Virtual Asset Management System

Abstract

A virtual asset management system includes a processing unit that uses a cash flow monitoring module to perform risk identification on transaction data transmitted from a client device and transmits the risk-identified transaction data to a second terminal device. The second terminal device then signs and authorizes the transaction data to generate authorized transaction data. When a cold wallet management module of the virtual asset management system receives a gateway opening command from a management terminal device, the cold wallet management module transmits the authorized transaction data to a hardware security module within the virtual asset management system according to the gateway opening command. The hardware security module performs offline signing on the authorized transaction data to generate signed transaction data and uploads the signed transaction data to a blockchain.

Claims

1. A virtual asset management system capable of communicating with a client device, a first terminal device, a second terminal device, a management terminal device, and a blockchain, comprising: a communication unit capable of establishing a communication channel with the client device, the first terminal device, the second terminal device, the management terminal device, and the blockchain; a storage unit; and a processing unit electrically connected to the communication unit and the storage unit to communicate with the client device, the first terminal device, the second terminal device, and the management terminal device via the communication unit, and comprising a cash flow monitoring module, a cold wallet management module, and a hardware security module; wherein when the processing unit receives an asset withdrawal instruction from the client device, it uses the cash flow monitoring module to perform risk identification on transaction data included in the asset withdrawal instruction; the transaction data includes a transaction wallet address, a cold wallet address, and a transaction amount of virtual currency; The processing unit transmits the transaction data that has passed risk identification to the first terminal device and the second terminal device. The second terminal device performs a compliance review on the transaction data and, upon passing the compliance review, sends a successful review message to the first terminal device. The first terminal device then authorizes the transaction data that has passed risk identification by signing it based on the successful review message, generating an authorized transaction data, and transmits the authorized transaction data to the processing unit. When the cold wallet management module of the processing unit receives a gateway opening command from the management terminal device, the cold wallet management module transmits the authorized transaction data to the hardware security module within the processing unit according to the gateway opening command. The hardware security module obtains a private key corresponding to the cold wallet address it holds based on the authorized transaction data, and uses the private key to offline sign the authorized transaction data to generate a signed transaction data, which is then uploaded to the blockchain. The processing unit stores the transaction data, the authorized transaction data, and the signed transaction data in the storage unit.

2. The virtual asset management system as described in claim 1, wherein, The storage unit also stores customer identity information and management identity information. The processing unit also includes an identity verification module. When the processing unit receives identity identification information from the client device, it uses the identity verification module to perform customer identity verification on the identity identification information based on the customer identity information, and sends an identity verification request corresponding to the identity identification information to the client device, and performs customer identity verification on the identity verification information from the client device. When the processing unit receives management identification information from the management device, it uses the identity verification module to perform manager identity verification on the management identification information based on the management identity information. Only after passing the manager identity verification does the cold wallet management module allow the management device to send the gateway opening command.

3. The virtual asset management system as described in claim 1 can also communicate with a blockchain analysis system. The storage unit also stores a whitelist containing multiple predetermined whitelist addresses and a predetermined risk level. The processing unit uses the flow monitoring module to transmit the transaction wallet address contained in the transaction data to the blockchain analysis system, so that the blockchain analysis system can identify the risk of the transaction wallet address and generate an address risk level. The flow monitoring module receives the address risk level transmitted by the blockchain analysis system and determines that the transaction wallet address matches one of the predetermined whitelist addresses and that the address risk level is less than or equal to the predetermined risk level. Only then will the processing unit transmit the risk-identified transaction data to the first terminal device and the second terminal device and store the address risk in the storage unit. When the flow monitoring module determines that the address risk level is greater than the predetermined risk level, the flow monitoring module transmits a transaction warning message to the first terminal device, the second terminal device, and the management terminal device.

4. The virtual asset management system as described in claim 1, which can also communicate with a third terminal device, wherein both the first terminal device and the third terminal device include software for signing and authorizing, and the processing unit transmits the transaction data that has passed risk identification to the first terminal device through the third terminal device, and when the third terminal device receives the transaction data that has passed risk identification, the third terminal device uses the software to sign and authorize the transaction data that has passed risk identification to generate the transaction data that has been initially authorized, and transmits the transaction data that has passed risk identification and has been initially authorized to the first terminal device, and the first terminal device uses the software to sign and authorize the transaction data that has passed risk identification and has been initially authorized to generate the authorized transaction data, and the processing unit stores the authorized transaction data in the storage unit.

5. The virtual asset management system as described in claim 4 can also communicate with a fourth terminal device. The processing unit provides an audit page to the fourth terminal device, causing the fourth terminal device to display the audit page. The processing unit also transmits the transaction data that has passed risk identification to the third terminal device through the fourth terminal device, and causes the audit page on the fourth terminal device to display the transaction data that has passed risk identification. When the fourth terminal device receives the transaction data that has passed risk identification, it sends a transaction intent query message to the client device to conduct an intent survey and determine the transaction intent. After a transaction intention response message from the client device matches the transaction information that has passed risk identification, the transaction information that has passed risk identification and intention investigation is transmitted to the processing unit. The transaction information that has passed risk identification and intention investigation, along with a preliminary approval success message, is transmitted to the third terminal device. The third terminal device uses the software program to sign and authorize the transaction information that has passed risk identification and intention investigation based on the preliminary approval success message, thereby generating the transaction information that has been preliminarily authorized. The processing unit then stores the transaction information that has passed risk identification and intention investigation in the storage unit.

6. The virtual asset management system as described in claim 5, wherein, The processing unit also provides an audit page to the second terminal device, enabling the second terminal device to display the audit page. The processing unit transmits the transaction data that has passed the risk identification and willingness survey to the second terminal device, and the audit page on the second terminal device displays the transaction data that has passed the risk identification and willingness survey. When the second terminal device receives the transaction data that has passed the risk identification and willingness survey, it performs a compliance review on the transaction data that has passed the risk identification and willingness survey according to a predetermined external rule and a predetermined internal rule. After passing the compliance review, the transaction data that has passed the risk identification, willingness survey and compliance review is transmitted to the processing unit, and an audit success message is transmitted to the first terminal device. The first terminal device applies the software program according to the audit success message to sign and authorize the preliminarily authorized transaction data to generate authorized transaction data. The processing unit stores the transaction data that has passed the risk identification, willingness survey and compliance review in the storage unit.

7. The virtual asset management system as described in claim 1, wherein, When the processing unit determines that the blockchain has completed the on-chain broadcast of the signed transaction data, the processing unit sends a successful retrieval message to the client device.

8. The virtual asset management system as described in claim 1, wherein, When the processing unit receives an account opening instruction containing account opening information from the client device, the processing unit transmits the account opening information to the first terminal device and the second terminal device. The second terminal device performs a compliance review on the account opening information and, after the compliance review, transmits the account opening information that has passed the compliance review to the processing unit, and also transmits an account opening approval success message to the first terminal device. The first terminal device then signs and authorizes the account opening information based on the account opening approval success message to generate authorized account opening information, and transmits the authorized account opening information to the processing unit. The cold wallet management module of the processing unit inputs the authorized account opening information into the hardware security module according to the gateway opening instruction from the management terminal device. The hardware security module then signs the authorized account opening information to generate the cold wallet address and the private key corresponding to the cold wallet address, and transmits a successful account opening message to the client device.

9. The virtual asset management system as described in claim 1, wherein, When the processing unit receives an asset deposit instruction from the client device, the processing unit transmits the cold wallet address to the client device.

10. The virtual asset management system as described in claim 3, which can also communicate with a blockchain analysis system, wherein the storage unit also stores a predetermined risk level, and when the processing unit receives a whitelist addition instruction from the client device containing a wallet address to be added and a wallet proof document, it uses the flow monitoring module to transmit the wallet address to be added to the blockchain analysis system, so that the blockchain analysis system can identify the risk of the wallet address to be added and generate a risk level for the added address, and the flow monitoring module receives the risk level of the added address transmitted by the blockchain analysis system, and when it determines that the risk level of the added address is less than or equal to the predetermined risk level, the processing unit transmits the wallet address to be added that has passed the risk identification to the first terminal device, and transmits the wallet proof document and the whitelist addition instruction. The second terminal device, which identifies the wallet address to be added based on risk assessment, performs a compliance review on the wallet verification document and the wallet address to be added based on risk assessment. After the compliance review, the second terminal device transmits the wallet verification document and the wallet address to be added based on risk assessment and compliance review to the processing unit, and transmits an address verification success message to the first terminal device. The first terminal device then authorizes the wallet address to be added based on the address verification success message to generate the predetermined whitelist address, and transmits the predetermined whitelist address to the processing unit. The processing unit receives and adds the predetermined whitelist address to the whitelist stored in the storage unit, and transmits a whitelist setting completion message to the client device.

Images