CN114969788A - Service contract authority control method, device and equipment - Google Patents

Abstract

The application discloses a method, a device and equipment for controlling service contract authority, which can be applied to the field of block chains. The target committee member node invokes the rights contract to create a target rights control group. The target permission control group includes a member list and a function list, and members in the member list have a permission to call functions in the function list. The contract address of the rights contract is updated as the members in the member list or the functions in the function list change. The target committee member node invokes the rights contract to add the target member to the member list of the target rights control group and invokes the rights contract to add the target function of the target business contract to the function list of the target rights control group. The target member has authority to invoke a target function of the target business contract. The authority contract and the target service contract are arranged on each node of the block chain, and an authority contract address is embedded in the target service contract. Therefore, the updating process of the user authority relationship is simplified.

Description

A business contract authority control method, device and device

technical field

The present application relates to the field of Internet technologies, and in particular, to a method, device and device for controlling the authority of a business contract.

Background technique

With the increasing enrichment of blockchain smart contract business, more and more smart contracts have introduced permission control, which can meet the security requirements of the business. For example, some functions should only be called by users who have permission to use the function.

At present, a permission parameter table can be set, and the functions in the business contract that the user can access can be determined through the permission parameter table. Furthermore, the permission checking code is embedded in the business contract. When a user calls a function on the blockchain business contract, the permission check code in the business contract is executed, and based on the permission parameter table, it is judged whether the user has the permission to call the function, so as to realize permission control.

However, since the permission checking code is embedded in the business contract, every time the user permission relationship needs to be changed, the business contract needs to be changed, which makes the process of changing the user permission when the permission is changed is cumbersome and inefficient.

SUMMARY OF THE INVENTION

In view of this, the embodiments of the present application provide a method, device, and device for controlling the authority of a service contract, which can simplify the updating process of the user authority relationship.

In order to solve the above problems, the technical solutions provided by the embodiments of the present application are as follows:

The embodiment of the present application provides a business contract authority control method, and the method is applied to a target committee member node, including:

Call the authority contract to create the target authority control group in the authority contract; the authority contract is deployed on each node of the blockchain; the target authority control group includes a member list and a function list; the target authority control group's The members in the member list have the right to call the functions in the function list of the target permission control group; the contract address of the permission contract will be updated with the changes of the members in the member list or the functions in the function list ;

Call the permission contract to add the target member to the member list of the target permission control group;

Call the authority contract to add the target function of the target business contract to the function list of the target authority control group, so that the target member has the authority to call the target function of the target business contract; the target business contract is deployed in On each node of the blockchain; the target business contract is embedded with the contract address of the permission contract.

Optionally, the authority contract includes a committee establishment function, and the committee establishment function is used to be called by the authority contract deployment node to establish a committee and generate a voting pass threshold and committee member node information of the committee; the committee of the committee. The member node information includes the member name of the committee member node, the account address of the committee member node, and the voting weight of the committee member node; the target committee member node is a member node in a pre-established committee.

Optionally, the authority contract further includes an application item function, a committee member voting function, and an execution item function.

Optionally, the application item function includes an application creation group function, the execution item function includes an execution creation group function, and the invocation of a permission contract to create a target permission control group in the permission contract includes:

Calling the application creation group function to generate a first request; the first request is a request for an application to create a target authority control group;

calling the committee member voting function so that each committee member node in the committee votes on the first request;

When the voting result corresponding to the first request is greater than the voting pass threshold, the execute and create group function is called to create the target permission control group in the permission contract.

Optionally, the application item function includes an application member adding function to a group, the execution item function includes an execution member adding a group function, and the calling authority contract is used to add the target member to the member list of the target authority control group, include:

Calling the application member adding function to generate a second request; the second request is a request for applying to add the target member to the member list of the target authority control group;

calling the committee member voting function so that each committee member node in the committee votes on the second request;

When the voting result corresponding to the second request is greater than the voting pass threshold, the execution member adding into group function is called to add the target member to the target permission control group.

Optionally, the application item function includes an application function add-in-group function, the execution-item function includes an execution function addition-in-group function, and the calling authority contract is used to add the target function of the target business contract to the target authority control. The group's list of functions includes:

Calling the application function to add a function to the group to generate a third request; the third request is a request to apply for adding the target function of the target business contract to the function list of the target authority control group;

calling the committee member voting function so that each committee member node in the committee votes on the third request;

When the voting result corresponding to the third request is greater than the voting pass threshold, the execution function is called to add a group function to add the target function of the target business contract to the function list of the target authority control group.

Optionally, the voting result corresponding to the third request is obtained according to the voting situation of each committee member node in the committee on the third request and the voting weight of each committee member node.

The embodiment of the present application also provides a service contract authority control device, and the device is applied to a target committee member node, including:

The first calling unit is used to call the authority contract to create a target authority control group in the authority contract; the authority contract is deployed on each node of the blockchain; the target authority control group includes a member list and a function list; The members in the member list of the target authority control group have the authority to call the functions in the function list of the target authority control group; the contract address of the authority contract will follow the members in the member list or the function list. updated with changes in the function in;

The second calling unit is used to call the permission contract to add the target member to the member list of the target permission control group;

a third calling unit, configured to call the authority contract to add the target function of the target business contract to the function list of the target authority control group, so that the target member has the authority to call the target function of the target business contract; The target business contract is deployed on each node of the blockchain; the target business contract is embedded with the contract address of the authority contract.

The embodiment of the present application also provides an electronic device, including:

one or more processors;

a storage device on which one or more programs are stored,

When the one or more programs are executed by the one or more processors, the one or more processors implement the service contract permission control method described in any of the above.

Embodiments of the present application further provide a computer-readable medium on which a computer program is stored, wherein when the program is executed by a processor, any one of the foregoing business contract authority control is implemented.

It can be seen that the embodiments of the present application have the following beneficial effects:

The embodiments of the present application provide a method, device, and device for controlling the authority of a business contract, and the method is applied to a target committee member node. The target committee member nodes call the permission contract to create the target permission control group. Among them, the permission contract is deployed on each node of the blockchain. The target authority control group includes a member list and a function list, and members in the member list of the target authority control group have the right to call functions in the function list of the target authority control group. The contract address of the permission contract will be updated with the changes of members in the member list or functions in the function list. Further, the target committee member node calls the permission contract to add the target member to the member list of the target permission control group, and calls the permission contract to add the target function of the target business contract to the function list of the target permission control group. Thus, the target member has the right to call the target function of the target business contract. Among them, the target business contract is also deployed on each node of the blockchain, and the contract address of the permission contract is embedded in the target business contract.

It can be seen from this that the embodiment of the present application separates the authority contract and the target business contract from each other. When a member in the member list or a function in the function list changes, it means that the user authority relationship has changed, and the contract address of the authority contract will correspond accordingly. changes. On this basis, it is only necessary to update the contract address of the permission contract embedded in the target business contract, without changing the business contract. In this way, the updating process of the user authority relationship is simplified.

Description of drawings

FIG. 1 is a schematic framework diagram of an exemplary application scenario provided by an embodiment of the present application;

FIG. 2 is a flowchart of a method for controlling service contract authority provided by an embodiment of the present application;

FIG. 3 is a schematic framework diagram of another exemplary application scenario provided by an embodiment of the present application;

FIG. 4 is a schematic structural diagram of a service contract authority control apparatus according to an embodiment of the present application.

Detailed ways

In order to make the above objects, features and advantages of the present application more clearly understood, the embodiments of the present application will be described in further detail below with reference to the accompanying drawings and specific implementation manners.

In order to facilitate understanding and explanation of the technical solutions provided by the embodiments of the present application, the background technologies involved in the embodiments of the present application are first introduced.

With the increasing enrichment of blockchain smart contract business, more and more smart contracts have introduced permission control, which can meet the security requirements of the business. For example, in the certificate deposit scenario, in addition to the function for uploading the deposit certificate, there are many functions specially called by auditors. Permission blocking logic needs to be set up on these functions so that these functions should only be used by auditors. Otherwise, there will be data security risks.

At present, a permission parameter table can be set, and the functions in the business contract that the user can access can be determined through the permission parameter table. Furthermore, the permission checking code is embedded in the business contract. When a user calls a function on the blockchain business contract, the permission check code in the business contract is executed, and based on the permission parameter table, it is judged whether the user has the permission to call the function, so as to realize permission control.

However, since the permission checking code is embedded in the business contract, every time the user permission relationship needs to be changed, the business contract needs to be changed, which makes the process of changing the user permission when the permission is changed is cumbersome and inefficient. Moreover, the change of the permission parameter table is only determined by the administrator of the administrator mode, which does not reflect the characteristics of multi-party cooperation of the blockchain.

Based on this, the embodiments of the present application provide a method, device, and device for controlling permissions of a business contract, and the method is applied to a target committee member node. The target committee member nodes call the permission contract to create the target permission control group. Among them, the permission contract is deployed on each node of the blockchain. The target authority control group includes a member list and a function list, and members in the member list of the target authority control group have the right to call functions in the function list of the target authority control group. The contract address of the permission contract will be updated with the changes of members in the member list or functions in the function list. Further, the target committee member node calls the permission contract to add the target member to the member list of the target permission control group, and calls the permission contract to add the target function of the target business contract to the function list of the target permission control group. Thus, the target member has the right to call the target function of the target business contract. Among them, the target business contract is also deployed on each node of the blockchain, and the contract address of the permission contract is embedded in the target business contract.

In order to facilitate the understanding of the service contract authority control method provided by the embodiment of the present application, the following description is made with reference to the scenario example shown in FIG. 1 . Referring to FIG. 1 , this figure is a schematic frame diagram of an exemplary application scenario provided by an embodiment of the present application. The business contract permission control method is applied to the target committee member nodes. It can be understood that the target committee member node is a node on the blockchain.

As shown in Figure 1, the role layer includes ordinary users and managers. The contract layer includes business contracts and permission contracts. The permission layer includes permission control groups. Among them, the governor can operate the authority contract, and the governor includes the target committee member nodes. Permission contracts contain permission control groups.

In practical applications, if an ordinary user wants to call a function in a business contract, he needs to send an authentication request to the permission contract, and the permission contract needs to determine whether the ordinary user has the permission to call the function in the business contract.

In the embodiment of the present application, the target committee member node invokes the authority contract to create the target authority control group. Among them, the permission contract is deployed on each node of the blockchain. The target authority control group includes a member list and a function list, and members in the member list of the target authority control group have the right to call functions in the function list of the target authority control group. The contract address of the permission contract will be updated with the changes of members in the member list or functions in the function list.

Further, the target committee member node calls the permission contract to add the target member to the member list of the target permission control group, and calls the permission contract to add the target function of the target business contract to the function list of the target permission control group.

Thus, the target member has the right to call the target function of the target business contract. Among them, the target business contract is also deployed on each node of the blockchain, and the contract address of the permission contract is embedded in the target business contract.

Based on the above, when the permission contract determines whether the ordinary user has the permission to call the function in the business contract, it can determine whether the ordinary user is in the user list in the permission control group and whether the function in the business contract is in the same permission control group. If all are in the list, the ordinary user has the right to call the function in the business contract.

Those skilled in the art can understand that the schematic diagram of the framework shown in FIG. 1 is only an example in which the embodiments of the present application can be implemented. The scope of application of the embodiments of the present application is not limited by any aspect of this framework.

In order to facilitate the understanding of the present application, a business contract authority control method provided by the embodiments of the present application will be described below with reference to the accompanying drawings.

Referring to FIG. 2 , this figure is a flowchart of a method for controlling permission of a service contract provided by an embodiment of the present application. This method can be applied to the target committee member nodes of the above embodiments. As shown in Figure 2, the method may include S201-S203:

S201: Call the permission contract to create the target permission control group in the permission contract; the permission contract is deployed on each node of the blockchain; the target permission control group includes a member list and a function list; the members in the member list of the target permission control group have The permission to call the function in the function list of the target permission control group; the contract address of the permission contract will be updated with the changes of members in the member list or functions in the function list.

In practical applications, the permission contract is written first. The permission contract includes the establishment of the committee function, the application item function, the committee member voting function, and the execution item function. After writing the permission contract, the permission contract deployment node deploys the permission contract to each node of the blockchain and obtains the contract address of the permission contract. The permission contract deployment node is the node on the blockchain.

Among them, the establishment committee function is used to be called by the permission contract deployment node to establish the committee and generate the voting threshold and the committee member node information of the committee. The committee member node information of the committee includes the member name of the committee member node, the account address of the committee member node, and the voting weight of the committee member node. In addition, the committee member node can vote on some matters when the committee member voting function of the permission contract is called. For details, please refer to A1-A3, B1-B3, C1-C3, etc. below.

In this embodiment of the present application, the target committee member node is a member node in a pre-established committee. The target committee member node calls the permission contract to create the target permission control group in the permission contract. The target permission control group includes a member list and a function list. The member list stores the member name of the member, and the function list stores the function name and the contract address of the business contract to which the function name belongs. It can be understood that, in addition to the target permission control group, other permission control groups can also be established according to actual conditions. For example, create permission control group A and permission control group B. The members in the member list of authority control group A are user A and user B, and the function list of authority control group A stores function 1, function 2, function 3 and the contract addresses of the business contracts to which each function belongs. The members in the member list of permission control group A are both user A and user B, and the function list of permission control group A stores function 4, function 5 and the contract address of the business contract to which each function belongs.

Members in the member list of the target permission control group have permission to call functions in the function list of the target permission control group. When the member list and function list are initially constructed, the member list and function list are empty. Thus, members can be added to the member function list, and functions can be added to the function list, so that members in the member list of the authority control group can call functions in the function list of the same authority control group.

It should be noted that the contract address of the permission contract will be updated with the changes of members in the member list or functions in the function list. When a member/members are added or deleted from the member list, or when a function/functions are added or deleted from the function list, the code of the permission contract will change, and the contract address of the permission contract will change.

It can be understood that, in this embodiment of the present application, the permission contract is used to manage the function usage permission in the business contract. The purpose of the permission control group is to provide permission control functions, so as to realize the interception of illegal calls to business contract functions.

In a possible implementation manner, the embodiment of the present application provides a specific implementation manner of invoking a permission contract to create a target permission control group in the permission contract. For details, please refer to A1-A3 below.

S202: Invoke the permission contract to add the target member to the member list of the target permission control group.

After the target permission control group is created, the target committee member node can call the permission contract to add the target member to the member list of the target permission control group. In this embodiment of the present application, the target member is a target member node, which is referred to as a target member for short.

In a possible implementation manner, the embodiment of the present application provides a specific implementation manner of invoking a permission contract to add a target member to the member list of the target permission control group, for details, please refer to B1-B3 below.

S203: Call the authority contract to add the target function of the target business contract to the function list of the target authority control group, so that the target member has the authority to call the target function of the target business contract; the target business contract is deployed on each node of the blockchain Above; the contract address of the permission contract embedded in the target business contract.

Write the target business contract and add the contract address of the permission contract to the target business contract to associate the target business contract with the permission contract, which means that the target business contract is controlled by the permission contract. After writing the target business contract, deploy the target business contract on each node of the blockchain, and obtain the contract address of the target business contract. As an optional example, the contract address of the target business contract is used for the target user to call the contract address of the target business contract first when calling the target function in the target business contract.

After the target permission control group is created, the target committee member node can call the permission contract to add the target function of the target business contract to the function list of the target permission control group. During specific implementation, the contract address of the target business contract and the target function need to be added to the function list of the target permission control group. In this way, the target member in the member list of the target authority control group has the authority to call the target function of the target business contract in the function list of the target authority control group.

It can be understood that when the contract address of the permission contract changes, the contract address of the permission contract embedded in the target business contract is updated.

In a possible implementation manner, the embodiment of the present application provides a specific implementation manner of calling the authority contract in S203 to add the target function of the target business contract to the function list of the target authority control group. For details, please refer to C1 below. -C3.

After the target member is added to the member list of the target authority control group and the target function of the target business contract is added to the function list of the target authority control group, the target member can be tested. Use the account address of the target member to call the business address of the target business contract to call the target function in the target business contract, generate an authentication request and send it to the authority contract. The permission contract is based on judging whether the target member is stored in the member list of each permission control group, and whether the target function is stored in the function list of each permission control group. When the target member is stored in the member list, the target function is stored in the function list, and the member list and the function list belong to the same authority control group, that is, the target authority control group, it is determined that the target member has the authority to call the target function of the target business contract. Based on this, the result is that the call succeeded. Otherwise, when there is no target member stored in the member list of any permission control group, the target function is not stored in the function list of any permission control group, the member list that stores the target member, and the function list that stores the target function does not belong to The call fails when one of these three conditions occurs for the same permission control group.

Based on the contents of S201-S203, it can be seen that the basic process of the embodiment of the present application includes the writing and deployment of the authority contract, the invocation of the authority contract, the association between the target business contract and the authority contract, the deployment of the target business contract, the invocation of the authority contract, testing, etc. . It is understandable that the permission contract and the target business contract are independent of each other. If the permission contract changes, you only need to modify the contract address of the permission contract introduced in the target business contract to realize the interface permission control for different roles, thereby intercepting illegal function calls. . In this way, the updating process of the user authority relationship is simplified.

As an optional example, the application item function includes the application creation group function, and the execution item function includes the execution creation group function. Based on this, in a possible implementation manner, the embodiment of the present application provides a specific implementation manner of invoking the authority contract in S201 to create a target authority control group in the authority contract, including:

A1: Call the application creation group function to generate the first request; the first request is the request to apply for the creation of the target permission control group.

The target committee member node submits an application to create a permission control group, and generates the first request by calling the application creation group function in the permission contract. The first request is a request for creating a target permission control group.

A2: Call the committee member voting function so that each committee member node in the committee votes on the first request.

Furthermore, the target committee member node invokes the committee member voting function, so that each committee member node in the committee votes on the first request, and obtains the voting status of each committee member node on the first request. For example, the voting status of the committee member nodes for the first request is 1 or 0. 1 indicates that they agree to create the target permission control group in the permission contract, and 0 indicates that they do not agree to create the target permission control group in the permission contract.

A3: When the voting result corresponding to the first request is greater than the voting pass threshold, call and execute the create group function to create the target permission control group in the permission contract.

In a possible implementation manner, the voting result corresponding to the first request is obtained according to the voting status of each committee member in the committee on the first request and the voting weight of each committee member. Specifically, the voting results of the committee members on the first request and the voting weights of the committee members may be weighted and summed to obtain a voting result corresponding to the first request.

It can be understood that the threshold for passing the vote is preset, and the embodiment of the present application does not limit the specific value of the threshold for passing the vote.

As an optional example, when the voting result corresponding to the first request is greater than the voting pass threshold, the target committee member node calls and executes the create group function to create the target permission control group in the permission contract.

As another optional example, after obtaining the voting status of each committee member node for the first request, it can be automatically determined whether the voting result corresponding to the first request is greater than the voting pass threshold, and when the voting result corresponding to the first request is greater than the voting passing threshold When the threshold is reached, the execute group creation function is automatically called to create the target permission control group in the permission contract. That is, the A2 and A3 steps are combined.

Based on the contents of A1-A3, in the embodiment of the present application, the creation of the target authority control group in the authority contract is not decided by one party, but by each committee member node of the committee. Only the committee votes exceed the voting pass threshold. The operation of creating the target authority control group is performed only when the target permission control group is created, which is in line with the idea of multi-party consensus in the blockchain.

As an optional example, the application item function includes the function of applying for adding a member into the group, and the execution item function includes the executing member adding into the group function. Based on this, in a possible implementation manner, the embodiment of the present application provides a specific implementation manner of invoking the authority contract in S202 to add the target member to the member list of the target authority control group, including:

B1: Call the function for adding an application member to a group to generate a second request; the second request is a request for applying for adding the target member to the member list of the target authority control group.

The target committee member node submits an application for adding the target member to the member list of the target authority control group, and generates a second request by calling the application member add-in group function in the authority contract. The second request is a request for adding the target member to the member list of the target authority control group.

B2: Call the committee member voting function so that each committee member node in the committee votes on the second request.

Furthermore, the target committee member node invokes the committee member voting function, so that each committee member node in the committee votes on the second request, and obtains the voting status of each committee member node on the second request. For example, the voting status of the committee member nodes for the second request is 1 or 0, 1 indicates that the target member is agreed to be added to the member list of the target authority control group, and 0 indicates that the target member is not agreed to be added to the member list of the target authority control group middle.

B3: When the voting result corresponding to the second request is greater than the voting pass threshold, call the execution member adding function to add the target member to the target authority control group.

In a possible implementation manner, the voting result corresponding to the second request is obtained according to the voting status of each committee member in the committee on the second request and the voting weight of each committee member. Specifically, the voting results of the committee members on the second request and the voting weights of the committee members may be weighted and summed to obtain a voting result corresponding to the second request.

As an optional example, when the voting result corresponding to the second request is greater than the voting pass threshold, the target committee member node invokes the executive member add-in-group function to add the target member to the target permission control group.

As another optional example, after obtaining the voting status of each committee member node on the second request, it can be automatically determined whether the voting result corresponding to the second request is greater than the voting pass threshold, and when the voting result corresponding to the second request is greater than the voting passing threshold When the threshold is reached, the function of adding members to the group is automatically called to add the target member to the member list of the target permission control group. That is, the B2 and B3 steps are combined.

Based on the contents of B1-B3, in the embodiment of the present application, the member change of the member list of the target authority control group is not determined by one party, but determined by each committee member node of the committee. Only when the number of committee votes exceeds the voting pass threshold , in order to perform the operation of adding the target member to the target authority control group, which is in line with the idea of multi-party consensus in the blockchain.

As an optional example, the application item function includes an application function adding a group function, and the execution item function includes an execution function adding a group function. Based on this, in a possible implementation manner, the embodiment of the present application provides a specific implementation manner of invoking the authority contract in S203 to add the target function of the target business contract to the function list of the target authority control group, including:

C1: Call the application function to add the function into the group to generate a third request; the third request is a request to apply for adding the target function of the target business contract to the function list of the target authority control group.

The target committee member node submits an application for adding the target function of the target business contract to the function list of the target authority control group, and generates a third request by calling the application function in the authority contract to add the function to the group. The third request is a request for adding the target function of the target business contract to the function list of the target authority control group.

C2: Call the committee member voting function so that every committee member node in the committee votes on the third request.

Furthermore, the target committee member node calls the committee member voting function, so that each committee member node in the committee votes on the third request, and obtains the voting status of each committee member node on the third request. For example, the voting status of the committee member nodes for the third request is 1 or 0, 1 indicates that they agree to the request to add the target function of the target business contract to the function list of the target authority control group, and 0 indicates that they do not agree to add the target function of the target business contract to the function list of the target authority control group. A request for a function to be added to the target permission control group's list of functions.

C3: When the voting result corresponding to the third request is greater than the voting pass threshold, call the execution function to add the group function to add the target function of the target business contract to the function list of the target permission control group.

In a possible implementation manner, the voting result corresponding to the third request is obtained according to the voting status of each committee member node in the committee on the third request and the voting weight of each committee member node. Specifically, the voting results of the committee members on the third request and the voting weights of the committee members may be weighted and summed to obtain a voting result corresponding to the third request.

As an optional example, when the voting result corresponding to the third request is greater than the voting pass threshold, the member node of the target committee calls the execution function to add the group function to add the target function of the target business contract to the function of the target permission control group List.

As another optional example, after obtaining the voting status of each committee member node for the third request, it can be automatically determined whether the voting result corresponding to the third request is greater than the voting pass threshold, and when the voting result corresponding to the third request is greater than the voting passing threshold When the threshold is reached, the execution function is automatically called to add the group function to add the target function of the target business contract to the function list of the target permission control group. That is, the C2 and C3 steps are combined.

Based on the contents of C1-C3, in this embodiment of the present application, the function change of the function list of the target authority control group is not determined by one party, but by each committee member node of the committee. Only when the number of committee votes exceeds the voting pass threshold , in order to execute adding the target function of the target business contract to the function list of the target authority control group, which is in line with the idea of multi-party consensus in the blockchain.

In order to facilitate understanding of the overall process of the business contract authority control method provided by the embodiment of the present application, refer to FIG. 3 , which is a schematic framework diagram of another exemplary application scenario provided by the embodiment of the present application.

As shown in Figure 3, first write the permission contract. The permission contract includes the establishment committee function, the application item function, the committee member voting function and the execution item function. After writing the permission contract, the permission contract deployment node deploys the permission contract to each node of the blockchain and obtains the contract address of the permission contract.

Furthermore, the authority contract deployment node calls the establishment committee function in the authority contract to establish the committee and generate the voting threshold and the committee member node information of the committee.

On the basis of the above content, the committee member nodes can call the permission contract to create the permission control group. The process of creating an access control group includes three steps: application, voting and execution. Specifically, reference may be made to A1-A3, which will not be repeated here.

A permission control group includes a member list and a function list. When the permission control group is successfully created, the member list and function list are empty. At this point, the committee member node can call the permission contract to add the member to the group, that is, add the member to the member list of the permission control group. Specifically, the process of adding members to a group includes three steps: application, voting and execution. Specifically, reference may be made to B1-B3, which will not be repeated here.

After completing the writing of the business contract and deploying the business contract to each node of the blockchain, if you want to add the functions in the business contract to the function list of the permission control group. The connection between the business contract and the permission contract needs to be established first, that is, the contract address of the permission contract is added to the business contract. Furthermore, the committee member node can call the permission contract to add the function in the business contract to the group, that is, add the function in the business contract to the function list of the permission control group. Specifically, the process of adding a function in a business contract into a group includes three steps: application, voting and execution. Specifically, reference may be made to C1-C3, which will not be repeated here.

From this, members of the group can call functions in the business contract.

Those skilled in the art can understand that the schematic diagram of the framework shown in FIG. 3 is only an example in which the embodiments of the present application can be implemented. The scope of application of the embodiments of the present application is not limited by any aspect of this framework.

Based on the business contract authority control method provided by the above method embodiments, the embodiments of the present application further provide a business contract authority control device, which will be described below with reference to the accompanying drawings.

Referring to FIG. 4 , which is a schematic structural diagram of a service contract authority control apparatus provided by an embodiment of the present application, the apparatus is applied to a target committee member node. As shown in Figure 4, the service contract authority control device includes:

The first calling unit 401 is used to call the permission contract to create a target permission control group in the permission contract; the permission contract is deployed on each node of the blockchain; the target permission control group includes a member list and a function list ; The members in the member list of the target authority control group have the authority to call the functions in the function list of the target authority control group; the contract address of the authority contract will follow the members in the member list or the function Updates when the functions in the list change;

The second calling unit 402 is used to call the permission contract to add the target member to the member list of the target permission control group;

The third calling unit 403 is configured to call the authority contract to add the target function of the target business contract to the function list of the target authority control group, so that the target member has the authority to call the target function of the target business contract ; the target business contract is deployed on each node of the blockchain; the target business contract is embedded with the contract address of the authority contract.

In a possible implementation manner, the authority contract includes a committee establishment function, and the committee establishment function is used to be called by the authority contract deployment node to establish a committee and generate a voting pass threshold and committee member node information of the committee; The committee member node information of the committee includes the member name of the committee member node, the account address of the committee member node, and the voting weight of the committee member node; the target committee member node is one of the pre-established committees member node.

In a possible implementation manner, the permission contract further includes an application item function, a committee member voting function, and an execution item function.

In a possible implementation manner, the application item function includes an application creation group function, the execution item function includes an execution creation group function, and the first calling unit 401 includes:

a first calling subunit, used for calling the application creation group function to generate a first request; the first request is a request for applying to create a target authority control group;

a second calling subunit for calling the committee member voting function, so that each committee member node in the committee votes on the first request;

The third calling subunit is configured to call the execute and create group function to create the target permission control group in the permission contract when the voting result corresponding to the first request is greater than the voting pass threshold.

In a possible implementation manner, the application matter function includes an application member adding function to a group, the execution matter function includes an executing member adding a group function, and the second calling unit 402 includes:

The fourth calling subunit is used to call the application member adding function to generate a second request; the second request is a request for applying to add the target member to the member list of the target authority control group;

a fifth calling subunit, used to call the committee member voting function, so that each committee member node in the committee votes on the second request;

The sixth calling subunit is configured to call the executive member adding function to add the target member to the target authority control group when the voting result corresponding to the second request is greater than the voting pass threshold.

In a possible implementation manner, the application item function includes an application function adding function to a group, the execution item function includes an execution function adding a group function, and the third calling unit 403 includes:

The seventh calling subunit is used to call the application function to add the function into the group to generate a third request; the third request is to apply for adding the target function of the target business contract to the function list of the target authority control group request;

an eighth calling subunit, configured to call the committee member voting function, so that each committee member node in the committee votes on the third request;

The ninth calling subunit is used to call the execution function to add the group function when the voting result corresponding to the third request is greater than the voting pass threshold, so as to add the target function of the target business contract to the target authority in the list of functions for the control group.

In a possible implementation manner, the voting result corresponding to the third request is based on the voting status of each committee member node in the committee on the third request and the voting weight of each committee member node owned.

In addition, the embodiment of the present application also provides an electronic device, including:

one or more processors;

a storage device on which one or more programs are stored,

When the one or more programs are executed by the one or more processors, the one or more processors implement the service contract permission control method described in any of the foregoing embodiments.

In addition, an embodiment of the present application further provides a computer-readable medium on which a computer program is stored, wherein when the program is executed by a processor, the service contract authority control described in any of the foregoing embodiments is implemented.

The embodiments of the present application provide a service contract authority control apparatus and equipment, and the apparatus is applied to a target committee member node. The target committee member nodes call the permission contract to create the target permission control group. Among them, the permission contract is deployed on each node of the blockchain. The target authority control group includes a member list and a function list, and members in the member list of the target authority control group have the right to call functions in the function list of the target authority control group. The contract address of the permission contract will be updated with the changes of members in the member list or functions in the function list. Further, the target committee member node calls the permission contract to add the target member to the member list of the target permission control group, and calls the permission contract to add the target function of the target business contract to the function list of the target permission control group. Thus, the target member has the right to call the target function of the target business contract. Among them, the target business contract is also deployed on each node of the blockchain, and the contract address of the permission contract is embedded in the target business contract.

It can be seen from this that the embodiment of the present application separates the authority contract and the target business contract from each other. When a member in the member list or a function in the function list changes, it means that the user authority relationship has changed, and the contract address of the authority contract will correspond accordingly. changes. On this basis, it is only necessary to update the contract address of the permission contract embedded in the target business contract, without changing the business contract. In this way, the updating process of the user authority relationship is simplified.

It should be noted that a business contract authority control method, device and device provided by this application can be used in the blockchain field. The above is only an example, and does not limit the application field of a business contract authority control method, device and device provided by the present application.

From the description of the above embodiments, those skilled in the art can clearly understand that all or part of the steps in the methods of the above embodiments can be implemented by means of software plus a necessary general hardware platform. Based on this understanding, the technical solutions of the present application can be embodied in the form of software products in essence or the parts that make contributions to the prior art, and the computer software products can be stored in storage media, such as ROM/RAM, magnetic disks , CD, etc., including several instructions for causing a computer device (which may be a personal computer, a server, or a network communication device such as a media gateway, etc.) to execute the various embodiments or parts of the embodiments of the present application. method.

It should be noted that the various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same and similar parts between the various embodiments may be referred to each other. For the method disclosed in the embodiment, since it corresponds to the system disclosed in the embodiment, the description is relatively simple, and the relevant part can be referred to the description of the system.

It should also be noted that, herein, the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a process, method, article or device comprising a series of elements includes not only those elements , but also other elements not expressly listed or inherent to such a process, method, article or apparatus. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in a process, method, article or apparatus that includes the element.

The above description of the disclosed embodiments enables any person skilled in the art to make or use the present application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, this application is not intended to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (10)

1. a business contract authority control method, is characterized in that, described method is applied on target committee member node, comprises: Call the authority contract to create the target authority control group in the authority contract; the authority contract is deployed on each node of the blockchain; the target authority control group includes a member list and a function list; the target authority control group's The members in the member list have the right to call the functions in the function list of the target permission control group; the contract address of the permission contract will be updated with the changes of the members in the member list or the functions in the function list ; Call the permission contract to add the target member to the member list of the target permission control group; Call the authority contract to add the target function of the target business contract to the function list of the target authority control group, so that the target member has the authority to call the target function of the target business contract; the target business contract is deployed in On each node of the blockchain; the target business contract is embedded with the contract address of the permission contract. 2. The method according to claim 1, wherein the authority contract includes a committee establishment function, and the committee establishment function is used to be called by the authority contract deployment node to establish a committee and generate a vote passing threshold and the committee. The committee member node information of the committee; the committee member node information of the committee includes the member name of the committee member node, the account address of the committee member node and the voting weight of the committee member node; the target committee member node is the committee a member node in . 3 . The method according to claim 2 , wherein the authority contract further comprises an application item function, a committee member voting function and an execution item function. 4 . 4. The method according to claim 3, wherein the application item function comprises an application creation group function, the execution item function comprises an execution creation group function, and the invoking authority contract is used to create a function in the authority contract. Target permission control group, including: Calling the application creation group function to generate a first request; the first request is a request for an application to create a target authority control group; calling the committee member voting function so that each committee member node in the committee votes on the first request; When the voting result corresponding to the first request is greater than the voting pass threshold, the execute and create group function is called to create the target permission control group in the permission contract. 5. The method according to claim 3, wherein the application item function comprises an application member adding function to a group, the execution item function comprises an execution member adding a group function, and the calling authority contract is used to add the target member to the group. Add to the list of members of the target permission control group, including: Calling the application member adding function to generate a second request; the second request is a request for applying to add the target member to the member list of the target authority control group; calling the committee member voting function so that each committee member node in the committee votes on the second request; When the voting result corresponding to the second request is greater than the voting pass threshold, the execution member adding into group function is called to add the target member to the target permission control group. 6 . The method according to claim 3 , wherein the application item function comprises an application function added into a group function, the execution item function comprises an execution function added into a group function, and the calling authority contract is used to add the target business. 7 . The target function of the contract is added to the function list of the target permission control group, including: Calling the application function to add a function to the group to generate a third request; the third request is a request to apply for adding the target function of the target business contract to the function list of the target authority control group; calling the committee member voting function so that each committee member node in the committee votes on the third request; When the voting result corresponding to the third request is greater than the voting pass threshold, the execution function is called to add a group function to add the target function of the target business contract to the function list of the target authority control group. 7. The method according to claim 6, wherein the voting result corresponding to the third request is based on the voting situation of each committee member node in the committee on the third request and the voting results of each committee member node. The voting weight of the committee member nodes is obtained. 8. A business contract authority control device, wherein the device is applied to a target committee member node, comprising: The first calling unit is used to call the authority contract to create a target authority control group in the authority contract; the authority contract is deployed on each node of the blockchain; the target authority control group includes a member list and a function list; The members in the member list of the target authority control group have the authority to call the functions in the function list of the target authority control group; the contract address of the authority contract will follow the members in the member list or the function list. updated with changes in the function in; The second calling unit is used to call the permission contract to add the target member to the member list of the target permission control group; a third calling unit, configured to call the authority contract to add the target function of the target business contract to the function list of the target authority control group, so that the target member has the authority to call the target function of the target business contract; The target business contract is deployed on each node of the blockchain; the target business contract is embedded with the contract address of the authority contract. 9. An electronic device, characterized in that, comprising: one or more processors; a storage device on which one or more programs are stored, When the one or more programs are executed by the one or more processors, the one or more processors implement the service contract permission control method according to any one of claims 1-7. 10. A computer-readable medium, characterized in that a computer program is stored thereon, wherein when the program is executed by a processor, the business contract authority control according to any one of claims 1-7 is implemented.

Images