Blockchain-based transaction verification system

Abstract

A blockchain-based transaction verification system. The initiating end decrypts the encrypted object using a key to obtain a transport layer security (TLS) private key. The transaction verification end comprises a gateway module, a credential authentication module, and a hardware security module. The gateway module connects the initiating end and the credential authentication module. The hardware security module securely holds the transaction verification private key and a communication private key. Upon receiving a connection request from the initiating end, the initiating end establishes a two-way verification channel with the gateway module using its TLS private key. This two-way verification channel connects the initiating end and the hardware security module. The initiating end sends transaction data to the hardware security module through the two-way verification channel. The hardware security module generates a signature result based on the transaction verification private key and the transaction data and transmits it to the initiating end. The initiating end closes the two-way verification channel based on the signature result.

Claims

1. A blockchain-based transaction verification system, comprising: An initiating party decrypts an encrypted object using a key encryption key to obtain an initiating party's TLS private key; The system includes a transaction verification terminal with a gateway module, a credential authentication module, and a hardware security module. The gateway module is connected to the initiating end and the credential authentication module. The hardware security module has a transaction verification private key and a transaction verification terminal TLS private key. When the gateway module receives a connection request from the initiating end, the initiating end uses its TLS private key to negotiate and establish a two-way verification channel with the gateway module. This two-way verification channel connects the initiating end and the gateway module. The initiating end sends transaction data to the gateway module through the two-way verification channel, which then sends it to the hardware security module. Based on the transaction verification private key and the transaction data, the gateway module generates a transaction signature result and finally transmits the transaction signature result to the initiating end. After transmitting the transaction signature result, the transaction verification terminal closes the two-way verification channel.

2. The blockchain-based transaction verification system as described in claim 1, wherein the initiating end further includes a first fast identity verification module, the initiating end sends a verification request to multiple verified ends, and at least two of the verified ends send an authorized fragment to the first fast identity verification module.

3. The blockchain-based transaction verification system as described in claim 2, wherein the number of authorization fragments received by the first fast identity verification module is greater than or equal to an authorization threshold, and the first fast identity verification module generates the key encryption key based on the obtained authorization fragments.

4. The blockchain-based transaction verification system as described in claim 1, wherein the gateway module obtains an electronic credential from the initiator according to the connection request, and the gateway module requests the credential authentication module to verify the electronic credential.

5. The blockchain-based transaction verification system as described in claim 4, wherein the credential authentication module verifies that the electronic credential is valid, and the gateway module sends a transaction verification terminal electronic credential to the initiating terminal.

6. The blockchain-based transaction verification system as described in claim 5, wherein after the initiating end verifies the electronic certificate of the transaction verification end according to the public key of a certificate authentication module, the initiating end and the transaction verification end use a key exchange protocol to negotiate and generate a working key based on the TLS private key of the initiating end and the TLS private key of the transaction verification end to complete the establishment of the two-way verification channel.

7. The blockchain-based transaction verification system as described in claim 6, wherein the initiating party encrypts the transaction data with the working key and sends it to the hardware security module, and the hardware security module decrypts the encrypted transaction data according to the working key.

8. The blockchain-based transaction verification system as described in claim 6, wherein the hardware security module encrypts the transaction signature result with the working key and sends the encrypted transaction signature result to the initiator, and the initiator decrypts the encrypted transaction signature result according to the working key.

9. The blockchain-based transaction verification system as described in claim 6, wherein after the initiating end receives the transaction signature result, the transaction verification end destroys the working key to close the two-way verification channel.