A few days ago, the industry standard "Blockchain Technology Architecture Security Requirements" led by the National Internet Emergency Response Center was officially released and implemented, becoming the first official blockchain general security technology industry standard in China. The standard specifies the security requirements that the blockchain technology architecture should meet, including consensus mechanism security, smart contract security, and ledger security, etc., and is suitable for blockchain technology architecture.
When the blockchain industry is developing rapidly, its industry standards and regulatory norms have always been the focus of attention. Regarding the first security technical standard released this time, Li Hui, deputy dean of Huobi Research Institute, pointed out in an interview with the Cailian Press that the standard stipulates the security requirements that the blockchain technology architecture should meet. System design and development provide reference for safety regulations.
However, it is worth noting that as an industry standard, the "Blockchain Technology Architecture Security Requirements" provides the blockchain industry with technical standard guidance in the security field, but the blockchain industry is currently in legal supervision and industry The standard is the same and needs to be improved urgently.
List the main security issues in detail in the field of blockchain security
This document mainly provides standards and requirements for the field of blockchain security. From the content point of view, Li Hui pointed out that the standard is based on the security threats faced by each functional component of the blockchain technology architecture and the security requirements of each component. It is relatively comprehensive And systems, including cryptographic algorithms, consensus mechanisms, transactions and ledgers, smart contracts, member services, interfaces, and P2P networks.
"As we all know, blockchain is a combined technology, involving encryption algorithms, consensus mechanisms, timestamps and distributed storage, etc." Li Lianxuan, chief researcher of Ouke Cloud Chain, introduced to a reporter from the Caixin News Agency, "Blockchain technology is more than just It faces security threats similar to other information systems in storage, computing, and data interfaces. It also faces major security threats in the specific technical architecture of blockchain such as cryptography applications, consensus mechanisms, and smart contracts. Therefore, in general In other words, blockchain security issues involve a wide range and high level of complexity."
Li Lianxuan also pointed out that the highlight of the document is to standardize and list in detail the main security issues facing the blockchain technology architecture, and based on this, formulate the security requirements standards for the blockchain technology architecture to provide the industry with a technical architecture safety standard.
Technical standards provide programmatic documents for comprehensive reference for the industry
Although "Security Requirements for Blockchain Technology Architecture" is the first technical standard issued, Li Lianxuan pointed out in an interview that this is a programmatic document, which mainly provides standards and specifications, that is, what conditions must be met or met to meet Safety standards, rather than providing specific safety solutions or development programs. He said that the blockchain industry involves technology, operations, applications, security and other aspects. A normative document in the security field cannot solve all problems in the industry.
However, from the perspective of the impact on the industry, the impact of the documents on the blockchain industry is concentrated in the field of technical security standards and specifications, mainly regulating the security issues in the blockchain field. He said that because blockchain is an emerging technology, there are many security threats and more complex security threats. It is inevitable that there will be omissions during development. This document specifies and systematically lists the security threats faced by blockchain technology and provides The safety guidance requirements have been provided, which provides a more comprehensive reference for the industry.
Li Hui also said that blockchain technology integrates a number of technologies, and innovations continue to emerge in the industry. Blockchain technology faces security threats similar to other information systems in terms of security issues. It also has its own unique characteristics due to its new technological innovations. Security threats, so facing a certain degree of complexity in responding to security challenges. As blockchain technology gradually enters industry applications, how to avoid and prevent the adverse effects of blockchain technology due to design flaws, security risks and vulnerabilities requires unified and reliable industry security standards to regulate.
Industry standards may come naturally, and regulatory requirements still need to be improved
“Currently, the blockchain has the problem of imperfect industry standards and lagging supervision, and it is also an urgent need to improve.” Li Hui said that he pointed out that the imperfect industry standards have led to uneven project quality and lack of a unified and authoritative blockchain standard, which is not conducive to the industrial ecology. The long-term sound development of the market will lead to chaotic market development. Regulatory lag has led to some incidents in the industry that use blockchain technology to engage in illegal activities. Improve blockchain compliance supervision and establish sound blockchain regulatory regulations, which can avoid "bad money expelling good money" and prevent risks At the same time, it is also conducive to promoting the healthy development of the blockchain industry.
Regarding issues such as blockchain-related technical standards and regulatory standards, relevant industry experts have been constantly speaking out.
At the 6th Blockchain Global Summit hosted by Wanxiang Blockchain Lab on October 27, Li Lihui, the former president of Bank of China, said that he would accelerate the institutional innovation of blockchain. He pointed out that my country's technical standards, safety regulations and certification systems for blockchain have just started. We should promptly improve the standards, safety regulations, and certification review systems for blockchain technology and blockchain finance. In terms of law, the legal definition of digital assets should be clarified, the contract nature and validity of smart contracts should be clarified, and the responsible entities under the distributed architecture and their codes of conduct and regulatory standards should be clarified.
On the same day, Sun Lilin, the founder and CEO of Matrix Yuan, also pointed out at the summit that there are still many higher-level laws on the blockchain track that have not been fully established, "Personal Information Protection Law, Cryptography, Network Security Law, etc. They will agree on the rights and interests of the data and how everyone uses it from different angles. Before the legal ownership of the data is determined by the upper law, the supervision of each industry is very cautious."
Liu Yang, deputy chief engineer of the Industrial Internet Institute of the China Academy of Information and Communications Technology, also said at the summit that a major challenge in the overshoot of the blockchain development is the difficulty of supervision. “In the past, the supervision of digital currencies was mainly done by one or two government departments. For supervision, if the blockchain has been able to provide services with the digital economy, so many industries and technologies, it means that all government departments must learn the blockchain, use the blockchain, and work on the blockchain. Provide governance and supervision capabilities, and this is very difficult."
Although the current unified laws and technical standards have not yet been issued, local governments, enterprises and sub-sectors continue to have opinions and related standards.
On September 11, the Shanghai local standard "General Specification for Blockchain Technology Security (Draft for Comment)" has been formed. In accordance with the requirements of the procedures for the formulation and revision of local standards in Shanghai, the Shanghai Information Security Evaluation and Certification Center recently solicited public opinions on the "Specifications. This means that the country's first local blockchain security standard will be unveiled in Shanghai, and there will be regulations for blockchain "fighting". At the same time, national blockchain technology standards are also in the process of being formulated.
For enterprises, on September 25th, Tencent Cloud’s proposal was unanimously approved in the International Telecommunication Union ITU-T SG17 meeting, becoming the first international standard in the field of blockchain smart contract security.
Subdivided areas such as the medical and health field. On October 12th, the National Health Commission issued opinions on strengthening the construction of the national health information standardization system. The opinions pointed out that the standardized construction of the application of 5G technology in medical and health should be encouraged. Clarify the application scenarios of 5G in the medical and health field, and accelerate the development of 5G medical and health application standards. Explore and study the application scenarios of blockchain in the medical and health field, accelerate the research and formulation of blockchain information service standards in the medical and health field, and strengthen the standard and guide the integrated application of blockchain technology and the medical and health industry.
“With the gradual development and growth of the industry, the formation of blockchain industry standards is a matter of course. The key to the problem lies in regulatory regulations.” Li Lianxuan said that blockchain technology is widely used in finance, people’s livelihood, government affairs, and entertainment. Applications have different social and economic impacts. The current focus is on improving the regulatory laws and regulations on the blockchain industry, so as to better guide the healthy development of the industry, serve the society, and gain certain advantages in international industry and technology competition. (Sun Shiyu Lin Hanyao)
Source: Finance Association