区块链数据形成与隐私威胁

doi:10.19678/j.issn.1000-3428.0065926

摘要/Abstract

摘要：

区块链借助于密码学、共识算法、激励机制、点对点网络、分布式账本、智能合约等关键技术，在没有第三方权威机构参与的互不信任网络环境中，实现了对事务记录的分布式一致性、不可篡改性、可溯源性等功能特性，构成了一种崭新的可信、安全、可编程的网络生态。与此同时，支撑区块链自身功能实现的相关技术及机制也带来了隐私安全问题。将隐私作为个人数据的一个子集进行研究，从而将区块链数据划分为事务数据和区块数据等2种类型，并通过对区块链数据的解构以及对所得信息的关联，分析隐藏在数据中的隐私信息。从数据传输方式和数据结构方面介绍区块链数据构成；在分析区块链数据特点的基础上，综合对隐私的理解、度量、泄露途径等因素，给出区块链隐私的定义，并从身份隐私、数据隐私、网络隐私等方面进行分析；通过对网络安全、密码学安全、跨链操作、共识算法等方面带来的隐私泄露风险的分析，指出区块链隐私威胁存在的挑战和未来研究方向。

关键词: 区块链, 隐私威胁, 身份隐私, 数据隐私, 网络隐私

Abstract:

The blockchain technology utilizes cryptography, consensus algorithms, incentive mechanism, Peer-to-Peer(P2P) network, distributed ledgers, smart contracts, and other key technologies.This enabled its application in a network environment without third-party authority and mutual distrust to realize distributed consistency, irreversibility, traceability, and other function characteristics for transaction records, and has constituted a new trusted, safe, and programmable network ecology.Simultaneously, the technologies and mechanisms underpinning blockchain realization have raised privacy concerns. Privacy is studied as a subset of personal data; thus, the blockchain data are divided into transaction data and block data. The blockchain data is deconstructed, the obtained information is associated to analyze the privacy information hidden in the data.To elaborate, the blockchain data structure is introduced from the perspective of the blockchain data transmission mode and data structure. Based on the analysis of the characteristics of blockchain data and by integrating factors such as understanding, measurement, and the privacy disclosure approach, a definition of blockchain privacy is provided. Blockchain privacy is analyzed in terms of identity, data, and network privacy. The challenges and research directions of blockchain privacy threats are highlighted by focusing on the analysis of privacy leakage risks brought about by network security, cryptographic security, cross-chain operations, and consensus algorithms.

Key words: blockchain, privacy threat, identity privacy, data privacy, network privacy

王群, 李馥娟, 倪雪莉, 夏玲玲, 梁广俊. 区块链数据形成与隐私威胁[J]. 计算机工程, 2023, 49(8): 1-12.

Qun WANG, Fujuan LI, Xueli NI, Lingling XIA, Guangjun LIANG. Data Formation and Privacy Threat of Blockchain[J]. Computer Engineering, 2023, 49(8): 1-12.

https://www.ecice06.com/CN/Y2023/V49/I8/1

图/表 10

参考文献 57

1	王群, 李馥娟, 王振力, 等. 区块链原理及关键技术. 计算机科学与探索, 2020, 14 (10): 1621- 1643. URL
	WANG Q, LI F J, WANG Z L, et al. Principle and core technology of blockchain. Journal of Frontiers of Computer Science and Technology, 2020, 14 (10): 1621- 1643. URL
2	张亮, 刘百祥, 张如意, 等. 区块链技术综述. 计算机工程, 2019, 45 (5): 1- 12. URL
	ZHANG L, LIU B X, ZHANG R Y, et al. Overview of blockchain technology. Computer Engineering, 2019, 45 (5): 1- 12. URL
3	AGGARWAL S, KUMAR N. Blockchain 2.0: smart contracts. Advances in Computers, 2021, 121, 301- 322. doi: 10.1016/bs.adcom.2020.08.015
4	DHILLON V, METCALF D, HOOPER M. Blockchain enabled applications: understand the blockchain ecosystem and how to make it work for you. New York, USA: Apress, 2021: 247- 288.
5	陈伟利, 郑子彬. 区块链数据分析: 现状、趋势与挑战. 计算机研究与发展, 2018, 55 (9): 1853- 1870. URL
	CHEN W L, ZHENG Z B. Blockchain data analysis: a review of status, trends and challenges. Journal of Computer Research and Development, 2018, 55 (9): 1853- 1870. URL
6	曹雪莲, 张建辉, 刘波. 区块链安全、隐私与性能问题研究综述. 计算机集成制造系统, 2021, 27 (7): 2078- 2094. URL
	CAO X L, ZHANG J H, LIU B. Review on security, privacy, and performance issues of blockchain. Computer Integrated Manufacturing Systems, 2021, 27 (7): 2078- 2094. URL
7	陈丽燕, 芮廷先, 吕光金. 基于区块链智能合约的个人征信隐私保护方案. 计算机工程, 2020, 46 (7): 30- 35. URL
	CHEN L Y, RUI T X, LÜ G J. Privacy protection scheme of personal credit based on smart contract in blockchain. Computer Engineering, 2020, 46 (7): 30- 35. URL
8	ZHU L H, ZHENG B K, SHEN M, et al. Research on the security of blockchain data: a survey[EB/OL]. [2022-09-23]. https://arxiv.org/abs/1812.02009.
9	DITTMAR R, WU A. Blockchain and cryptocurrency explained[EB/OL]. [2022-09-23]. https://www.coursera.org/lecture/crypto-finance/blockchain-data-w5TvV.
10	AXON L, GOLDSMITH M, CREESE S. Privacy requirements in cybersecurity applications of blockchain. Advances in Computers, 2018, 111, 229- 278.
11	WAHAB J. Privacy in blockchain systems[EB/OL]. [2022-09-23]. https://arxiv.org/abs/1809.10642.
12	王群, 李馥娟, 倪雪莉, 等. 区块链共识算法及应用研究. 计算机科学与探索, 2022, 16 (6): 1214- 1242. URL
	WANG Q, LI F J, NI X L, et al. Survey on blockchain consensus algorithms and application. Journal of Frontiers of Computer Science and Technology, 2022, 16 (6): 1214- 1242. URL
13	ZHENG Z B, XIE S A, DAI H N, et al. An overview of blockchain technology: architecture, consensus, and future trends[C]//Proceedings of IEEE International Congress on Big Data. Washington D. C., USA: IEEE Press, 2017: 557-564.
14	武岳, 李军祥. 区块链P2P网络协议演进过程. 计算机应用研究, 2019, 36 (10): 2881-2886, 2929 URL
	WU Y, LI J X. Evolution process of blockchain P2P network protocol. Application Research of Computers, 2019, 36 (10): 2881-2886, 2929 URL
15	HU J, LEUS C, TCHOBANIAN B, et al. Copyright vs. Napster: the file sharing revolution[EB/OL]. [2022-09-23]. https://www.socsci.uci.edu/lawforum/content/journal/LFJ_2004_compilation.pdf.
16	LI C X, CHEN C J. Gnutella: topology dynamics on phase space[EB/OL]. [2022-09-23]. https://arxiv.org/ftp/cs/papers/0702/0702022.pdf.
17	STOICA I, MORRIS R, LIBEN-NOWELL D, et al. Chord: a scalable peer-to-peer lookup protocol for Internet applications. IEEE/ACM Transactions on Networking, 2003, 11 (1): 17- 32.
18	ROWSTRON A, DRUSCHEL P. Pastry: scalable, decentralized object location, and routing for large-scale peer-to-peer systems[C]//Proceedings of IFIP/ACM International Conference on Distributed Systems Platforms and Open Distributed. Berlin, Germany: Springer, 2001: 329-350.
19	ZHANG W, CHEN Z X, GLOWINSKI R, et al. Measurements and understanding of the KaZaA P2P network[C]//Proceedings of International Conference on High Performance Computing and Applications. Berlin, Germany: Springer, 2004: 425-429.
20	BRÜNJES L, GABBAY M J. UTxO- vs account-based smart contract blockchain programming paradigms[C]//Proceedings of International Symposium on Leveraging Applications of Formal Methods. Berlin, Germany: Springer, 2020: 73-88.
21	PÎRLEA G, SERGEY I. Mechanising blockchain consensus[C]//Proceedings of the 7th ACM SIGPLAN International Conference on Certified Programs and Proofs. New York, USA: ACM Press, 2018: 78-90.
22	NAKAMOTO S. Bitcoin: a peer-to-peer electronic cash system[EB/OL]. [2022-09-23]. https://bitcoin.org/bitcoin.pdf.
23	VESELÝ V, ŽÁDNÍK M. How to detect cryptocurrency miners? By traffic forensics!. Digital Investigation, 2019, 31, 100884.
24	RECABARREN R, CARBUNAR B. Hardening stratum, the Bitcoin pool mining protocol[EB/OL]. [2022-09-23]. https://arxiv.org/pdf/1703.06545.pdf.
25	WANG P, SUN G Y, JIANG S, et al. An efficient design and implementation of LSM-tree based key-value store on open-channel SSD[C]//Proceedings of the 9th European Conference on Computer Systems. New York, USA: ACM Press, 2014: 1-14.
26	OLSON M A, BOSTIS K, SELTZER M. Berkeley DB[C]//Proceedings of USENIX Annual Technical Conference. Berkeley, USA: USENIX Association, 1999: 1-10.
27	JOE L. Beginning CouchDB. New York, USA: Apress, 2020.
28	MCCONAGHY T. BigchainDB: a scalable blockchain database[EB/OL]. [2022-09-23]. https://static1.1.sqspcdn.com/.../1468064815327/20160707+bip001+odessa+BigchainDB.pdf.
29	WILKINSON S, BOSHEVSKI T, BRANDOFF J, et al. Storj: a peer-to-peer cloud storage network[EB/OL]. [2022-09-23]. http://nil.lcs.mit.edu/6.S974/papers/storj-2016.pdf.
30	KRISHNAN H, ELAYIDOM M, SANTHANAKRISHNAN T. MongoDB—a comparison with NoSQL databases. International Journal of Scientific and Engineering Research, 2016, 7 (5): 1035- 1037.
31	王丹, 龙士工. 权重社交网络隐私保护中的差分隐私算法. 计算机工程, 2019, 45 (4): 114- 118. URL
	WANG D, LONG S G. Differential privacy algorithm for privacy protection in weighted social network. Computer Engineering, 2019, 45 (4): 114- 118. URL
32	ANDOLA N, YADAV V K, VENKATESAN S, et al. Anonymity on blockchain based e-cash protocols—a survey. Computer Science Review, 2021, 40 (2): 1- 18.
33	CLIFTON C, KANTARCIOGLU M, VAIDYA J. Defining privacy for data mining[C]//Proceedings of National Science Foundation Workshop on Next Generation Data Mining. Baltimore, USA: [s. n. ], 2003: 126-133.
34	REID F, HARRIGAN M. An analysis of anonymity in the Bitcoin system[C]//Proceedings of the 3rd International Conference on Privacy, Security, Risk and Trust and the 3rd International Conference on Social Computing. Washington D. C., USA: IEEE Press, 2012: 1318-1326.
35	ERMILOV D, PANOV M, YANOVICH Y. Automatic Bitcoin address clustering[C]//Proceedings of the 16th IEEE International Conference on Machine Learning and Applications. Washington D. C., USA: IEEE Press, 2018: 461-466.
36	MEIKLEJOHN S, POMAROLE M, JORDAN G, et al. A fistful of Bitcoins. Communications of the ACM, 2016, 59 (4): 86- 93.
37	WEI Q W, LI S J, LI W, et al. Decentralized hierarchical authorized payment with online wallet for blockchain[C]//Proceedings of International Conference on Wireless Algorithms, Systems, and Applications. Berlin, Germany: Springer, 2019: 358-361.
38	VAN DER HORST L, CHOO K K R, LE-KHAC N A. Process memory investigation of the Bitcoin clients Electrum and Bitcoin Core. IEEE Access, 2017, 5, 22385- 22398.
39	HELLANI H, SAMHAT A E, CHAMOUN M, et al. On blockchain technology: overview of Bitcoin and future insights[C]//Proceedings of IEEE International Multidisciplinary Conference on Engineering Technology. Washington D. C., USA: IEEE Press, 2019: 1-8.
40	ESKANDARI S, CLARK J, BARRERA D, et al. A first look at the usability of Bitcoin key management[EB/OL]. [2022-09-23]. https://arxiv.org/pdf/1802.04351.pdf.
41	GENNARO R, GOLDFEDER S, NARAYANAN A. Threshold-optimal DSA/ECDSA signatures and an application to Bitcoin wallet security[C]//Proceedings of International Conference on Applied Cryptography and Network Security. Berlin, Germany: Springer, 2016: 156-174.
42	BitGo. Hot and cold wallet solutions[EB/OL]. [2022-09-23]. https://www.bitgo.com/services/custody/wallet-platform.
43	CoinSpace. Buy, store, send Coin Wallet[EB/OL]. [2022-09-23]. https://coin.space/.
44	TURUANI M, VOEGTLIN T, RUSINOWITCH M. Automated verification of Electrum wallet[C]//Proceedings of International Conference on Financial Cryptography and Data Security. Berlin, Germany: Springer, 2016: 27-42.
45	ALMUTAIRI E, AL-MEGREN S. Usability and security analysis of the KeepKey wallet[C]//Proceedings of IEEE International Conference on Blockchain and Cryptocurrency. Washington D. C., USA: IEEE Press, 2019: 149-153.
46	BAMERT T, DECKER C, WATTENHOFER R, et al. Bluewallet: the secure Bitcoin wallet[C]//Proceedings of International Workshop on Security and Trust Management. Berlin, Germany: Springer, 2014: 65-80.
47	BIXIN. Secure your Bitcoin in an easier way[EB/OL]. [2022-09-23]. https://www.bixin.im/cn/.
48	HyperPay. HyperPay wallet[EB/OL]. [2022-09-23]. https://hyperpayWallet.com.
49	JARECKI S, KIAYIAS A, KRAWCZYK H, et al. Highly-efficient and composable password-protected secret sharing(or: how to protect your Bitcoin wallet online)[C]//Proceedings of IEEE European Symposium on Security and Privacy. Washington D. C., USA: IEEE Press, 2016: 276-291.
50	VOLETY T, SAINI S, MCGHIN T, et al. Cracking Bitcoin wallets: I want what you have in the wallets. Future Generation Computer Systems, 2019, 91 (2): 136- 143.
51	ANDROULAKI E, KARAME G O, ROESCHLIN M, et al. Evaluating user privacy in Bitcoin[C]//Proceedings of International Conference on Financial Cryptography and Data Security. Berlin, Germany: Springer, 2013: 34-51.
52	HE S L, LU Y, TANG Q, et al. Blockchain-based P2P content delivery with monetary incentivization and fairness guarantee. IEEE Transactions on Parallel and Distributed Systems, 2023, 34 (2): 746- 765.
53	BONNEAU J, MILLER A, CLARK J, et al. SoK: research perspectives and challenges for Bitcoin and cryptocurrencies[C]//Proceedings of IEEE Symposium on Security and Privacy. Washington D. C., USA: IEEE Press, 2015: 104-121.
54	KOSHY P, KOSHY D, MCDANIEL P. An analysis of anonymity in Bitcoin using P2P network traffic[C]//Proceedings of International Conference on Financial Cryptography and Data Security. Berlin, Germany: Springer, 2014: 469-485.
55	MAYMOUNKOV P, MAZIÈRES D. Kademlia: a peer-to-peer information system based on the XOR metric[C]//Proceedings of International Workshop on Peer-to-Peer Systems. Berlin, Germany: Springer, 2002: 53-65.
56	LIU B S, LIU Z Y, ZHANG J Y, et al. How many eyes are spying on your shared folders?[C]//Proceedings of 2012 ACM Workshop on Privacy in the Electronic Society. New York, USA: ACM Press, 2012: 109-116.
57	NFTing. Cross-chain technology: the future of blockchain interoperability[EB/OL]. [2022-09-23]. https://medium.com/coinmonks/cross-chain-technology-the-future-of-blockchain-interoperability-145f808cf426.

节点类型	主要功能	主要用途	隐私威胁程度
全节点	挖矿、路由、完整区块链数据、钱包	核心客户端	大
轻量级节点钱包	路由、部分区块链数据	交易	中
独立矿工	单一节点挖矿、路由、完整区块链数据	挖矿	大
轻量级矿工	矿池挖矿、区块头部数据	挖矿	小

节点类型	主要功能	主要用途	隐私威胁程度
全节点	挖矿、路由、完整区块链数据、钱包	核心客户端	大
轻量级节点钱包	路由、部分区块链数据	交易	中
独立矿工	单一节点挖矿、路由、完整区块链数据	挖矿	大
轻量级矿工	矿池挖矿、区块头部数据	挖矿	小

网络结构	主要优点	主要缺点	典型应用	适用场景
中心化网络	存在中心节点，利于用户管理	存在单点故障，隐私易泄露	Napster^[15]	私有链/联盟链
非结构化网络	无固定网络结构，利于隐私保护	节点发现效率低，大量广播消息占用带宽	Gnutella^[16]	比特币系统
结构化网络	节点地址高效管理，可精准定位节点位置	存在隐私泄露威胁	Chord^[17]、Pastry^[18]	以太坊
混合式网络	应用灵活，适用场景丰富，管理效率高	弱化了去中心功能，存在隐私泄露威胁	KaZaA^[19]	超级账本

网络结构	主要优点	主要缺点	典型应用	适用场景
中心化网络	存在中心节点，利于用户管理	存在单点故障，隐私易泄露	Napster^[15]	私有链/联盟链
非结构化网络	无固定网络结构，利于隐私保护	节点发现效率低，大量广播消息占用带宽	Gnutella^[16]	比特币系统
结构化网络	节点地址高效管理，可精准定位节点位置	存在隐私泄露威胁	Chord^[17]、Pastry^[18]	以太坊
混合式网络	应用灵活，适用场景丰富，管理效率高	弱化了去中心功能，存在隐私泄露威胁	KaZaA^[19]	超级账本

数据库名称	区块链系统	存储的数据类型
Berkeley DB^[26]	早期比特币系统	用户数据
LevelDB^[25]	比特币系统、以太坊、早期超级账本	用户数据
CouchDB^[27]	超级账本	用户数据
RethinkDB	BigchainDB^[28]	元数据
LevelDB/LevelUP	Storj^[29]	元数据

选择文件类型/文献管理软件名称

选择包含的内容