中本聪共识安全性质研究方法  

Methods of security analysis for Nakamoto consensus

作　　者：周子钰 张宗洋 刘建伟 Ziyu ZHOU;Zongyang ZHANG;Jianwei LIU(School of Cyber Science and Technology,Beihang University,Beijing 100191,China;Key Laboratory of Aerospace Information Security and Trusted Computing,Ministry of Education,Wuhan University,Wuhan 430072,China)

机构地区：[1]北京航空航天大学网络空间安全学院,北京100091 [2]武汉大学空天信息安全与可信计算教育部重点实验室,武汉430072

出　　处：《中国科学：信息科学》2022年第5期837-855,共19页Scientia Sinica(Informationis)

基　　金：国家自然科学基金(批准号:61972017,61972018,61932014,72031001);北京市自然基金项目(批准号:M21033);云南省区块链应用技术重点实验室(培育)开放课题(批准号:YNB202101);国家密码发展基金(批准号:MMJJ20180215);中央高校基本科研业务费(批准号:YWF-21-BJ-J-1040)资助项目。

摘　　要：中本聪共识是区块链共识机制中最基础和研究最广泛的一种共识机制,其安全性对整个区块链领域的发展具有重要的理论意义和应用价值.现有大量研究在各种模型假设下对中本聪共识进行了安全性分析和证明.本文首先详细描述了中本聪共识的执行模型,包括时间模型、网络模型、敌手模型等.其次,系统总结了中本聪共识安全性的形式化定义.再次,根据时间模型将中本聪共识研究方法分为基于离散时间模型和连续时间模型两类,并指出不同方法的优缺点.最后对中本聪共识的安全性研究进行展望,旨在为区块链共识机制的研究提供技术支撑.Nakamoto consensus is one of the most fundamental consensus used in blockchain protocols.Its security is of significance in the field of blockchain and cryptocurrency applications.Existing studies have analyzed and proved the security of Nakamoto consensus from different aspects under various assumptions and models.This paper systematically summarizes the existing mainstream formalization and research methods for the security of Nakamoto consensus.Firstly,this paper describes the execution model of Nakamoto consensus including the time model,network model and attacker model.Secondly,this paper summarizes the formal definitions of the security properties of Nakamoto consensus.Thirdly,according to the time model,this paper divides different analysis methods into the discrete-time model and continuous-time model,and points out their advantages and disadvantages.Finally,this paper points out the future research directions for blockchain consensus security.

关 键 词：中本聪共识 区块链 安全性证明 数字货币 工作量证明 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]