A digital currency wallet security synchronization method

Abstract

The application discloses a kind of digital currency wallet security synchronization method, it is characterized in that processing step includes: step one: digital currency system carries out dynamic data authentication to the digital currency wallet terminal of application synchronization, and authentication process is as follows: first, digital currency system sends time stamp and unpredictable number to digital currency wallet terminal, the beneficial effects of the present application: the above technical scheme can well solve the user data security of wallet end when digital currency wallet synchronization, and data interaction security between wallet and digital currency system.Based on this scheme, users can carry out digital currency wallet security synchronization "anytime, anywhere" through mobile phone APP or receiving terminal.And, since scheme has the man-machine interaction confirmation of user when synchronization operation, therefore, users can safely carry out synchronization operation by the mobile phone or receiving terminal of third party, and it has very important significance to the real-time, convenience and security of digital currency wallet synchronization application.

Description

Technical Field

[0001] This invention relates to the field of digital currency applications, and more specifically, to a method for securely synchronizing digital currency wallets. Background Technology

[0002] The central bank digital currency wallet supports dual offline transactions, allowing both parties on the transaction platform to conduct fund transactions without an internet connection and store their offline transaction data separately. However, due to hardware storage limitations on the digital currency wallet, once the dual offline transaction limit is reached, transaction data synchronization with the digital currency system is necessary to free up offline transaction data storage space and perform corresponding digital currency ownership transfers on the system side.

[0003] Cryptocurrency wallets come in various forms, and there are significant differences in the ability of users to use them. Therefore, certain special groups are prone to digital divide problems when using them. For example, if an elderly person does not have a smartphone, they cannot sync the data of their cryptocurrency wallet in a timely manner. As a result, they cannot use it normally once the offline transaction limit is reached.

[0004] Currently, the central bank's digital currency is still in the pilot stage, and standards and methods for secure synchronization of digital currency wallets have not yet been established. Furthermore, the published patent "CN108197937A: A Synchronization Method, Terminal, and System for Digital Currency Wallets" presents a complex design for the synchronization method, terminal, and system processes, but fails to address security issues during synchronization, potentially leading to data loss or theft. Summary of the Invention

[0005] To address the shortcomings of existing applications and technologies, this invention provides a secure digital currency wallet synchronization method. This method effectively solves the security issues of user data on the wallet side and the security of data interaction between the wallet and the digital currency system during digital currency wallet synchronization. Based on this solution, users can securely synchronize their digital currency wallets "anytime, anywhere" via a mobile app or a payment terminal. Furthermore, because the solution includes user-interactive confirmation during the synchronization operation, users can confidently use third-party mobile phones or payment terminals for synchronization, which is of great significance for the real-time performance, convenience, and security of digital currency wallet synchronization applications.

[0006] To achieve the above objectives, the present invention provides the following technical solution:

[0007] A method for securely synchronizing a digital currency wallet, characterized by the following processing steps:

[0008] Step 1: The digital currency system performs dynamic data authentication on the digital currency wallet terminal requesting synchronization. The authentication process is as follows:

[0009] First, the digital currency system sends a timestamp and an unpredictable number to the digital currency wallet terminal;

[0010] Secondly, the digital currency wallet terminal returns the digital currency wallet's public key certificate, as well as dynamic data signed using the digital currency wallet's private key;

[0011] Finally, the digital currency system uses the public key of the digital currency wallet issuer's channel certificate to verify the digital currency wallet's public key certificate. After successful verification, the digital currency wallet's public key is restored and used to verify the dynamic signature data.

[0012] Further, in step two: the digital currency wallet terminal performs network authentication with the digital currency system. The authentication process is as follows:

[0013] First, digital currency wallet terminals provide unpredictable data to the digital currency system;

[0014] Secondly, the digital currency system uses the private key of the digital currency wallet issuer's channel certificate to sign the unpredictable data provided by the digital currency wallet terminal, and returns the signed data to the digital currency wallet terminal.

[0015] Finally, the digital currency wallet terminal uses the pre-installed public key of the digital currency wallet issuer's channel certificate to verify the signature data returned by the digital currency system;

[0016] Further, in step three: the digital currency wallet terminal and the digital currency system negotiate a session key for encrypted data communication between the two parties and establish a secure connection channel. The specific process is as follows:

[0017] S101, the digital currency wallet terminal generates a random number as a shared master key, and uses the digital wallet issuer's channel certificate to encrypt the shared master key with a public key to obtain encrypted ciphertext;

[0018] S102, connect the shared master key and the encrypted ciphertext, the digital currency wallet terminal uses a hash algorithm to calculate the digest data of the connected data, and signs the digest data using the digital currency terminal private key to obtain a signature value;

[0019] S103, the digital currency wallet terminal sends the ciphertext and signature value of the shared master key to the digital currency application server, which then transmits them to the digital currency system.

[0020] S104, the digital currency system verifies the received signature value. After successful verification, it uses the channel certificate private key to decrypt the ciphertext of the shared master key to obtain the shared master key, and calculates the hash operation message authentication code (HMAC) as a notification message for authentication completion.

[0021] S105, after receiving the HMAC, the digital currency wallet terminal verifies the HMAC value generated by the digital currency system handshake completion, and then returns the HMAC value generated by the digital currency wallet terminal handshake completion.

[0022] S106, the digital currency wallet terminal will send the handshake completion message, i.e., the calculated HMAC value, through the digital currency application server to the digital currency system;

[0023] S107, the digital currency wallet terminal generates a session key. This session key is only stored in the digital currency wallet terminal, cannot be exported, and needs to be regenerated after a power outage.

[0024] S108: After the digital currency system verifies the handshake completion message of the digital currency wallet terminal, it generates a session key and completes the establishment of a secure channel.

[0025] Further, in step four: the digital currency system sends encrypted user data information and its signature value to the digital currency wallet terminal; preferably, the user data information and its signature value are encrypted using the session key; preferably, the digital currency system uses the private key of the digital currency wallet issuer's channel certificate to sign the identifiable user data information; the identifiable user information includes: the digital currency wallet owner's username, the digital currency wallet owner's certificate number, and the mobile phone number registered and bound to the digital currency wallet;

[0026] Further, in step five: the digital currency wallet terminal displays the identifiable user data information of the digital currency system signature. Preferably, the digital currency wallet terminal displays the identifiable user data information in a partial display manner in order to protect user privacy and ensure information security.

[0027] Further, in step six: the user reviews the identifiable user information displayed on the digital currency wallet terminal. If the review is successful, synchronization is confirmed; otherwise, synchronization is canceled. Preferably, the user can confirm or cancel synchronization using a hardware switch or button, a software button, or a biometric switch.

[0028] The beneficial effects of this invention are:

[0029] The aforementioned technical solution effectively addresses the security of user data on the wallet side during cryptocurrency wallet synchronization, as well as the security of data interaction between the wallet and the cryptocurrency system. Based on this solution, users can securely synchronize their cryptocurrency wallets "anytime, anywhere" via a mobile app or payment terminal. Furthermore, because the solution allows for user-interactive confirmation during the synchronization process, users can confidently use third-party mobile phones or payment terminals for synchronization, which is of great significance for the real-time performance, convenience, and security of cryptocurrency wallet synchronization applications. Attached Figure Description

[0030] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0031] Figure 1 This is a flowchart illustrating the secure synchronization process of a digital currency wallet according to the present invention.

[0032] Figure 2 This is a flowchart illustrating the secure synchronization process of a digital currency wallet in one embodiment of the present invention. Detailed Implementation

[0033] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0034] As attached Figure 1-2 The method for securely synchronizing a digital currency wallet, as shown, is characterized by the following processing steps:

[0035] Step 1: The digital currency system performs dynamic data authentication on the digital currency wallet terminal requesting synchronization. The authentication process is as follows:

[0036] First, the digital currency system sends a timestamp and an unpredictable number to the digital currency wallet terminal;

[0037] Secondly, the digital currency wallet terminal returns the digital currency wallet's public key certificate, as well as dynamic data signed using the digital currency wallet's private key;

[0038] Finally, the digital currency system uses the public key of the digital currency wallet issuer's channel certificate to verify the digital currency wallet's public key certificate. After successful verification, the digital currency wallet's public key is restored and used to verify the dynamic signature data.

[0039] Preferably, in step two: the digital currency wallet terminal performs network authentication with the digital currency system. The authentication process is as follows:

[0040] First, digital currency wallet terminals provide unpredictable data to the digital currency system;

[0041] Secondly, the digital currency system uses the private key of the digital currency wallet issuer's channel certificate to sign the unpredictable data provided by the digital currency wallet terminal, and returns the signed data to the digital currency wallet terminal.

[0042] Finally, the digital currency wallet terminal uses the pre-installed public key of the digital currency wallet issuer's channel certificate to verify the signature data returned by the digital currency system;

[0043] Preferably, in step three: the digital currency wallet terminal and the digital currency system negotiate a session key for encrypted data communication between the two parties and establish a secure connection channel. The specific process is as follows:

[0044] S101, the digital currency wallet terminal generates a random number as a shared master key, and uses the digital wallet issuer's channel certificate to encrypt the shared master key with a public key to obtain encrypted ciphertext;

[0045] S102, connect the shared master key and the encrypted ciphertext, the digital currency wallet terminal uses a hash algorithm to calculate the digest data of the connected data, and signs the digest data using the digital currency terminal private key to obtain a signature value;

[0046] S103, the digital currency wallet terminal sends the ciphertext and signature value of the shared master key to the digital currency application server, which then transmits them to the digital currency system.

[0047] S104, the digital currency system verifies the received signature value. After successful verification, it uses the channel certificate private key to decrypt the ciphertext of the shared master key to obtain the shared master key, and calculates the hash operation message authentication code (HMAC) as a notification message for authentication completion.

[0048] S105, after receiving the HMAC, the digital currency wallet terminal verifies the HMAC value generated by the digital currency system handshake completion, and then returns the HMAC value generated by the digital currency wallet terminal handshake completion.

[0049] S106, the digital currency wallet terminal will send the handshake completion message, i.e., the calculated HMAC value, through the digital currency application server to the digital currency system;

[0050] S107, the digital currency wallet terminal generates a session key. This session key is only stored in the digital currency wallet terminal, cannot be exported, and needs to be regenerated after a power outage.

[0051] S108: After the digital currency system verifies the handshake completion message of the digital currency wallet terminal, it generates a session key and completes the establishment of a secure channel.

[0052] Preferably, in step four: the digital currency system sends encrypted user data information and its signature value to the digital currency wallet terminal; preferably, the user data information and its signature value are encrypted using the session key; preferably, the digital currency system uses the private key of the digital currency wallet issuer's channel certificate to sign the identifiable user data information; the identifiable user information includes: the digital currency wallet's owner username, the digital currency wallet's owner certificate number, and the mobile phone number registered and bound to the digital currency wallet.

[0053] Preferably, in step five: the digital currency wallet terminal displays the identifiable user data information of the digital currency system signature. Preferably, the digital currency wallet terminal displays the identifiable user data information in a partial display manner in order to protect user privacy and ensure information security.

[0054] Preferably, in step six: the user reviews the identifiable user information displayed on the digital currency wallet terminal. If the review is successful, synchronization is confirmed; otherwise, synchronization is canceled. Preferably, the user can confirm or cancel synchronization using a hardware switch or button, a software button, or a biometric switch.

[0055] This invention is rationally designed and effectively solves the problems of user data security on the wallet side and data interaction security between the wallet and the digital currency system during digital currency wallet synchronization. Based on this solution, users can securely synchronize their digital currency wallets "anytime, anywhere" via a mobile app or a terminal. Furthermore, because the solution allows for user-interactive confirmation during the synchronization process, users can confidently use third-party mobile phones or terminals for synchronization, which is of great significance for the real-time performance, convenience, and security of digital currency wallet synchronization applications.

[0056] In the description of this invention, it should be noted that, unless otherwise explicitly specified and limited, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art will understand the specific meaning of the above terms in this invention based on the specific circumstances.

[0057] It should be noted that in this document, the terms "upper", "lower", "inner", "outer", "front end", "rear end", "both ends", "one end", "the other end", etc., indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings. They are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limiting the present invention.

[0058] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.

Claims

1. A secure synchronization method for digital currency wallets, characterized in that... The processing steps include: Step 1: The digital currency system performs dynamic data authentication on the digital currency wallet terminal requesting synchronization. The authentication process is as follows: First, the digital currency system sends a timestamp and an unpredictable number to the digital currency wallet terminal; Secondly, the digital currency wallet terminal returns the digital currency wallet's public key certificate, as well as dynamic data signed using the digital currency wallet's private key; Finally, the digital currency system uses the public key of the digital currency wallet issuer's channel certificate to verify the digital currency wallet's public key certificate. After successful verification, the digital currency wallet's public key is restored and used to verify the dynamic signature data. Step Two: The digital currency wallet terminal performs online authentication with the digital currency system. The authentication process is as follows: First, digital currency wallet terminals provide unpredictable data to the digital currency system; Secondly, the digital currency system uses the private key of the digital currency wallet issuer's channel certificate to sign the unpredictable data provided by the digital currency wallet terminal, and returns the signed data to the digital currency wallet terminal. Finally, the digital currency wallet terminal uses the pre-installed public key of the digital currency wallet issuer's channel certificate to verify the signature data returned by the digital currency system; Step 3: The digital currency wallet terminal and the digital currency system negotiate a session key for encrypted data communication between the two parties and establish a secure connection channel. The specific process is as follows: S101, the digital currency wallet terminal generates a random number as a shared master key, and uses the digital wallet issuer's channel certificate to encrypt the shared master key with a public key to obtain encrypted ciphertext; S102, connect the shared master key and the encrypted ciphertext, the digital currency wallet terminal uses a hash algorithm to calculate the digest data of the connected data, and signs the digest data using the digital currency terminal private key to obtain a signature value; S103, the digital currency wallet terminal sends the ciphertext and signature value of the shared master key to the digital currency application server, which then transmits them to the digital currency system. S104, the digital currency system verifies the received signature value. After successful verification, it uses the channel certificate private key to decrypt the ciphertext of the shared master key to obtain the shared master key, and calculates the hash operation message authentication code (HMAC) as a notification message for authentication completion. S105, after receiving the HMAC, the digital currency wallet terminal verifies the HMAC value generated by the digital currency system handshake completion, and then returns the HMAC value generated by the digital currency wallet terminal handshake completion. S106, the digital currency wallet terminal will send the handshake completion message, i.e., the calculated HMAC value, through the digital currency application server to the digital currency system; S107, the digital currency wallet terminal generates a session key. This session key is only stored in the digital currency wallet terminal, cannot be exported, and needs to be regenerated after a power outage. S108: After the digital currency system verifies the handshake completion message of the digital currency wallet terminal, it generates a session key and completes the establishment of a secure channel. Step 4: The digital currency system sends encrypted user data information and its signature value to the digital currency wallet terminal; the user data information and its signature value are encrypted using the session key; the digital currency system signs the user data information using the private key of the digital currency wallet issuer's channel certificate; the user data information includes: the digital currency wallet owner's username, the digital currency wallet owner's certificate number, and the mobile phone number registered and bound to the digital currency wallet; Step 5: The digital currency wallet terminal displays the identifiable user data information of the digital currency system signature. The digital currency wallet terminal displays the identifiable user data information in a partial display manner in order to protect user privacy and ensure information security. Step Six: The user reviews the identifiable user information displayed on the digital currency wallet terminal. If the review is successful, synchronization is confirmed; otherwise, synchronization is canceled. The user can confirm or cancel synchronization through hardware switches or buttons, software buttons, or biometric switches.

Images