19纸贵区块链测试
近年来，区块链技术受到了越来越多的关注，它改变了传统的商业模式，有助于提升企业的效率。今天，我们将讨论19纸贵区块链测试，它是一种可以帮助企业更好地了解和使用区块链技术的工具。
私链：私链是一种以私有区块链技术为基础的网络。它可以帮助企业实现更安全、更高效的数据管理和信息传输。19纸贵区块链测试可以帮助企业快速搭建一个私链网络，从而更好地实现数据安全和信息管理。
智能合约：智能合约是一种利用区块链技术实现的自动执行合同。19纸贵区块链测试可以帮助企业快速搭建智能合约，从而更好地实现自动化的交易过程，提高交易的效率和安全性。
数字货币：数字货币是利用区块链技术实现的一种虚拟货币。19纸贵区块链测试可以帮助企业快速搭建一个数字货币网络，从而更好地实现货币的流通和交易，提高货币的安全性和效率。
总之，19纸贵区块链测试是一种可以帮助企业更好地了解和使用区块链技术的工具，可以帮助企业实现更安全、更高效的数据管理和信息传输，从而提高企业的效率。
请查看相关英文文档
Ⅰ How to detect the risk level of blockchain smart contracts
With the acceleration of Shanghai’s urban digital transformation, blockchain technology has been widely used in government affairs, finance, logistics, and justice. It has been widely used in many fields. During the application process, not only new business forms and business models have been born, but also many security issues have arisen, so security supervision is particularly important. As one of the important means of supervision, security evaluation has become a focus of many blockchain R&D manufacturers and application companies. This article talks about some of our exploration and practice on the blockchain compliance security assessment that everyone is concerned about.
1. Blockchain technology evaluation
Blockchain technology evaluation is generally divided into functional testing, performance testing and security evaluation.
1. Functional testing
Functional testing is a test of the basic functions supported by the underlying blockchain system, with the purpose of measuring the capabilities of the underlying blockchain system.
Blockchain functional testing is mainly based on GB/T 25000.10-2016 "System and Software Quality Requirements and Evaluation (SQuaRE) Part 10: System and Software Quality Model", GB/T 25000.51-2016 "System and Software Quality" Requirements and Evaluation (SQuaRE) Part 51: Quality Requirements and Testing Details for Ready to Use Software Products (RUSP)" and other standards to verify whether the software under test meets the requirements of relevant test standards.
Blockchain function testing specifically includes networking methods and communication, data storage and transmission, encryption module availability, consensus function and fault tolerance, smart contract function, system management stability, chain stability, privacy protection, and interoperability , account and transaction types, private key management solutions, audit management and other modules.
2. Performance testing
Performance testing is a type of test implemented and executed to describe the performance-related characteristics of the test object and evaluate it. Most of them are used in project acceptance evaluation to verify the established Whether the technical indicators are completed.
Blockchain performance testing specifically includes high-concurrency stress test scenarios, peak impact test scenarios, long-term stable operation test scenarios, query test scenarios and other modules.
3. Security Assessment
Blockchain security assessment mainly conducts security testing and evaluation of account data, cryptography mechanisms, consensus mechanisms, smart contracts, etc.
The main basis for blockchain security evaluation is "DB31/T 1331-2021 General Requirements for Blockchain Technology Security". You can also refer to standards such as "JR/T 0193-2020 Blockchain Technology Financial Application Assessment Rules" and "JR/T 0184-2020 Financial Distributed Ledger Technology Security Specifications" based on actual testing needs.
Blockchain security assessment specifically includes storage, network, computing, consensus mechanism, cryptography mechanism, timing mechanism, personal information protection, networking mechanism, smart contract, service and access, etc.
2. Blockchain Compliance Security Evaluation
Blockchain Compliance SecurityThe full assessment generally includes three categories: "blockchain information service security assessment", "network security level protection assessment" and "special fund project acceptance assessment".
1. Blockchain information service security assessment
Blockchain information service security assessment is mainly based on the "Blockchain Information Service Management Regulations" issued by the Cyberspace Administration of China on January 10, 2019 (hereinafter referred to as "Regulations") and refer to the national blockchain standard "Blockchain Information Service Security Specification (Draft for Comments)".
The "Regulations" aim to clarify the information security management responsibilities of blockchain information service providers, standardize and promote the healthy development of blockchain technology and related services, avoid blockchain information service security risks, and provide blockchain Provide effective legal basis for the provision, use and management of information services. Article 9 of the "Regulations" states: Blockchain information service providers that develop and launch new products, new applications, and new functions must report to the national and provincial, autonomous region, and municipality Internet Information Offices for security assessment in accordance with relevant regulations.
The "Blockchain Information Service Security Specification" is a construction and preparation project led by the Institute of Information Engineering of the Chinese Academy of Sciences and jointly participated by Zhejiang University, China Electronics Technology Standardization Institute, Shanghai Information Security Evaluation and Certification Center and other units. National standards for evaluating the security capabilities of blockchain information services. The "Blockchain Information Service Security Specification" stipulates the security requirements that blockchain information service providers of alliance chains and private chains should meet, including security technical requirements and security assurance requirements as well as corresponding test and evaluation methods, and is suitable for guiding blockchain Chain information service security assessment and blockchain information service security construction. The security technical requirements and guarantee requirements framework proposed by the standard are as follows:
Figure 1 Blockchain information service security requirements model
2. Network security level protection evaluation
The main basis for network security level protection evaluation includes "GB/T 22239-2019 Basic Requirements for Network Security Level Protection" and "GB/T 28448-2019 Network Security Level Protection Evaluation Requirements".
As an emerging information technology, the application system built by blockchain is also an object of level protection and needs to be evaluated for level protection in accordance with regulations. The general requirements for level protection security evaluation are applicable to the evaluation of the infrastructure part of the blockchain, but currently there are no specific security requirements for the blockchain. Therefore, the expansion requirements for blockchain security evaluation still need to be further explored and studied.
3. Special fund project acceptance evaluation
According to the relevant regulations of the Municipal Economic and Information Technology Commission, information technology special fund projects are required to issue a safety evaluation report during project acceptance. The acceptance evaluation of blockchain application projects will be carried out in accordance with Shanghai’s latest blockchain local standard "DB31/T 1331-2021 General Requirements for Blockchain Technology Security".
3. Exploration and practice of blockchain security assessment
1. Standard preparation
Shanghai Assessment Center actively participates in the preparation of blockchain standards. Led by Shanghai Evaluation CenterHeaded by Suzhou Tongji Blockchain Research Institute Co., Ltd., Shanghai Qiyin Information Technology Co., Ltd., Shanghai Moheng Network Technology Co., Ltd., the First Institute of Telecommunications Science and Technology and other units participated in the preparation of the blockchain local standard "DB31/T 1331" -2021 General Requirements for Blockchain Technology Security" was officially released in December 2021 and will be officially implemented on March 1 this year. The blockchain national standard "Blockchain Information Service Security Specification", which the Shanghai Assessment Center participated in the preparation of, is in the stage of soliciting opinions.
At the same time, the assessment center also participated in the compilation of primary and intermediate textbooks for blockchain engineering technicians organized by the Ministry of Human Resources and Social Security and led by Tongji University, and was responsible for compiling the chapter "Testing the Blockchain System".
2. Project Practice
In recent years, the Shanghai Assessment Center has conducted a large number of blockchain security assessment practices based on relevant technical standards, including grade protection assessment, information service security assessment, project security assessment, etc. In the evaluation practice, the main security issues discovered are as follows:
Table 1 Blockchain is mainly a security issue
Serial number
Evaluation items
Problem description
1
Consensus Algorithm
The consensus algorithm uses Kafka or Raft consensus and does not support Byzantine fault tolerance or tolerate malicious node behavior.
2
On-chain data
On-chain sensitive information is not encrypted, and all data on the chain can be accessed through the query interface or blockchain browser.
3
Cryptographic Algorithm
The random numbers used in the cryptographic algorithm do not meet the randomness requirements of GB/T 32915-2016.
4
Node Protection
For the alliance chain, security protection measures failed to be configured for the area where the node server is located.
5
Communication transmission
When communicating between nodes, the blockchain and upper-layer applications, no secure information transmission channel has been established.
6
Consensus Algorithm
The number of nodes deployed in the system is small, and sometimes the number of fault-tolerant nodes required by the consensus algorithm is not even reached.
7
Smart Contract
The operation of the smart contract is not monitored, and problems that arise during the operation of the smart contract cannot be discovered and dealt with in a timely manner.
8
Services and Access
Upper-layer applications have access control flaws such as unauthorized and unauthorized access, leading to business confusion and data leakage.
9
Smart Contract
Smart contract coding is not standardized. When an error occurs in the smart contract, the smart contract freezing function is not provided.
10
Smart Contract
The running environment of smart contracts is not isolated from the outside, and there is a risk of external attacks.
3. Tool Application
The assessment center is organizing the preparation of "DB31/T 1331-2021 BlockWhen "General Requirements for Chain Technology Security", the connection needs with graded protection evaluation have been considered. The "infrastructure layer" security in DB31/T 1331 is consistent with the relevant requirements of the secure physical environment, secure communication network, security area boundary, secure computing environment, security management center, etc. of level protection, "protocol layer security", "extension layer" "Security" more reflects the unique security protection requirements of the blockchain.
Based on the relevant security requirements of DB31/T 1331, the assessment center is organizing and compiling extended blockchain assessment requirements. The relevant results will be applied to the network security level protection assessment tool - Assessment Expert. By then, evaluation institutions using the "Evaluation Expert" software will be able to conduct blockchain security evaluations accurately, standardly and efficiently, discover blockchain security risks, and put forward corresponding rectification suggestions
II Hot! Create and play with your own blockchain in 5 minutes
Blockchain is developing so fast this year! From an unfamiliar concept at the beginning, it has now taken off in various industries. A single spark has the potential to start a prairie fire. I really hope I can have my own blockchain to practice with! But how can one person and one computer set up a blockchain environment? The blockchain is so popular that it is not easy to say that I love you!
Don’t Worry! The editor has been addicted to blockchain and smart contracts and can’t extricate himself! Now I will take you step by step to start from scratch and create your own blockchain in 5 minutes! ~
The SuperVessel platform developed by IBM China Research Institute provides a blockchain development and testing environment for blockchain enthusiasts and developers. Through this platform, users can create multi-node blockchains based on Hyperledger Fabric for free and super quickly, and play with smart contracts on their own chains.
----
0.
Preparation
All you need is your local browser!
1. Register an account
Access the public beta address of SuperVessel blockchain service: 8800/bc.
Click the Log in button in the upper right corner, click Register in the pop-up window, fill in your email and password and submit. At this time, it is recommended to check the activation email in your mailbox and activate your account (Editor's tip: It doesn't matter if you activate lazily, but some advanced services must be activated before they can be used).
2.
Quickly create your own blockchain
After registration is completed, return to the homepage and click on the huge GIVE ME A BLOCKCHAIN (Give me a blockchain!) button. Select the Consensus Plugin (consensus plug-in) and Size (number of blockchain network nodes) you want in the pop-up box.
Editor's note: Hyperledger Fabric official website is currently available.Two consensus plug-ins are provided: noops and pbft.
After clicking Submit, you will get your own blockchain in a few seconds and automatically enter the monitoring panel. That’s right, getting your own blockchain is that simple!
After entering the monitoring panel, you can see that the left side is the smart contract management panel, including the management and deployment of smart contracts; the right side is the network panel, which displays the applied blockchain network status, topology, and connections between nodes. Latency information, etc. are clear at a glance; click the telescope icon in the upper right corner to monitor the log information of each node in real time. The bottom is the blockchain panel, which shows the overall situation of the current blockchain. In the initial state, there is only one block.
3. Deploy and use smart contracts
Next, the editor will teach you how to deploy and use smart contracts on your own blockchain.
Under the Smart Contracts tab of the smart contract management panel, 2 smart contracts are listed as examples, namely map and chaincode_example02. The map contract can store key-value pairs, and the chaincode_example02 contract can simulate transfers and queries between two people.
Editor's note: The code for these two sample contracts can be found in the Hyperledger Fabric source code.
Take the deployment and use of the chaincode_example02 contract as an example:
Deploy the contract
Click the Deploy button corresponding to the chaincode_example02 contract, and fill in the initialization value of the contract, including the contract name, initial function, and initial parameters. The initial function of the contract is init, and the initial parameters need to be filled in according to the format, such as ["a", "100", "b", "200"], which means registering two people a and b, giving them 100 units and 200 units respectively.
Click the Deploy button and the contract will be deployed in your blockchain. The process will take about 20 to 40 seconds. When a new block appears on the blockchain panel, it usually means that the contract has been deployed.
Call the contract
After the deployment is completed, view the deployed contract instance under the My Deployment tab of the smart contract management panel.
Click the Invoke button below the Action to call the smart contract, and fill in the called method name and corresponding parameters (the method names and parameters of different contracts have different meanings, which are related to the content of the contract). For this contract, call the invoke method name and fill in the parameters ["a", "b", "50"], which means a transfers 50 units to b.
After clicking Submit to complete the call, you can view the blockchain situation and a new block will be generated.
Query contract
After the call is completed,Next you can query the contract execution results. Still under the My Deployment tab, click the Query button under Action to query the smart contract, and fill in the query method name and corresponding parameters. If you select the query method name and fill in the parameter ["a"], it means querying the current unit of a.
After clicking Submit, you can see that the current unit of a is 50. You can try query b again!
OK, then you can continue to operate the contract, observe the blockchain situation, or deploy a new smart contract, such as map, on the blockchain. For ease of use, the method names and parameter formats for deploying, calling, and querying contracts are all filled in by default. You only need to select a method name and change the parameters as you like! See how long you can play with the chain~
4. Upload and test your own private smart contract
In addition to the two public smart contracts currently provided, you can also upload and test your own private contract! Private contracts can only be seen by you.
Click Import private smart contract under the Smart Contracts tab.
After filling in the contract name and description, and uploading the contract code file, click Import to complete the upload.
Then the contract I uploaded will appear in the Smart Contracts list and can be deployed, called and queried as before.
Ⅲ Won many awards! Zhigui Technology was invited to attend the 2020 Trusted Blockchain Summit
On December 22, the "2020 Trusted Blockchain Promotion Plan" was co-sponsored by the China Academy of Information and Communications Technology, the China Information Standards Association, and the Trusted Blockchain Promotion Plan. "Intelligent Blockchain Summit" was successfully held in Beijing.
The summit has set up a number of annual major achievement release activities, including the release of "Blockchain White Paper (2020)", the release of "Trusted Chain Network", and the "Trusted Blockchain Evaluation Results" "Release, "2020 Trusted Blockchain Annual Outstanding Cases" release, etc. Zhigui Technology was invited to participate in the summit as the vice-chairman unit of the Trusted Blockchain Promotion Plan and won multiple awards on the spot. At the same time, Executive President Chen Chang was awarded the title of "Outstanding Contributor of the Trusted Blockchain Promotion Plan in 2020".
This summit was hosted by Yu Xiaohui, Vice President of China Academy of Information and Communications Technology. Xi Guohua, Chairman of China Communications Standards Association, and He Guili, Vice Chairman of Internet Society of China attended the meeting and delivered speeches.
Xi Guohua, Chairman of China Communications Standards Association
He Guili, Vice Chairman of Internet Society of China
Yu Xiaohui, Vice President of China Academy of Information and Communications Technology
Meeting At the scene, Shi Denian, deputy chief engineer of China Academy of Information and Communications Technology, released the Academy of Information and Communications Technology’s “Blockchain White Paper (2020)”; China Academy of Information and Communications Technology Yunda UniversityHe Baohong, director of the institute and executive vice chairman of the Trusted Blockchain Promotion Plan, released the "Trusted Chain Network"; Wei Kai, deputy director of the Institute of Cloud Sciences of the China Academy of Information and Communications Technology and secretary-general of the Trusted Blockchain Promotion Plan, interpreted the 2020 Trustworthy Blockchain product review details.
Yang Zhaofeng, Vice President of Zhigui Technology, was invited to attend the blockchain financial application sub-forum opened at the summit. In the roundtable dialogue session with the theme of "Blockchain Empowering Finance in Multiple Dimensions", we had in-depth discussions with industry experts on the latest progress and innovative application practices of blockchain empowering finance, and the atmosphere was warm.
Zhigui Technology has won many awards
01
One of the founding members of "Trusted Chain Network"
"Trusted Chain Network" was jointly initiated by the China Academy of Information and Communications Technology and more than 10 units including the China Banking Association, the Chinese Agricultural Association, Ant Group, Huawei, and Zhigui Technology. Blockchain interoperability projects aimed at linking business application blockchain networks in different industries and solving blockchain islands and network fragmentation based on real blockchain application scenarios and business interoperability needs.
This project is empowered by links and activated by interoperability. It is a reference practice for cross-chain standards. Zhigui Technology will adhere to the spirit of win-win cooperation and join hands with other member units to jointly build an open and shared community to achieve cross-regional, cross-industry and cross-organization blockchain interconnection, promote the circulation of trusted data, and help promote the industry Rapid development.
02
Won the "2020 Trusted Blockchain Annual Outstanding Cases"
The list of "2020 Trusted Blockchain Annual Outstanding Cases" was released at the summit . The "China Unicom·Digital City Data Asset Protection and Trading Platform" case jointly applied by Zhigui Technology and China Unicom Planning Institute won the "2020 Trusted Blockchain Annual Potential Case" award after strict review.
"Trusted Blockchain Annual Outstanding Cases" is a selection event that collects implementation cases from the whole society. It aims to three-dimensionally demonstrate the role of blockchain technology in promoting the real economy and highlight the impact of enterprises on the chain to help the real economy. real results. Experts and scholars from a third-party independent organization conduct a comprehensive evaluation on the scientificity, professionalism, practicality, intelligence and other aspects of the project to select the annual "high-value cases" and "potential cases". This year, a total of 10 high-value cases and 12 potential cases were selected.
03
Participated in the compilation of the "White Paper on Blockchain Innovation and Intellectual Property Development"
The main forum released the "White Paper on Blockchain Innovation and Intellectual Property Development" (2020)》. This white paper is produced byThe China Academy of Information and Communications Technology took the lead and was jointly compiled by 13 units including Ant Technology, Tencent, UMP, and Zhigui Technology. Zhigui Technology Yang Zhen, Chen Chang, and Yang Wentao participated in the writing.
04
Outstanding Contributors of the Trusted Blockchain Promotion Plan in 2020
At the summit dinner, the Trusted Blockchain Promotion Plan actively participated in this year’s Individuals who have made outstanding contributions to the establishment of blockchain technology industry standards and the promotion of blockchain application implementation were commended. Chen Chang, CEO of Zhigui Technology, was honored to be selected.
Wonderful moments of Zhigui Technology
Chen Chang, CEO of Zhigui Technology, attended the launch ceremony of "Trusted Chain Network"
Zhigui Technology won the "2020 Trusted Chain Network" "Blockchain Potential Case of the Year" Award
Zhigui Technology Product Manager Mao Haowei (first from left) won the "Best Style Award" at the summit dinner
IV Blockchain public chain development is very Is it difficult? How many domestic companies can do it?
Blockchain is a new application model of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, and encryption algorithm. Blockchain is an important concept of Bitcoin. It is essentially a decentralized database. As the underlying technology of Bitcoin, it is a series of data blocks generated using cryptographic methods. Each The data block contains information about a batch of Bitcoin network transactions and is used to verify the validity of the information (anti-counterfeiting) and generate the next block.
The biggest problem if such technology is to be put into use is the "impossible triangle problem"
That is, it cannot achieve scalability (Scalability) and decentralization (Decentralization) at the same time. ), security (Security), you can only get two of the three.
Most of the public chain projects currently on the market are difficult to put into use on a large scale.
IV Is blockchain project testing reliable?
Answer: Blockchain project testing can be reliable, but the testing process and Test Methods. Explain the reason: As an emerging technology, blockchain technology is receiving more and more attention and applications. The testing of blockchain projects is also a very important part and is a necessary link to ensure the success of the project. Due to the complexity and security of blockchain projects, testing requires a lot of time and energy, and requires very rigorous testing processes and methods. If testers lack the necessary professional skills, make mistakes in the testing process or use improper testing methods, problems and loopholes may easily occur, which may even lead to project failure or losses. Expanded content: Current blockchain project testing faces various challenges and difficulties, such as emerging new technologies and new application scenarios, the project itselfThe complexity and security, the instability of the test environment, etc. In response to these problems, scientific and reasonable testing methods and tools need to be used to ensure the accuracy and effectiveness of test results, so as to discover and repair defects and loopholes in the project. In addition, testing also needs to work closely with development and operation and maintenance to form an entire testing system to strengthen the integrity and consistency of the testing process and testing strategy.
VI Are 10 cases of blockchain changing existing business
This article introduces the current 10 main usage scenarios of blockchain:
(1) Tracking global supply Products in the chain;
is a typical usage scenario of blockchain technology in security traceability. It can promote information tracking, query, verification and anti-counterfeiting of commodity circulation, and can significantly improve the efficiency of some links. However, the role of the blockchain can only be reflected in the chain, but it cannot cover the parts operated by people below the chain.
(2) Guarantee 3D printing quality and tracking;
(3) Create personalized and lifelong “one-stop” medical records;
Blockchain healthcare can track anyone’s complete medical history, such as medications , illnesses, injuries, and transactions across health systems, physicians, pharmacies, and health plans, and empowering patients to control their own data. Blockchain can also transfer insurance payments: smart contracts can automatically trigger insurance provisions when a clinic confirms a patient has received treatment, and prevent fraudulent or inaccurate claims. Some startups, such as the UK's Medicalchain, blockchain company Gem, MIT and other companies and universities are experimenting with this use.
(4) Simplify trade logistics;
Traditional trade involves complex import and export procedures, and all participants in the entire chain require a large number of paper documents to interact, resulting in high communication costs. Blockchain can optimize this system. Maersk and IBM have created a platform that integrates services such as liner, warehouse, freight forwarding, ports, customs, exporters, importers and trade finance banks into the trade ecosystem, on a data exchange platform running on the blockchain interoperate.
(5) Facilitate and secure customs trade;
Blockchain has been tested in many customs departments, including the United Kingdom, South Korea, Singapore, Costa Rica, Mexico, Peru and the 15-nation East African Group. In 2017, U.S. Customs developed 14 use cases for blockchain, which are currently being tested and evaluated. Blockchain will be particularly useful for the UK: when the UK leaves the EU customs union, its number of customs declarations will increase from 55 million to over 250 million (non-EU trade plus EU trade, which previously did not require customs documents), which is currently the case with UK software The program cannot fully handle it. Blockchain can help: It can trace the origins of products and help determine the origin and appropriate tariffs for goods, such as those destined to join the European Union’s tariff package. For the UK’s 28 border agencies, imported products such as food, safety and intellectual property compliance need to be analyzed, and blockchain projects can be shared securely and transparently in real time.
(6) Prevent voting fraud and protect voters’ identities;
Blockchain security and identity protection capabilities can reduce fraud and encourage voters to trust that their votes are anonymous,
increasing turnout and making elections more immediate. Using the technology, voters can scan their thumbs with their smartphones and cast their ballots during their Election Day commute. If everyone votes via the blockchain, no one can vote twice. Voting records are inviolable, and the ID of each ballot is recorded instantly at every polling location.
(7) Launch crop insurance for farmers;
Crop insurance customized to specific farmer needs is often very expensive, and blockchain technology can reduce costs by determining trigger conditions and automating execution. For example, farmers can insure against extreme weather. If extreme weather affects a harvest, a blockchain-based insurance contract would immediately recognize this and pay the farmer’s claim.
Establishing a network of energy producers and users;
Decades ago, some companies introduced smart grids to provide intermediary services for energy producers and demanders. Now, blockchain can optimize smart grids and provide energy producers and consumers with a regional intermediary energy trading platform. TenneT and Brooklyn-based startup LO3 Energy are both trying this business.
(9) Create smart cities that can operate independently;
Blockchain can now amplify the impact of Douyou IoT on city operations. For example, Dubai has a pilot project to implement blockchain in city services. Dubai plans to use blockchain for more than 100 million annual government documents by 2020, including all visa applications, bill payments and license renewals.
(10) Automatic payment to the exporter when the goods arrive at the foreign buyer;
Blockchain changes the information asymmetry in existing international trade by allowing both parties to the transaction to access the same data and real-time digital files question. There is no need to store multiple copies of the same document across different databases for different entities. When goods arrive marked by sensors connected to the smart contract, a transfer of money from the buyer to the seller is automatically triggered.
2. Ten major problems currently faced by the blockchain industry and their analysis
2.1. Is the data on the blockchain really immutable?
Can one of the core features of blockchain, "anti-tampering", really be realized? And is "tamper-proof" really beneficial?
The report pointed out that the blockchain is not completely immutable, and gave three weaknesses of the blockchain:
(2) It may be hacked, and 51% of the chain is controlled by people who want to tamper with the results.
(3) The "garbage of garbage" problem has existed for centuries. The value of a blockchain depends on the data on the chain, and data entered into the blockchain may be inaccurate or fraudulent. One solution is to use sensors instead of manually entering data.
The so-called "51% attack" is to take advantage of computing power to cancel payment transactions that have already occurred. If someone masters more than 50% of the computing power, he can find the random numbers needed to mine the block faster than others, so he actually has the absolute and effective right to decide which block. From a technical perspective, a 51% attack is achievable, but the cost is very high for the earliest cryptocurrencies such as BTC, and they have built a huge network, which is why BTC’s network has remained stable for 10 years. But with other counterfeit currencies, the risk is greater.
In addition, there is no direct benefit for the attacker to simply launch a 51% attack, and it must be linked to specific short selling and false recharge. Specifically, it is often a double spend on a certain transaction. The attacker stops attacking once. Continuous attacks are costly and will stop once successful; second, the community can issue an emergency pudding and add checkpoints to the blockchain. The community urgently agreed that the attacker’s blockchain was invalid. Therefore, there are many ways to deal with the 51% attack, and it will not be the end of the world for a blockchain.
2.2. Who owns and maintains the blockchain? And who asked about the appearance?
Responsible for problems and losses?
Since the blockchain is a decentralized user community, who will maintain it? Shouldn’t it require human adjustment and maintenance just like a website?
For permissioned chains, such as alliance chains and private chains, there is no need for incentives such as tokens to motivate people to manage, there is a manager who manages the entire network. Since there are fewer users in the network, coordination costs are relatively low. However, such networks are susceptible to security challenges, and as the number of network users increases, coordination costs will increase.
For consortium chains and private chains, since they are still very centralized organizations, the verification nodes are identified by the organization itself, so the management model is not very different from traditional centralized institutions. However, for public chains, there is no leader who coordinates the entire network system, and only relies on token incentives to coordinate different interest groups, which undoubtedly increases the instability of the entire ecosystem. At present, the development of the blockchain industry is in a very early stage. In addition to the relatively mature decentralized governance of BTC, in the governance of public chains such as ETH and EOS, the founder development team plays a very core role and is the "rules" of the public chain. "Maker", although the entire ecosystem has achieved partial decentralization, the founders still play a pivotal role in the direction of strategic development. Therefore, the author believes that the decentralization of blockchain can only be an ultimate goal that is constantly approaching. From the birth of the project to its maturity, its degree of decentralization should continue to increase, as shown in the figure below. In the early stages of project development, the founder and his development team play an absolute guiding role in the entire ecosystem. As the project ecosystem matures and the number of participants continues to increase, the original development team should gradually weaken its guiding role. The entire network maintenance needs to be decided jointly by all developers and users in the ecosystem. As for the final network problems, they can only be borne by all participants.
Figure: Schematic diagram of the relationship between the degree of centralization and development stages of blockchain projects
2.3. Are smart contracts really smart?
The second reason why smart contracts are not yet that smart is that their entries can be manipulated by evil actors, such as contracting parties or miners who add transaction records to the blockchain's ledger of past transactions. A study shows that 3.4% of ETH smart contracts are vulnerable toto hacker attacks.
Smart contracts can indeed optimize many intermediate programs, but judging from current industry practice, they are far from being called smart. A qualified smart contract should include all possible scenarios. Because the core essence of smart contracts is "to make the most just ruling even in the darkest environment."
The difference between Ethereum and Bitcoin is that Ethereum is Turing complete, and more types of contracts with more complex terms can be implemented through this platform. Of course, the cost of this is that the complex contract content makes it becomes more difficult to analyze. Typically, complexity is directly proportional to the probability of a vulnerability; the higher the complexity, the greater the probability of a vulnerability.
Regarding the concept "code is law" proposed by Ethereum, however, the code has attracted hacker attacks due to its own vulnerabilities, so it is not enough to form the authority of "law". Therefore, it needs the trust and endorsement of the government, lawyers, courts and other intermediary institutions. Compared with coordination, the current contract seems too rough.
2.4. Is there identity theft on the blockchain?
3% of social media accounts are fake, so can fake accounts be created on the blockchain? Can identities on the blockchain be stolen?
Blockchain can create a personal database for users whose data cannot be tampered with, but how to meet the user's "tampering" needs? This may be a paradox in the development of blockchain technology. Regarding user needs, we may need to start from the perspective of on-chain standards and authority management.
2.5． Can blockchains be connected to each other?
One blockchain records the data of an entity or user in one way, while another blockchain records the same data of the same entity or user in another way. In a fragmented system, multiple account books are not connected to each other, which will form a world of "operational islands", or "data islands". Users need to register for multiple systems at the same time to conduct transactions with different people for different purposes.
In view of the value transfer needs of different chains, cross-chain technology is the key, which can effectively connect different alliance chains or private chains, and promote the outward expansion and connection of blockchains. The current mainstream cross-chain technologies include Notary schemes, Sidechains/relays, Hash-locking, Distributed private key control, etc.
2.6. How does the blockchain connect to off-chain databases?
If one party's data and documents are off-chain, and the other party's data and documents are on-chain, can the two parties interact? In the company's database, can half of the company's data on the blockchain interact with the other half of the data?
These challenges are well known and are being addressed. For example, the same queries and analysis can be run in on-chain and off-chain databases. The risk is that data brought from on-chain to off-chain is no longer immutable, and researchers recognize that data security and the ability to aggregate, transform and optimize blockchainOn-chain and off-chain data sets are significant challenges.
2.7. Can blockchain facilitate money laundering?
Money laundering is a huge global problem, amounting to 1-2 trillion US dollars, accounting for approximately 2% - 5% of the total global GDP. Banks and authorities are fighting back, spending about $8 billion a year to combat corruption. Banks around the world require KYC verification.
Due to the anonymous nature of the blockchain, especially the emergence of anonymous coins, BTC has been criticized by many people as a tool for money laundering. However, the anonymity of BTC is only anonymity on the chain. The interaction between people and the chain, and the interaction between BTC and legal currency will leave traces, and it is not as "lawless" as many media have promoted. Each BTC transaction requires the transfer of a corresponding address, and the transaction records of the address can be queried. In addition, the exchange of BTC and legal currency is conducted off-chain and cannot escape supervision. If the actual identity of any party in the transaction is exposed, it will be difficult for all participants in the transaction to escape recourse.
2.8. Will the blockchain consume all the energy in the world?
BTC has an amazing energy demand. Operating Bitcoin for one year requires the energy consumption of Ireland for one year. Because BTC’s POW consensus mechanism requires miners to mine for transaction verification. There are concerns that as the network increases and the value of BTC rises, energy demand will grow rapidly. In fact, miners themselves have incentives to prevent this from happening, and the scalability of the blockchain is limited by availability, energy costs, and the miners' own financial resources. The current alternative is the POS consensus mechanism. The POS mechanism selects validators based on the number of currency holders.
In fact, it can be seen that except for the early batch of cryptocurrencies headed by BTC, the vast majority of current blockchain projects have taken into account the disadvantages of POW and are constantly innovating consensus mechanisms to avoid excessive consumption of energy. Therefore, blockchain is not enough to cause such a huge consumption of energy.
2.9. Will blockchain take our jobs?
Regarding blockchain, if people can trade directly with each other, what impact will blockchain have on intermediaries such as banks and lawyers? Blockchain is unlikely to be a job killer; it will, like any technology, change the nature of work by changing companies’ business and revenue models.
When artificial intelligence becomes popular, people will continue to ask questions like this. On the one hand, we enjoy the convenience that technology brings us, but on the other hand, we are worried that technology will replace us. The biggest challenge of blockchain is not the technology itself, but changing the traditional profit distribution model. Blockchain technology can remove certain intermediary links, break the monopoly of many resources by centralized institutions, and thus change the interest pattern. This is also the most revolutionary point of blockchain.
2.10. Is the United States lagging behind in the development of the blockchain industry?
Globally, the blockchain industry in the United States is still in its infancy. Deloitte surveyed 1,053 executives in financial services, healthcare, technology industries, telecommunications, manufacturing and other industries in 2018. survey, only 14%U.S. respondents believe blockchain is used in their production, compared with 49% in China, 48% in Mexico, 40% in the United Kingdom, and 36% in Canada. Plans are also lagging: 41% of U.S. companies plan to invest $1 million or more in blockchain, compared with 85% in China, 74% in Canada, 72% in the United Kingdom, and 65% in Mexico.
According to the "Blockchain China-U.S. Development White Paper" released by Silicon Valley Insight, North America is comparable to Asia in terms of the number of ICOs. In terms of financing amount, North America is far ahead with 7.85 billion. Therefore, the United States, as a major country in North America, is not lagging behind at all. On the contrary, it is still leading in many aspects.
《Harnessing Blockchain for American Business and Prosperity》
http://forex.hexun.com/2018-06-17/193222543.html
https://jiahao..com/s? id=1606478434369770769&wfr=spider&for=pc
Introduction to Tianjige: Tianjige (LD Research) was established on July 2, 2018. It is a company dedicated to exploring the unknown of science and technology, taking human development as the driving force, and taking "BASE Research for Solving Real" Problems" as the purpose of the research institute.
This article comes from Babbitt
Related questions and answers: What are the uses of blockchain technology in the business field?
What are the uses of blockchain technology in the business field?
In recent years, due to the virtual digital With currency speculation booming, blockchain, as its underlying technology, has also begun to receive widespread attention. Blockchain has the characteristics of decentralization, trustlessness, collective maintenance, and reliable storage. It is currently widely used in the field of virtual currency.
Since the birth of Bitcoin, more than 1,600 virtual currencies have appeared in the world, and a huge industrial chain ecosystem has been formed around the generation, storage, and trading of virtual currencies. But overall, the industry is still in its infancy and is still far away from the real value use area. The core of the blockchain economy lies in the reconstruction of business logic and organizational forms, so it is necessary to obtain practical examples in multiple industries to demonstrate its value. This article will explore the business models used by blockchain in various industries from the perspective of combining blockchain with industry needs.
First of all, the core of blockchain is to solve the problem of credit:
Credit is the foundation of all commercial activities and finance. The United States has implemented trusted identification since 2011, while China has implemented a real-name system to achieve supervised information dissemination. The significance of blockchain is that it has established decentralized trust from a technical level for the first time and realized a completely distributed credit system.
Secondly, blockchain solves the problem of value exchange:
Traditional networks can realize point-to-point transmission of information, but cannot realize point-to-point transmission of value.Point-to-point delivery. Because information is allowed to be copied, and value must be authentic and unique, it is necessary to rely on a centralized organization to achieve value transfer. Blockchain perfectly solves this problem and provides a method to realize point-to-point transfer of value. During the value transfer process, accounting is realized by the network without relying on a centralized institution. Therefore, blockchain is expected to become the infrastructure for building new finance and the cornerstone of the future value Internet.
The use of blockchain
There are currently two main modes of blockchain use:
1) Native blockchain use: directly based on decentralized blockchain technology to realize value Transmission and transaction use, such as digital currency;
2) "Blockchain +" model: combine traditional scenarios with the underlying protocol of the blockchain to improve efficiency and reduce costs. It is expected that the use of blockchain in various industries will be dominated by the second model.
Blockchain has five core attributes, namely: transaction attributes (value attributes), certificate attributes, trust attributes, intelligence attributes, and traceability attributes. The above core attributes are combined with the needs of the industry to solve the industry's pain points and become the business model used by blockchain in various industries.
Blockchain + Bank
1. Cross-border payment
Cross-border payment is a pain point that has long plagued the banking industry. Traditional cross-border payment methods include two major categories: one is online payment, including electronic account payment and international credit card payment, which is suitable for small retail amounts; the other is the bank remittance model, which is suitable for large-amount transactions; both have payment cycles Long, high fees, low transaction transparency and other issues. Especially in recent years, with the rise of cross-border e-commerce, convenient, fast, safe and low-cost cross-border payment has become an urgent need for the industry.
The role of blockchain:
The characteristics of blockchain are deintermediation and open and transparent transactions. There is no third-party payment institution to join, which shortens the payment cycle, reduces fees, and increases transaction transparency. For example, in December 2017, China Merchants Bank teamed up with Wing Lung Bank and Wing Lung Shenzhen Branch to successfully implement cross-border RMB remittances between the three parties using blockchain technology. Its clearing process is safe, efficient and fast, greatly improving customer experience.
2. Supply chain finance
The pain points in this field are the long financing cycle and high costs. Centered on the core enterprise system of the supply chain, it is difficult for third-party credit enhancement institutions to authenticate the authenticity of various relevant vouchers in the supply chain, resulting in long manual review times and high financing costs.
The role of blockchain:
Blockchain introduces consensus mechanism, existence proof, non-tampering, traceability and other features into supply chain finance, and does not require third-party credit enhancement agencies to authenticate various relevant credentials in the supply chain. authenticity, thereby reducing financing costs and shortening the financing cycle. For example, in April 2017, the listed company Yijian and IBM China Research jointly launched the blockchain supply chain financial service system "Yijian Block". The system focuses on pharmaceutical scenarios and currently has more than 30 pharmaceutical distribution companies. Successfully registered in the "Yijian Block". As of the end of July, the number of transactions has been close to 8,000, and the total investment amount has exceeded 100 million yuan..
3. Digital Bills
The pain point of the digital bill industry lies in the long-term problems of “false bills” and “selling more than one ticket”, which have brought risks to the bill financing business of the banking industry.
The role of blockchain:
The existence proof and non-tampering characteristics of blockchain effectively solve the problem of false digital bills; at the same time, blockchain solves the double-spend problem and avoids "one vote". Sell more". For example, Shenzhen Blockchain Financial Services Co., Ltd. issues bill chain products to provide bill financing services based on blockchain to solve the bill financing needs of small, medium and micro enterprises. Cooperative banks include Ganzhou Bank, Guiyang Bank, Suzhou Bank, Shizuishan Bank, Langfang Bank, Wuhai Bank, Jilin Jiutai Rural Commercial Bank, Yaodu Rural Commercial Bank, Shenzhen Rural Industrial Bank, Weifang Bank, Zhongyuan Bank, etc. In addition, Zheshang Bank, JD Finance, Hang Seng Electronics, HNA, etc. are also verifying blockchain digital bill services.
Blockchain + Securities
1. Asset Securitization
Asset securitization uses future income as a guarantee to obtain current financing. The pain points in this field are: there are many participating entities, many operating links, low transaction transparency, information asymmetry, and the authenticity of the underlying assets cannot be guaranteed.
The role of blockchain:
Blockchain introduces attributes such as existence proof, non-tamperability, and consensus mechanism for asset securitization. It can monitor the true situation of assets in real time and solve the problem of the underlying issues of institutions in the transaction chain. Asset trust issues. Various assets such as equity, bonds, bills, income certificates, warehouse receipts, etc. can be integrated into the blockchain and become digital assets on the chain, improving asset circulation efficiency and reducing costs. For example, in May 2017, Internet Finance and partners including Baiqian Leasing and Huaneng Trust jointly issued an asset securitization ABS project supported by blockchain technology, with an issuance scale of 424 million yuan.
Blockchain + Insurance
1. Insurance Business
The insurance industry has problems such as information asymmetry and lack of trust between customers and insurance institutions: it is difficult for users to choose insurance products that suit them, while insurance institutions Face the risk of insurance fraud.
The role of blockchain:
The decentralized, open, transparent, and traceable characteristics of blockchain establish a good communication channel between insurance institutions and users; insurance subject information is managed uniformly on the blockchain , cannot be tampered with, helping insurance institutions avoid the risk of insurance fraud; at the same time, smart contracts can improve work efficiency and reduce costs. For example, French insurance giant AXA is using the Ethereum public blockchain to provide automated flight delay compensation for air travelers. If the flight is delayed for more than 2 hours, the "smart contract" insurance product will automatically pay claims to passengers.
2. Credit information management
The pain point in this field is that credit information agencies have limited data collection channels and a lack of data sharing, which makes it difficult to accurately characterize the credit status of individuals or institutions; in addition, there are also problems in how to guarantee the data collection process. User privacy issues.
The role of blockchain:
Blockchain has the characteristics of trustlessness, consensus, and non-tamperability, and ensures trustworthiness at the technical level.To achieve limited and controllable credit data sharing and verification on the basis of effectively protecting user privacy. For example, Ping An's blockchain credit reporting business is now online. In addition, domestic startups such as Shanghai Juzhen, LinkEye, Bubi Blockchain, etc. are also exploring joint credit reporting and safe certificate storage.
As a basic technology, blockchain has great use value in many industries with distributed processing, peer-to-peer transactions, and rapid establishment of trust relationships. Its core is to solve the problem of credit and realize Point-to-point delivery of value. Therefore, it is considered to be the cornerstone of the future value Internet.
The core of the blockchain business model is to use the innovative attributes introduced by the blockchain and combine it with traditional industry uses to realize the reconstruction of business logic in order to create new usage scenarios, or improve efficiency and reduce costs.
It is expected that the use of blockchain will first start in the pan-financial field that has high requirements for credit, efficiency, and security: the financial industry pays more attention to efficiency and security, and blockchain has a high degree of matching with its pain points, and can be used for Systematically solve trust issues, efficiency issues, default risks, etc. that exist in all aspects of financial services; blockchain’s attributes such as “transaction, certificate storage, and traceability” are more likely to generate value in the financial industry. At the same time, the market space in the financial industry is huge, and small progress can bring huge benefits.
Blockchain will also extend to all areas of social life: Blockchain solves problems such as the management, transaction, and transfer of digital assets, and therefore will play an important role in the wave of asset digitization, such as supply chain management, data Applications such as services, asset management, public services, and the Internet of Things are gradually being implemented in various fields, and "blockchain+" is becoming a reality.
Ⅶ Blockchain and smart contracts, Ethereum development, compiled by 183 developers, summary of knowledge system
Available tools, components, patterns and platforms for developing applications on Ethereum guide.
The creation of this list was driven by product managers at ConsenSys who saw a need for better sharing of tools, development patterns, and components between new and experienced blockchain developers.
Develop smart contracts
Smart contract language
Architecture
IDE
Other tools
< p> Test the blockchain networkTest the Ethereum faucet
Front-end Ethereum API
Back-end Ethereum API
Bootloader/Out-of-the-Box Tools
Ethereum ABI (Application Binary Interface) Tools
Ethereum Client
Storage
Mahuta -IPFS storage service with additional search capabilities, formerly known as IPFS-Store
OrbitDB - Decentralized database on top of IPFS
JS IPFS API - Client library for the IPFS HTTP API , implemented in JavaScript
TEMPORAL - Easy-to-use API to IPFS and other distributed/decentralized storage protocols
PINATA - The easiest way to use IPFS
Messaging
Testing Tools
Security Tools
Monitoring
Miscellaneous Tools
Cheshire - CryptoKitties API and a native sandbox implementation of smart contracts, available as a Truffle Box
ERCs - Ethereum Comment Request Repository
ERC-20 - Original Token Contract for Fungible Assets
p>ERC-721 - A token standard for non-fungible assets
ERC-777 - An improved token standard for fungible assets
ERC-918 - Mineable tokens Standards
Popular smart contract libraries
Scalability
Payment/State Channels
Plasma
Sidechain
POA Bridge
POA Bridge User Interface
POA Bridge Contract
ZK-SNARK
ZK -STARK
Pre-built UI components
The above content is from the git library:
github.com/ConsenSys/ethereum-developer-tools-list
I am Yu Ge, a full-stack programmer starting a business in Shenzhen, focusing on blockchain, metaverse and smart contracts, as well as additional small programs and app development.
[Prayer]
