US 12,294,599 B2
Blockchain-based host security monitoring method and apparatus, medium and electronic device
Dezhuang Kong, Beijing (CN); Shihui Nan, Beijing (CN); and Yang Wang, Beijing (CN)
Assigned to BEIJING JINGDONG QIANSHI TECHNOLOGY CO., LTD., Beijing (CN)
Appl. No. 17/756,258
Filed by BEIJING JINGDONG QIANSHI TECHNOLOGY CO., LTD., Beijing (CN)
PCT Filed Aug. 21, 2020, PCT No. PCT/CN2020/110562
§ 371(c)(1), (2) Date May 20, 2022,
PCT Pub. No. WO2021/098313, PCT Pub. Date May 27, 2021.
Claims priority of application No. 201911149432.8 (CN), filed on Nov. 21, 2019.
Prior Publication US 2023/0007032 A1, Jan. 5, 2023
Int. Cl. H04L 29/00 (2006.01); H04L 9/00 (2022.01); H04L 9/40 (2022.01)
CPC H04L 63/1425 (2013.01) [H04L 9/50 (2022.05); H04L 63/1416 (2013.01)] 13 Claims
OG exemplary drawing
 
1. A blockchain-based host security monitoring method, comprising:
monitoring traffic data of a host in a network communication and determining whether the traffic data is malicious traffic;
in response the determining that the traffic data is the malicious traffic, obtaining security state information of the host and saving the security state information into a security state blockchain; and
generating an invasion log corresponding to the malicious traffic and saving the invasion log and the security state information into a log storage blockchain,
wherein the saving the security state information into the security state blockchain comprises:
saving a network address of the host and the security state information into a block body of a current security state block to be consensus authenticated;
in response that a block generation condition is met, obtaining block header data of a previous security state block in the security state blockchain, and obtaining a parent block hash value by calculation according to the block header data;
calculating a block body hash value of the current security state block according to data saved in the block body of the current block;
saving the parent block hash value, the block body hash value and a timestamp of a current time into a block header of the current security state block; and
broadcasting the current security state block to a security state blockchain network to perform consensus authentication on the current security state block, and linking the current security state block onto the security state blockchain upon a successful authentication.