providers, standardize and promote the healthy development of blockchain technology and related services, avoid blockchain information service security risks, and provide blockchain Provide effective legal basis for the provision, use and management of information services. Article 9 of the "Regulations" states: Blockchain information service providers that develop and launch new products, new applications, and new functions must report to the national and provincial, autonomous region, and municipality Internet Information Offices for security assessment in accordance with relevant regulations.
The "Blockchain Information Service Security Specification" is a construction and preparation project led by the Institute of Information Engineering of the Chinese Academy of Sciences and jointly participated by Zhejiang University, China Electronics Technology Standardization Institute, Shanghai Information Security Evaluation and Certification Center and other units. National standards for evaluating the security capabilities of blockchain information services. The "Blockchain Information Service Security Specification" stipulates the security requirements that blockchain information service providers of alliance chains and private chains should meet, including security technical requirements and security assurance requirements as well as corresponding test and evaluation methods, and is suitable for guiding blockchain Chain information service security assessment and blockchain information service security construction. The security technical requirements and guarantee requirements framework proposed by the standard are as follows:
Figure 1 Blockchain information service security requirements model
2. Network security level protection evaluation
The main basis for network security level protection evaluation includes "GB/T 22239-2019 Basic Requirements for Network Security Level Protection", "GB/T 28448-2019 Network Security Level Protection Evaluation Requirements".
As an emerging information technology, the application system built by blockchain is also an object of level protection and needs to be evaluated for level protection in accordance with regulations. The general requirements for level protection security evaluation are applicable to the evaluation of the infrastructure part of the blockchain, but currently there are no specific security requirements for the blockchain. Therefore, the expansion requirements for blockchain security evaluation still need to be further explored and studied.
3. Special fund project acceptance evaluation
According to the relevant regulations of the Municipal Economic and Information Technology Commission, information technology special fund projects are required to issue a safety evaluation report during project acceptance. The acceptance evaluation of blockchain application projects will be carried out in accordance with Shanghai’s latest blockchain local standard "DB31/T 1331-2021 General Requirements for Blockchain Technology Security".
3. Exploration and practice of blockchain security assessment
1. Standard preparation
Shanghai Assessment Center actively participates in the preparation of blockchain standards. Led by the Shanghai Evaluation Center, Suzhou Tongji Blockchain Research Institute Co., Ltd., Shanghai Qiyin Information Technology Co., Ltd., Shanghai Moheng Network Technology Co., Ltd., the First Research Institute of Telecommunications Science and Technology and other units participated in the preparation of the blockchain local standard " DB31/T 1331-2021 "General Requirements for Blockchain Technology Security" was officially released in December 2021 and will be officially implemented on March 1 this year. The blockchain national standard "Blockchain Information Service Security Specification", which the Shanghai Assessment Center participated in the preparation of, is in the stage of soliciting opinions.
At the same time, the assessment center also participated in the compilation of primary and intermediate textbooks for blockchain engineering technicians organized by the Ministry of Human Resources and Social Security and led by Tongji University, and was responsible for compiling the chapter "Testing the Blockchain System".
2. Project Practice
In recent years, the Shanghai Assessment Center has conducted a large number of blockchain security assessment practices based on relevant technical standards, including grade protection assessment, information service security assessment, project security assessment, etc. In the evaluation practice, the main security issues discovered are as follows:
Table 1 Blockchain is mainly a security issue
Serial number
Evaluation items
Problem description
1
Consensus Algorithm
The consensus algorithm uses Kafka or Raft consensus and does not support Byzantine fault tolerance or tolerate malicious node behavior.
2
On-chain data
On-chain sensitive information is not encrypted, and all data on the chain can be accessed through the query interface or blockchain browser.
3
Cryptographic Algorithm
The random numbers used in the cryptographic algorithm do not meet the randomness requirements of GB/T 32915-2016.
4
Node Protection
For the alliance chain, security protection measures failed to be configured for the area where the node server is located.
5
Communication transmission
During inter-node communication and communication between blockchain and upper-layer applications, no secure trust is established.information transmission channel.
6
Consensus Algorithm
The number of nodes deployed in the system is small, and sometimes the number of fault-tolerant nodes required by the consensus algorithm is not even reached.
7
Smart Contract
The operation of the smart contract is not monitored, and problems that arise during the operation of the smart contract cannot be discovered and dealt with in a timely manner.
8
Services and Access
Upper-layer applications have access control flaws such as unauthorized and unauthorized access, leading to business confusion and data leakage.
9
Smart Contract
Smart contract coding is not standardized. When an error occurs in the smart contract, the smart contract freezing function is not provided.
10
Smart Contract
The running environment of smart contracts is not isolated from the outside, and there is a risk of external attacks.
3. Tool Application
When the evaluation center organized and compiled the "DB31/T 1331-2021 General Requirements for Blockchain Technology Security", it has considered the connection needs with the level protection evaluation. The "infrastructure layer" security in DB31/T 1331 is consistent with the relevant requirements of the secure physical environment, secure communication network, security area boundary, secure computing environment, security management center, etc. of level protection, "protocol layer security", "extension layer" "Security" more reflects the unique security protection requirements of the blockchain.
Based on the relevant security requirements of DB31/T 1331, the assessment center is organizing and compiling extended blockchain assessment requirements. The relevant results will be applied to the network security level protection assessment tool - Assessment Expert. By then, evaluation institutions using the "Evaluation Expert" software will be able to carry out blockchain security evaluations accurately, standardly and efficiently, discover blockchain security risks, and put forward corresponding rectification suggestions

5. Blockchain Blockchain application prospects

Blockchain application prospects are mainly in the financial field, the Internet of Things and logistics, public services, digital copyright management, and insurance.

1. Blockchain has huge potential application prospects in financial fields such as international exchange, letters of credit, equity registration and stock exchanges. The application of blockchain technology in the financial industry can eliminate the need for third-party intermediaries and achieve direct point-to-point connection.

2. Blockchain can also be naturally combined in the Internet of Things and logistics fields. This field is considered to be a promising application direction of blockchain. Establishing credit resources in the blockchain can double improve the security of transactions and improve the convenience of IoT transactions. Save time and cost for smart logistics model applications.

3. Blockchain is closely related to people’s production and life in public management, energy, transportation and other fields. The decentralized and fully distributed DNS service provided by the blockchain can realize domain name query and resolution through point-to-point data transmission services between various nodes in the network.

4. Through blockchain technology, works can be authenticated, prove the existence of text, video, audio and other works, and protectProve the authenticity and uniqueness of ownership. After the rights of the work are confirmed on the blockchain, subsequent transactions will be recorded in real time, realizing full life cycle management of digital copyright, and can also be used as a technical guarantee in judicial evidence collection.

5. In terms of insurance claims, insurance institutions are responsible for fund collection, investment, and claims settlement, and often have high management and operating costs. Through the application of smart contracts, there is no need for the policy holder to apply or the insurance company to approve it. As long as the claim settlement conditions are triggered, the insurance policy can automatically settle claims.

(5) Extended reading on blockchain technology application evaluation:

Core technology of blockchain

1. Consensus mechanism, through the voting of special nodes, Verification and confirmation of transactions can be completed in a very short period of time; for a transaction, if several nodes with unrelated interests can reach a consensus, it can be considered that the entire network can also reach a consensus on it. The goal of the blockchain consensus mechanism is to enable all honest nodes to maintain a consistent view of the blockchain.

2. Asymmetric encryption requires two keys for encryption and decryption. These two keys are the public key and the private key. The public key corresponds to the private key. When the public key is used in the encryption process of data, it can only be decrypted by using the corresponding private key. On the contrary, when the private key is used in encrypting the data, only the corresponding private key can be used to decrypt the data. Only the corresponding public key can be decrypted.

6. What are the applications of blockchain technology?

Developing Ethereum Cat based on Ethereum, this is not considered an application, it is a bit interesting to play, and there is also NetEase Planet. For traceability, I have snapped up the Orange Chain made by China Enterprise Tongbao Blockchain, which is used for blockchain traceability records on Orange.

7. A brief analysis of the application of blockchain technology

A brief analysis of the application of blockchain technology
I believe many people do not understand the recent hot blockchain technology. Don't understand its applicable scenarios. Although theoretically any industry related to digital networks can be applied, from the perspective of implementation costs, the following industries are more suitable for blockchain technology.
Since the essence of the blockchain is a distributed accounting ledger, digital currencies represented by Bitcoin and Ethereum are also a very simple and safe settlement method. The most important thing in the financial field is the accounting and clearing process. Blockchain technology can greatly improve the efficiency of traditional banks and the financial industry.
However, all of the above are the basic functions of blockchain, and there is still a lot of room for improvement. Currently, there is no mature blockchain financial project in the world. We still have a long way to go. Way to go.

When it comes to the application of blockchain, the first thing we think of is the banking and financial industries. Since the essence of blockchain is a distributed accounting system, it is most suitable for the financial industry. Digital currencies based on blockchain can also be used in transactions, clearing and settlement, etc. The security and decentralization of blockchain are used to ensure the security of accounting. Currently, major countries are exploring this application.
In addition, many businesses of government agencies are also very suitable for the application of blockchain technology, such as the management of resident identity information, ownership records, product supervision, etc. Ensure the security and privacy of critical information through distributed immutable records. Many countries such as Ireland have included this development plan as a short-term goal, and it is also one of the more common areas of use of blockchain.
Financial field: The financial field is the field where blockchain has the most applications besides Bitcoin. After all, financial development also involves currency and digital currency. Especially in the past two years, the development of digital currencies has also driven the application of blockchain.
Regarding blockchain deception, when blockchain first emerged, it was questioned by many people and was called blockchain deception. Now the chief economists of various countries in the region have begun to quit studying blockchain, proving that blockchain is gradually being accepted by the public.
In addition, due to the emergence of Ethereum smart contracts, blockchain can also better assist resource sharing related industries, such as our common shared bicycles and other products. Another example is the medical field. We can also use blockchain technology to improve efficiency and safety, which will bring about a qualitative change in this industry.
I believe everyone has a preliminary understanding of the practical application of blockchain. Looking back at the ICO craze in China some time ago, a large number of unreliable projects such as dog chains forced speculation on the concept. Obviously, domestic investors There is not enough understanding of the blockchain application field, so stopping ICO not only regulates the industry, but also protects the investing public.