service overview - huawei cloudthe customer. all or part of the products, services and features...

35
Blockchain Service Service Overview Issue 01 Date 2021-04-25 HUAWEI TECHNOLOGIES CO., LTD.

Upload: others

Post on 31-Dec-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Blockchain Service

Service Overview

Issue 01

Date 2021-04-25

HUAWEI TECHNOLOGIES CO., LTD.

Page 2: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Copyright © Huawei Technologies Co., Ltd. 2021. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without priorwritten consent of Huawei Technologies Co., Ltd. Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.All other trademarks and trade names mentioned in this document are the property of their respectiveholders. NoticeThe purchased products, services and features are stipulated by the contract made between Huawei andthe customer. All or part of the products, services and features described in this document may not bewithin the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,information, and recommendations in this document are provided "AS IS" without warranties, guaranteesor representations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. i

Page 3: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Contents

1 What Is Blockchain?................................................................................................................1

2 What Is BCS?.............................................................................................................................4

3 Advantages............................................................................................................................... 6

4 Functions................................................................................................................................... 8

5 Solutions..................................................................................................................................145.1 Transactions Between Corporation Subsidiaries.........................................................................................................145.2 Supply Chain Logistics......................................................................................................................................................... 165.3 Healthcare............................................................................................................................................................................... 18

6 Key Concepts.......................................................................................................................... 20

7 Permissions Management................................................................................................... 22

8 Restrictions............................................................................................................................. 24

9 Edition Specifications........................................................................................................... 25

10 Feature Updates.................................................................................................................. 28

11 Note to End of Maintenance............................................................................................ 32

Blockchain ServiceService Overview Contents

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. ii

Page 4: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

1 What Is Blockchain?

Traditional Business NetworkIn a traditional business network, participants such as business organizations,governments, and financial institutions do not have a shared system andseparately maintain their own data. When a transaction is conducted, both partiesmodify their own ledgers and maintain the ledgers locally. This results in anetwork architecture shown in Figure 1-1.

Figure 1-1 Traditional business network architecture

Such a network faces the challenges of low efficiency, high cost, and being subjectto attacks due to the following facts:

● Each participant maintains its own ledger. The transaction information is nottransparently shared among participants, and it is not easy to discover datatampering, if any.

● If a transaction involves multiple parties, additional workload and costs areneeded to reconcile disparate ledgers for data consistency.

Blockchain ServiceService Overview 1 What Is Blockchain?

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 1

Page 5: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

● Data is scattered among participants, resulting in low efficiency of the overallbusiness process.

● The network relies on a single or multiple central systems. Once the centralsystems experience fraud, attacks, or errors, operation of the entire networkwill become chaotic.

Basics of BlockchainIn a narrow sense, a blockchain is data blocks chained based on the blockgeneration time and uses cryptography to ensure that distributed ledgers cannotbe tampered with or forged. In a broad sense, the blockchain is a distributedarchitecture and computing mode that uses the blockchain data structure to verifyand store data, distributed consensus algorithms to generate and update data,cryptography to ensure data transmission and access security, and smart contractscompiled by automated script code for programming and data operation.

Blockchain uses a set of technologies including shared ledgers, consensusalgorithms, security and privacy protection, and smart contracts. It features multi-centralization, consensus and trust, immutability, and traceability. In a blockchainsystem, all participants share ledgers, which can solve the challenges in traditionalbusiness networks. Figure 1-2 shows the architecture of a blockchain system.

Figure 1-2 Blockchain systems architecture

All participants in a business network share the ledger and update all the copiesof the ledger upon each transaction.

Cryptography algorithms ensure that participants have access only to the ledgercontent related to them, thus ensuring transaction security.

Transaction-related contract clauses are embedded into the transaction databaseto comprise smart contracts, which are automatically executed when the businessconditions are met.

Blockchain ServiceService Overview 1 What Is Blockchain?

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 2

Page 6: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Consensus algorithms ensure that transactions are validated by all involved partiesand requirements of supervision and audit are met.

Benefits of BlockchainTime saving: Shortens the time that a transaction takes from days to real time orquasi real time.

Reduced costs: Reduces extra costs and the participation of third parties requiredto ensure data consistency.

Lower risks: Precludes the possibility of tampering to reduce risks of frauds andcybercrimes.

Stronger trust: Builds up trust between transaction participants using sharedledgers, processes, and records.

More Information● Data in a blockchain system is generated and stored in blocks, which are

chained in a time sequence. Hence the term "blockchain".● All nodes in a blockchain system participate in data verification, storage, and

maintenance. Consensus must be reached to create a block. Any new block isbroadcast to all nodes, ensuring synchronization on the entire network. Afterthis, it cannot be modified or deleted.

Blockchain ServiceService Overview 1 What Is Blockchain?

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 3

Page 7: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

2 What Is BCS?

Blockchain Service (BCS) is a blockchain platform for enterprises and developers.BCS helps you quickly deploy, manage, and maintain blockchain networks,lowering the threshold for using blockchain. In this way, you can focus on thedevelopment and innovation of your own business to quickly implement businessusing blockchain.

Figure 2-1 BCS architecture

● Infrastructure layerThe infrastructure layer offers underlying resources required for creating ablockchain network, including resources on nodes used to compute and storedata in the network.

● Blockchain platformThe blockchain service platform provides service management, channelmanagement, and member management, among other modules. It helps youquickly create, manage, and efficiently maintain an enterprise-gradeblockchain system for upper-layer applications.

● Service application layerBCS can be used in multiple scenarios of various industries, Industry-specificapplications connect to the blockchain platform to ensure data reliability andsecurity.

Blockchain ServiceService Overview 2 What Is BCS?

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 4

Page 8: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

● Security managementThe cloud security system and innovative cryptography algorithms providecomprehensive security assurance for blockchain nodes, ledgers, smartcontracts, and upper-layer applications.

Blockchain ServiceService Overview 2 What Is BCS?

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 5

Page 9: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

3 Advantages

Open and Easy to UseBuilding an enterprise-grade distributed blockchain network is not easy. It requiresnot only in-depth knowledge of blockchain but also complex design andconfiguration, which is error-prone and costly.

● BCS can help enterprises deploy blockchain networks within only 5 minutes,reducing the development and deployment costs by as much as 80%.

● BCS hosts functions of full-lifecycle management and GUI-based smartcontract coding, commissioning, and deployment. Customers using BCS canfocus on the innovation and development of their own service applications.

Flexible and Efficient● BCS supports multiple efficient consensus algorithms and deeply optimizes

existing algorithms to achieve balance between security and efficiency.● Consensus within seconds (over 10,000 TPS) meets service performance

requirements.● Blockchain ledgers are stored in the efficient HUAWEI CLOUD elastic storage

files, satisfying the demand of fast storing massive amount of user data.● Nodes of multiple roles and members can dynamically join or quit consortium

blockchains.

Cost-Effective● Functions such as service hibernation and waking at any time and data aging

on orderers and the pay-per-use billing mode reduce costs.● BCS is connected to the Application Operations Management (AOM) service

of for comprehensive O&M on BCS services, including system status,performance, and transaction monitoring, maintenance, and alarming toreduce O&M costs.

● The peer scaling function allows auto scaling of peers on demand, greatlyimproving the cost-effectiveness.

Security and PrivacyComprehensive approach to blockchain security:

Blockchain ServiceService Overview 3 Advantages

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 6

Page 10: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

● The HUAWEI CLOUD security system ensures stable and secure running ofblockchains.

● The Hyperledger-assured security system prevents data tampering andprotects privacy by means of certificate management and the blockchainstructure of data.

● Innovative algorithms such as homomorphic encryption and zero-knowledgeproofs provide further privacy protection.

● Chinese cryptographic algorithms are used for encryption and decryption.

Trusted CooperationBCS provides the Trusted Computing Platform to facilitate trusted cooperationbetween multiple parties. This platform has the following core features:

● Decentralized identity (DID) management, which is in compliance with theW3C DID and W3C VC standards. This feature lowers the threshold of trustand improves cooperation efficiency.

● Blockchain-based, trusted data sharing, which ensures trusted data flowbetween multiple parities, breaks data silos, and realizes data value.

● Confidential computing, which is based on blockchain, Trusted ExecutionEnvironment (TEE), and federated learning technologies. The raw data can becomputed without being revealed, ensuring data privacy.

Blockchain ServiceService Overview 3 Advantages

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 7

Page 11: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

4 Functions

BCS provides the following functions to help you quickly deploy blockchainsfeaturing security, high efficiency, and cost-effectiveness.

Service Deployment

You can purchase resources when deploying a blockchain system, without a needto prepare resources required by the system in advance.

● The deployment time is reduced from days to minutes, and the blockchainnetwork configuration is completed during deployment.

● Underlying technological details are masked. You do not need to care aboutthe underlying technology implementation and platform construction.

● You can create a cross-region consortium blockchain or a private blockchain.

Ledger Storage

Blockchain ServiceService Overview 4 Functions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 8

Page 12: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

File database (GoLevelDB) and NoSQL (CouchDB) are available for ledger storage.

● File database: Historical transaction data is stored in the blockchain, andstatus data is stored in the LevelDB.

● NoSQL: A CouchDB database stores transaction and status data.

Consensus Algorithms

BCS supports multiple consensus algorithms for diverse scenarios.

● SOLO: Only one orderer is available, and therefore, fault tolerance is notsupported. Solo is recommended for testing. It supports Fabric v1.4.0.

● FBFT: Requires 4 to 10 orderers for transaction ordering and tolerates faults ata maximum of (N – 1)/3 orderers, where N indicates the total number oforderers. It supports Fabric v1.4.0 and v2.0.

Blockchain ServiceService Overview 4 Functions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 9

Page 13: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

● Kafka (CFT): Orders transactions using Kafka clusters. Multiple orderers canfunction as Kafka cluster clients to share loads, ensuring service reliability.Kafka enables higher horizontal scalability. It supports Fabric v1.4.0.

● Raft (CFT): A CFT ordering service that tolerates faults at a maximum of (N –1)/2 orderers, where N indicates the total number of orderers. It supportsFabric v2.0.

Consortium Member and Organization Management

● A consortium initiator can dynamically invite other tenants to convenientlyand quickly set up a consortium blockchain. Peers of each consortiummember run in a separate VPC for independent management, ensuringsecurity and controllability.

● Peer organizations can be dynamically added to a BCS service to avoid impactof insufficient peer organizations configured during service deployment.

Blockchain ServiceService Overview 4 Functions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 10

Page 14: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Auto Scaling of Nodes

Peers can be scaled out dynamically based on user requirements, which does notrequire system reboot.

Chaincode Management

You can manage chaincodes on the graphical user interface (GUI) throughout theentire chaincode lifecycle, including coding, debugging, installation, instantiation,and upgrade.

Blockchain ServiceService Overview 4 Functions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 11

Page 15: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Block Browser

You can query blockchain information required for maintenance in the blockchainbrowser. The information includes the block quantity, transaction quantity, blockdetails, transaction details, performance, peer statuses, block list, and transactionlist.

Privacy ProtectionPrivacy is ensured within a channel because different members in a channel canhave different access permissions. For example, member A can have thepermissions to access certain data, but member B, who does not have relevantpermissions, cannot access the specified data.

This is different from the privacy ensured through channel isolation because achannel isolates data for members in the channel.

Application AccessApplications can access blockchain networks using software development kits(SDKs) and RESTful APIs.

● SDK configuration files can be downloaded. After simple configuration, anapplication can be connected to a blockchain network.

● Applications can invoke chaincodes through the RESTful API. The policy ofmulti-organization endorsement is supported.

Monitoring and O&MBCS connects to the monitoring platform to monitor data and resources in realtime and generate alarms and notifications when necessary.

● Automated O&M: BCS actively upgrades the underlying blockchain platformand updates patches to seamlessly integrate with the HUAWEI CLOUD O&Msystem.

● Enterprise-grade monitoring: Multi-dimensional monitoring is performed onclusters 24/7, and user-defined alarms can be reported through multiplechannels.

Blockchain ServiceService Overview 4 Functions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 12

Page 16: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Inter-Blockchain Data Interaction● Arbitration is introduced for inter-blockchain transaction results. The

blockchain data structure is used to manage the inter-blockchain transactionresults, ensuring atomicity of the transactions.

● Arbitration nodes only manage the verification results of inter-blockchaintransactions and do not touch original transaction data, ensuringindependency and security of the transactions.

● Behavior consistency between parties in inter-blockchain transactions isverified, ensuring consistency of the transaction information duringdistribution (such as in asset transfer).

NO TE

Currently, only the enterprise edition support inter-blockchain data interaction. To use thisfunction, submit a service ticket to the customer service.

Blockchain ServiceService Overview 4 Functions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 13

Page 17: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

5 Solutions

5.1 Transactions Between Corporation SubsidiariesHUAWEI CLOUD BCS allows for a collaboration consortium composed ofsubsidiaries and audit organizations of a multinational corporation for inter-subsidiary transactions. Transaction parties within the consortium can developtrust and eliminate reconciliation and discrepancies, which offers end-to-end auditsupport.

Industry Status Quo and Pain Points● Lack of trust between corporation subsidiaries

Transaction parties do not fully trust in each other for ownership and fundtransfer during contract execution and transactions.

● Delayed financial settlement

Reconciliation of internal transactions requires a large amount of manpowerand long time. The discrepancy in reconciliation may lead to delayedsettlement and report issuance.

● Low efficiency and high cost

Internal reconciliation is time-consuming and requires a large number offinancial personnel's efforts. However, the reconciliation result may still beincorrect, and it is hard to perform supervision.

● No simple method of data sharing

The financial data of corporation subsidiaries is distributed in different typesof enterprise resource planning systems (ERPs), which are not integrated orconnected.

● Regulators lacking trust in corporations

A multinational corporation must keep data for many years (usually 10 ormore years) and provide evidence to external auditors or authorities,demonstrating that data sources are trustworthy and the data has not beentampered with.

● Regulation compliance issues

Blockchain ServiceService Overview 5 Solutions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 14

Page 18: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Inter-subsidiary transfer pricing and complex transactions may cause tax baseerosion and profit shifting (BEPS) and may result in financial statementrestatements.

Solution Architecture

The BCS-based inter-subsidiary transaction solution has the following features:

● Unified ledgerTamper-proof, consistent business transaction records are traceable,eliminating the necessity of reconciliation and meeting audit requirements.

● Digital assetsTokens are used to record the transaction assets and rights to realize the life-cycle management of digital assets.

● Smart contract fulfillmentAutomated fulfillment ensures the fairness of transactions based on thecontract terms and conditions.

Figure 5-1 Solution architecture

Solution Highlights● Ensuring consistency of inter-subsidiary transaction records and the balance of

accounting without the need for reconciliation● Using tokens to track goods such as the statuses, physical locations, and

ownership changes and strictly adhering to the contract clauses to carry outtransactions, which improves the trust between transaction parties

● Simplifying and normalizing the inter-subsidiary supply chain processes● Supporting transactions that involve different systems

Blockchain ServiceService Overview 5 Solutions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 15

Page 19: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

● Providing end-to-end traceable and immutable information for internal andexternal audits

5.2 Supply Chain LogisticsManufacturers, warehousing institutes, logistics providers, and customers can useHUAWEI CLOUD BCS to comprise collaboration consortia and use IoT technologiesto record all the logistics information of goods, including production, warehousing,line haul transportation, reselling, and local logistics. The consortia break downinformation silos, improves circulation of information, and build trust betweenparties.

Industry Status Quo and Pain Points● Disadvantage of using paper documents

Many phases of logistics still involve manual operations and paperdocuments. This causes long duration of the process, high costs, slowreconciliation, and risks of document losses or damage. The cost onmaintaining and transferring documents accounts for 1/5 of the total logisticscost.

● Low efficiency

Participants in a supply chain have their own information systems,independent from each other. There is no unified standard or tracking system.It is difficult for them to collaborate effectively.

● Long duration

Electronic information can be easily tampered with. Therefore, paperdocuments are used as the only type of proof for settlement, but extend theaccounting period and the carriers' average collection period of receivables.

● Difficult financing

Most carriers are small- and medium-sized enterprises, lacking credit records,scores, or credibility. Financing is difficult and requires high costs.

Solution Architecture

The supply chain logistics solution provided by HUAWEI CLOUD BCS can becombined with the IT information systems of logistics participants to achieve thefollowing:

● Jointly maintain unified ledgers, which store immutable and traceable goodstransfer records to meet audit and tracing requirements.

● Provide common APIs for participants' IT systems to access BCS and inputdata, which cannot be tampered with. In this way, participants establish theircredibility and trust in each other.

● Automatically store the geo-fence information reported by the driver's app toshow in real time when, where, and by whom goods are processed.

● Fulfill smart contracts to automatically perform signing, settlement, andcalculation to obtain the performance data, which is considered fair due tothe automation.

Blockchain ServiceService Overview 5 Solutions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 16

Page 20: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Figure 5-2 Solution Architecture

Solution Highlights● Reduced errors

Distributed, shared ledgers greatly improve the traceability and transparencyof the supply chain and effectively reduce or eliminate changes of fraud anderrors.

● Increased efficiencyElectronic proofs of delivery (PODs) are used instead of paper documents toreduce the delay caused by paper works, and smart contracts allowsautomatic settlement to improve efficiency.

● Lower costsQuick settlement, automatic order reception, and goods tracking significantlylower the logistics costs of all the involved parties.

● Transparent auditImmutability of distributed ledgers and non-repudiation of signatures allowfor quick discovery of problems in supply chain logistics.

● Trust

Blockchain ServiceService Overview 5 Solutions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 17

Page 21: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

In addition to transparent rules and automated settlement, the blockchaintechnology enables end-to-end tracking of goods all the way throughproduction and transparent to final reception. These mechanisms greatlyimprove the trust between consumers and partners in the supply chain.

5.3 HealthcareHUAWEI CLOUD BCS helps healthcare institutions, third-party organizations, andsupervision departments to form a collaboration consortium. Healthcareinformation silos are broken down using electronic medical records that cannot betampered with and can protect privacy. This builds trust between doctors andpatients and provides comprehensive health and medical care information fortelemedicine and referral.

Industry Status Quo and Pain Points● Insecure data

Most healthcare data is stored in the data center. If a natural disaster orhacking occurs patients' electronic medical records stored in the data centermay be lost.

● Information silosThere is no appropriate mechanism for mutual trust and data sharingbetween healthcare institutions, which leads to information silos and makes itdifficult to obtain complete and comprehensive data. Data may be modifiedcasually when shared and therefore, is considered unreliable.

● Repeated medical treatmentA new electronic medical record is stored each time a patient goes to adifferent hospital due to a lack of data exchange or sharing channels betweenhospitals and other healthcare institutions. In this situation, there is nocomplete medical record for the patient, who may need to experiencerepetitive health checks. This leads to a waste of time, money, and healthcareresources.

● No access to personal medical dataPatients have no access to their medical care data, which is stored in thehospital systems. This affects medical treatment and health management.

Solution ArchitectureA healthcare consortium blockchain is built, comprising healthcare institutions,third parties, physicians, patients, and regulators based on electronic medicalrecords (EMRs). The medical and healthcare data is stored in the blockchain andoffered to patients or for scientific research, with security and privacy protected byusing encryption and smart contract-based authorization mechanisms.

Blockchain ServiceService Overview 5 Solutions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 18

Page 22: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Figure 5-3 Solution Architecture

Solution Highlights● Information silos broken down

The healthcare consortium blockchain connects information systems ofhealthcare institutions, so that regional inspection as well as ultrasound andradiological examination results can be securely exchanged for onlinehealthcare, two-way referral, and remote consultation.

● Immutable medical dataThe EMRs, physicians' diagnosis process and results, medical record queryhistories, and patient identity information are stored in blockchains to ensurethat they cannot be tampered with and can be traced. This can reducemedical disputes and construct a harmonious healthcare environment.

● Protected privacy and right to knowEncryption and smart contract-based authorization mechanisms offerspatients access to their own healthcare data while protecting their privacy.Others can access the data only when authorized.

● Quick and effective supervisionRegulatory authorities can use the data on blockchains to effectively preventhealthcare treatment that violates regulations, reducing medical disputes.

Blockchain ServiceService Overview 5 Solutions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 19

Page 23: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

6 Key Concepts

BlockchainIn a narrow sense, a blockchain is a list of data records (called blocks) linked inchronological order using cryptography and a distributed ledger to prevent datatampering and forging. In a broad sense, the blockchain technology is a newdistributed infrastructure and computing paradigm that uses the blockchain datastructure to verify and store data, distributed node consensus algorithms togenerate and update data, cryptography to ensure security of data transmissionand access, and smart contracts formed by automated scripts to implementprogramming and operate data.

Distributed LedgerA distributed ledger is a database shared, replicated, and synchronized amongnetwork members. It records transactions between network participants, such asexchange of assets and data. Use of a distributed ledger eliminates the time andexpenditure of ledger reconciliation. Any reference to ledgers in BCS documentsmeans distributed ledgers.

● Decentralized and trustless: Data copies are stored on nodes. No central nodeor a third-party organization is responsible for data control.

● Collectively maintaining data consistency: Each participant uses a public keyas its identity. Nodes independently check the data validity and collectivelydetermine the data to be written to the ledger, by consensus.

● Reliable data, difficult to be tampered with: Data is stored in blocks. Eachnode stores all blocks. Data access permissions can be customized. Blockchaining prevents data tampering.

Smart ContractA smart contract, also called a chaincode, is a code logic that runs on a blockchainand is automatically executed under a specific condition. It is an importantmethod for a user to implement service logic when using a blockchain. Thanks tothe blockchain features, the execution results of smart contracts are reliable andcannot be forged or tampered with.

● Cheating is prevented. Smart contracts are automatically triggered whenconditions are met. Execution results are verified independently.

Blockchain ServiceService Overview 6 Key Concepts

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 20

Page 24: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

● Results cannot be modified because the data is stored in the blockchain.● Contract content is reliable because it is stored in the blockchain.● Privacy is protected. Only specified participants can obtain contract content

and data.

PeerPeers are network nodes that maintain ledgers. One or more peers form a peerorganization.

OrdererOrderers are nodes that order transactions into a block.

ChannelA channel isolates the ledger data of a transaction from that of other transactionsin a consortium blockchain to ensure confidentiality. Each channel can beconsidered a sub-blockchain and corresponds to a specific ledger. The ledger in achannel is invisible to other channels.

Distributed ConsensusA majority of independent participants in a system need to achieve consensus ona transaction or operation, for example, verification of double-spendingtransactions, verification of transaction validity, and the decision on whether towrite verified data to the existing ledger.

Hash AlgorithmA hash value of a digital content segment can be used to verify data integrity. Anyminor modification to digital content leads to a significant change in the hashvalue. A qualified hash algorithm can be used to easily obtain a hash value fromdigital content, but it is almost impossible to calculate the original digital contentby using a hash value.

OrganizationA channel contains multiple members (organizations). If identity certificates oftwo entities on the blockchain network can be traced back to a same Root CA, thetwo entities belong to a same organization.

Blockchain ServiceService Overview 6 Key Concepts

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 21

Page 25: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

7 Permissions Management

If you need to assign different permissions to employees in your enterprise toaccess your BCS resources, IAM is a good choice for fine-grained permissionsmanagement. IAM provides identity authentication, permissions management,and access control, helping you secure access to your HUAWEI CLOUD resources.

With IAM, you can use your HUAWEI CLOUD account to create IAM users, andassign permissions to the users to control their access to specific resources. Forexample, some software developers in your enterprise need to use BCS resourcesbut should not be allowed to delete the resources or perform any other high-riskoperations. In this scenario, you can create IAM users for the software developersand grant them only the permissions required for using BCS resources. For detailsabout permission management, see Permissions Management in the User Guide.

If your HUAWEI CLOUD account does not require individual IAM users forpermissions management, skip this section.

IAM is free of charge. You pay only for the resources you use.

BCS PermissionsBy default, new IAM users do not have permissions assigned. You need to add auser to one or more groups, and attach permissions policies or roles to thesegroups. Users inherit permissions from the groups to which they are added andcan perform specified operations on cloud services based on the permissions.

BCS is a project-level service deployed and accessed in specific physical regions. Toassign BCS permissions to a user group, specify the scope as region-specificprojects and select projects for the permissions to take effect. If All projects isselected, the permissions will take effect for the user group in all region-specificprojects. When accessing BCS, the users need to switch to a region where theyhave been authorized to use this service.

Table 7-1 lists the system-defined policy supported by BCS.

Blockchain ServiceService Overview 7 Permissions Management

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 22

Page 26: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Table 7-1 System-defined roles and policies supported by BCS

Role/PolicyName

Description Type

BCSAdministrator

Full permissionsfor BCS

System-defined role

BCSFullAccess

Full permissionsfor BCS

System-defined policy

BCSReadOnlyAccess

Read-onlypermissions forBCS

System-defined policy

Blockchain ServiceService Overview 7 Permissions Management

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 23

Page 27: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

8 Restrictions

To use a BCS service, you must purchase Cloud Cluster Engine (CCE) clusters, bindelastic IP addresses (EIPs) to servers, create a Scalable File Service (SFS) filesystem, deploy a BCS service, and build a blockchain application.

BCS has quota limitations. A maximum of five BCS services can be created. Serviceeditions have different specifications. For details about the specifications of eachedition, see Edition Specifications.

Blockchain ServiceService Overview 8 Restrictions

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 24

Page 28: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

9 Edition Specifications

BCS services provide professional, basic and enterprise editions with differentspecifications.

For the pricing details of each edition, see Product Price Details.

Table 9-1 Comparison between editions

Item Basic Edition ProfessionalEdition

EnterpriseEdition

Applicable scenario Trial use andtesting (non-commercial)

Small-scalecommercialuse

Medium-scalecommercialuse

Consortium blockchain Notsupported

Supported Supported

Peak transaction performance ≤ 100 TPS ≤ 500 TPS ≤ 2000 TPS

Consensusalgorithms

Solo Supported Supported Supported

Raft Supported Supported Supported

Kafka (CFT) Notsupported

Supported Supported

FBFT Notsupported

Notsupported

Supported

Nodemanagement

Maximumnumber ofpeerorganizations

1 2 5

Maximumnumber ofpeers

2 2 2

Blockchain ServiceService Overview 9 Edition Specifications

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 25

Page 29: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Item Basic Edition ProfessionalEdition

EnterpriseEdition

Maximumnumber oforderers

1 3 4

Maximumnumber ofchannels

1 2 4

Automaticrecovery fromnode faults

Supported Supported Supported

Node autoscaling

Notsupported

Supported Supported

Maximumnumber oflight nodes

Notsupported

Notsupported

10

Securityfunctions

ECDSA Supported Supported Supported

Chinesecryptographicalgorithms

Notsupported

Notsupported

Supported

Additivehomomorphicencryption

Notsupported

Notsupported

Supported

Zeroknowledgeproof

Notsupported

Notsupported

Supported

Encryptionusing IntelSGX

Notsupported

Notsupported

Notsupported

Highavailability

InvokingsmartcontractsthroughRESTful APIs

Supported Supported Supported

Commondeployment

Supported Supported Supported

High-availabilitydeployment

Notsupported

Notsupported

Notsupported

O&M andmonitoring

O&M logging Supported Supported Supported

Node statusmonitoring

Supported Supported Supported

Blockchain ServiceService Overview 9 Edition Specifications

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 26

Page 30: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

Item Basic Edition ProfessionalEdition

EnterpriseEdition

Statusalarming

Supported Supported Supported

Servicesupport

Namedservicemanager

Notsupported

Notsupported

Notsupported

Remotetechnicalsupport fromthe R&D team

Notsupported

Notsupported

Notsupported

Onsitetechnicalsupport

Notsupported

Notsupported

Notsupported

Blockchain ServiceService Overview 9 Edition Specifications

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 27

Page 31: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

10 Feature Updates

Table 10-1 Feature updates

ReleaseDate

What's New

2021-04-07 ● Fabric v2.0 is compatible with Hyperledger Fabric v2.2.2.● Fabric v2.0 supports light nodes.

2021-03-15 SDK configurations and node certificates you need for yourblockchain client can be downloaded in one place.

2021-02-05 ● Added support for Industry Blockchain Platform.● Healthcare, energy, and aviation contract templates are

available in the contract repository.● You can edit and debug your smart contracts online in the CN

North-Beijing4 region.

2020-12-16 ● You can customize your own network and blockchain settingsor use the default settings to quickly create a BCS service.

● Added support for DID APIs, allowing you to manage DID,generate, apply, and issue verifiable credentials.

2020-11-09 ● Added the contract management support that allows you toview and download contract templates.

● Added support for deploying Java smart contracts on Arm-based BCS services.

2020-10-13 ● Added support for the light-node add-on.● Added supported for CCE clusters of v1.15.● Added support for upgrading BCS services corresponding to

Hyperledger Fabric v1.4 to v2.0.● Added support for Java smart contracts.

Blockchain ServiceService Overview 10 Feature Updates

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 28

Page 32: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

ReleaseDate

What's New

2020-08-29 ● Added support Hyperledger Fabric v2.0 and the Raftconsensus algorithm.

● Provided the Fabric Golang SDK and added support forChinese cryptographic algorithms and both x86 and Arm CPUarchitectures.

● Provides card-based UI for better BCS service management.● Allows you to install add-ons for BCS services as required.

2020-08-07 ● Added support for both x86 and Arm CPU architectures forthe Fabric Java SDK.

2020-07-02 ● A questionnaire is provided on the Service Managementpage on the console so that you can provide feedback onyour experience with Blockchain Service.

● The Help Center is available on the console, guiding you to awide range of documents and answers to common questions.

● The Trusted Computing Platform is now available for openbeta testing, providing trusted data exchange and big dataanalysis capabilities.

2020-02-29 ● Added support for BCS services deployed in edge clusters toform a consortium blockchain.

● Removed support for new BCS services corresponding toHyperledger Fabric v1.1.0. Existing such services can continueto be maintained.

● Added support for BCS services corresponding to HyperledgerFabric v1.1.0 to be upgraded to Hyperledger Fabric v1.4.0.

2019-12-30 ● Added support for changing pay-per-use BCS services toyearly/monthly billing.

● Provided privacy protection, allowing users to restrict dataaccess in a channel to specified members.

2019-11-30 ● Added the function of cold storage of ledgers for BCS servicesdeployed on the edge cloud.

● Enabled use of BCS services deployed on CCE clusters andthose on edge clusters to join the same consortiumblockchain.

● Added support for customization of block generation basedon your business needs. You can specify the block generationinterval, transaction quantity per block, and block size.

2019-10-30 Provided versions corresponding to Hyperledger Fabric v1.4.0 forBCS services deployed on the edge cloud.

Blockchain ServiceService Overview 10 Feature Updates

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 29

Page 33: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

ReleaseDate

What's New

2019-09-30 ● Enabled selection of existing DMS service instances topurchase BCS service in quick deployment mode.

● Enabled selection of the MySQL database for quickdeployment of BCS services in the CN North-Beijing4 region.

● Added the inter-blockchain data interaction function.

2019-08-30 ● Enabled installation of RESTful APIs during quick deploymentof a BCS service.

● Enabled BCS service deployment on edge clusters in quickdeployment mode.

● Added the multi-project management function forenterprises.

● Enabled BCS service deployment in Kunpeng clusters.● Added BCS walkthrough functions for CN South-Guangzhou.● Enabled creation and use of SFS Turbo for BCS services.

2019-07-30 ● Reduced the prices of existing BCS editions, and added a newedition with preferential prices for small-scale blockchainapplications.

● Provided walkthroughs in the CN North-Beijing1 and CNNorth-Beijing4 regions for users to experience the BCSservice.

● Added support for health check and component upgrade forBCS services deployed using edge clusters, and for reportingof component logs of such services to the AOM service.

● Added support of BCS services deployed using edge clustersfor private blockchain establishment, and removed therestriction on the organization quantity of such services.

2019-06-30 ● Enabled the functions such as organization addition,consortium blockchains, data aging on orderers, Chinesecryptographic algorithms, homomorphic encryption, andRESTful APIs.

● Provided channel topology views to show the relationshipsbetween consortium blockchain members.

● Enabled addition of peers to channels and downloading ofSDK configurations for services deployed using edge clusters.

2019-05-30 ● Added support for the FBFT consensus algorithm for BCSservices deployed on edge clusters.

● Enabled peer organizations to be bound with edge clusternodes used to deploy a BCS service.

● Enabled dynamic addition of organizations, peers, andchannels to BCS services deployed on edge clusters.

● Enabled encryption of certificates and private keys for storagefor BCS services deployed on edge clusters.

Blockchain ServiceService Overview 10 Feature Updates

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 30

Page 34: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

ReleaseDate

What's New

2019-04-30 ● Added support for rolling upgrade to avoid serviceinterruption during upgrades.

● Enabled cross-AZ deployment of a BCS service to improveservice availability.

● Enabled BCS service deployment on edge clusters.● Enabled customization of cloud host, DMS instance, and RDS

DB instance specifications during purchase of a BCS servicewith its resources.

2019-03-30 ● Added support for multi-organization endorsements forRESTful API transactions.

● Added the function of dynamic organization scale-out forBCS services that use MySQL to store ledger data.

● Optimized consortium blockchains to allow join-in ofmultiple service instances of a single member.

2019-02-28 ● Enabled cross-region deployment of a consortium blockchain.● Added the function of data aging on orderers.● Enabled dynamic addition of organizations to a BCS service.● Added the function of hibernating or waking up a BCS

service.

2018-11-24 First release.

Blockchain ServiceService Overview 10 Feature Updates

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 31

Page 35: Service Overview - HUAWEI CLOUDthe customer. All or part of the products, services and features described in this document may not be ... Figure 1-2 shows the architecture of a blockchain

11 Note to End of Maintenance

Maintenance of the BCS versions earlier than 2.1.33 has been terminated. If youare using a version earlier than 2.1.33, certain operations may be restricted.Upgrade the BCS service to the latest version as soon as possible.

Blockchain ServiceService Overview 11 Note to End of Maintenance

Issue 01 (2021-04-25) Copyright © Huawei Technologies Co., Ltd. 32